$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/1cef60a4-4433-3018-a7df-e9e375b4eade.roa File: 1cef60a4-4433-3018-a7df-e9e375b4eade.roa (raw, json) Hash identifier: IE/RcNTg58A/doN6kF88/Eq3NEBSTKW46EHMr9bI5r4= Subject key identifier: 25:B4:3E:79:9C:A4:23:1A:4C:05:4F:03:CD:B4:2A:B7:7E:25:F7:1B Certificate issuer: /CN=329c727b-a867-426a-ad3d-167aed3107dd Certificate serial: 010D0C9F4328584DA8685750059088FACB4C8580 Authority key identifier: 3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/1cef60a4-4433-3018-a7df-e9e375b4eade.roa Signing time: Tue 28 Apr 2026 15:47:37 +0000 ROA not before: Tue 28 Apr 2026 15:47:37 +0000 ROA not after: Mon 27 Jul 2026 15:47:37 +0000 asID: 6327 IP address blocks: 24.80.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:68:57:50:05:90:88:fa:cb:4c:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=329c727b-a867-426a-ad3d-167aed3107dd Validity Not Before: Apr 28 15:47:37 2026 GMT Not After : Jul 27 15:47:37 2026 GMT Subject: CN=3f5d7ecd-e95c-47f7-adfb-1158534bf90d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:5c:1c:6a:7f:8d:0b:73:c8:8e:54:74:a4:76: 29:01:9f:97:4a:3b:41:56:e0:c7:e9:da:da:c5:2f: 3f:d9:8e:64:71:89:63:a6:08:4f:66:7c:c7:a1:fd: 45:8a:a3:6f:b1:0d:b2:26:7b:a6:75:cb:82:08:11: cf:e5:c6:8b:31:e0:8f:49:9e:63:31:03:4a:11:77: 55:8f:09:e9:b3:23:f4:a1:02:e8:18:36:fc:be:81: db:bf:0f:ed:0b:79:f1:b7:95:93:bd:47:d1:03:2f: 17:ba:89:f6:78:58:41:cc:db:67:ca:4c:b8:d4:42: 44:f6:6a:82:9f:a5:ae:3d:db:f2:17:9f:21:bf:4f: f2:a3:04:a2:c8:1c:45:b7:fa:23:fb:78:98:be:3a: 2b:e2:0c:04:b8:35:28:40:a1:3a:50:da:97:1d:82: b6:0d:0a:e5:62:d7:da:ab:40:7b:9c:0f:ae:1b:dc: 3a:d7:b4:12:fb:49:b0:8a:e1:61:8a:76:6d:3b:33: 2e:24:cd:cf:0c:36:4f:48:3c:c4:98:5b:e6:74:87: a5:7c:17:a4:0e:52:0d:1d:b7:c0:18:36:d6:05:df: ab:9c:64:3d:22:0d:7b:5b:7e:77:92:65:37:db:56: 45:1f:3d:b7:18:a4:bc:c9:9a:36:ab:8d:15:c8:aa: 84:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B4:3E:79:9C:A4:23:1A:4C:05:4F:03:CD:B4:2A:B7:7E:25:F7:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/1cef60a4-4433-3018-a7df-e9e375b4eade.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl X509v3 Authority Key Identifier: keyid:3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer sbgp-ipAddrBlock: critical IPv4: 24.80.