$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/dacffcaa-9d74-3d4a-bf65-1b68c793f9bc.roa File: dacffcaa-9d74-3d4a-bf65-1b68c793f9bc.roa (raw, json) Hash identifier: +1+GyFK7fr0vkeatXtE3sBrRjZs0K9WCv3e4iLo6tJU= Subject key identifier: 33:A6:5C:B2:26:FD:2A:BE:C0:7A:AB:53:12:9B:7C:D5:58:3E:EF:D1 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584D146D9278E4865E17615507B0 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/dacffcaa-9d74-3d4a-bf65-1b68c793f9bc.roa Signing time: Fri 06 Mar 2026 15:38:31 +0000 ROA not before: Fri 06 Mar 2026 15:38:31 +0000 ROA not after: Thu 04 Jun 2026 14:38:31 +0000 asID: 81 IP address blocks: 204.85.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:6d:92:78:e4:86:5e:17:61:55:07:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Mar 6 15:38:31 2026 GMT Not After : Jun 4 14:38:31 2026 GMT Subject: CN=0297ac16-5df6-4adc-8693-c460662d9279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3d:77:09:7c:f9:68:62:46:93:35:f0:28:b9: f6:d8:44:03:20:d6:97:b1:e8:b7:94:9d:25:dd:d3: d9:27:4c:aa:42:2d:35:dc:9e:ac:7d:0c:0b:3c:bf: be:84:5f:08:b7:1d:4d:22:09:a4:1e:07:4a:36:14: b6:a6:e2:cd:89:60:dd:44:d5:c5:84:21:f8:3c:25: f8:61:26:f4:9e:02:23:cc:5e:e1:70:39:38:b9:67: f0:05:7a:56:e6:8e:c1:c4:8c:4e:d9:27:47:e2:83: 84:b1:19:ce:fc:61:42:e9:0c:09:3e:64:f8:47:36: 90:61:d0:70:39:c7:24:94:7b:db:5f:f6:b2:56:71: 5e:0b:8c:d6:3f:40:24:e8:f9:f7:76:a6:79:f6:f4: 26:7b:74:65:2a:2c:3a:2b:49:91:7e:bf:4b:73:f6: 16:6e:b5:a6:e3:a0:70:90:61:e3:ba:31:eb:b7:ce: 4c:af:45:6d:5c:15:80:06:40:75:ba:2d:58:27:e0: 9e:4d:ae:ef:cc:52:a3:2c:08:f1:97:f5:82:8b:26: 0a:23:1d:fb:51:41:52:39:4c:56:e6:cf:77:cb:94: 2e:73:01:1e:ec:a2:c8:e5:02:05:38:23:2b:45:7f: ee:bd:38:a8:59:40:7c:5b:b1:0d:72:f5:05:4e:61: 40:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A6:5C:B2:26:FD:2A:BE:C0:7A:AB:53:12:9B:7C:D5:58:3E:EF:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/dacffcaa-9d74-3d4a-bf65-1b68c793f9bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 204.85.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:1b:0c:1c:c4:74:25:75:00:43:a9:38:28:d7:c1:29:7d:0b: 4f:f8:d0:3a:4c:e1:62:95:73:e9:73:0f:42:24:90:c7:18:0c: 36:fe:a1:a8:8e:9f:7a:69:8e:23:7d:c6:10:ab:ed:42:de:92: 09:fd:5b:60:7c:32:39:d0:a6:7c:89:48:92:0a:28:ef:2a:5b: fc:c1:41:25:35:d2:79:97:14:bd:1f:58:f4:6b:c3:e2:74:90: 2d:bb:68:42:c9:36:40:21:fc:81:53:e1:1d:c0:7b:b9:68:2b: a6:56:b3:a9:64:4b:33:a2:64:0c:81:fb:6d:57:e1:94:6b:45: 6e:d8:1b:43:c6:2a:f0:b1:55:8a:10:79:8c:a6:be:fa:25:10: e2:08:24:90:de:df:f3:bb:df:f7:1d:61:49:50:be:8a:d7:ea: b9:af:26:23:d9:84:7d:5e:15:44:12:3a:17:e4:db:69:1d:03: 8f:7e:c7:67:9c:1b:ad:13:7f:fd:e9:bf:8b:3b:a0:96:a4:02: e2:ac:36:54:16:57:6e:44:57:59:18:50:3f:8a:c7:ea:d3:a2: ac:d7:ed:27:2b:4a:19:ec:6f:7e:d4:3d:83:53:9f:8e:07:91: 23:9d:50:83:b8:07:7f:5e:2c:ca:87:e8:4d:4e:27:0c:f4:35: 56:b3:ac:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UbZJ45IZeF2FVB7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDMwNjE1MzgzMVoXDTI2MDYwNDE0MzgzMVowLzEtMCsGA1UEAxMk MDI5N2FjMTYtNWRmNi00YWRjLTg2OTMtYzQ2MDY2MmQ5Mjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD13CXz5aGJGkzXwKLn22EQDINaXsei3lJ0l 3dPZJ0yqQi013J6sfQwLPL++hF8Itx1NIgmkHgdKNhS2puLNiWDdRNXFhCH4PCX4 YSb0ngIjzF7hcDk4uWfwBXpW5o7BxIxO2SdH4oOEsRnO/GFC6QwJPmT4RzaQYdBw OccklHvbX/ayVnFeC4zWP0Ak6Pn3dqZ59vQme3RlKiw6K0mRfr9Lc/YWbrWm46Bw kGHjujHrt85Mr0VtXBWABkB1ui1YJ+CeTa7vzFKjLAjxl/WCiyYKIx37UUFSOUxW 5s93y5QucwEe7KLI5QIFOCMrRX/uvTioWUB8W7ENcvUFTmFAfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOmXLIm/Sq+wHqrUxKbfNVYPu/RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZGFjZmZjYWEtOWQ3NC0z ZDRhLWJmNjUtMWI2OGM3OTNmOWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzFUYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgbDBzEdCV1AEOpOCjXwSl9C0/40DpM4WKVc+lzD0IkkMcYDDb+oaiO n3ppjiN9xhCr7ULekgn9W2B8MjnQpnyJSJIKKO8qW/zBQSU10nmXFL0fWPRrw+J0 kC27aELJNkAh/IFT4R3Ae7loK6ZWs6lkSzOiZAyB+21X4ZRrRW7YG0PGKvCxVYoQ eYymvvolEOIIJJDe3/O73/cdYUlQvorX6rmvJiPZhH1eFUQSOhfk22kdA49+x2ec G60Tf/3pv4s7oJakAuKsNlQWV25EV1kYUD+Kx+rToqzX7ScrShnsb37UPYNTn44H kSOdUIO4B39eLMqH6E1OJwz0NVazrDk= -----END CERTIFICATE-----Generated at Thu Mar 26 22:53:19 2026 by rpki-client