$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/3f88eb45-1ebb-364d-9949-8283978277cd.roa File: 3f88eb45-1ebb-364d-9949-8283978277cd.roa (raw, json) Hash identifier: UwqFOEnQhoL4/sNv9MCo963mm05ncSiWL4MooWvdO5Q= Subject key identifier: CD:3C:07:84:57:6B:A8:C3:1D:C5:57:74:AA:28:D7:75:7C:C8:55:39 Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584D4A8FA3811ABF7CFAA2DB3EA4 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/3f88eb45-1ebb-364d-9949-8283978277cd.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 40948 IP address blocks: 204.156.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:a3:81:1a:bf:7c:fa:a2:db:3e:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=dc4f603d-8b0e-4fa8-af43-6a9960920a4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f2:e7:8b:8d:5d:b9:52:85:95:04:58:88:a9: d8:a6:ee:f1:ea:a6:e7:c2:b2:e6:42:87:34:f9:ec: 9d:61:d6:76:35:6f:60:c6:1d:38:0f:8a:df:7b:0d: d6:14:6f:d1:29:99:fe:ff:09:17:8d:e8:28:e7:12: 1a:c9:6e:26:a4:3b:e5:72:8a:3e:24:a1:3a:f7:7a: a1:de:d6:a6:55:a3:f2:3f:ed:59:9d:59:62:44:db: a8:96:e2:ab:21:9d:da:de:c8:30:3d:df:c0:93:36: 6f:13:94:ba:2b:b5:45:8a:57:a8:02:2e:46:2a:b2: 6e:49:4a:99:9d:20:4f:ae:0a:21:99:c5:41:40:b8: 3e:4f:5c:ba:58:da:76:cd:8a:14:fe:9d:13:29:6c: ea:7f:cc:2b:c5:b3:80:4b:b3:47:c5:f1:87:7e:98: 1f:29:10:90:39:bb:bc:2a:2d:1b:56:6e:3b:13:d6: d5:7f:bb:24:a2:75:77:1e:c1:65:a8:be:53:a3:85: a0:a5:76:9c:62:a8:b5:9f:0f:ec:2d:73:4a:9a:3c: fd:b9:e7:a0:ce:9f:99:86:f7:a3:39:14:07:dd:7f: bc:bb:0e:d2:1b:e1:b0:15:7b:30:5a:f8:55:6f:00: cb:07:b3:ec:c4:cf:7e:4f:11:75:69:b3:3a:d9:86: 56:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:3C:07:84:57:6B:A8:C3:1D:C5:57:74:AA:28:D7:75:7C:C8:55:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/3f88eb45-1ebb-364d-9949-8283978277cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 204.156.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:d2:54:b4:db:f7:e0:5d:85:ad:d3:86:89:70:bf:bc:d0:84: d3:1c:b8:fa:3d:b0:9d:47:1d:47:80:84:a4:1b:09:65:2f:c7: d1:ad:12:26:66:ad:68:7f:d1:0e:e7:c4:eb:77:27:e0:69:15: 3f:f9:f6:cc:39:ff:b6:fe:38:5a:86:08:19:0c:17:6b:d3:15: b6:7e:84:e0:33:97:32:b0:7b:42:a2:0f:1f:85:19:5a:37:04: 7c:54:1f:91:90:df:c7:b6:34:70:66:48:ce:78:db:46:c6:70: 74:83:01:6e:57:9f:f8:c5:8d:4c:cc:85:08:c2:e4:b4:e7:3d: 3e:05:9b:90:68:71:99:2f:63:ae:4f:c0:1c:64:4b:41:41:b5: 6c:12:28:9c:88:8d:9d:0e:e2:d7:f3:2f:58:6c:6a:5b:6c:7a: d8:0b:02:c2:6e:4f:7c:b3:71:a7:e4:19:f5:b2:91:71:3c:1c: 59:0e:2d:98:1b:4c:7a:f9:50:f4:c4:5c:8f:65:ea:2e:a8:bf: 1d:a6:21:a2:82:92:8b:0e:7e:cf:c4:fe:4b:b4:a7:17:79:f8: 4b:c0:92:0d:53:23:3d:c4:be:ea:e2:06:87:d0:26:7e:3e:cd: e0:33:97:31:1a:20:1d:28:b1:41:c3:78:48:79:5b:03:3f:0b: e0:4d:c8:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj6OBGr98+qLbPqQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk ZGM0ZjYwM2QtOGIwZS00ZmE4LWFmNDMtNmE5OTYwOTIwYTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPLni41duVKFlQRYiKnYpu7x6qbnwrLmQoc0 +eydYdZ2NW9gxh04D4rfew3WFG/RKZn+/wkXjego5xIayW4mpDvlcoo+JKE693qh 3tamVaPyP+1ZnVliRNuoluKrIZ3a3sgwPd/AkzZvE5S6K7VFileoAi5GKrJuSUqZ nSBPrgohmcVBQLg+T1y6WNp2zYoU/p0TKWzqf8wrxbOAS7NHxfGHfpgfKRCQObu8 Ki0bVm47E9bVf7skonV3HsFlqL5To4WgpXacYqi1nw/sLXNKmjz9ueegzp+Zhvej ORQH3X+8uw7SG+GwFXswWvhVbwDLB7PsxM9+TxF1abM62YZWbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM08B4RXa6jDHcVXdKoo13V8yFU5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvM2Y4OGViNDUtMWViYi0z NjRkLTk5NDktODI4Mzk3ODI3N2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzJy4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLSVLTb9+Bdha3Tholwv7zQhNMcuPo9sJ1HHUeAhKQbCWUvx9GtEiZm rWh/0Q7nxOt3J+BpFT/59sw5/7b+OFqGCBkMF2vTFbZ+hOAzlzKwe0KiDx+FGVo3 BHxUH5GQ38e2NHBmSM5420bGcHSDAW5Xn/jFjUzMhQjC5LTnPT4Fm5BocZkvY65P wBxkS0FBtWwSKJyIjZ0O4tfzL1hsaltsetgLAsJuT3yzcafkGfWykXE8HFkOLZgb THr5UPTEXI9l6i6ovx2mIaKCkosOfs/E/ku0pxd5+EvAkg1TIz3EvuriBofQJn4+ zeAzlzEaIB0osUHDeEh5WwM/C+BNyP0= -----END CERTIFICATE-----Generated at Thu Mar 26 17:38:15 2026 by rpki-client