$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/e29fdbab-728b-37f3-b45b-55800fd076b4.roa File: e29fdbab-728b-37f3-b45b-55800fd076b4.roa (raw, json) Hash identifier: 5dcBtcaxrSSIKnc6iMw7zxBtXc1F2FBezogUlWOQJpQ= Subject key identifier: CD:24:30:7D:B5:A0:59:3A:31:20:1F:89:E9:DF:F9:8F:FE:B0:56:9A Certificate issuer: /CN=3a5a2b1c-9ad3-4496-bcfc-322974accd32 Certificate serial: 010D0C9F4328584D290F4D662CD7EC3B19658B00 Authority key identifier: AB:91:FD:48:33:7A:6B:BE:B1:AF:AF:D2:D3:CC:BA:B7:9B:16:37:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/e29fdbab-728b-37f3-b45b-55800fd076b4.roa Signing time: Sat 14 Mar 2026 01:00:31 +0000 ROA not before: Sat 14 Mar 2026 01:00:31 +0000 ROA not after: Fri 12 Jun 2026 01:00:31 +0000 asID: 63050 IP address blocks: 192.245.140.0/24 maxlen: 32 198.147.156.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:29:0f:4d:66:2c:d7:ec:3b:19:65:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a5a2b1c-9ad3-4496-bcfc-322974accd32 Validity Not Before: Mar 14 01:00:31 2026 GMT Not After : Jun 12 01:00:31 2026 GMT Subject: CN=cdee59f1-f275-48d7-840d-dba770d136a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:72:e1:81:6f:9a:3e:ad:d6:be:6f:a8:a4:52: 00:19:ff:1e:38:58:6e:06:97:27:13:d3:0c:da:f4: 34:c5:a8:33:85:86:28:a0:dd:05:c8:43:a1:34:f9: 15:28:fa:79:10:96:4d:41:4d:55:d1:04:33:5b:ad: 97:93:8c:bd:e7:d1:6a:ff:d7:39:f6:85:95:96:28: 4b:88:00:1d:9e:81:24:a4:3c:12:5e:e6:b1:bb:34: 1d:8a:48:af:c8:2a:58:d1:83:47:6f:75:3a:73:15: 1c:5e:19:a4:e2:13:d2:33:ed:f4:52:36:e7:53:60: 41:bf:b4:fe:93:da:a2:d4:cc:2b:6c:b6:e2:77:04: 77:c3:1f:50:4d:e6:5f:fb:a1:94:82:59:31:d9:ec: 09:46:ad:34:e8:12:db:0f:a3:80:83:2a:1e:02:e1: f5:d8:68:1d:67:d1:1c:32:51:65:75:2f:e5:c5:33: c2:c6:d7:0d:91:0f:72:2d:ed:71:97:1d:e6:03:d4: d7:d4:25:a0:9a:c6:a5:dd:01:48:b8:b7:25:e9:13: 32:0f:21:b1:87:26:d6:4f:02:c3:26:01:2a:8c:10: 1a:58:08:b8:0e:e2:41:87:75:fb:e9:e7:2a:21:6d: ac:84:68:f6:95:12:bd:fe:4f:f8:8e:2d:a5:b6:7b: 40:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:24:30:7D:B5:A0:59:3A:31:20:1F:89:E9:DF:F9:8F:FE:B0:56:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/e29fdbab-728b-37f3-b45b-55800fd076b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.crl X509v3 Authority Key Identifier: keyid:AB:91:FD:48:33:7A:6B:BE:B1:AF:AF:D2:D3:CC:BA:B7:9B:16:37:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32.cer sbgp-ipAddrBlock: critical IPv4: 192.245.140.0/24 198.147.