$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8/8462c1ed-9529-306f-9950-18fd383eb4c7.roa File: 8462c1ed-9529-306f-9950-18fd383eb4c7.roa (raw, json) Hash identifier: QHfSoBMmKMHAYC10Bg9NEwriw5Pa6nfh6HzIX9UGOPQ= Subject key identifier: 04:33:90:49:47:DB:28:EA:FC:1D:52:C0:88:51:00:BE:1D:E6:DE:F0 Certificate issuer: /CN=291f5e6d-adaa-43d5-93a3-f96c4b72f3c8 Certificate serial: 010D0C9F4328584D44FA34822EA45D5F54708480 Authority key identifier: 37:55:82:67:68:90:62:3F:A3:B2:67:E3:53:85:66:F2:16:A2:1E:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8/8462c1ed-9529-306f-9950-18fd383eb4c7.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 64223 IP address blocks: 192.251.56.0/24 maxlen: 24 209.94.85.0/24 maxlen: 24 2620:70:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:34:82:2e:a4:5d:5f:54:70:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291f5e6d-adaa-43d5-93a3-f96c4b72f3c8 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=ed804452-a92b-4f67-a954-ab2d570ad677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5a:a3:c8:de:f4:61:73:13:0f:71:fb:45:fc: 5c:92:1a:e2:ff:74:03:d8:ee:72:14:72:f7:27:c5: 75:14:07:e1:ea:90:3f:1e:19:cb:99:3e:36:ff:e0: 6c:cd:f0:6f:17:c0:61:42:0e:32:1e:34:70:4e:18: a6:44:6a:32:f0:1a:ae:e9:70:19:fe:4a:1b:2b:17: 50:1c:b7:a2:ce:5b:72:c7:7f:50:23:6d:4f:bb:d7: 87:20:d7:a1:15:28:59:68:10:21:9a:1e:79:83:9b: 8d:60:a8:09:92:6f:89:86:87:07:a0:d1:00:44:bd: 5e:48:21:04:ff:a8:07:ac:6e:4c:7e:3f:b2:f6:3a: a9:68:a4:c8:14:3d:a0:e0:ed:b4:51:5a:81:48:3b: 33:c8:e5:24:ba:37:7d:e4:f4:3d:84:56:f9:57:a8: a5:d6:fb:da:da:a6:40:28:5c:83:28:2a:bf:fa:e9: ca:ab:0a:3b:ec:6f:a9:4c:b6:65:e4:75:d6:74:2b: ed:ba:ee:fc:da:88:3d:92:e5:5c:9a:f5:15:47:e8: 32:73:21:f3:78:f6:fc:60:2b:56:aa:7b:62:f1:1e: af:46:24:45:ba:85:f6:e1:f4:bd:9e:41:2f:e3:80: 22:ab:f8:6d:75:b7:f5:bc:2c:5b:19:d9:3f:c7:04: e2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:33:90:49:47:DB:28:EA:FC:1D:52:C0:88:51:00:BE:1D:E6:DE:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8/8462c1ed-9529-306f-9950-18fd383eb4c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.crl X509v3 Authority Key Identifier: keyid:37:55:82:67:68:90:62:3F:A3:B2:67:E3:53:85:66:F2:16:A2:1E:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.cer sbgp-ipAddrBlock: critical IPv4: 192.251.56.0/24 209.94.85.0/24 IPv6: 2620:70:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:e9:40:4d:31:a9:15:6f:e4:33:06:82:03:63:6a:5f:b9:60: 