$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/232df44e-b887-3f97-af2f-cc7a9b0db57e.roa File: 232df44e-b887-3f97-af2f-cc7a9b0db57e.roa (raw, json) Hash identifier: BlwNkrctxzLW+Ahfib+JVQ5K4ODmXlwhci+sdOg35gk= Subject key identifier: C3:95:94:73:B6:80:66:A3:16:54:37:F5:31:A8:DC:1E:9F:FE:81:5D Certificate issuer: /CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7 Certificate serial: 010D0C9F4328584D143D18C6DFF1920722DFAE40 Authority key identifier: F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/232df44e-b887-3f97-af2f-cc7a9b0db57e.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 6315 IP address blocks: 198.60.109.0/24 maxlen: 24 2607:24c0:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:18:c6:df:f1:92:07:22:df:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=7e19810d-2777-43db-bf35-c456e28a462a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3a:c7:ee:f3:a4:2e:29:c1:7a:67:f4:e9:37: 9a:2d:ee:4f:ba:7b:71:f8:98:b9:6f:f4:16:23:de: 38:0a:ce:d4:1b:5b:a2:b2:44:19:b4:ef:4d:23:16: fe:76:30:0b:df:59:af:d6:d6:5d:a5:9a:6b:34:1b: c1:0c:2d:14:1b:79:30:05:e6:ba:bf:3b:a4:5f:d2: f9:45:17:d8:d6:e8:fc:07:4e:0b:87:53:f6:6a:8b: ac:ff:93:66:98:75:b6:6e:0c:67:00:fd:d0:b1:f9: 39:d9:5c:ca:45:d0:0d:39:2a:6a:74:67:23:02:6e: 8c:d3:67:d4:df:86:52:82:a1:4f:4c:ce:c6:fe:fc: af:cb:60:a3:3d:ba:66:1a:38:9b:be:56:83:36:ae: 06:3a:29:e4:dc:63:82:d7:ed:79:45:1f:4c:b3:b2: 9a:c9:6d:47:c0:04:83:d7:05:68:1f:4a:57:e2:7e: 73:bb:ed:75:33:54:63:ac:21:af:e2:39:b9:a5:2e: f8:c5:ad:ee:81:ae:01:01:c9:91:88:7a:3f:6e:90: e4:a4:0e:c1:fc:b9:01:7c:0f:c0:ca:a5:7f:c3:1e: 7b:3c:82:84:51:e1:2f:61:37:cf:70:48:d9:4b:95: 13:2f:c4:76:6e:4f:e3:0b:3f:4d:33:67:1a:09:cf: 87:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:95:94:73:B6:80:66:A3:16:54:37:F5:31:A8:DC:1E:9F:FE:81:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/232df44e-b887-3f97-af2f-cc7a9b0db57e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl X509v3 Authority Key Identifier: keyid:F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer sbgp-ipAddrBlock: critical IPv4: 198.60.109.0/24 IPv6: 2607:24c0:2000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:12:d1:28:36:62:2a:66:56:3d:26:e1:9f:1a:88:4a:f7:1b: 51:44:b7:f7:fe:34:7d:a5:48:a4:03:23:1c:fa:64:ca:16:3a: 6c:e8:88:97:98:f4:98:dd:ec:ae:44:c7:62:da:4f:f4:b8:7f: a7:e6:4c:7b:e0:69:ae:82:bd:3a:10:44:d9:98:02:81:ff:c8: b9:8d:71:d5:09:db:3e:75:e4:63:f3:ad:a3:6f:d7:8d:54:a7: d4:94:ac:87:2a:d5:db:54:2d:cd:e4:27:7b:57:7e:b7:fa:a8: ad:3a:79:71:eb:28:1d:88:b8:db:93:0f:c7:0a:59:6b:a9:fb: a7:d5:1b:ba:ab:6b:5d:cd:7f:75:85:bf:df:9e:ba:91:6a:a5: a8:63:ee:77:d6:96:63:12:ef:49:4e:d6:5c:9d:93:86:66:e7: 2f:1c:ae:ca:de:6a:9c:a7:95:d9:6c:af:82:06:e9:2f:fd:e5: 47:70:f7:25:c5:97:9f:c7:a9:d0:bf:b9:01:22:64:f4:aa:6e: 4e:6c:06:65:62:02:e1:85:c3:63:23:4b:97:de:19:3f:29:41: 87:c8:7c:fb:bf:c5:4a:a5:b5:7a:5c:1a:2b:e4:b2:c1:88:b3: 80:70:cf:a8:22:44:45:25:53:49:c4:09:59:06:bc:65:67:ac: b1:b7:0e:46 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE0UPRjG3/GSByLfrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGZlNzgwNGYtZjE2YS00Zjc4LTk5NzktNmE4ZDUwOTll NWU3MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk N2UxOTgxMGQtMjc3Ny00M2RiLWJmMzUtYzQ1NmUyOGE0NjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjrH7vOkLinBemf06TeaLe5Puntx+Ji5b/QW I944Cs7UG1uiskQZtO9NIxb+djAL31mv1tZdpZprNBvBDC0UG3kwBea6vzukX9L5 RRfY1uj8B04Lh1P2aous/5NmmHW2bgxnAP3Qsfk52VzKRdANOSpqdGcjAm6M02fU 34ZSgqFPTM7G/vyvy2CjPbpmGjibvlaDNq4GOink3GOC1+15RR9Ms7KayW1HwASD 1wVoH0pX4n5zu+11M1RjrCGv4jm5pS74xa3uga4BAcmRiHo/bpDkpA7B/LkBfA/A yqV/wx57PIKEUeEvYTfPcEjZS5UTL8R2bk/jCz9NM2caCc+HWQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFMOVlHO2gGajFlQ39TGo3B6f/oFdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wZmU3 ODA0Zi1mMTZhLTRmNzgtOTk3OS02YThkNTA5OWU1ZTcvMjMyZGY0NGUtYjg4Ny0z Zjk3LWFmMmYtY2M3YTliMGRiNTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGZlNzgwNGYtZjE2YS00Zjc4LTk5 NzktNmE4ZDUwOTllNWU3LzBmZTc4MDRmLWYxNmEtNGY3OC05OTc5LTZhOGQ1MDk5 ZTVlNy5jcmwwHwYDVR0jBBgwFoAU+VXAQ4RRLwbPOrS6kfJqw02k5GgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wZmU3ODA0Zi1mMTZhLTRmNzgtOTk3OS02YThk NTA5OWU1ZTcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAxjxtMA4E AgACMAgDBgQmByTAIDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBFEtEoNmIqZlY9JuGfGohK9xtRRLf3/jR9 pUikAyMc+mTKFjps6IiXmPSY3eyuRMdi2k/0uH+n5kx74Gmugr06EETZmAKB/8i5 jXHVCds+deRj862jb9eNVKfUlKyHKtXbVC3N5Cd7V363+qitOnlx6ygdiLjbkw/H Cllrqfun1Ru6q2tdzX91hb/fnrqRaqWoY+531pZjEu9JTtZcnZOGZucvHK7K3mqc p5XZbK+CBukv/eVHcPclxZefx6nQv7kBImT0qm5ObAZlYgLhhcNjI0uX3hk/KUGH yHz7v8VKpbV6XBor5LLBiLOAcM+oIkRFJVNJxAlZBrxlZ6yxtw5G -----END CERTIFICATE-----Generated at Thu Mar 26 15:07:34 2026 by rpki-client