$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/ab1044a8-9b01-3c1f-837b-39cbd2d6b914.roa File: ab1044a8-9b01-3c1f-837b-39cbd2d6b914.roa (raw, json) Hash identifier: hJ9Ns3+yCiwMleYaZWdafQM0Onv4AQQhUe2w88sa8EU= Subject key identifier: 69:E4:EC:F2:2E:1E:B6:33:86:73:09:89:08:52:7E:48:19:AC:9B:7D Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584D40CA5DB417459EA1BCB93400 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/ab1044a8-9b01-3c1f-837b-39cbd2d6b914.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 46687 IP address blocks: 24.245.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:5d:b4:17:45:9e:a1:bc:b9:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=189ab068-a48e-4659-83c2-53f36b9ab5c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:46:67:e6:21:76:88:f6:4b:a9:4f:6f:26:f0: 8f:13:c2:61:4f:0c:ca:cc:2a:cf:58:6f:f5:56:d4: 71:5c:99:db:d2:26:a7:f8:6b:53:45:9a:bb:59:85: f0:cc:75:93:0c:c8:d4:c3:9e:5a:a6:dc:7c:a6:32: 00:3e:65:87:ca:c4:38:35:25:02:f5:3d:03:ee:90: 8f:43:e9:54:bf:ce:ec:02:b2:d6:3f:95:c5:59:fe: 88:af:57:a2:40:c3:ce:ca:2c:21:93:a6:a1:ae:40: 61:e0:eb:7e:97:a0:ae:01:71:05:5d:5e:fb:a3:b0: 95:0c:4c:82:62:7e:26:5f:e1:86:ae:00:0b:92:f5: 0a:a6:07:26:61:42:dd:6c:05:57:41:92:5c:a6:c1: 1a:22:8d:b6:98:89:37:de:0b:ef:e3:95:e8:9b:1f: 74:48:06:0b:71:c4:d0:f2:de:df:6f:f0:fe:2e:5c: 58:8c:39:55:e1:90:ec:a0:80:1c:fe:ff:56:f0:d7: e2:ea:1c:4b:bf:e5:c2:d9:71:21:35:1e:c4:91:e7: a9:4e:f8:e6:7c:be:d1:da:e9:f0:a9:98:82:2e:a7: c6:e1:5f:e7:11:ac:21:63:cb:00:a5:59:8b:08:64: 9e:9f:ff:fe:e7:40:35:1a:86:d2:4c:4d:89:e5:5a: 6d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E4:EC:F2:2E:1E:B6:33:86:73:09:89:08:52:7E:48:19:AC:9B:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/ab1044a8-9b01-3c1f-837b-39cbd2d6b914.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 24.245.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:2f:c2:2b:c9:f0:53:9a:ef:cf:dd:a3:dd:88:c0:b6:33:3e: e9:e1:0a:33:08:d4:80:5d:bb:bf:33:e4:98:c6:48:55:15:0c: 09:f6:e7:4e:98:aa:11:df:e1:91:66:8c:14:e9:39:62:26:a6: 33:66:45:a5:30:3a:8e:89:17:98:74:53:79:f6:4d:39:0d:2a: 30:ed:4f:67:97:ff:03:9e:8f:1a:62:1f:42:34:15:b5:c7:b2: ff:b0:7d:30:21:01:21:98:c6:b2:f8:43:2c:ae:ef:50:5c:4e: 50:44:70:7c:e5:ad:0f:9c:1d:5c:8f:1b:aa:42:71:4d:63:8d: 64:39:e0:39:41:4e:f9:0b:80:2d:e2:24:02:1f:3c:cd:e7:31: 5e:da:af:b1:d6:f0:b4:e4:72:63:57:bf:7d:86:54:0f:7e:4a: 15:01:53:a0:2c:82:d8:37:f5:6b:82:6d:8a:f7:1b:d0:44:6c: 11:6e:23:cd:45:1b:94:b7:53:c0:74:3b:09:f8:39:e0:e6:a2: 2a:8c:47:f3:17:99:a6:98:07:b7:94:ca:ef:4a:5d:7c:83:0e: 3e:d2:c2:7a:f6:7c:73:bc:5e:9d:2f:c7:4e:87:9d:2c:fb:86: ba:d8:b3:8f:df:61:c8:81:8e:4a:5f:f2:6a:78:c8:ac:6a:e7: 83:f2:f0:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ayl20F0Weoby5NAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk MTg5YWIwNjgtYTQ4ZS00NjU5LTgzYzItNTNmMzZiOWFiNWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUZn5iF2iPZLqU9vJvCPE8JhTwzKzCrPWG/1 VtRxXJnb0ian+GtTRZq7WYXwzHWTDMjUw55aptx8pjIAPmWHysQ4NSUC9T0D7pCP Q+lUv87sArLWP5XFWf6Ir1eiQMPOyiwhk6ahrkBh4Ot+l6CuAXEFXV77o7CVDEyC Yn4mX+GGrgALkvUKpgcmYULdbAVXQZJcpsEaIo22mIk33gvv45Xomx90SAYLccTQ 8t7fb/D+LlxYjDlV4ZDsoIAc/v9W8Nfi6hxLv+XC2XEhNR7EkeepTvjmfL7R2unw qZiCLqfG4V/nEawhY8sApVmLCGSen//+50A1GobSTE2J5VptgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnk7PIuHrYzhnMJiQhSfkgZrJt9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvYWIxMDQ0YTgtOWIwMS0z YzFmLTgzN2ItMzljYmQyZDZiOTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGPVwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQvwivJ8FOa78/do92IwLYzPunhCjMI1IBdu78z5JjGSFUVDAn2506Y qhHf4ZFmjBTpOWImpjNmRaUwOo6JF5h0U3n2TTkNKjDtT2eX/wOejxpiH0I0FbXH sv+wfTAhASGYxrL4Qyyu71BcTlBEcHzlrQ+cHVyPG6pCcU1jjWQ54DlBTvkLgC3i JAIfPM3nMV7ar7HW8LTkcmNXv32GVA9+ShUBU6Asgtg39WuCbYr3G9BEbBFuI81F G5S3U8B0Own4OeDmoiqMR/MXmaaYB7eUyu9KXXyDDj7Swnr2fHO8Xp0vx06HnSz7 hrrYs4/fYciBjkpf8mp4yKxq54Py8Aw= -----END CERTIFICATE-----Generated at Thu Mar 26 14:18:21 2026 by rpki-client