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:e5:77:0e:35:c6:be:1c:a5:b0:b7:2b:d7:09:d8:41:b1:f3: e7:55:88:d7:bd:2a:fb:ec:84:70:c2:a7:a9:38:3d:a0:d4:0f: 1e:8c:49:25:7e:a3:96:e3:36:6f:f4:d6:94:c5:b8:34:f9:3e: 00:83:c7:db:aa:f0:85:fa:8d:26:00:7c:ad:72:e7:23:34:6e: a5:87:90:b2:b7:65:e6:bd:4b:c5:6b:f8:a0:0a:71:ca:0f:df: 1c:7f:98:8e:56:70:0c:40:f8:e5:18:90:6e:8d:99:6b:5f:72: 3e:92:fe:8a:05:09:6d:6b:10:39:c5:86:99:c6:81:83:a9:90: d7:2e:09:4d:50:51:5f:ca:30:13:90:42:06:6e:92:06:70:e9: 22:6a:38:db:c4:08:3d:10:ac:56:e6:d1:37:3f:b6:d2:9a:d3: 03:4c:77:44:e5:0f:cf:c6:ea:3a:9e:63:e1:dd:e9:bd:0c:79: c8:b9:76:9f:dc:ff:96:2a:97:6c:0c:8e:37:32:94:0f:08:be: a9:9e:84:47:cc:f9:8e:78:ad:db:d1:83:e1:07:2c:92:ed:5a: 3c:10:a4:f1:55:09:00:68:05:b1:9a:60:1c:df:60:33:2c:db: d7:48:91:11:aa:24:12:6c:00:1c:79:67:7e:92:40:43:cd:00: ff:20:c4:23 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE2oaFdQBZCI+stMhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI5YzcyN2ItYTg2Ny00MjZhLWFkM2QtMTY3YWVkMzEw N2RkMB4XDTI2MDQyODE1NDczN1oXDTI2MDcyNzE1NDczN1owLzEtMCsGA1UEAxMk M2Y1ZDdlY2QtZTk1Yy00N2Y3LWFkZmItMTE1ODUzNGJmOTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFwcan+NC3PIjlR0pHYpAZ+XSjtBVuDH6dra xS8/2Y5kcYljpghPZnzHof1FiqNvsQ2yJnumdcuCCBHP5caLMeCPSZ5jMQNKEXdV jwnpsyP0oQLoGDb8voHbvw/tC3nxt5WTvUfRAy8Xuon2eFhBzNtnyky41EJE9mqC n6WuPdvyF58hv0/yowSiyBxFt/oj+3iYvjor4gwEuDUoQKE6UNqXHYK2DQrlYtfa q0B7nA+uG9w617QS+0mwiuFhinZtOzMuJM3PDDZPSDzEmFvmdIelfBekDlINHbfA GDbWBd+rnGQ9Ig17W353kmU321ZFHz23GKS8yZo2q40VyKqE5wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCW0PnmcpCMaTAVPA820Krd+JfcbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjlj NzI3Yi1hODY3LTQyNmEtYWQzZC0xNjdhZWQzMTA3ZGQvMWNlZjYwYTQtNDQzMy0z MDE4LWE3ZGYtZTllMzc1YjRlYWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzI5YzcyN2ItYTg2Ny00MjZhLWFk M2QtMTY3YWVkMzEwN2RkLzMyOWM3MjdiLWE4NjctNDI2YS1hZDNkLTE2N2FlZDMx MDdkZC5jcmwwHwYDVR0jBBgwFoAUPZZSNdHOoxLv1MM8HGrn4fAf9SIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjljNzI3Yi1hODY3LTQyNmEtYWQzZC0xNjdh ZWQzMTA3ZGQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAGFAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAbuV3DjXGvhylsLcr1wnYQbHz51WI170q++yEcMKnqTg9oNQPHoxJJX6j luM2b/TWlMW4NPk+AIPH26rwhfqNJgB8rXLnIzRupYeQsrdl5r1LxWv4oApxyg/f HH+YjlZwDED45RiQbo2Za19yPpL+igUJbWsQOcWGmcaBg6mQ1y4JTVBRX8owE5BC Bm6SBnDpImo428QIPRCsVubRNz+20prTA0x3ROUPz8bqOp5j4d3pvQx5yLl2n9z/ liqXbAyONzKUDwi+qZ6ER8z5jnit29GD4Qcsku1aPBCk8VUJAGgFsZpgHN9gMyzb 10iREaokEmwAHHlnfpJAQ80A/yDEIw== -----END CERTIFICATE-----Generated at Wed May 13 13:31:34 2026 by rpki-client