$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/ce24c538-2f55-371a-a4e4-abc029cd8b1b.roa File: ce24c538-2f55-371a-a4e4-abc029cd8b1b.roa (raw, json) Hash identifier: ooYtoHr32Fah3s2t1unAaD9UmamBFHcPS7xqrf8pOaw= Subject key identifier: 08:C6:01:FA:64:F1:C0:64:75:F5:D5:40:DA:A5:36:53:ED:A1:41:4F Certificate issuer: /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234 Certificate serial: 010D0C9F4328584D905AA407A0921F97E180D900 Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/ce24c538-2f55-371a-a4e4-abc029cd8b1b.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 15296 IP address blocks: 199.216.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:a4:07:a0:92:1f:97:e1:80:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234 Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=2e72a75f-330d-48d8-ab1a-8de698c6dfd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:01:6c:9f:d7:d2:44:3d:c1:70:28:f8:27:74: b1:11:2d:d5:05:30:5e:97:40:61:93:09:fe:35:02: 7b:15:59:f3:ba:bd:27:8c:6e:e1:fb:a9:5b:47:47: 95:ce:59:51:85:0b:fc:db:4f:73:32:58:77:6c:09: 94:fe:e3:68:df:a1:7d:8f:d1:c3:c3:52:9c:bb:7a: e1:81:d5:c6:12:ed:bf:cc:4f:8d:a5:33:31:c1:f6: ff:90:27:ae:35:ff:c1:3d:08:d5:63:5b:8f:f2:31: ea:ff:59:ee:01:b5:cd:6c:89:08:9d:49:4e:8c:7d: 12:24:5d:d7:bc:bd:43:51:d3:97:1c:8c:08:09:da: 49:22:39:aa:f1:69:fe:9a:b9:0d:9a:db:c4:1e:0c: b3:68:3b:e7:84:74:e3:a5:2e:18:02:ee:a0:7f:b2: bd:0e:af:9d:c2:30:2b:41:3a:cb:f4:66:b2:39:a2: 9f:c0:63:87:73:53:a2:e7:0a:ab:b6:4c:8e:fa:96: 85:14:f5:7e:78:3b:07:29:82:56:bb:ff:57:f7:8f: c4:e0:0e:07:3d:56:52:47:27:4a:ba:05:c0:39:02: af:46:eb:6f:1e:22:60:13:73:79:e5:d8:96:05:2b: bd:f0:97:80:38:d7:96:e0:ca:3d:18:ac:ee:31:5a: 98:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C6:01:FA:64:F1:C0:64:75:F5:D5:40:DA:A5:36:53:ED:A1:41:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/ce24c538-2f55-371a-a4e4-abc029cd8b1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl X509v3 Authority Key Identifier: keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer sbgp-ipAddrBlock: critical IPv4: 199.216.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:55:f0:64:95:30:7e:c6:e6:ea:08:0d:74:6a:85:4c:0a:07: 3d:c3:8a:6d:82:98:1d:5a:fd:6d:cd:28:a6:3b:08:21:ef:6c: 5b:5f:c6:e2:49:85:7a:be:59:7b:92:89:ea:11:ff:a1:e7:d2: e7:02:e6:8d:ee:ae:7b:8a:99:61:c5:44:9a:fd:a8:1c:81:8c: 5e:c2:f7:9a:4e:cc:46:22:3c:9a:49:1b:16:a1:59:22:ff:94: 2b:d5:0b:c8:e7:0f:95:b9:aa:25:24:61:46:97:33:71:c1:b4: 83:00:81:fd:5f:bf:49:c2:a1:d6:8c:3c:2a:7e:4a:06:34:c2: cf:93:8b:99:b7:c8:41:92:67:e4:f9:98:0a:6a:dd:c0:16:5f: 69:cf:bb:10:56:4f:98:12:4a:26:4a:d3:d6:eb:62:65:f0:c3: cb:1d:8e:9e:c0:34:f3:b0:a2:38:76:27:33:36:82:23:23:6b: 01:d9:7e:00:ab:bb:05:df:7a:f5:38:c9:64:75:6d:68:9a:4e: c4:a1:8e:b6:94:22:cf:9e:35:00:3e:4d:d9:50:7d:b0:de:e5: 0f:2b:6b:41:b8:85:c6:a9:ab:6d:fc:7e:28:88:85:e6:a9:6e: 4b:c6:42:c4:de:8c:ac:f6:39:c3:a7:d7:8a:ad:76:f9:79:dc: de:99:51:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWqQHoJIfl+GA2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFmM2M3YzQtYTc3MS00N2E5LWE0ZTgtMGFhZTdkZjdi MjM0MB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk MmU3MmE3NWYtMzMwZC00OGQ4LWFiMWEtOGRlNjk4YzZkZmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQFsn9fSRD3BcCj4J3SxES3VBTBel0Bhkwn+ NQJ7FVnzur0njG7h+6lbR0eVzllRhQv8209zMlh3bAmU/uNo36F9j9HDw1Kcu3rh gdXGEu2/zE+NpTMxwfb/kCeuNf/BPQjVY1uP8jHq/1nuAbXNbIkInUlOjH0SJF3X vL1DUdOXHIwICdpJIjmq8Wn+mrkNmtvEHgyzaDvnhHTjpS4YAu6gf7K9Dq+dwjAr QTrL9GayOaKfwGOHc1Oi5wqrtkyO+paFFPV+eDsHKYJWu/9X94/E4A4HPVZSRydK ugXAOQKvRutvHiJgE3N55diWBSu98JeAONeW4Mo9GKzuMVqYTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjGAfpk8cBkdfXVQNqlNlPtoUFPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYz YzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFlN2RmN2IyMzQvY2UyNGM1MzgtMmY1NS0z NzFhLWE0ZTQtYWJjMDI5Y2Q4YjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjFmM2M3YzQtYTc3MS00N2E5LWE0 ZTgtMGFhZTdkZjdiMjM0LzYxZjNjN2M0LWE3NzEtNDdhOS1hNGU4LTBhYWU3ZGY3 YjIzNC5jcmwwHwYDVR0jBBgwFoAUu4hNX94f3LZip94TiP38oD8P+I4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYzYzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFl N2RmN2IyMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9glMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlV8GSVMH7G5uoIDXRqhUwKBz3Dim2CmB1a/W3NKKY7CCHvbFtfxuJJ hXq+WXuSieoR/6Hn0ucC5o3urnuKmWHFRJr9qByBjF7C95pOzEYiPJpJGxahWSL/ lCvVC8jnD5W5qiUkYUaXM3HBtIMAgf1fv0nCodaMPCp+SgY0ws+Ti5m3yEGSZ+T5 mApq3cAWX2nPuxBWT5gSSiZK09brYmXww8sdjp7ANPOwojh2JzM2giMjawHZfgCr uwXfevU4yWR1bWiaTsShjraUIs+eNQA+TdlQfbDe5Q8ra0G4hcapq238fiiIheap bkvGQsTejKz2OcOn14qtdvl53N6ZUfo= -----END CERTIFICATE-----Generated at Wed May 13 07:43:18 2026 by rpki-client