$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5a7572ff-0c1a-36e1-a553-3bbd80d6ecd7.roa File: 5a7572ff-0c1a-36e1-a553-3bbd80d6ecd7.roa (raw, json) Hash identifier: wXg44j2C8XNp+/ch62k+2Nnd87a1+/7zm4Erj1AFDQI= Subject key identifier: 47:B6:5F:71:D2:3F:7C:0A:99:CE:D5:86:53:FA:AF:08:C0:AC:87:E5 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584D40CA5DA34D530372CC87BEC0 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5a7572ff-0c1a-36e1-a553-3bbd80d6ecd7.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 46687 IP address blocks: 24.233.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:5d:a3:4d:53:03:72:cc:87:be:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=ad908f3f-52c8-4de2-b7f9-ba2798ccb99c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:29:d0:72:e6:06:52:73:fd:05:e7:86:26:41: b2:d3:e9:02:e8:6c:00:a5:c5:bf:f6:e0:1a:40:ec: 41:fd:dd:fe:66:52:f4:94:5c:a5:44:27:48:a0:84: 16:32:0f:6b:a8:77:18:37:96:71:86:b9:cb:69:64: 6b:d1:2d:37:54:f6:94:db:60:cc:2f:5b:7c:d0:5a: 82:85:f1:e6:90:ab:36:ab:e7:8e:5e:96:c1:45:68: e4:3b:9b:81:46:be:b0:a8:de:fb:b9:c5:13:41:7c: 67:33:89:c8:4b:24:f5:8a:07:1c:0d:ea:66:7e:83: 33:1f:da:30:30:6e:87:4a:44:e5:35:94:e0:2f:5d: e5:b7:40:8d:89:63:db:aa:94:e6:c0:e4:b0:48:f6: 88:c8:57:2a:f0:c2:b3:8a:9d:bc:37:18:20:69:fc: 3d:ab:b6:55:b3:2b:ed:78:81:80:21:66:83:99:e7: 17:56:a6:03:1d:cc:be:a8:2a:90:38:3e:5b:0b:9a: 05:18:32:7e:91:6b:f1:93:22:8b:92:37:28:03:33: 7b:05:13:68:02:db:a5:0b:f1:67:c2:af:4f:26:ba: 2d:2c:40:71:d4:c6:35:15:db:58:ed:84:1d:0b:37: a7:5d:4b:e3:b9:55:49:f4:69:81:ee:1b:4e:3a:28: cf:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B6:5F:71:D2:3F:7C:0A:99:CE:D5:86:53:FA:AF:08:C0:AC:87:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5a7572ff-0c1a-36e1-a553-3bbd80d6ecd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 24.233.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:9f:51:19:1e:65:8f:71:3c:4c:0a:0a:9f:7f:2e:86:6d:3a: e5:9a:1a:9a:34:d1:98:02:eb:1e:6c:65:29:87:cc:93:24:10: 76:7f:34:e3:a5:36:8d:c9:92:ba:16:a9:29:31:f3:96:51:9b: ae:b3:85:36:91:48:dd:12:c1:72:12:91:80:c6:43:5f:ed:a8: fd:f0:81:67:82:04:f0:08:ff:a9:91:82:c0:3e:dd:e1:65:7f: 56:dd:67:a5:84:0e:eb:ac:6f:b1:98:91:95:2e:50:c2:de:4e: fd:86:e8:fb:92:0f:ec:6b:39:fd:04:32:33:66:8f:fd:d6:70: e3:3f:18:83:37:d5:9f:9a:98:bf:27:2a:80:05:e4:ae:8b:53: 0b:da:eb:a1:c7:a7:dc:05:70:53:bd:e8:96:db:e5:d0:3e:72: f3:c4:07:c5:93:2f:ec:f5:e3:f1:2b:fb:c8:f6:20:16:c1:d5: 30:d9:95:ef:3a:90:73:75:a7:96:d8:ec:2e:e2:4d:c8:5e:ce: 29:07:e6:f6:1e:2e:7f:18:7e:87:b3:57:5f:60:21:3a:6c:5a: 96:82:17:35:51:49:78:d5:1d:64:5c:25:73:c7:5e:ee:14:d9: 74:9f:46:05:f4:8e:e4:73:2d:66:31:87:19:38:f2:c8:74:d1: b5:9d:87:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ayl2jTVMDcsyHvsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk YWQ5MDhmM2YtNTJjOC00ZGUyLWI3ZjktYmEyNzk4Y2NiOTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCnQcuYGUnP9BeeGJkGy0+kC6GwApcW/9uAa QOxB/d3+ZlL0lFylRCdIoIQWMg9rqHcYN5ZxhrnLaWRr0S03VPaU22DML1t80FqC hfHmkKs2q+eOXpbBRWjkO5uBRr6wqN77ucUTQXxnM4nISyT1igccDepmfoMzH9ow MG6HSkTlNZTgL13lt0CNiWPbqpTmwOSwSPaIyFcq8MKzip28Nxggafw9q7ZVsyvt eIGAIWaDmecXVqYDHcy+qCqQOD5bC5oFGDJ+kWvxkyKLkjcoAzN7BRNoAtulC/Fn wq9PJrotLEBx1MY1FdtY7YQdCzenXUvjuVVJ9GmB7htOOijPHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEe2X3HSP3wKmc7VhlP6rwjArIflMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvNWE3NTcyZmYtMGMxYS0z NmUxLWE1NTMtM2JiZDgwZDZlY2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGOngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6fURkeZY9xPEwKCp9/LoZtOuWaGpo00ZgC6x5sZSmHzJMkEHZ/NOOl No3JkroWqSkx85ZRm66zhTaRSN0SwXISkYDGQ1/tqP3wgWeCBPAI/6mRgsA+3eFl f1bdZ6WEDuusb7GYkZUuUMLeTv2G6PuSD+xrOf0EMjNmj/3WcOM/GIM31Z+amL8n KoAF5K6LUwva66HHp9wFcFO96Jbb5dA+cvPEB8WTL+z14/Er+8j2IBbB1TDZle86 kHN1p5bY7C7iTchezikH5vYeLn8YfoezV19gITpsWpaCFzVRSXjVHWRcJXPHXu4U 2XSfRgX0juRzLWYxhxk48sh00bWdh/w= -----END CERTIFICATE-----Generated at Thu Mar 26 22:26:24 2026 by rpki-client