$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1043217-41b2-4089-81fc-42bf08d56223/2effcdd4-94de-32b5-bb51-370f1ef05c54.roa File: 2effcdd4-94de-32b5-bb51-370f1ef05c54.roa (raw, json) Hash identifier: fGpiWEX8JHyZ1Lk2AjEBTvHOY5SV7/ErNf05tCoJxTM= Subject key identifier: 48:B9:2D:A0:A5:68:48:1D:77:D4:54:D7:F0:91:30:7B:F2:54:F9:79 Certificate issuer: /CN=d1043217-41b2-4089-81fc-42bf08d56223 Certificate serial: 010D0C9F4328584D1B19E49F327FDDB0F30E8180 Authority key identifier: F4:14:AD:6B:33:7F:59:4C:9F:0D:B0:10:E0:A9:A9:C3:FE:96:73:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1043217-41b2-4089-81fc-42bf08d56223.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1043217-41b2-4089-81fc-42bf08d56223/2effcdd4-94de-32b5-bb51-370f1ef05c54.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 401798 IP address blocks: 199.241.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1043217-41b2-4089-81fc-42bf08d56223/d1043217-41b2-4089-81fc-42bf08d56223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1043217-41b2-4089-81fc-42bf08d56223/d1043217-41b2-4089-81fc-42bf08d56223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1043217-41b2-4089-81fc-42bf08d56223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:19:e4:9f:32:7f:dd:b0:f3:0e:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1043217-41b2-4089-81fc-42bf08d56223 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=e0f73d1e-4a85-4257-acba-f16697735d54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7f:2f:0c:86:f5:94:e9:4d:d3:23:f8:91:04: 78:ec:50:06:6f:17:99:07:16:d5:e7:17:a3:3e:2d: c3:e9:95:75:40:c7:63:07:01:2d:f2:a5:85:3b:fa: 4e:fb:76:a1:e3:03:e3:e5:fc:1a:5b:e4:10:2c:9b: 09:9a:54:23:ab:1e:be:c5:27:49:a5:1a:40:e1:e7: ac:d8:b4:df:e0:4a:aa:f1:cc:b1:ca:50:74:0a:b0: 88:6f:da:3e:60:cf:2b:da:56:24:d1:1e:6c:18:5b: 92:ae:ff:52:15:79:7b:60:0b:0f:4a:70:d2:ca:db: 74:f8:81:af:15:26:37:7a:61:73:d0:64:7f:06:41: 85:21:6a:1b:7c:b6:25:90:55:67:3b:aa:10:f9:ea: 64:6e:1b:7d:b0:07:07:9a:d9:4d:02:df:54:f1:56: 64:f9:55:09:37:2e:87:a9:a3:95:2d:c0:aa:4c:f4: ff:f9:a2:46:13:61:50:8d:71:96:03:b3:c2:be:ec: 0b:4d:6f:4d:4f:1e:e9:14:fe:9e:51:65:eb:50:0d: bb:5e:86:bf:8c:2a:41:29:00:f9:ce:75:0d:5f:4f: b1:7f:ac:15:2d:b1:02:a5:54:22:c0:b2:e9:e0:94: c6:42:02:98:8a:3b:f1:08:3c:8c:a5:0c:cb:25:73: 76:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B9:2D:A0:A5:68:48:1D:77:D4:54:D7:F0:91:30:7B:F2:54:F9:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1043217-41b2-4089-81fc-42bf08d56223/2effcdd4-94de-32b5-bb51-370f1ef05c54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1043217-41b2-4089-81fc-42bf08d56223/d1043217-41b2-4089-81fc-42bf08d56223.crl X509v3 Authority Key Identifier: keyid:F4:14:AD:6B:33:7F:59:4C:9F:0D:B0:10:E0:A9:A9:C3:FE:96:73:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1043217-41b2-4089-81fc-42bf08d56223.cer sbgp-ipAddrBlock: critical IPv4: 199.241.