7c:3c:d4:21:58:69:fa:05:e2:4c:46:05:ba:f1:ea:c3:1a:2b: 1b:04:3e:3b:5c:66:3f:d1:b3:2b:36:82:b0:5b:24:55:e2:34: 1d:bf:25:2c:08:db:26:a4:b2:b0:39:11:6b:72:23:db:2c:0f: 9a:b1:94:ed:88:2a:7a:cb:e5:b4:b2:bb:6d:ed:d4:af:5d:43: ba:55:5b:8a:e0:3e:67:7f:d9:ab:96:14:73:44:4b:fd:96:ca: 6d:7f:14:32:08:26:fc:23:c8:4b:05:98:43:d8:ca:15:9d:3a: f5:b1:06:5b:b2:96:3e:06:22:e0:96:4a:73:ac:0b:26:e8:5c: e3:ec:da:e6:73:ff:4c:dd:b7:03:11:22:7e:da:f6:25:1e:1e: 1b:a0:e2:40:96:62:4d:81:26:b1:ab:c7:a4:6a:93:2f:43:3c: 65:33:2a:02:2d:dd:e8:e7:62:63:8f:60:89:ef:6d:d7:91:90: 69:79:bf:ed:40:d0:a2:0f:3a:cd:45:a9:cb:47:c5:47:75:8a: 45:be:1f:ba:6b:65:26:3a:62:0a:5a:d6:e0:3c:6e:83:aa:39: bb:a1:1c:b0:c0:41:cb:dd:ef:34:e3:53:f1:a2:7f:a1:9c:78: 22:9c:fd:5e -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWE1E+jSCLqRdX1RwhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjkxZjVlNmQtYWRhYS00M2Q1LTkzYTMtZjk2YzRiNzJm M2M4MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ZWQ4MDQ0NTItYTkyYi00ZjY3LWE5NTQtYWIyZDU3MGFkNjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVqjyN70YXMTD3H7Rfxckhri/3QD2O5yFHL3 J8V1FAfh6pA/HhnLmT42/+BszfBvF8BhQg4yHjRwThimRGoy8Bqu6XAZ/kobKxdQ HLeizltyx39QI21Pu9eHINehFShZaBAhmh55g5uNYKgJkm+JhocHoNEARL1eSCEE /6gHrG5Mfj+y9jqpaKTIFD2g4O20UVqBSDszyOUkujd95PQ9hFb5V6il1vva2qZA KFyDKCq/+unKqwo77G+pTLZl5HXWdCvtuu782og9kuVcmvUVR+gycyHzePb8YCtW qnti8R6vRiRFuoX24fS9nkEv44Aiq/htdbf1vCxbGdk/xwTiQwIDAQABo4IDbDCC A2gwHQYDVR0OBBYEFAQzkElH2yjq/B1SwIhRAL4d5t7wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTFm NWU2ZC1hZGFhLTQzZDUtOTNhMy1mOTZjNGI3MmYzYzgvODQ2MmMxZWQtOTUyOS0z MDZmLTk5NTAtMThmZDM4M2ViNGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxZjVlNmQtYWRhYS00M2Q1LTkz YTMtZjk2YzRiNzJmM2M4LzI5MWY1ZTZkLWFkYWEtNDNkNS05M2EzLWY5NmM0Yjcy ZjNjOC5jcmwwHwYDVR0jBBgwFoAUN1WCZ2iQYj+jsmfjU4Vm8haiHgQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTFmNWU2ZC1hZGFhLTQzZDUtOTNhMy1mOTZj NGI3MmYzYzguY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwPs4AwQA 0V5VMA8EAgACMAkDBwAmIABwQAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAk+lATTGpFW/kMwaCA2NqX7lg fDzUIVhp+gXiTEYFuvHqwxorGwQ+O1xmP9GzKzaCsFskVeI0Hb8lLAjbJqSysDkR a3Ij2ywPmrGU7YgqesvltLK7be3Ur11DulVbiuA+Z3/Zq5YUc0RL/ZbKbX8UMggm /CPISwWYQ9jKFZ069bEGW7KWPgYi4JZKc6wLJuhc4+za5nP/TN23AxEiftr2JR4e G6DiQJZiTYEmsavHpGqTL0M8ZTMqAi3d6OdiY49gie9t15GQaXm/7UDQog86zUWp y0fFR3WKRb4fumtlJjpiClrW4Dxug6o5u6EcsMBBy93vNONT8aJ/oZx4Ipz9Xg== -----END CERTIFICATE-----Generated at Thu Mar 26 21:54:56 2026 by rpki-client