$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ce5a1214-ed4b-397f-91ed-4961c09b7a65.roa File: ce5a1214-ed4b-397f-91ed-4961c09b7a65.roa (raw, json) Hash identifier: 1gIThn8VsGdCbsyLN+MCxtanJdYbrtpkCQ+fb4dPe+o= Subject key identifier: 63:73:75:18:8A:F8:A3:CC:F1:2A:CF:F2:47:3E:62:0A:0E:A5:C7:B1 Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Certificate serial: 010D0C9F4328584D386A4F08D765EC4F5FA29B80 Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ce5a1214-ed4b-397f-91ed-4961c09b7a65.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 33724 IP address blocks: 216.230.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:4f:08:d7:65:ec:4f:5f:a2:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=4c640b4f-8062-4d17-9481-bc9854ead6eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f2:b0:d3:b6:1a:e4:cc:32:3f:fe:ae:b3:4d: 2e:f3:f4:7c:64:7a:dd:c9:41:4e:ed:65:e4:03:12: f7:e9:4e:c5:e6:44:6f:19:17:f7:8a:07:8c:f3:36: 53:93:37:36:ba:ed:8a:cc:e1:b2:0c:b3:e6:d7:d5: f6:a6:86:c7:f6:d6:46:d6:24:42:13:de:51:84:8c: 06:a9:be:22:e6:6c:b3:14:e5:5d:d7:65:2d:83:cb: fa:21:ce:f4:74:c6:41:92:00:a0:a5:15:f7:10:d7: 5b:06:b6:41:ee:2c:7c:d2:ab:16:31:82:6c:17:b1: 31:81:f1:c4:92:b7:ca:6c:88:64:1f:11:90:1d:49: e8:8d:5f:94:69:a1:74:16:37:f6:65:cd:fa:cc:c9: 12:ce:f4:ee:23:72:7d:55:db:90:09:8c:50:6e:64: 15:89:cd:c3:90:e4:5a:33:db:e1:56:01:b5:b2:ca: 8e:47:cb:e0:7b:5c:38:de:25:ad:5d:99:bc:98:a8: 2f:c7:8e:ca:0f:94:c1:cc:2f:e7:75:30:96:2e:9b: 36:75:75:8c:9d:ee:d5:dd:3a:ab:da:e0:29:ad:99: f1:8f:df:cc:a0:b6:e3:a6:61:c1:73:cd:e5:7c:08: ab:04:ae:a3:1e:cf:19:50:c6:af:bd:90:33:ae:15: b7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:73:75:18:8A:F8:A3:CC:F1:2A:CF:F2:47:3E:62:0A:0E:A5:C7:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ce5a1214-ed4b-397f-91ed-4961c09b7a65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl X509v3 Authority Key Identifier: keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer sbgp-ipAddrBlock: critical IPv4: 216.230.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:49:d2:3b:60:4d:39:7c:64:c5:7f:0f:78:b7:7e:fc:41:be: 63:aa:3f:79:14:9f:04:5b:e8:05:d0:dc:bf:c2:4e:df:39:d8: 15:3e:b2:34:e0:b1:95:05:2c:6e:cd:c0:42:c1:96:e8:77:21: 1f:a5:9b:54:2d:80:18:c7:e2:d9:8a:e0:b4:d4:56:aa:57:cf: 5b:7f:32:ac:8d:05:c3:7a:aa:20:22:0e:7b:49:52:c8:43:33: 2c:64:c7:4d:03:1e:40:a5:3c:23:12:32:17:50:7c:70:bc:92: f5:b7:34:04:5f:67:3a:da:47:e1:6d:34:c3:db:6b:37:99:12: d3:cd:42:23:f0:d1:ec:c5:9b:04:7c:f8:75:a6:0d:46:03:de: 89:2f:bb:f9:e2:c4:0b:08:ea:5c:d7:a0:e5:30:68:f4:4a:d8: 2f:bf:95:db:62:57:db:24:c5:65:f4:1f:2e:15:df:4d:e9:3e: 61:6f:cc:6a:84:46:99:19:1b:c7:ac:d0:10:f9:3a:a4:bd:32: 10:72:e1:83:2d:dc:ae:67:09:23:31:7c:ed:6d:89:03:94:37: 0d:cd:55:76:9d:03:6b:53:9f:fd:8b:62:74:6b:a8:85:ff:85: 5f:2f:26:34:9c:33:7b:4f:82:41:08:07:a5:83:61:79:5f:62: 38:33:e8:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04ak8I12XsT1+im4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1OGJmNzUtOTUzMS00YWNhLWE1MmUtMmEzMjQxZmE2 ZGQ4MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk NGM2NDBiNGYtODA2Mi00ZDE3LTk0ODEtYmM5ODU0ZWFkNmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvKw07Ya5MwyP/6us00u8/R8ZHrdyUFO7WXk AxL36U7F5kRvGRf3igeM8zZTkzc2uu2KzOGyDLPm19X2pobH9tZG1iRCE95RhIwG qb4i5myzFOVd12Utg8v6Ic70dMZBkgCgpRX3ENdbBrZB7ix80qsWMYJsF7ExgfHE krfKbIhkHxGQHUnojV+UaaF0Fjf2Zc36zMkSzvTuI3J9VduQCYxQbmQVic3DkORa M9vhVgG1ssqOR8vge1w43iWtXZm8mKgvx47KD5TBzC/ndTCWLps2dXWMne7V3Tqr 2uAprZnxj9/MoLbjpmHBc83lfAirBK6jHs8ZUMavvZAzrhW3KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNzdRiK+KPM8SrP8kc+YgoOpcexMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4 YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMyNDFmYTZkZDgvY2U1YTEyMTQtZWQ0Yi0z OTdmLTkxZWQtNDk2MWMwOWI3YTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWY1OGJmNzUtOTUzMS00YWNhLWE1 MmUtMmEzMjQxZmE2ZGQ4LzFmNThiZjc1LTk1MzEtNGFjYS1hNTJlLTJhMzI0MWZh NmRkOC5jcmwwHwYDVR0jBBgwFoAUuMx8HBZNy4KZTSwdb5O2OAgUDTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMy NDFmYTZkZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OYdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9J0jtgTTl8ZMV/D3i3fvxBvmOqP3kUnwRb6AXQ3L/CTt852BU+sjTg sZUFLG7NwELBluh3IR+lm1QtgBjH4tmK4LTUVqpXz1t/MqyNBcN6qiAiDntJUshD Myxkx00DHkClPCMSMhdQfHC8kvW3NARfZzraR+FtNMPbazeZEtPNQiPw0ezFmwR8 +HWmDUYD3okvu/nixAsI6lzXoOUwaPRK2C+/ldtiV9skxWX0Hy4V303pPmFvzGqE RpkZG8es0BD5OqS9MhBy4YMt3K5nCSMxfO1tiQOUNw3NVXadA2tTn/2LYnRrqIX/ hV8vJjScM3tPgkEIB6WDYXlfYjgz6Co= -----END CERTIFICATE-----Generated at Thu Mar 26 04:37:09 2026 by rpki-client