$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8a920efd-ab5d-35cb-9eba-1a26e89d7014.roa File: 8a920efd-ab5d-35cb-9eba-1a26e89d7014.roa (raw, json) Hash identifier: Im277Vd0f75k0kT5clsKwQSNNSrByt+l7y4LEKgNEvQ= Subject key identifier: D7:0B:38:8E:98:99:4A:EC:20:0F:81:26:1E:43:3F:5F:F4:73:00:0F Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584D40CB9FED7BFE5D3DD0FDA700 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8a920efd-ab5d-35cb-9eba-1a26e89d7014.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 26548 IP address blocks: 172.111.48.0/24 maxlen: 24 199.253.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:9f:ed:7b:fe:5d:3d:d0:fd:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=fcf3ba0e-01c8-40c7-b84e-2b83a7f722dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5c:9b:ea:db:07:e3:d3:9a:ea:e0:9f:9c:49: 7c:9e:39:c3:75:ba:98:b4:ec:5a:8b:1d:96:5c:5d: 3b:bd:4e:2a:42:98:9e:90:d9:48:7a:94:f5:c3:42: ab:44:b1:1f:fe:db:f3:8c:c0:85:e3:8a:5a:af:21: 7c:28:a2:30:7a:6f:76:4a:a9:28:9b:7c:30:d0:20: 4f:72:6b:0c:80:bc:af:dd:bc:f4:7a:1e:2d:2d:a7: 22:c8:f5:15:1e:25:4b:e8:c5:e5:25:c0:93:a3:cf: b1:47:a6:4c:43:17:d0:66:75:c0:d4:9e:80:9e:47: 0e:b5:b4:41:4b:56:e7:51:47:3b:b9:30:83:0a:9c: 92:e6:44:2b:4d:4c:e5:4f:35:18:11:d7:24:c8:40: bb:a4:d3:9b:52:36:08:11:db:88:7d:e3:0b:ef:bd: 29:5c:ab:77:43:80:5d:8c:39:89:9f:9a:29:b6:be: fd:01:f5:e8:e0:63:e4:59:86:16:26:a1:a4:a3:5e: fb:ef:84:92:63:d3:db:ca:57:6b:27:2c:c2:ea:67: 46:50:f8:29:44:51:db:13:7e:42:87:9e:db:95:b3: ab:22:25:59:e3:54:a7:bc:4e:d9:e5:f0:b6:d5:91: 12:3c:fb:ac:24:53:44:35:fa:37:b7:f2:7b:06:9d: 14:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0B:38:8E:98:99:4A:EC:20:0F:81:26:1E:43:3F:5F:F4:73:00:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8a920efd-ab5d-35cb-9eba-1a26e89d7014.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 172.111.48.0/24 199.253.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:7f:dd:19:84:5c:d3:99:fe:24:16:1c:bb:8a:1b:7e:7b:fe: 4c:99:1c:d0:de:f9:26:21:19:be:f3:d3:ec:90:6a:d3:a5:b4: f1:69:b1:b4:87:f3:6c:01:2c:d8:28:92:fe:3a:0f:cc:f1:ef: cb:e7:f7:aa:3a:a7:86:53:fe:c7:6e:91:e7:8e:20:20:ed:1c: eb:15:6d:50:da:6e:e6:48:92:66:9b:13:1c:7c:fe:89:20:e6: f3:a6:73:23:49:36:25:0a:c3:a5:aa:58:f9:a2:68:c9:aa:91: 28:fe:5c:3a:c5:78:43:f0:4d:20:34:32:73:55:4d:85:50:d8: b7:d0:34:54:f5:88:e7:cb:26:be:44:05:20:1b:35:29:66:cb: dd:27:c0:08:62:ba:a2:48:cd:89:f3:0e:79:d2:e3:81:6f:f5: 50:be:24:95:5b:c0:20:de:d8:37:a1:7d:29:db:01:a3:f3:c2: 3f:b8:fc:7d:00:b3:c9:ad:ee:8e:c7:b0:0e:d2:61:71:11:08: ee:9d:60:24:2f:b7:9f:a5:52:1a:be:45:cb:90:40:63:6d:d9: c4:58:6c:4e:82:7c:e3:d1:8a:c4:80:91:37:a3:a4:d4:94:77: 60:6d:3f:2a:53:fc:fc:77:96:de:17:33:31:fc:ea:b8:14:b3: 88:84:da:9b -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1Ay5/te/5dPdD9pwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk ZmNmM2JhMGUtMDFjOC00MGM3LWI4NGUtMmI4M2E3ZjcyMmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlyb6tsH49Oa6uCfnEl8njnDdbqYtOxaix2W XF07vU4qQpiekNlIepT1w0KrRLEf/tvzjMCF44paryF8KKIwem92Sqkom3ww0CBP cmsMgLyv3bz0eh4tLaciyPUVHiVL6MXlJcCTo8+xR6ZMQxfQZnXA1J6AnkcOtbRB S1bnUUc7uTCDCpyS5kQrTUzlTzUYEdckyEC7pNObUjYIEduIfeML770pXKt3Q4Bd jDmJn5optr79AfXo4GPkWYYWJqGko17774SSY9PbyldrJyzC6mdGUPgpRFHbE35C h57blbOrIiVZ41SnvE7Z5fC21ZESPPusJFNENfo3t/J7Bp0U7wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNcLOI6YmUrsIA+BJh5DP1/0cwAPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvOGE5MjBlZmQtYWI1ZC0z NWNiLTllYmEtMWEyNmU4OWQ3MDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArG8wAwQA x/0eMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAK1/3RmEXNOZ/iQWHLuKG357/kyZHNDe+SYhGb7z0+yQatOl tPFpsbSH82wBLNgokv46D8zx78vn96o6p4ZT/sdukeeOICDtHOsVbVDabuZIkmab Exx8/okg5vOmcyNJNiUKw6WqWPmiaMmqkSj+XDrFeEPwTSA0MnNVTYVQ2LfQNFT1 iOfLJr5EBSAbNSlmy90nwAhiuqJIzYnzDnnS44Fv9VC+JJVbwCDe2DehfSnbAaPz wj+4/H0As8mt7o7HsA7SYXERCO6dYCQvt5+lUhq+RcuQQGNt2cRYbE6CfOPRisSA kTejpNSUd2BtPypT/Px3lt4XMzH86rgUs4iE2ps= -----END CERTIFICATE-----Generated at Thu Mar 26 10:14:49 2026 by rpki-client