$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf27eb5f-aa65-30a8-b71e-1889f50be1d5.roa File: cf27eb5f-aa65-30a8-b71e-1889f50be1d5.roa (raw, json) Hash identifier: Cp7v2a5bUa7ZJ5mnxbcHP/sEH6IOK+pD2TiDurSXb7Q= Subject key identifier: 86:07:7F:A9:F5:66:1D:02:0C:35:CD:E5:CE:EE:B5:02:83:8E:38:D2 Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584D4A8FA30A6BA56895D97C7A00 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf27eb5f-aa65-30a8-b71e-1889f50be1d5.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 40948 IP address blocks: 192.232.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:a3:0a:6b:a5:68:95:d9:7c:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=351d6a96-79d7-4c96-a3a5-4b183c5bc70a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:c3:7a:d4:6b:d5:7c:cd:14:04:ac:44:fe:89: 20:b8:5c:1e:33:cd:fa:bd:b7:e3:e0:c7:31:ce:42: 80:6b:43:69:08:c1:59:f5:dc:9e:5a:3a:0c:44:40: 49:ce:89:6d:86:c9:4a:d8:8d:29:02:6b:fc:2b:5b: 72:9a:5d:14:69:46:a6:eb:d9:66:91:41:dc:b8:00: 5d:f4:91:a3:e4:e9:b7:b2:c7:4b:21:56:40:2c:8e: f8:96:04:b6:38:ae:6a:49:a2:d8:aa:37:95:ab:54: 71:b1:17:ea:ab:78:75:1a:88:a8:07:04:37:b5:b5: d2:98:85:b8:0f:e8:31:55:19:51:e4:87:38:50:c9: 0e:b0:76:e3:4c:e8:b9:b8:64:5c:82:3e:5c:2c:58: 92:34:45:4f:ab:b9:d6:b9:51:bd:e7:d7:dd:8e:68: ea:77:d0:f0:e0:10:09:fb:4e:48:f1:7c:bb:ff:59: 36:09:8c:ac:ef:3d:97:63:b8:c6:cf:47:50:e1:66: fc:04:69:51:2a:26:ce:38:e0:2c:c3:8b:32:11:45: fa:40:b2:07:b0:05:28:6d:8e:a2:df:a7:39:a3:be: 3e:12:1e:d5:18:d7:52:45:80:a9:12:fa:6d:a6:d2: a4:a5:89:2c:78:0f:09:d9:6a:51:2a:97:d6:5e:0e: a5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:07:7F:A9:F5:66:1D:02:0C:35:CD:E5:CE:EE:B5:02:83:8E:38:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf27eb5f-aa65-30a8-b71e-1889f50be1d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 192.232.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:5b:83:4c:21:2f:eb:32:66:b3:cc:b5:68:e0:59:77:c0:94: b3:a3:ef:bd:f7:87:f8:c7:66:2f:bb:90:7d:fa:17:b5:53:62: 99:fd:a4:4b:ad:47:76:88:a9:ee:71:21:8b:c4:01:6d:d9:ad: d5:72:04:c3:79:59:3e:5e:ff:52:6a:7c:bf:77:26:e1:64:66: 38:5a:27:e4:ea:e6:20:dc:06:b5:6c:2e:81:4e:6d:93:e2:c4: ab:b9:75:7e:5a:a5:06:81:55:98:e2:ba:43:54:b7:69:30:c9: 6b:f7:3d:6d:81:87:d0:1f:ca:3b:12:72:8a:65:c4:d1:ab:38: b5:f7:da:57:b7:19:f6:d5:bd:f0:41:35:60:1b:e3:d3:dd:b4: 0e:31:1b:43:27:39:ff:13:80:f7:1f:3b:0f:8c:bf:1f:5e:46: 83:0b:a0:13:b7:be:a6:1b:a8:0d:ae:f4:02:94:53:5d:2b:d1: ae:14:f9:e1:4e:49:05:39:3e:71:1c:6b:6b:4f:5f:33:e1:59: 43:29:92:59:32:f2:f5:5b:38:13:ae:f4:05:9a:7c:2a:ee:4a: ec:0d:50:f7:0b:16:4e:a3:87:bc:e4:2a:24:df:49:1f:c8:68: 8e:39:1f:87:83:eb:a8:41:ea:07:94:17:71:cf:ad:9e:79:3a: e5:26:af:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj6MKa6Voldl8egAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk MzUxZDZhOTYtNzlkNy00Yzk2LWEzYTUtNGIxODNjNWJjNzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7sN61GvVfM0UBKxE/okguFweM836vbfj4Mcx zkKAa0NpCMFZ9dyeWjoMREBJzolthslK2I0pAmv8K1tyml0UaUam69lmkUHcuABd 9JGj5Om3ssdLIVZALI74lgS2OK5qSaLYqjeVq1RxsRfqq3h1GoioBwQ3tbXSmIW4 D+gxVRlR5Ic4UMkOsHbjTOi5uGRcgj5cLFiSNEVPq7nWuVG959fdjmjqd9Dw4BAJ +05I8Xy7/1k2CYys7z2XY7jGz0dQ4Wb8BGlRKibOOOAsw4syEUX6QLIHsAUobY6i 36c5o74+Eh7VGNdSRYCpEvptptKkpYkseA8J2WpRKpfWXg6l+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYHf6n1Zh0CDDXN5c7utQKDjjjSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvY2YyN2ViNWYtYWE2NS0z MGE4LWI3MWUtMTg4OWY1MGJlMWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdbg0whL+syZrPMtWjgWXfAlLOj7733h/jHZi+7kH36F7VTYpn9pEut R3aIqe5xIYvEAW3ZrdVyBMN5WT5e/1JqfL93JuFkZjhaJ+Tq5iDcBrVsLoFObZPi xKu5dX5apQaBVZjiukNUt2kwyWv3PW2Bh9AfyjsScoplxNGrOLX32le3GfbVvfBB NWAb49PdtA4xG0MnOf8TgPcfOw+Mvx9eRoMLoBO3vqYbqA2u9AKUU10r0a4U+eFO SQU5PnEca2tPXzPhWUMpklky8vVbOBOu9AWafCruSuwNUPcLFk6jh7zkKiTfSR/I aI45H4eD66hB6geUF3HPrZ55OuUmr3o= -----END CERTIFICATE-----Generated at Thu Mar 26 13:24:28 2026 by rpki-client