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:9d:f8:4e:8a:a1:2b:17:4d:b7:73:cd:b8:a8:43:8a:48:e0: 78:f0:44:1c:de:c8:80:f9:31:ae:5b:41:a7:5b:e9:8c:bf:fd: 16:92:6e:34:50:9f:f0:fe:aa:15:61:99:5a:26:f8:f1:f5:a3: d8:cb:40:9e:3b:b1:5f:3a:6a:ea:f5:f5:0e:24:45:a3:1b:8f: a9:cc:4d:a5:d0:39:f3:2f:9f:d0:68:55:f6:14:b4:9b:77:31: 50:9c:a4:b1:f6:7b:86:81:48:08:4b:b9:d6:36:54:d6:1b:60: 05:8b:d6:ba:8b:30:8c:3f:88:45:6d:4a:6b:37:55:ac:1c:59: 1e:6d:9b:f2:a2:54:7a:d6:2a:4d:65:f0:69:5d:78:ac:b0:23: 33:88:59:a3:37:f3:ba:b0:d4:31:99:f0:78:eb:c4:4b:be:57: 39:f5:4d:16:8f:0b:dd:87:51:36:31:01:f2:07:aa:42:a2:3c: f0:05:19:41:70:a4:4b:41:9f:d7:bb:9e:58:7e:b0:77:67:a2: f0:99:97:5a:4e:bf:ad:0a:2a:7f:57:d2:af:6e:4f:4b:be:e7: 27:43:a8:9f:6d:4e:f2:ae:7c:24:ff:fc:6d:b6:cd:ae:11:98: 15:94:e3:a3:5a:63:9f:9b:6e:2f:d0:a9:b0:0e:11:d7:99:c3: fa:8a:37:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGeSfMn/dsPMOgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDEwNDMyMTctNDFiMi00MDg5LTgxZmMtNDJiZjA4ZDU2 MjIzMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk ZTBmNzNkMWUtNGE4NS00MjU3LWFjYmEtZjE2Njk3NzM1ZDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmH8vDIb1lOlN0yP4kQR47FAGbxeZBxbV5xej Pi3D6ZV1QMdjBwEt8qWFO/pO+3ah4wPj5fwaW+QQLJsJmlQjqx6+xSdJpRpA4ees 2LTf4Eqq8cyxylB0CrCIb9o+YM8r2lYk0R5sGFuSrv9SFXl7YAsPSnDSytt0+IGv FSY3emFz0GR/BkGFIWobfLYlkFVnO6oQ+epkbht9sAcHmtlNAt9U8VZk+VUJNy6H qaOVLcCqTPT/+aJGE2FQjXGWA7PCvuwLTW9NTx7pFP6eUWXrUA27Xoa/jCpBKQD5 znUNX0+xf6wVLbECpVQiwLLp4JTGQgKYijvxCDyMpQzLJXN2TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEi5LaClaEgdd9RU1/CRMHvyVPl5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kMTA0 MzIxNy00MWIyLTQwODktODFmYy00MmJmMDhkNTYyMjMvMmVmZmNkZDQtOTRkZS0z MmI1LWJiNTEtMzcwZjFlZjA1YzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZDEwNDMyMTctNDFiMi00MDg5LTgx ZmMtNDJiZjA4ZDU2MjIzL2QxMDQzMjE3LTQxYjItNDA4OS04MWZjLTQyYmYwOGQ1 NjIyMy5jcmwwHwYDVR0jBBgwFoAU9BStazN/WUyfDbAQ4Kmpw/6Wc5MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kMTA0MzIxNy00MWIyLTQwODktODFmYy00MmJm MDhkNTYyMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/GPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEad+E6KoSsXTbdzzbioQ4pI4HjwRBzeyID5Ma5bQadb6Yy//RaSbjRQ n/D+qhVhmVom+PH1o9jLQJ47sV86aur19Q4kRaMbj6nMTaXQOfMvn9BoVfYUtJt3 MVCcpLH2e4aBSAhLudY2VNYbYAWL1rqLMIw/iEVtSms3VawcWR5tm/KiVHrWKk1l 8GldeKywIzOIWaM387qw1DGZ8HjrxEu+Vzn1TRaPC92HUTYxAfIHqkKiPPAFGUFw pEtBn9e7nlh+sHdnovCZl1pOv60KKn9X0q9uT0u+5ydDqJ9tTvKufCT//G22za4R mBWU46NaY5+bbi/QqbAOEdeZw/qKN/o= -----END CERTIFICATE-----Generated at Sat Mar 28 19:03:12 2026 by rpki-client