$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/89d1130b-8a24-31a7-81ed-4b0fd2a1a9dc.roa File: 89d1130b-8a24-31a7-81ed-4b0fd2a1a9dc.roa (raw, json) Hash identifier: WNVN+myRajlRYcpH6qW34tR0w/ayOggQI0hZRL5Gpxk= Subject key identifier: 10:B3:5B:80:D3:C6:F5:F9:2E:60:C0:48:42:DF:B6:A3:CB:DA:B8:94 Certificate issuer: /CN=1c54e35c-a6c9-47e0-b788-866bd333d8e0 Certificate serial: 010D0C9F4328584D492A5F81970FF736E349A8C0 Authority key identifier: AC:03:5B:5C:7A:BC:78:27:88:10:F2:5D:52:2A:5A:50:24:A6:B2:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/89d1130b-8a24-31a7-81ed-4b0fd2a1a9dc.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 9009 IP address blocks: 64.43.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/1c54e35c-a6c9-47e0-b788-866bd333d8e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/1c54e35c-a6c9-47e0-b788-866bd333d8e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:5f:81:97:0f:f7:36:e3:49:a8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c54e35c-a6c9-47e0-b788-866bd333d8e0 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=296571c9-a7db-4725-9b3f-494ff9f50288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c1:09:99:c7:b9:3c:a5:61:0c:27:e2:df:ef: 32:82:3a:80:47:b6:e3:c1:c0:a1:41:1f:18:31:07: 8f:f3:dc:2b:fc:0b:41:4c:6f:5f:eb:97:64:cd:32: f0:0d:28:45:70:63:3e:85:4d:59:ea:f6:34:17:8d: 75:4c:a3:8a:c1:91:f2:90:3f:3b:e4:1d:3e:a9:03: fd:77:ed:72:da:51:30:89:bd:09:a5:69:dd:2e:a8: 86:93:ad:d8:7e:b6:bf:a2:5e:a4:14:f6:28:04:d2: ab:6a:88:9f:44:58:48:e0:58:fe:3b:52:d8:d7:4e: 78:df:6d:02:fa:21:b4:d9:07:33:fa:54:cc:0a:19: 5c:4e:73:8c:d3:b5:62:1b:1b:fd:0c:e4:c0:fa:78: a5:bb:ad:53:22:15:3c:93:96:c0:f8:eb:2d:cd:61: c2:4d:55:26:99:f7:f6:f0:4d:34:ab:5c:1c:24:13: 63:3e:7e:76:b0:0f:7a:e6:da:0f:c5:8a:66:b1:92: 13:ed:bc:86:14:54:cc:f7:74:4a:06:69:e2:34:88: 32:a9:20:77:de:5d:b3:0d:7d:75:8a:26:ed:7b:78: 27:5c:b0:bb:00:cc:d4:02:f4:7e:95:f3:9c:38:12: 61:7c:d8:d7:57:a4:56:86:6c:80:25:45:78:e4:7f: 91:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B3:5B:80:D3:C6:F5:F9:2E:60:C0:48:42:DF:B6:A3:CB:DA:B8:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/89d1130b-8a24-31a7-81ed-4b0fd2a1a9dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/1c54e35c-a6c9-47e0-b788-866bd333d8e0.crl X509v3 Authority Key Identifier: keyid:AC:03:5B:5C:7A:BC:78:27:88:10:F2:5D:52:2A:5A:50:24:A6:B2:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0.cer sbgp-ipAddrBlock: critical IPv4: 64.43.