$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/2ddb1419-5806-328e-baef-d46939f17218.roa File: 2ddb1419-5806-328e-baef-d46939f17218.roa (raw, json) Hash identifier: dFOgy6/xyEH77H8pbzrTPLRreQNzyOluiUE3QauLryM= Subject key identifier: 49:E9:44:B1:F9:CA:84:7E:87:8D:7F:8C:1A:52:AD:4A:8C:7F:39:E5 Certificate issuer: /CN=748884b0-2456-4700-984f-d893a56dbcdd Certificate serial: 010D0C9F4328584D422F85D96A172D7827519F80 Authority key identifier: E2:B1:73:CA:CC:4D:2F:9D:D2:C5:6A:A9:F8:AE:2A:E3:9F:12:60:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/2ddb1419-5806-328e-baef-d46939f17218.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 393844 IP address blocks: 192.24.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:85:d9:6a:17:2d:78:27:51:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=748884b0-2456-4700-984f-d893a56dbcdd Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=44853d50-524d-47fd-a2ca-6b237eb59db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:62:77:db:3d:e8:77:1c:e8:53:b7:9b:40:89: 44:f3:69:8c:d3:d0:23:0b:81:97:0d:7b:1e:33:ad: b5:53:20:06:9c:1d:10:fc:1f:34:63:a5:a0:8a:5a: 0c:28:15:ba:93:dc:e8:14:e3:d3:c2:8a:d7:79:0e: fc:9f:71:ab:89:93:d3:0c:b5:66:68:ca:1b:30:bc: 67:8d:b0:9f:61:29:51:a9:40:b2:1e:a7:6d:c5:87: 94:4b:be:65:24:1b:83:06:ec:86:2e:eb:11:04:84: 17:10:5f:d5:35:74:65:b9:f6:08:8f:a6:b8:10:c7: 76:c2:23:ae:9b:a5:1e:3c:5e:2a:46:8b:c5:b0:00: 2f:4c:4d:a8:3d:38:f3:0c:b4:ac:b3:5d:87:e4:71: 28:f7:1c:94:95:05:3f:1d:fb:97:94:fe:b3:d2:a1: fd:b5:9a:28:97:6b:0a:e0:e4:56:1c:73:b5:af:d0: 5e:5e:4d:f7:ae:31:cf:c2:62:b2:6c:ed:80:6f:10: 74:de:3f:10:94:18:1a:a2:f8:50:e5:1e:0e:3f:78: d7:89:43:12:22:5e:2b:23:6b:54:8b:fb:1a:27:7e: 29:f2:f1:93:e4:5e:6f:e8:09:89:75:05:be:f1:7d: 3e:79:33:ad:6f:4f:74:30:e8:bb:46:1a:72:59:c8: ca:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E9:44:B1:F9:CA:84:7E:87:8D:7F:8C:1A:52:AD:4A:8C:7F:39:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/2ddb1419-5806-328e-baef-d46939f17218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.crl X509v3 Authority Key Identifier: keyid:E2:B1:73:CA:CC:4D:2F:9D:D2:C5:6A:A9:F8:AE:2A:E3:9F:12:60:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer sbgp-ipAddrBlock: critical IPv4: 192.24.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:f0:01:43:a9:51:9f:d3:de:c5:04:8d:2f:3a:6a:e1:9c:33: 8d:70:61:15:bf:a3:1c:67:31:67:d1:b0:cc:61:12:39:41:f7: e6:48:ca:2d:f7:da:f3:1a:3a:05:1a:64:ee:60:dd:b5:aa:f1: 37:e8:c3:66:0b:90:e3:04:13:4d:52:c7:9f:5f:32:6a:7c:74: c4:a1:b1:0d:74:e1:a3:07:79:2a:ee:ca:22:a7:c2:92:3a:33: b8:a2:f7:1e:4b:93:25:42:f3:f9:f9:63:2c:1c:50:07:f7:8a: 88:44:cf:7c:27:28:f0:8b:b0:03:c9:8b:5f:38:c3:bc:45:ca: 6b:10:b0:f3:56:e5:25:b3:ba:13:94:9b:69:16:87:54:16:4a: 3e:a0:62:da:84:1f:3c:a5:d0:3c:ec:02:e7:8b:53:e8:bf:f6: 50:c0:b4:0d:25:98:7e:8b:2d:7d:18:78:83:ed:39:08:b0:0b: c2:59:8f:77:91:65:51:af:2f:9b:a4:c2:eb:55:14:6a:fd:c5: de:b2:2a:76:0b:88:b1:5e:8e:02:76:45:28:53:8a:77:c1:a0: 66:73:74:1c:93:de:d0:64:b9:a8:f7:e0:d5:ab:ae:9d:f3:83: 0b:b6:4b:8b:0d:46:01:16:7d:ea:68:42:4f:05:07:96:64:b1: d4:de:f8:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1CL4XZahcteCdRn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ4ODg0YjAtMjQ1Ni00NzAwLTk4NGYtZDg5M2E1NmRi Y2RkMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk NDQ4NTNkNTAtNTI0ZC00N2ZkLWEyY2EtNmIyMzdlYjU5ZGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmJ32z3odxzoU7ebQIlE82mM09AjC4GXDXse M621UyAGnB0Q/B80Y6WgiloMKBW6k9zoFOPTworXeQ78n3GriZPTDLVmaMobMLxn jbCfYSlRqUCyHqdtxYeUS75lJBuDBuyGLusRBIQXEF/VNXRlufYIj6a4EMd2wiOu m6UePF4qRovFsAAvTE2oPTjzDLSss12H5HEo9xyUlQU/HfuXlP6z0qH9tZool2sK 4ORWHHO1r9BeXk33rjHPwmKybO2AbxB03j8QlBgaovhQ5R4OP3jXiUMSIl4rI2tU i/saJ34p8vGT5F5v6AmJdQW+8X0+eTOtb090MOi7RhpyWcjKnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnpRLH5yoR+h41/jBpSrUqMfznlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83NDg4 ODRiMC0yNDU2LTQ3MDAtOTg0Zi1kODkzYTU2ZGJjZGQvMmRkYjE0MTktNTgwNi0z MjhlLWJhZWYtZDQ2OTM5ZjE3MjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzQ4ODg0YjAtMjQ1Ni00NzAwLTk4 NGYtZDg5M2E1NmRiY2RkLzc0ODg4NGIwLTI0NTYtNDcwMC05ODRmLWQ4OTNhNTZk YmNkZC5jcmwwHwYDVR0jBBgwFoAU4rFzysxNL53SxWqp+K4q458SYKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83NDg4ODRiMC0yNDU2LTQ3MDAtOTg0Zi1kODkz YTU2ZGJjZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwBgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/wAUOpUZ/T3sUEjS86auGcM41wYRW/oxxnMWfRsMxhEjlB9+ZIyi33 2vMaOgUaZO5g3bWq8Tfow2YLkOMEE01Sx59fMmp8dMShsQ104aMHeSruyiKnwpI6 M7ii9x5LkyVC8/n5YywcUAf3iohEz3wnKPCLsAPJi184w7xFymsQsPNW5SWzuhOU m2kWh1QWSj6gYtqEHzyl0DzsAueLU+i/9lDAtA0lmH6LLX0YeIPtOQiwC8JZj3eR ZVGvL5ukwutVFGr9xd6yKnYLiLFejgJ2RShTinfBoGZzdByT3tBkuaj34NWrrp3z gwu2S4sNRgEWfepoQk8FB5ZksdTe+JA= -----END CERTIFICATE-----Generated at Thu Mar 26 15:04:14 2026 by rpki-client