$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/9477d30f-60e1-349b-9381-c5e6e73f84d7.roa File: 9477d30f-60e1-349b-9381-c5e6e73f84d7.roa (raw, json) Hash identifier: b7GH0G0xMsSj7Fr5RYv3jd1OIitCTvpmbxEDSBJCj3E= Subject key identifier: 44:29:79:50:C6:4E:88:9B:D7:C4:A9:7B:1A:F2:CC:0B:69:11:D6:68 Certificate issuer: /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Certificate serial: 010D0C9F4328584D343A19CE8571E4C2DAFCEF00 Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/9477d30f-60e1-349b-9381-c5e6e73f84d7.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 400226 IP address blocks: 204.197.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:19:ce:85:71:e4:c2:da:fc:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=22d15477-f7d5-4e58-a583-b9e10b63ee99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:68:ea:a8:5e:c0:7c:98:08:7b:91:85:de:cb: e4:3c:49:b2:04:2c:90:dc:83:d3:ac:90:64:3d:a5: 07:d5:d9:4c:44:89:95:7f:4f:8f:da:05:84:89:27: 7e:ab:63:13:31:b3:16:a4:85:d5:13:0e:41:97:c3: 51:3d:7b:69:e0:b1:a6:bf:93:c6:73:41:e4:2c:f0: 42:98:c4:bf:05:bf:30:a9:73:cb:1a:6a:c0:3e:e5: 46:28:18:f2:81:5e:26:b0:bb:f1:4f:d1:fa:ca:17: ea:d3:2d:7a:a9:8b:5a:f3:39:28:59:e5:02:06:9b: fc:a6:ce:91:0f:0e:8b:28:0d:d2:7a:95:fc:77:7f: 1c:4c:f4:e6:c5:9d:93:4b:30:62:6b:1e:c1:90:42: bc:c4:7c:57:07:d7:b0:04:27:4b:58:43:58:15:09: ac:d8:aa:b0:f4:db:99:df:ed:f0:fb:b7:66:26:7b: 04:51:00:71:87:8d:e8:0b:84:58:af:3c:36:43:8e: 0d:a8:df:6c:e9:35:38:99:12:99:cb:69:56:6c:31: 33:3c:a4:4e:12:24:4a:e7:66:f1:db:37:29:ef:4a: 5d:1c:45:51:44:21:53:4e:91:fc:ef:fb:a0:ef:9a: c5:38:20:b3:8b:3c:b6:07:c1:a1:c8:f9:1d:d8:e5: 96:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:29:79:50:C6:4E:88:9B:D7:C4:A9:7B:1A:F2:CC:0B:69:11:D6:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/9477d30f-60e1-349b-9381-c5e6e73f84d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl X509v3 Authority Key Identifier: keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer sbgp-ipAddrBlock: critical IPv4: 204.197.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:e6:32:d1:f5:cc:8e:cc:2b:2f:25:12:27:a5:34:01:67:1f: f5:81:9b:72:e9:7e:1c:2b:92:f7:3f:3b:9c:c8:5c:79:d3:27: ee:9d:44:0b:4c:8a:ab:a7:f3:39:a4:9d:73:cc:a1:2f:62:7d: 28:3e:78:01:8b:52:71:c8:07:0f:cb:c0:73:b0:91:fa:e8:33: 52:0e:de:e0:35:88:70:79:d7:1c:d5:b1:60:2a:41:7f:4c:ce: ed:3f:25:ae:6d:d1:9f:24:41:ed:89:01:0b:9d:d1:5a:4c:6e: 1c:ff:9f:c3:7a:0b:2d:20:1d:ae:18:86:63:cf:16:be:c6:a6: 20:f7:31:eb:85:39:12:fe:18:d5:95:ef:af:ea:10:d1:67:e9: 7f:1d:4f:12:04:a0:c8:80:4e:2d:67:10:5c:d4:a2:c8:a5:10: a5:47:89:8d:aa:67:01:a3:6c:a0:ab:7a:3b:d3:93:1e:08:90: 68:1f:ee:5d:eb:f3:5f:b1:ac:28:9f:5e:91:79:9f:90:72:7a: 50:fd:d4:ca:3d:bd:43:44:55:ef:eb:c7:24:3f:df:ea:0b:24: a7:c0:39:fc:ca:3a:e3:92:aa:d6:44:e3:6b:42:5c:df:97:35: 28:b3:c9:48:73:d7:7c:f9:49:b6:a8:7a:bf:20:81:4c:b5:89: 3e:9e:c2:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE00OhnOhXHkwtr87wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkzM2FmNzAtZmFlNC00NGM2LTllNDItMmI5ZWRhM2Mx ZTBlMB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk MjJkMTU0NzctZjdkNS00ZTU4LWE1ODMtYjllMTBiNjNlZTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWjqqF7AfJgIe5GF3svkPEmyBCyQ3IPTrJBk PaUH1dlMRImVf0+P2gWEiSd+q2MTMbMWpIXVEw5Bl8NRPXtp4LGmv5PGc0HkLPBC mMS/Bb8wqXPLGmrAPuVGKBjygV4msLvxT9H6yhfq0y16qYta8zkoWeUCBpv8ps6R Dw6LKA3SepX8d38cTPTmxZ2TSzBiax7BkEK8xHxXB9ewBCdLWENYFQms2Kqw9NuZ 3+3w+7dmJnsEUQBxh43oC4RYrzw2Q44NqN9s6TU4mRKZy2lWbDEzPKROEiRK52bx 2zcp70pdHEVRRCFTTpH87/ug75rFOCCzizy2B8GhyPkd2OWWaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQpeVDGToib18SpexryzAtpEdZoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OTMz YWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjllZGEzYzFlMGUvOTQ3N2QzMGYtNjBlMS0z NDliLTkzODEtYzVlNmU3M2Y4NGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTkzM2FmNzAtZmFlNC00NGM2LTll NDItMmI5ZWRhM2MxZTBlLzU5MzNhZjcwLWZhZTQtNDRjNi05ZTQyLTJiOWVkYTNj MWUwZS5jcmwwHwYDVR0jBBgwFoAUX0piry7HhCrgxdrmtpTYiRdP1RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OTMzYWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjll ZGEzYzFlMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMWrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjmMtH1zI7MKy8lEielNAFnH/WBm3Lpfhwrkvc/O5zIXHnTJ+6dRAtM iqun8zmknXPMoS9ifSg+eAGLUnHIBw/LwHOwkfroM1IO3uA1iHB51xzVsWAqQX9M zu0/Ja5t0Z8kQe2JAQud0VpMbhz/n8N6Cy0gHa4YhmPPFr7GpiD3MeuFORL+GNWV 76/qENFn6X8dTxIEoMiATi1nEFzUosilEKVHiY2qZwGjbKCrejvTkx4IkGgf7l3r 81+xrCifXpF5n5ByelD91Mo9vUNEVe/rxyQ/3+oLJKfAOfzKOuOSqtZE42tCXN+X NSizyUhz13z5Sbaoer8ggUy1iT6ewtA= -----END CERTIFICATE-----Generated at Thu Mar 26 19:45:35 2026 by rpki-client