$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/0d3a9201-b626-32e3-8ba2-32af8872019c.roa File: 0d3a9201-b626-32e3-8ba2-32af8872019c.roa (raw, json) Hash identifier: Acqk0YeZZSib1WiL3MH7q/eT4HhNXz00VOVQj295LL8= Subject key identifier: 39:B3:EF:75:04:00:F7:2E:6A:82:FB:6F:6F:69:6F:01:FE:C5:B3:18 Certificate issuer: /CN=e407c8fd-b808-41d1-af5e-a88d2dd556f9 Certificate serial: 010D0C9F4328584D11725E19247F491B0C7271C0 Authority key identifier: 39:88:56:13:51:28:01:35:37:02:BA:15:76:26:0A:52:03:98:3E:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/0d3a9201-b626-32e3-8ba2-32af8872019c.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 168.235.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:5e:19:24:7f:49:1b:0c:72:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e407c8fd-b808-41d1-af5e-a88d2dd556f9 Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=8398e68d-2271-47b2-be3b-2e20920548cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:70:24:9c:6a:dd:8b:ca:84:8d:d0:d9:02:35: d1:a7:59:dd:96:21:3e:66:55:dc:8a:10:78:9e:77: 1a:e3:c9:a1:8a:1b:75:d1:bf:27:d2:8e:03:d5:0b: 9e:d6:48:c9:88:7e:a7:81:ff:d1:4a:86:c7:05:cc: cf:5c:b6:0c:e0:81:96:42:c7:7a:39:bc:e6:0c:83: 27:6d:d0:cc:e7:4e:66:e0:a1:d4:e5:cd:b7:4b:d2: a1:90:21:0d:9a:81:22:df:32:30:3f:a0:f2:be:91: dd:55:27:0f:ea:3f:8e:0f:09:0a:cd:95:59:e1:78: c8:04:89:43:42:10:cd:a9:ef:84:da:b5:8b:1e:5a: 9c:eb:31:4d:2f:e3:0a:e0:95:7a:be:83:cc:90:e3: 75:99:37:d1:a5:41:96:b0:f6:96:12:df:49:1a:9d: 8f:9a:b4:16:69:db:ee:5e:a1:4e:9d:38:8d:2c:63: 6d:8d:0b:ef:8f:bf:9b:7b:16:f6:05:ab:cb:81:a6: 23:07:05:20:54:21:c9:1c:a6:2c:e5:41:b8:cf:58: 4b:4d:a6:b4:42:fa:18:1b:71:b9:18:fe:79:e4:c4: 23:b8:54:30:53:fe:24:77:3b:19:07:e7:1d:77:a2: d8:3e:b4:75:00:83:e0:31:14:6b:e9:75:73:79:e7: 10:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B3:EF:75:04:00:F7:2E:6A:82:FB:6F:6F:69:6F:01:FE:C5:B3:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/0d3a9201-b626-32e3-8ba2-32af8872019c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.crl X509v3 Authority Key Identifier: keyid:39:88:56:13:51:28:01:35:37:02:BA:15:76:26:0A:52:03:98:3E:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer sbgp-ipAddrBlock: critical IPv4: 168.235.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:d9:70:92:0e:7c:8d:04:b9:fd:f9:5c:03:51:4d:a1:b3:b1: 0e:0c:7a:0d:5d:59:7c:74:5f:3a:61:01:eb:1d:0b:55:37:c5: 2c:27:17:81:b6:7d:e6:13:47:06:35:58:23:52:35:e3:c1:c2: 15:70:e6:15:bb:3f:d0:ed:02:c6:8e:c6:40:90:c9:d7:f4:12: b1:12:f9:3e:91:a5:0d:a5:8e:8c:71:42:d3:e8:77:75:6d:5c: 1d:4f:68:9d:31:01:9f:ad:a8:85:ed:aa:fc:08:29:b0:df:fc: 02:b4:d0:6b:02:a3:40:4b:05:26:14:b7:21:8e:15:08:6e:79: b1:26:80:ce:85:5d:81:a9:ff:b3:73:9c:89:51:3a:05:07:50: f4:0c:7a:62:04:78:30:21:8f:35:81:2e:e6:0e:96:df:cc:5e: c5:4b:5a:93:2a:f0:c7:bb:74:a7:df:f3:a8:f0:d4:f8:d4:3d: 58:16:df:d4:b4:f6:97:b7:48:90:7c:bb:ac:a0:c7:ca:c2:cd: 93:69:ea:c1:08:34:f6:35:98:27:da:ef:c4:9a:bd:69:67:c0: 97:2f:a2:71:d1:2d:45:59:0a:73:e3:09:9f:34:b8:96:02:4f: 67:73:f1:d1:ac:1b:4c:86:f3:56:5a:36:56:8b:d2:b9:b0:e4: d5:e8:0c:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Rcl4ZJH9JGwxyccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQwN2M4ZmQtYjgwOC00MWQxLWFmNWUtYTg4ZDJkZDU1 NmY5MB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk ODM5OGU2OGQtMjI3MS00N2IyLWJlM2ItMmUyMDkyMDU0OGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXAknGrdi8qEjdDZAjXRp1ndliE+ZlXcihB4 nnca48mhiht10b8n0o4D1Que1kjJiH6ngf/RSobHBczPXLYM4IGWQsd6ObzmDIMn bdDM505m4KHU5c23S9KhkCENmoEi3zIwP6DyvpHdVScP6j+ODwkKzZVZ4XjIBIlD QhDNqe+E2rWLHlqc6zFNL+MK4JV6voPMkON1mTfRpUGWsPaWEt9JGp2PmrQWadvu XqFOnTiNLGNtjQvvj7+bexb2BavLgaYjBwUgVCHJHKYs5UG4z1hLTaa0QvoYG3G5 GP555MQjuFQwU/4kdzsZB+cdd6LYPrR1AIPgMRRr6XVzeecQOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmz73UEAPcuaoL7b29pbwH+xbMYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNDA3 YzhmZC1iODA4LTQxZDEtYWY1ZS1hODhkMmRkNTU2ZjkvMGQzYTkyMDEtYjYyNi0z MmUzLThiYTItMzJhZjg4NzIwMTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTQwN2M4ZmQtYjgwOC00MWQxLWFm NWUtYTg4ZDJkZDU1NmY5L2U0MDdjOGZkLWI4MDgtNDFkMS1hZjVlLWE4OGQyZGQ1 NTZmOS5jcmwwHwYDVR0jBBgwFoAUOYhWE1EoATU3AroVdiYKUgOYPgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNDA3YzhmZC1iODA4LTQxZDEtYWY1ZS1hODhk MmRkNTU2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDZcJIOfI0Euf35XANRTaGzsQ4Meg1dWXx0XzphAesdC1U3xSwnF4G2 feYTRwY1WCNSNePBwhVw5hW7P9DtAsaOxkCQydf0ErES+T6RpQ2ljoxxQtPod3Vt XB1PaJ0xAZ+tqIXtqvwIKbDf/AK00GsCo0BLBSYUtyGOFQhuebEmgM6FXYGp/7Nz nIlROgUHUPQMemIEeDAhjzWBLuYOlt/MXsVLWpMq8Me7dKff86jw1PjUPVgW39S0 9pe3SJB8u6ygx8rCzZNp6sEINPY1mCfa78SavWlnwJcvonHRLUVZCnPjCZ80uJYC T2dz8dGsG0yG81ZaNlaL0rmw5NXoDNY= -----END CERTIFICATE-----Generated at Thu Mar 26 15:07:29 2026 by rpki-client