$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/924c8170-596c-3428-8eee-dcbfff965c95.roa File: 924c8170-596c-3428-8eee-dcbfff965c95.roa (raw, json) Hash identifier: bruYAycyMl/dyCIt5HNJxHaH7mhJQQp5ekmkLUmtAoQ= Subject key identifier: D3:6D:97:E8:F0:F0:EE:1F:97:8D:7A:99:96:53:D1:E9:E5:74:44:67 Certificate issuer: /CN=024863fe-f941-4bf2-81d9-ad03d50aa194 Certificate serial: 010D0C9F4328584D100CFDC4D2D3C63B556DF220 Authority key identifier: 26:CF:B7:2C:F1:29:25:18:74:73:0F:1F:50:DE:B5:FD:54:A3:20:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/924c8170-596c-3428-8eee-dcbfff965c95.roa Signing time: Thu 05 Mar 2026 02:00:32 +0000 ROA not before: Thu 05 Mar 2026 02:00:32 +0000 ROA not after: Wed 03 Jun 2026 01:00:32 +0000 asID: 401415 IP address blocks: 204.147.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/024863fe-f941-4bf2-81d9-ad03d50aa194.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/024863fe-f941-4bf2-81d9-ad03d50aa194.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:10:0c:fd:c4:d2:d3:c6:3b:55:6d:f2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=024863fe-f941-4bf2-81d9-ad03d50aa194 Validity Not Before: Mar 5 02:00:32 2026 GMT Not After : Jun 3 01:00:32 2026 GMT Subject: CN=5b57627f-84e8-40e5-b7e1-1190cd8381e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:75:ce:a2:79:de:13:f0:b2:11:43:7c:42:1d: 5d:df:7b:eb:4c:29:48:cc:6d:6b:61:04:17:2c:ec: 71:92:13:d4:d7:5e:f8:72:a8:16:fc:66:51:36:9d: dd:85:b8:8b:60:f9:79:6a:d5:83:85:89:75:02:25: cf:ec:e6:08:ac:1e:0a:f3:4f:c3:c4:86:c0:aa:d3: ed:23:65:90:0c:0e:1e:05:44:f8:80:2e:a0:4f:db: 73:66:1f:3e:f2:aa:5a:81:37:28:c7:fd:a8:75:92: 05:52:13:80:0f:43:43:83:aa:ff:42:cc:50:1c:d9: c8:f6:31:bd:9b:86:80:6c:c0:72:c4:5f:18:6d:30: 2d:ff:92:d1:73:21:c0:63:c4:49:b2:55:75:01:91: fc:3d:a5:cf:69:58:79:9b:fb:28:1d:2a:a3:e5:6c: ae:3c:01:9f:7d:cf:71:0f:a8:e8:2b:19:04:6f:0c: d1:7d:70:f3:51:90:37:64:9c:5d:4a:a6:2e:8a:76: 39:21:bd:fe:81:ff:52:65:92:5b:7f:f7:87:3b:71: 73:05:a4:94:80:68:6b:c2:e3:33:83:c5:c4:d1:5b: 17:0b:f9:39:27:3d:b2:d6:b0:76:d6:fc:0b:ce:05: a0:f8:82:fd:a8:d8:99:68:9f:82:b8:91:60:58:17: 00:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6D:97:E8:F0:F0:EE:1F:97:8D:7A:99:96:53:D1:E9:E5:74:44:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/924c8170-596c-3428-8eee-dcbfff965c95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/024863fe-f941-4bf2-81d9-ad03d50aa194.crl X509v3 Authority Key Identifier: keyid:26:CF:B7:2C:F1:29:25:18:74:73:0F:1F:50:DE:B5:FD:54:A3:20:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194.cer sbgp-ipAddrBlock: critical IPv4: 204.147.