$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/389cc261-cf0d-329f-ad46-5a405e8a611e.roa File: 389cc261-cf0d-329f-ad46-5a405e8a611e.roa (raw, json) Hash identifier: q97qMnKhu78JdvZJpAFXQlRyzogb/VzdvJhQZlzKaCU= Subject key identifier: F4:5A:57:2B:E8:C5:DA:4A:9C:AA:CB:D6:F0:01:92:D1:DD:FB:84:13 Certificate issuer: /CN=3c8a971f-d7dc-4e95-bc6e-a0db15f80a84 Certificate serial: 010D0C9F4328584D27AAC9FD169DF6317CDA0340 Authority key identifier: B9:FA:57:DE:DB:64:ED:20:6A:5E:8D:41:2D:2E:86:34:D7:63:4B:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/389cc261-cf0d-329f-ad46-5a405e8a611e.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 23102 IP address blocks: 192.203.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:c9:fd:16:9d:f6:31:7c:da:03:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c8a971f-d7dc-4e95-bc6e-a0db15f80a84 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=bde391bf-3da4-4b57-a22d-a607c2521b76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:8a:34:ff:37:55:29:1f:d1:46:a2:a0:78:ad: b5:3e:22:d7:b5:55:18:d8:56:37:4c:26:95:1c:52: 52:49:36:21:db:2c:90:e2:b7:67:d8:2e:60:10:d2: eb:34:9f:ce:6f:59:4a:5e:91:77:36:fb:f3:c1:c9: 6c:0f:37:fa:ab:82:13:9b:b9:70:7d:5d:08:9a:11: ef:80:57:9e:bc:11:86:9e:b2:b4:ef:1a:fd:f0:0f: a7:40:a7:a6:97:a4:f2:1a:2b:f8:e1:c9:fc:61:39: cc:56:6e:57:b1:2c:b2:ec:02:a9:8b:91:57:a9:c8: b8:bc:9e:1e:9f:f4:b0:96:86:f8:0f:17:3d:35:b8: 10:93:8f:51:18:0c:07:1a:e5:9b:72:c4:8a:be:8b: c5:20:1f:6a:1f:e8:59:d4:e3:db:9b:81:25:5e:b6: 0d:70:56:10:3a:fd:17:18:e2:53:41:24:4c:70:9d: b0:6b:f1:e2:c3:e6:02:d1:d7:20:6b:fd:b5:4e:4f: 76:3b:83:94:3d:6d:59:8a:cd:22:16:76:c3:9a:a0: 6d:0e:3a:c2:4d:8d:83:6d:1a:6d:07:e0:50:33:5f: 60:26:f6:40:5e:95:e9:73:ec:6e:d3:ee:2d:f8:54: ee:a6:26:36:00:b4:bb:da:73:b5:94:14:27:8e:51: f5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:5A:57:2B:E8:C5:DA:4A:9C:AA:CB:D6:F0:01:92:D1:DD:FB:84:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/389cc261-cf0d-329f-ad46-5a405e8a611e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl X509v3 Authority Key Identifier: keyid:B9:FA:57:DE:DB:64:ED:20:6A:5E:8D:41:2D:2E:86:34:D7:63:4B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer sbgp-ipAddrBlock: critical IPv4: 192.203.