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:14:ce:9d:4e:10:74:d5:49:20:19:33:be:8d:6d:b9:fb:6f: 9f:7a:2b:40:92:e4:2e:43:d5:c4:e6:b6:61:c8:bb:96:44:68: 6a:5d:42:2a:90:e4:f5:af:5a:13:ff:13:34:36:03:d5:b4:b1: 4a:a1:44:bf:40:74:cb:c2:7b:9f:2c:e3:c9:bf:4f:0e:58:bf: 01:af:8c:17:eb:2c:1a:30:f4:46:97:53:a8:76:17:73:0e:21: 21:a7:ad:dc:8d:12:da:69:d5:e2:87:20:ab:40:d4:8b:cc:24: 92:4f:cf:8a:92:b8:ba:6d:17:cf:56:47:e2:d1:48:cf:c3:0a: 26:b0:e9:ba:d0:05:4d:67:81:7e:f1:84:32:b8:f7:c7:7f:17: f8:f9:07:81:f8:ef:1d:ae:11:ca:e9:35:6c:d3:d3:3c:0d:4e: 18:19:06:3f:40:d7:58:b1:ba:18:8f:76:f4:5e:47:f1:5c:15: 17:3c:45:8b:a1:f3:60:5b:a0:43:03:de:64:0c:4d:72:ba:85: 6a:68:7f:3c:7c:3d:6d:3d:a2:ff:12:92:14:db:bd:58:fa:b6: 78:de:45:21:fa:cd:0b:32:f7:bc:e7:f9:c3:ac:4d:63:56:e0: e1:05:d7:ba:16:3e:81:e5:9e:82:56:24:a0:05:fb:f7:33:9b: 4c:c9:9d:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKl+Blw/3NuNJqMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1NGUzNWMtYTZjOS00N2UwLWI3ODgtODY2YmQzMzNk OGUwMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk Mjk2NTcxYzktYTdkYi00NzI1LTliM2YtNDk0ZmY5ZjUwMjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsEJmce5PKVhDCfi3+8ygjqAR7bjwcChQR8Y MQeP89wr/AtBTG9f65dkzTLwDShFcGM+hU1Z6vY0F411TKOKwZHykD875B0+qQP9 d+1y2lEwib0JpWndLqiGk63Yfra/ol6kFPYoBNKraoifRFhI4Fj+O1LY1054320C +iG02Qcz+lTMChlcTnOM07ViGxv9DOTA+nilu61TIhU8k5bA+OstzWHCTVUmmff2 8E00q1wcJBNjPn52sA965toPxYpmsZIT7byGFFTM93RKBmniNIgyqSB33l2zDX11 iibte3gnXLC7AMzUAvR+lfOcOBJhfNjXV6RWhmyAJUV45H+RVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCzW4DTxvX5LmDASELftqPL2riUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYzU0 ZTM1Yy1hNmM5LTQ3ZTAtYjc4OC04NjZiZDMzM2Q4ZTAvODlkMTEzMGItOGEyNC0z MWE3LTgxZWQtNGIwZmQyYTFhOWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWM1NGUzNWMtYTZjOS00N2UwLWI3 ODgtODY2YmQzMzNkOGUwLzFjNTRlMzVjLWE2YzktNDdlMC1iNzg4LTg2NmJkMzMz ZDhlMC5jcmwwHwYDVR0jBBgwFoAUrANbXHq8eCeIEPJdUipaUCSmsqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYzU0ZTM1Yy1hNmM5LTQ3ZTAtYjc4OC04NjZi ZDMzM2Q4ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQCvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwUzp1OEHTVSSAZM76Nbbn7b596K0CS5C5D1cTmtmHIu5ZEaGpdQiqQ 5PWvWhP/EzQ2A9W0sUqhRL9AdMvCe58s48m/Tw5YvwGvjBfrLBow9EaXU6h2F3MO ISGnrdyNEtpp1eKHIKtA1IvMJJJPz4qSuLptF89WR+LRSM/DCiaw6brQBU1ngX7x hDK498d/F/j5B4H47x2uEcrpNWzT0zwNThgZBj9A11ixuhiPdvReR/FcFRc8RYuh 82BboEMD3mQMTXK6hWpofzx8PW09ov8SkhTbvVj6tnjeRSH6zQsy97zn+cOsTWNW 4OEF17oWPoHlnoJWJKAF+/czm0zJnfM= -----END CERTIFICATE-----Generated at Thu Mar 26 12:47:05 2026 by rpki-client