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:0b:42:0a:20:93:a2:ac:2d:fc:03:de:cb:7c:8c:09:af:3d: 8b:3d:cb:cb:d8:9c:c8:69:54:24:9e:b5:d5:1b:89:0e:3f:9b: c6:5c:17:a1:f7:e9:c0:85:67:08:61:a4:39:86:47:a4:f6:6e: 32:b4:73:51:cd:6a:62:16:2a:9f:43:f0:eb:be:1f:d9:8f:d5: 37:61:24:61:7e:f8:34:5e:24:12:8c:ab:dc:98:e2:6e:08:78: 6d:61:5f:9a:a3:46:a9:18:f8:7d:af:c1:99:7e:4b:2a:dd:e9: 68:e5:18:1a:10:72:91:9c:75:dd:a5:c5:2c:ac:11:92:ef:25: c5:0b:28:a9:96:66:19:dd:6f:e2:b5:0c:b1:58:97:8e:e4:96: af:d6:1a:c1:e5:19:fc:36:4d:ab:b6:4a:1e:75:74:ea:ee:94: 9b:02:3d:be:d6:83:23:37:7d:ca:8f:40:e4:19:76:a6:1f:4f: d5:66:27:7e:d1:00:8f:2e:6f:d5:f1:8b:0a:a7:f7:eb:ff:88: 81:08:23:87:f1:0b:88:06:73:8a:d6:4b:15:35:0d:59:d3:a1: 0f:b3:5c:87:1a:6d:d3:6e:01:55:c1:b2:d7:4b:28:26:29:7b: 98:57:27:f2:6b:55:bf:9d:f1:7f:ff:b7:ba:c9:88:f7:58:35: 70:63:cc:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0QDP3E0tPGO1Vt8iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDI0ODYzZmUtZjk0MS00YmYyLTgxZDktYWQwM2Q1MGFh MTk0MB4XDTI2MDMwNTAyMDAzMloXDTI2MDYwMzAxMDAzMlowLzEtMCsGA1UEAxMk NWI1NzYyN2YtODRlOC00MGU1LWI3ZTEtMTE5MGNkODM4MWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinXOonneE/CyEUN8Qh1d33vrTClIzG1rYQQX LOxxkhPU1174cqgW/GZRNp3dhbiLYPl5atWDhYl1AiXP7OYIrB4K80/DxIbAqtPt I2WQDA4eBUT4gC6gT9tzZh8+8qpagTcox/2odZIFUhOAD0NDg6r/QsxQHNnI9jG9 m4aAbMByxF8YbTAt/5LRcyHAY8RJslV1AZH8PaXPaVh5m/soHSqj5WyuPAGffc9x D6joKxkEbwzRfXDzUZA3ZJxdSqYuinY5Ib3+gf9SZZJbf/eHO3FzBaSUgGhrwuMz g8XE0VsXC/k5Jz2y1rB21vwLzgWg+IL9qNiZaJ+CuJFgWBcAOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNtl+jw8O4fl416mZZT0enldERnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wMjQ4 NjNmZS1mOTQxLTRiZjItODFkOS1hZDAzZDUwYWExOTQvOTI0YzgxNzAtNTk2Yy0z NDI4LThlZWUtZGNiZmZmOTY1Yzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDI0ODYzZmUtZjk0MS00YmYyLTgx ZDktYWQwM2Q1MGFhMTk0LzAyNDg2M2ZlLWY5NDEtNGJmMi04MWQ5LWFkMDNkNTBh YTE5NC5jcmwwHwYDVR0jBBgwFoAUJs+3LPEpJRh0cw8fUN61/VSjIN8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wMjQ4NjNmZS1mOTQxLTRiZjItODFkOS1hZDAz ZDUwYWExOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzJOwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4LQgogk6KsLfwD3st8jAmvPYs9y8vYnMhpVCSetdUbiQ4/m8ZcF6H3 6cCFZwhhpDmGR6T2bjK0c1HNamIWKp9D8Ou+H9mP1TdhJGF++DReJBKMq9yY4m4I eG1hX5qjRqkY+H2vwZl+Syrd6WjlGBoQcpGcdd2lxSysEZLvJcULKKmWZhndb+K1 DLFYl47klq/WGsHlGfw2Tau2Sh51dOrulJsCPb7WgyM3fcqPQOQZdqYfT9VmJ37R AI8ub9Xxiwqn9+v/iIEII4fxC4gGc4rWSxU1DVnToQ+zXIcabdNuAVXBstdLKCYp e5hXJ/JrVb+d8X//t7rJiPdYNXBjzLI= -----END CERTIFICATE-----Generated at Thu Mar 26 17:35:46 2026 by rpki-client