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:75:59:ee:03:ea:e2:6f:df:e7:68:48:02:c6:46:bd:27:e0: 9f:ab:dd:93:69:d5:88:96:e3:31:d8:9a:cd:17:1b:98:d9:47: e9:43:7f:b1:21:0f:2e:44:7c:0a:02:9b:f0:3c:71:6e:26:98: 41:ff:51:8f:44:30:8b:bb:51:16:7d:ea:7e:d3:36:04:4a:78: 12:44:eb:17:31:51:72:45:48:62:8d:9d:48:9d:a2:01:45:7c: 21:75:6b:ca:c6:87:9b:53:d0:d6:6b:f6:5f:cd:ef:1c:9d:85: 51:01:54:84:f1:94:a5:d0:6a:c5:56:30:ea:72:7d:19:6a:d2: 03:a5:5c:f9:dc:2e:aa:50:11:60:81:39:58:9e:0e:a8:a9:b6: 51:85:c4:60:89:5d:65:33:d8:99:b1:35:e7:a4:08:13:ae:b7: 2b:12:33:58:d0:65:af:58:8d:e5:34:98:de:e4:73:43:35:b7: a0:6f:72:98:32:2c:e1:bc:0f:ec:44:cf:1e:4a:33:ab:82:00: 6d:6d:f0:64:ad:86:70:6e:44:8e:a5:13:c1:da:b5:44:75:c2: 7c:ed:3e:b7:f0:87:55:4e:b5:97:bb:ac:c9:2b:1d:99:0c:02: 5c:a1:17:03:c2:ba:bf:68:ef:4c:ed:db:79:8a:09:3a:fb:0d: f3:6e:18:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqsn9Fp32MXzaA0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M4YTk3MWYtZDdkYy00ZTk1LWJjNmUtYTBkYjE1Zjgw YTg0MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk YmRlMzkxYmYtM2RhNC00YjU3LWEyMmQtYTYwN2MyNTIxYjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Yo0/zdVKR/RRqKgeK21PiLXtVUY2FY3TCaV HFJSSTYh2yyQ4rdn2C5gENLrNJ/Ob1lKXpF3NvvzwclsDzf6q4ITm7lwfV0ImhHv gFeevBGGnrK07xr98A+nQKeml6TyGiv44cn8YTnMVm5XsSyy7AKpi5FXqci4vJ4e n/Swlob4Dxc9NbgQk49RGAwHGuWbcsSKvovFIB9qH+hZ1OPbm4ElXrYNcFYQOv0X GOJTQSRMcJ2wa/Hiw+YC0dcga/21Tk92O4OUPW1Zis0iFnbDmqBtDjrCTY2DbRpt B+BQM19gJvZAXpXpc+xu0+4t+FTupiY2ALS72nO1lBQnjlH1oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRaVyvoxdpKnKrL1vABktHd+4QTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYzhh OTcxZi1kN2RjLTRlOTUtYmM2ZS1hMGRiMTVmODBhODQvMzg5Y2MyNjEtY2YwZC0z MjlmLWFkNDYtNWE0MDVlOGE2MTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2M4YTk3MWYtZDdkYy00ZTk1LWJj NmUtYTBkYjE1ZjgwYTg0LzNjOGE5NzFmLWQ3ZGMtNGU5NS1iYzZlLWEwZGIxNWY4 MGE4NC5jcmwwHwYDVR0jBBgwFoAUufpX3ttk7SBqXo1BLS6GNNdjSxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYzhhOTcxZi1kN2RjLTRlOTUtYmM2ZS1hMGRi MTVmODBhODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMvpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHR1We4D6uJv3+doSALGRr0n4J+r3ZNp1YiW4zHYms0XG5jZR+lDf7Eh Dy5EfAoCm/A8cW4mmEH/UY9EMIu7URZ96n7TNgRKeBJE6xcxUXJFSGKNnUidogFF fCF1a8rGh5tT0NZr9l/N7xydhVEBVITxlKXQasVWMOpyfRlq0gOlXPncLqpQEWCB OVieDqiptlGFxGCJXWUz2JmxNeekCBOutysSM1jQZa9YjeU0mN7kc0M1t6Bvcpgy LOG8D+xEzx5KM6uCAG1t8GSthnBuRI6lE8HatUR1wnztPrfwh1VOtZe7rMkrHZkM AlyhFwPCur9o70zt23mKCTr7DfNuGOU= -----END CERTIFICATE-----Generated at Thu Mar 26 10:15:00 2026 by rpki-client