$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/24c78a7d-3fc4-3ee2-a77f-02d8ffa1901e.roa File: 24c78a7d-3fc4-3ee2-a77f-02d8ffa1901e.roa (raw, json) Hash identifier: 35UPEdKI9VTH5wusGCsj0LcpqpjsVpQhYWkK0Pivp6w= Subject key identifier: CB:D1:E9:E4:1C:5F:38:82:FA:42:69:DE:A1:A7:B9:15:AA:DF:20:69 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584D2A74E1F10CCCBAF08B173500 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/24c78a7d-3fc4-3ee2-a77f-02d8ffa1901e.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 16433 IP address blocks: 147.92.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:e1:f1:0c:cc:ba:f0:8b:17:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=c7dd18b1-cd34-4b0f-9114-2a45dd7186fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d4:e4:48:b8:4b:02:9c:09:27:85:ac:c6:b6: ba:3e:a6:37:9f:05:13:98:ae:00:ea:a0:4b:42:49: 4a:6d:c6:89:be:38:0e:62:1d:88:83:64:03:d0:d3: 5b:e7:ed:04:72:30:7d:7c:89:ee:25:b8:ce:93:45: 1a:c5:ec:fe:07:35:b4:be:60:0c:b8:f2:6b:c2:65: 86:c2:62:5d:84:20:49:21:52:36:0f:07:4e:67:20: 31:da:4c:46:80:80:c2:33:54:4d:d7:aa:84:9f:23: 40:5a:9f:5a:a7:f7:b5:5d:10:02:54:76:3c:af:6c: 1c:63:79:ae:25:39:48:01:eb:8a:ea:63:93:e3:ae: bd:98:05:16:48:1b:81:71:db:a4:52:d6:c9:15:a8: 71:ae:e7:2c:63:64:d1:2d:c6:07:c3:80:51:bc:80: 99:de:df:e8:5a:fd:97:9f:8a:d6:7d:82:af:0d:b3: c7:39:b0:ed:75:24:8c:77:08:0a:de:86:38:8f:04: 31:59:0d:6f:50:f0:78:ab:98:f7:79:9d:da:d8:f5: f7:6a:4f:78:09:02:50:c4:2b:14:94:5a:df:ad:25: 14:37:a2:55:05:b8:e7:26:ce:c2:21:7e:3c:60:da: 89:80:d3:0c:2c:46:e5:26:75:37:ae:36:ed:6d:07: 86:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D1:E9:E4:1C:5F:38:82:FA:42:69:DE:A1:A7:B9:15:AA:DF:20:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/24c78a7d-3fc4-3ee2-a77f-02d8ffa1901e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 147.92.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:b3:20:e8:2b:98:c3:a6:1a:11:8a:fc:12:3b:4b:42:cc:e9: 3a:b4:2d:75:64:49:b2:d7:76:f4:75:f6:b1:46:b9:a0:97:96: 49:be:a6:90:95:3e:86:01:52:13:6f:c4:01:4d:81:ba:7b:9a: c9:6e:71:72:bc:3e:bd:77:7c:7b:c3:5c:5b:c4:e6:b4:24:78: a0:5d:1d:77:30:fd:24:ea:43:48:64:57:f5:1c:60:3e:5d:df: f1:85:27:82:7f:dd:33:52:c0:8d:0f:01:c0:87:2d:3f:dd:f8: af:7c:32:d6:75:1a:a0:05:f4:32:64:e5:ac:3d:37:e2:ed:de: fd:65:13:62:86:95:11:e9:94:dd:24:53:fe:51:e0:37:54:74: 29:ba:9a:47:e1:ce:8d:d6:d1:b1:d3:f5:0f:25:09:43:f5:1f: 3e:d0:00:76:c0:4e:b3:53:c0:dd:de:64:82:3e:1f:a2:df:6f: 72:42:3f:75:a3:e4:73:f7:d2:b1:63:31:c4:05:8b:09:30:60: 6d:99:7a:7a:65:33:7c:a7:58:5a:65:0d:b3:97:8a:5f:3f:28: 7a:55:2c:6d:de:78:a5:00:a3:33:42:b9:ac:3b:e1:79:46:97: 48:0c:9e:77:a2:d0:4e:32:01:b8:61:69:d9:83:2f:50:7a:59: de:4c:6e:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdOHxDMy68IsXNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk YzdkZDE4YjEtY2QzNC00YjBmLTkxMTQtMmE0NWRkNzE4NmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndTkSLhLApwJJ4Wsxra6PqY3nwUTmK4A6qBL QklKbcaJvjgOYh2Ig2QD0NNb5+0EcjB9fInuJbjOk0Uaxez+BzW0vmAMuPJrwmWG wmJdhCBJIVI2DwdOZyAx2kxGgIDCM1RN16qEnyNAWp9ap/e1XRACVHY8r2wcY3mu JTlIAeuK6mOT4669mAUWSBuBcdukUtbJFahxrucsY2TRLcYHw4BRvICZ3t/oWv2X n4rWfYKvDbPHObDtdSSMdwgK3oY4jwQxWQ1vUPB4q5j3eZ3a2PX3ak94CQJQxCsU lFrfrSUUN6JVBbjnJs7CIX48YNqJgNMMLEblJnU3rjbtbQeGTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvR6eQcXziC+kJp3qGnuRWq3yBpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvMjRjNzhhN2QtM2ZjNC0z ZWUyLWE3N2YtMDJkOGZmYTE5MDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk1wQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEezIOgrmMOmGhGK/BI7S0LM6Tq0LXVkSbLXdvR19rFGuaCXlkm+ppCV PoYBUhNvxAFNgbp7mslucXK8Pr13fHvDXFvE5rQkeKBdHXcw/STqQ0hkV/UcYD5d 3/GFJ4J/3TNSwI0PAcCHLT/d+K98MtZ1GqAF9DJk5aw9N+Lt3v1lE2KGlRHplN0k U/5R4DdUdCm6mkfhzo3W0bHT9Q8lCUP1Hz7QAHbATrNTwN3eZII+H6Lfb3JCP3Wj 5HP30rFjMcQFiwkwYG2ZenplM3ynWFplDbOXil8/KHpVLG3eeKUAozNCuaw74XlG l0gMnnei0E4yAbhhadmDL1B6Wd5Mboc= -----END CERTIFICATE-----Generated at Thu Mar 26 12:41:38 2026 by rpki-client