$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/701b38fb-8f2e-321e-ab1e-0d8e19cc6cc5.roa File: 701b38fb-8f2e-321e-ab1e-0d8e19cc6cc5.roa (raw, json) Hash identifier: g38pKd3yA7L2ATrtbRsyrN0l1KFz5tGnbKi6rq2FlSM= Subject key identifier: 33:88:6E:C4:8E:CD:36:6B:50:2A:1E:99:9D:9E:8A:0F:4A:10:DB:98 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584D3F64D242A583C413B6610600 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/701b38fb-8f2e-321e-ab1e-0d8e19cc6cc5.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 53356 IP address blocks: 200.229.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:d2:42:a5:83:c4:13:b6:61:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=be8422bf-84a0-4169-ae0a-f76f3c172154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ea:75:e0:a1:22:76:46:4e:13:28:42:c1:7f: b0:c2:66:2f:af:1d:a9:92:e1:31:92:17:77:e2:50: 70:5c:c6:ed:5b:3e:4e:1b:a5:d1:6d:5a:8c:64:e5: d2:29:48:d2:a8:c5:26:13:8d:37:1d:cb:02:a9:3e: a7:08:69:75:a4:61:a1:9a:e3:78:6b:5b:76:20:24: 26:6f:38:2b:25:90:ad:6b:8e:65:4d:ed:af:19:7b: 2c:d9:2b:33:c6:bd:cb:25:a8:a8:74:64:5b:56:89: 68:8d:7a:f9:d5:8c:53:01:0a:61:9c:fa:18:e1:2e: 8f:d8:a9:c8:bc:ed:64:2a:87:c8:f8:69:00:44:ef: 8e:95:3c:7e:98:08:ea:c7:6b:b2:1b:4a:f9:33:b2: c9:71:e0:8e:8f:6f:80:6b:d9:44:2e:a9:81:69:9c: bb:0a:7a:b4:5f:b6:f8:0d:84:f7:2e:31:92:3a:33: ef:42:51:e5:83:2a:de:25:8d:41:48:39:a4:ba:81: f3:e0:f8:ed:05:39:5a:e1:dd:57:19:bc:21:1d:8c: d9:8d:d4:6e:8c:29:d1:42:69:9f:8f:99:0e:58:5d: 45:eb:4e:10:39:14:00:fb:ac:ac:e5:b4:6b:b9:50: 13:2d:0b:78:9d:32:4c:df:eb:94:9a:a0:3b:1e:fe: 1b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:88:6E:C4:8E:CD:36:6B:50:2A:1E:99:9D:9E:8A:0F:4A:10:DB:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/701b38fb-8f2e-321e-ab1e-0d8e19cc6cc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 200.229.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:c7:fd:bb:09:fa:b8:35:f9:7e:de:8d:5f:6e:a1:e6:a9:86: c1:17:39:98:ec:41:21:1c:92:d6:22:7d:f1:70:03:ca:d0:52: 83:4a:fe:ed:1a:43:5b:5c:ea:fb:69:5d:9d:ab:db:42:f3:cc: 13:55:b9:18:82:d1:0b:f9:33:c4:3c:bb:c9:ed:88:be:91:be: 56:3e:ac:ae:47:cb:43:44:57:48:6b:8d:8c:67:52:95:70:d8: 7c:ac:1a:51:00:72:82:04:c1:96:95:d0:98:f5:8f:4a:1c:07: a7:de:28:60:2e:88:7c:75:05:dd:1e:48:ef:72:b6:c8:29:cb: 25:04:a8:af:d2:f2:5e:3b:d1:f2:9e:ae:6c:4c:e6:9a:73:c4: 7a:20:7d:33:7d:6d:51:7d:b0:c8:7e:1b:ca:b3:f6:c0:aa:8f: 46:07:fa:82:44:05:5a:af:a2:fc:7f:ed:b4:77:9c:46:d8:2b: 04:c5:21:ee:d6:08:ad:92:b2:7b:33:2e:79:65:4e:04:d3:7f: 07:d1:0f:36:24:60:a3:da:5b:f4:84:92:8f:b8:aa:7c:81:5b: d2:89:41:9f:7b:ea:e6:92:6f:0d:cd:40:89:35:af:83:84:bf: 05:03:1d:fa:4f:9c:fa:82:e5:37:b8:1d:35:f6:92:c3:fa:72: 32:00:68:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZNJCpYPEE7ZhBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk YmU4NDIyYmYtODRhMC00MTY5LWFlMGEtZjc2ZjNjMTcyMTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+p14KEidkZOEyhCwX+wwmYvrx2pkuExkhd3 4lBwXMbtWz5OG6XRbVqMZOXSKUjSqMUmE403HcsCqT6nCGl1pGGhmuN4a1t2ICQm bzgrJZCta45lTe2vGXss2Sszxr3LJaiodGRbVolojXr51YxTAQphnPoY4S6P2KnI vO1kKofI+GkARO+OlTx+mAjqx2uyG0r5M7LJceCOj2+Aa9lELqmBaZy7Cnq0X7b4 DYT3LjGSOjPvQlHlgyreJY1BSDmkuoHz4PjtBTla4d1XGbwhHYzZjdRujCnRQmmf j5kOWF1F604QORQA+6ys5bRruVATLQt4nTJM3+uUmqA7Hv4bHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOIbsSOzTZrUCoemZ2eig9KENuYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvNzAxYjM4ZmItOGYyZS0z MjFlLWFiMWUtMGQ4ZTE5Y2M2Y2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyOUVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHH/bsJ+rg1+X7ejV9uoeaphsEXOZjsQSEcktYiffFwA8rQUoNK/u0a Q1tc6vtpXZ2r20LzzBNVuRiC0Qv5M8Q8u8ntiL6RvlY+rK5Hy0NEV0hrjYxnUpVw 2HysGlEAcoIEwZaV0Jj1j0ocB6feKGAuiHx1Bd0eSO9ytsgpyyUEqK/S8l470fKe rmxM5ppzxHogfTN9bVF9sMh+G8qz9sCqj0YH+oJEBVqvovx/7bR3nEbYKwTFIe7W CK2SsnszLnllTgTTfwfRDzYkYKPaW/SEko+4qnyBW9KJQZ976uaSbw3NQIk1r4OE vwUDHfpPnPqC5Te4HTX2ksP6cjIAaOQ= -----END CERTIFICATE-----Generated at Thu Mar 26 07:34:45 2026 by rpki-client