$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/cfaa84af-e254-33cf-a7da-b2a75f0143f6.roa File: cfaa84af-e254-33cf-a7da-b2a75f0143f6.roa (raw, json) Hash identifier: g0kvbw9NA4ha96NaNPqtoa1aIFFzBp1bXX6ogXJuX7k= Subject key identifier: 23:B2:22:40:17:16:32:7E:99:24:8A:80:0F:C5:59:D9:25:BD:C1:43 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584D2BD9FEF3F2C4EECAAD9F5AA8 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/cfaa84af-e254-33cf-a7da-b2a75f0143f6.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 10753 IP address blocks: 200.229.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:d9:fe:f3:f2:c4:ee:ca:ad:9f:5a:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=df33f7a7-5f02-48d5-bc05-78f73bd52a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a7:b1:d3:30:7e:df:7d:0f:d4:ac:6a:63:86: fe:54:22:13:96:e7:c3:5d:60:eb:aa:2a:0d:69:35: 02:14:88:fb:e6:b9:e2:76:9a:61:83:f2:46:5c:0d: ca:48:44:65:3a:67:26:69:a1:39:65:69:f3:2d:b6: f7:f2:c9:18:05:b6:ec:cb:8c:11:74:46:11:98:11: 95:a0:d8:6f:08:99:76:de:3a:ec:20:43:92:b9:c7: 77:cf:54:72:d4:f5:37:37:48:57:e8:ae:6f:85:c3: 99:16:d4:16:8e:04:79:d7:3b:a9:a0:08:97:0e:68: e6:d8:81:7f:6c:af:2c:f8:3e:44:1e:ae:74:25:1d: 74:39:21:88:28:49:db:a5:2c:d9:8f:35:eb:8b:89: eb:0f:32:27:4e:da:35:ae:94:a1:aa:46:a3:a1:37: 0a:dc:8f:ca:b5:9d:67:63:8a:25:34:8b:06:0b:c9: 8e:f4:a3:a6:0b:61:03:0d:5a:b2:d9:95:bb:4e:b4: 1f:1d:1b:63:a2:3f:ea:79:76:c9:1c:81:fb:a6:96: 20:e1:9b:26:02:7d:b1:8e:9c:ac:cd:37:73:9f:57: db:d9:77:d1:54:28:94:49:8b:93:7b:87:e5:48:49: 36:5e:1a:9a:0a:57:18:57:74:c0:08:f6:ea:e4:76: 3c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B2:22:40:17:16:32:7E:99:24:8A:80:0F:C5:59:D9:25:BD:C1:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/cfaa84af-e254-33cf-a7da-b2a75f0143f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 200.229.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:42:3c:b2:81:96:b0:55:27:f2:59:32:e1:6d:a9:2e:23:c1: c0:71:73:ef:4f:4b:d0:36:ee:73:45:a2:de:01:d5:f7:19:11: 45:e8:39:8c:78:af:c6:71:58:46:0e:62:13:4d:c5:73:20:04: ae:62:33:f2:d9:fd:b7:b1:be:2f:9d:9e:04:b0:68:7b:5e:be: ca:89:79:e4:5d:2b:6b:ea:81:48:53:76:82:ae:e4:1d:2c:c7: eb:9c:b9:43:8b:4e:ef:6a:0f:a0:e9:68:01:b6:64:40:bb:7f: f9:16:70:53:ed:5f:67:20:7a:36:1f:b5:30:ce:1c:b7:f0:31: 6a:2d:2d:69:34:99:66:64:fd:33:64:83:59:d4:01:ee:5c:35: 9f:a0:db:a1:b7:33:6b:8e:be:e1:14:41:95:93:c7:19:43:a5: 11:3e:ed:74:dc:58:97:8f:06:af:7e:93:bf:64:dc:65:28:8a: 40:38:84:e6:11:9e:a2:5b:b1:3f:e7:80:72:ab:fe:eb:35:ee: 52:1a:0e:b5:c4:ac:c5:3e:fe:7d:4f:5c:49:37:d0:f3:bf:5e: d4:28:c7:bf:d0:87:5d:b6:4f:0e:d4:13:b1:c0:b2:9e:d6:47: ab:21:68:b6:87:5e:df:16:76:73:94:e0:d6:9c:68:f7:f1:65: 66:83:8a:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2f7z8sTuyq2fWqgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk ZGYzM2Y3YTctNWYwMi00OGQ1LWJjMDUtNzhmNzNiZDUyYTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraex0zB+330P1KxqY4b+VCITlufDXWDrqioN aTUCFIj75rnidpphg/JGXA3KSERlOmcmaaE5ZWnzLbb38skYBbbsy4wRdEYRmBGV oNhvCJl23jrsIEOSucd3z1Ry1PU3N0hX6K5vhcOZFtQWjgR51zupoAiXDmjm2IF/ bK8s+D5EHq50JR10OSGIKEnbpSzZjzXri4nrDzInTto1rpShqkajoTcK3I/KtZ1n Y4olNIsGC8mO9KOmC2EDDVqy2ZW7TrQfHRtjoj/qeXbJHIH7ppYg4ZsmAn2xjpys zTdzn1fb2XfRVCiUSYuTe4flSEk2XhqaClcYV3TACPbq5HY8MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOyIkAXFjJ+mSSKgA/FWdklvcFDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvY2ZhYTg0YWYtZTI1NC0z M2NmLWE3ZGEtYjJhNzVmMDE0M2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyOUfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZCPLKBlrBVJ/JZMuFtqS4jwcBxc+9PS9A27nNFot4B1fcZEUXoOYx4 r8ZxWEYOYhNNxXMgBK5iM/LZ/bexvi+dngSwaHtevsqJeeRdK2vqgUhTdoKu5B0s x+ucuUOLTu9qD6DpaAG2ZEC7f/kWcFPtX2cgejYftTDOHLfwMWotLWk0mWZk/TNk g1nUAe5cNZ+g26G3M2uOvuEUQZWTxxlDpRE+7XTcWJePBq9+k79k3GUoikA4hOYR nqJbsT/ngHKr/us17lIaDrXErMU+/n1PXEk30PO/XtQox7/Qh122Tw7UE7HAsp7W R6shaLaHXt8WdnOU4NacaPfxZWaDiuM= -----END CERTIFICATE-----Generated at Thu Mar 26 07:21:36 2026 by rpki-client