$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/cbd9f851-bfb9-3108-a03b-308ec49a3249.roa File: cbd9f851-bfb9-3108-a03b-308ec49a3249.roa (raw, json) Hash identifier: NxqEZIJYW7E8X5S1GHJn4XbW+sAoATzirmEzP2WXAc4= Subject key identifier: 70:0B:DE:85:2A:A8:62:7D:61:61:F8:17:F0:96:84:55:8F:D6:1A:E2 Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Certificate serial: 010D0C9F4328584D09125886BA94A3E1B8588680 Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/cbd9f851-bfb9-3108-a03b-308ec49a3249.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 400423 IP address blocks: 24.38.21.0/24 maxlen: 24 65.51.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:58:86:ba:94:a3:e1:b8:58:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=6d235457-1a07-4625-a496-7d4ce3f80395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:71:b6:6c:23:b5:e2:32:7b:bf:c1:2d:cd:6a: 0f:b6:04:69:af:41:b0:c5:19:21:a8:aa:30:42:6c: 66:cf:c7:fd:90:e5:da:bb:9e:e2:62:5a:ba:eb:9b: bc:23:58:db:2e:d8:a2:94:c9:5e:4a:a6:c3:6f:3c: 0a:b5:66:7f:32:1f:cb:ed:7e:0b:7d:ce:7a:95:06: c2:61:b8:6a:f4:bc:94:ca:64:f8:e0:0f:14:a1:6a: 91:de:84:8c:9a:1d:42:33:94:2d:5c:54:84:af:c1: dd:da:26:ce:86:ce:45:24:3c:f6:05:c0:c6:16:34: e8:8c:1b:67:ed:2e:38:f0:19:a4:6a:ba:0d:93:e1: e4:e1:cd:40:70:44:50:94:42:00:d9:8b:fe:4d:80: 23:65:13:15:86:f2:85:96:74:16:02:82:a7:9c:52: 54:ed:46:f0:a2:3f:3a:0a:81:50:de:f1:2a:da:8b: dc:ba:bd:3e:26:3b:84:1c:c4:2e:a1:ef:ce:df:33: c4:71:55:d3:b1:ff:30:fc:71:a1:16:0f:94:ed:fd: b5:55:48:b9:dc:7d:ae:7b:65:d3:30:18:1d:21:71: 6c:7a:d7:e9:81:e6:9a:1f:9c:e2:b2:05:73:a7:a8: 20:b2:56:79:64:2a:f4:89:8c:9d:bf:56:90:0c:1c: 37:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:0B:DE:85:2A:A8:62:7D:61:61:F8:17:F0:96:84:55:8F:D6:1A:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/cbd9f851-bfb9-3108-a03b-308ec49a3249.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl X509v3 Authority Key Identifier: keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer sbgp-ipAddrBlock: critical IPv4: 24.38.21.0/24 65.51.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:e7:9d:57:ba:9b:df:47:61:22:86:69:45:3a:18:fa:5f:d6: fd:b8:da:03:14:dc:2c:a4:7b:da:0f:69:6e:58:1d:bb:12:e3: e2:38:91:ce:c9:e3:ce:c6:6d:73:90:c7:5f:25:b3:a7:4b:42: c9:63:4a:74:ab:f3:79:88:2f:3a:71:e6:51:f3:a1:65:00:c2: a3:b1:e1:be:c6:79:9f:ba:0e:3b:ec:2f:10:18:02:d7:8f:e1: d0:b6:99:0e:e0:25:af:02:8e:d1:e6:af:71:5f:83:26:72:11: 85:03:84:d5:dd:a5:1e:6a:9f:70:4e:40:4f:18:71:40:13:a3: a0:6d:67:2e:03:cd:65:d8:e4:1e:2c:23:f2:bc:71:db:ae:fd: c4:ac:9f:4b:38:97:3c:eb:94:49:30:81:1f:1d:aa:39:dc:be: d4:fb:7b:ad:84:ea:8a:ba:6e:25:42:51:50:77:ad:3d:87:1f: 57:e3:cb:a7:57:06:81:32:19:22:57:d7:b4:2d:12:ea:17:8f: 39:e4:1e:bf:fa:76:e8:ee:cb:26:3a:8a:41:07:b4:20:5c:10: 50:71:18:41:92:72:7c:e8:92:f8:10:f4:f0:de:c3:a4:23:55: ba:43:fd:98:9c:5d:d8:ae:0e:4e:a9:11:4a:63:90:34:e5:a1: 33:42:81:ad -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0JEliGupSj4bhYhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh ZDE1MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk NmQyMzU0NTctMWEwNy00NjI1LWE0OTYtN2Q0Y2UzZjgwMzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXG2bCO14jJ7v8EtzWoPtgRpr0GwxRkhqKow Qmxmz8f9kOXau57iYlq665u8I1jbLtiilMleSqbDbzwKtWZ/Mh/L7X4Lfc56lQbC Ybhq9LyUymT44A8UoWqR3oSMmh1CM5QtXFSEr8Hd2ibOhs5FJDz2BcDGFjTojBtn 7S448BmkaroNk+Hk4c1AcERQlEIA2Yv+TYAjZRMVhvKFlnQWAoKnnFJU7Ubwoj86 CoFQ3vEq2ovcur0+JjuEHMQuoe/O3zPEcVXTsf8w/HGhFg+U7f21VUi53H2ue2XT MBgdIXFsetfpgeaaH5zisgVzp6ggslZ5ZCr0iYydv1aQDBw3VwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHAL3oUqqGJ9YWH4F/CWhFWP1hriMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4 YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvY2JkOWY4NTEtYmZiOS0z MTA4LWEwM2ItMzA4ZWM0OWEzMjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl OGEwMGFkMTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAGCYVAwQA QTNzMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAI7nnVe6m99HYSKGaUU6GPpf1v242gMU3Cyke9oPaW5YHbsS 4+I4kc7J487GbXOQx18ls6dLQsljSnSr83mILzpx5lHzoWUAwqOx4b7GeZ+6Djvs LxAYAteP4dC2mQ7gJa8CjtHmr3FfgyZyEYUDhNXdpR5qn3BOQE8YcUATo6BtZy4D zWXY5B4sI/K8cduu/cSsn0s4lzzrlEkwgR8dqjncvtT7e62E6oq6biVCUVB3rT2H H1fjy6dXBoEyGSJX17QtEuoXjznkHr/6dujuyyY6ikEHtCBcEFBxGEGScnzokvgQ 9PDew6QjVbpD/ZicXdiuDk6pEUpjkDTloTNCga0= -----END CERTIFICATE-----Generated at Thu Mar 26 19:25:32 2026 by rpki-client