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:d6:09:7c:15:f7:3c:e4:30:e6:5e:58:3e:9f:83:5b:51:95: ba:4f:ee:d1:a4:68:70:0b:00:f1:09:fd:d6:6e:39:27:39:b7: 6b:24:42:0f:0d:cb:f7:d2:18:66:e4:23:c8:28:d0:9d:c3:45: dc:ee:49:44:64:13:95:d0:4e:9f:ed:09:66:4c:b0:97:98:4e: c2:28:85:49:25:49:d8:55:a3:2b:75:57:21:4a:ef:4d:aa:bc: 43:83:6a:cc:0f:a5:13:4a:b3:35:c8:56:a2:4f:0a:bf:d5:5a: c8:80:03:70:12:0e:fb:98:85:a0:60:7d:fe:89:3a:72:38:b0: f2:d6:fa:45:4e:f3:24:a4:46:db:c8:22:74:14:ba:f8:fd:8f: b7:ef:37:77:64:9b:40:ea:95:3d:9e:50:91:e9:a0:0e:17:c5: dc:fb:8b:3b:12:5d:59:3c:8b:c5:60:c5:f9:65:f1:d3:68:b0: c6:89:a5:dd:1d:ac:48:67:6d:e8:e2:aa:21:03:c9:12:27:e5: f8:19:5f:1d:01:19:a4:7d:ee:10:05:6d:e3:7a:b7:35:b8:f5: 2d:56:f7:93:44:f3:a2:3f:02:a8:04:85:e4:3a:a4:58:03:d1: fb:7b:a5:75:a1:e2:10:8c:31:32:95:91:97:2b:fd:57:bf:8a: 6d:4f:50:c7 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0pD01mLNfsOxlliwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E1YTJiMWMtOWFkMy00NDk2LWJjZmMtMzIyOTc0YWNj ZDMyMB4XDTI2MDMxNDAxMDAzMVoXDTI2MDYxMjAxMDAzMVowLzEtMCsGA1UEAxMk Y2RlZTU5ZjEtZjI3NS00OGQ3LTg0MGQtZGJhNzcwZDEzNmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HLhgW+aPq3Wvm+opFIAGf8eOFhuBpcnE9MM 2vQ0xagzhYYooN0FyEOhNPkVKPp5EJZNQU1V0QQzW62Xk4y959Fq/9c59oWVlihL iAAdnoEkpDwSXuaxuzQdikivyCpY0YNHb3U6cxUcXhmk4hPSM+30UjbnU2BBv7T+ k9qi1MwrbLbidwR3wx9QTeZf+6GUglkx2ewJRq006BLbD6OAgyoeAuH12GgdZ9Ec MlFldS/lxTPCxtcNkQ9yLe1xlx3mA9TX1CWgmsal3QFIuLcl6RMyDyGxhybWTwLD JgEqjBAaWAi4DuJBh3X76ecqIW2shGj2lRK9/k/4ji2ltntAvQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFM0kMH21oFk6MSAfienf+Y/+sFaaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYTVh MmIxYy05YWQzLTQ0OTYtYmNmYy0zMjI5NzRhY2NkMzIvZTI5ZmRiYWItNzI4Yi0z N2YzLWI0NWItNTU4MDBmZDA3NmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2E1YTJiMWMtOWFkMy00NDk2LWJj ZmMtMzIyOTc0YWNjZDMyLzNhNWEyYjFjLTlhZDMtNDQ5Ni1iY2ZjLTMyMjk3NGFj Y2QzMi5jcmwwHwYDVR0jBBgwFoAUq5H9SDN6a76xr6/S08y6t5sWNyAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYTVhMmIxYy05YWQzLTQ0OTYtYmNmYy0zMjI5 NzRhY2NkMzIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwPWMAwQA xpOcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAC3WCXwV9zzkMOZeWD6fg1tRlbpP7tGkaHALAPEJ/dZuOSc5 t2skQg8Ny/fSGGbkI8go0J3DRdzuSURkE5XQTp/tCWZMsJeYTsIohUklSdhVoyt1 VyFK702qvEODaswPpRNKszXIVqJPCr/VWsiAA3ASDvuYhaBgff6JOnI4sPLW+kVO 8ySkRtvIInQUuvj9j7fvN3dkm0DqlT2eUJHpoA4Xxdz7izsSXVk8i8Vgxfll8dNo sMaJpd0drEhnbejiqiEDyRIn5fgZXx0BGaR97hAFbeN6tzW49S1W95NE86I/AqgE heQ6pFgD0ft7pXWh4hCMMTKVkZcr/Ve/im1PUMc= -----END CERTIFICATE-----Generated at Thu Mar 26 02:36:19 2026 by rpki-client