$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/cbc74d13-72d1-358c-98ad-e7b27ff4d84e.roa File: cbc74d13-72d1-358c-98ad-e7b27ff4d84e.roa (raw, json) Hash identifier: hjUc0JgXdLa25Owxkm8DfqzM5pnCG2uVHW1caayhlJw= Subject key identifier: 28:3C:83:45:61:2B:46:8D:94:0E:00:42:30:A1:C4:7B:13:E2:02:1B Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Certificate serial: 010D0C9F4328584D492A6B2359C0EE07C39E3CC0 Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/cbc74d13-72d1-358c-98ad-e7b27ff4d84e.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 14618 IP address blocks: 67.215.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:6b:23:59:c0:ee:07:c3:9e:3c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=d8f68652-3b80-4e94-b7c4-c1b36e127e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3f:4b:69:1b:91:a8:17:af:a3:03:10:fd:73: 47:67:d6:4b:70:c8:8a:74:c3:06:df:ab:50:ab:17: bb:0b:fc:87:9b:cf:83:e4:b9:74:ca:3b:46:35:17: a6:87:c5:25:92:aa:c9:0b:c8:23:a8:4c:6d:ff:0e: 63:d2:07:e0:ab:be:41:5e:4f:61:c6:83:8e:60:8d: 80:11:01:c6:fd:33:e2:96:8b:0e:ec:75:e9:ff:e1: 28:6f:3c:20:34:c4:17:c1:05:20:0a:73:fe:8c:28: ef:dd:75:1e:63:bd:55:51:bc:e1:8c:62:8c:a2:e0: 61:35:23:91:29:65:90:cf:92:71:11:09:5c:12:05: b0:42:0a:f5:95:b4:8a:4c:e1:49:f8:88:79:f6:9a: 9b:0c:80:22:1e:fd:83:6d:02:be:ae:50:34:a0:77: 9f:6a:3e:b6:44:58:21:7a:e4:41:87:41:ce:89:6b: de:12:eb:31:90:aa:40:a2:70:e9:f3:ae:7a:6a:60: af:64:4f:e4:0d:ee:40:c8:6f:33:c7:80:ff:29:86: 36:21:72:29:24:9b:cf:96:18:6f:77:64:61:12:53: a3:b7:78:3b:34:5c:94:ea:da:b2:4c:59:13:06:8b: 1b:a9:64:28:5c:07:87:e5:d4:49:ed:9c:c2:6e:1a: e8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3C:83:45:61:2B:46:8D:94:0E:00:42:30:A1:C4:7B:13:E2:02:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/cbc74d13-72d1-358c-98ad-e7b27ff4d84e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl X509v3 Authority Key Identifier: keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer sbgp-ipAddrBlock: critical IPv4: 67.215.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:68:f9:ce:78:42:91:5a:1e:7e:47:3b:62:11:31:59:50:58: 1b:db:8d:6b:94:61:62:37:14:43:7a:ed:1b:fe:e5:88:86:2c: b6:1b:c4:fe:a8:83:0d:c0:89:d5:72:66:be:89:79:5a:f0:5f: f0:33:d2:7b:81:bb:88:51:0f:1d:ad:b3:a5:64:a4:61:f5:26: 8f:49:cf:e5:08:7d:df:c6:c0:8f:2d:77:82:64:c0:79:9c:33: be:ea:72:17:36:7c:3f:68:e2:cd:bd:d8:a1:a5:af:8a:06:07: 9b:dd:16:73:a5:c7:83:2b:8c:26:a8:75:50:28:00:33:a9:8d: ae:68:0d:7e:76:c9:62:3e:a2:88:67:1a:31:6e:fa:58:28:94: 8e:2c:0b:b2:3d:4e:65:fd:47:b3:01:ed:59:4c:37:85:00:44: 1e:ec:0c:7f:f0:e3:ee:60:c0:9c:fd:c8:7c:20:6b:9d:ed:80: 57:22:ab:12:6c:da:ae:6f:62:a0:d6:7f:24:cb:9a:ca:dc:6a: 31:b5:0f:fe:f0:86:f5:e5:44:7c:60:5e:45:43:18:0b:7d:bc: d2:ff:a9:42:d2:c4:65:04:62:55:57:b4:c5:88:c4:95:e3:0f: 9f:ee:8d:07:8c:1b:c1:82:a1:90:df:85:99:88:09:42:7d:92: c6:f6:09:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKmsjWcDuB8OePMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk ZWZjMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk ZDhmNjg2NTItM2I4MC00ZTk0LWI3YzQtYzFiMzZlMTI3ZTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT9LaRuRqBevowMQ/XNHZ9ZLcMiKdMMG36tQ qxe7C/yHm8+D5Ll0yjtGNRemh8UlkqrJC8gjqExt/w5j0gfgq75BXk9hxoOOYI2A EQHG/TPilosO7HXp/+EobzwgNMQXwQUgCnP+jCjv3XUeY71VUbzhjGKMouBhNSOR KWWQz5JxEQlcEgWwQgr1lbSKTOFJ+Ih59pqbDIAiHv2DbQK+rlA0oHefaj62RFgh euRBh0HOiWveEusxkKpAonDp8656amCvZE/kDe5AyG8zx4D/KYY2IXIpJJvPlhhv d2RhElOjt3g7NFyU6tqyTFkTBosbqWQoXAeH5dRJ7ZzCbhroGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCg8g0VhK0aNlA4AQjChxHsT4gIbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvY2JjNzRkMTMtNzJkMS0z NThjLTk4YWQtZTdiMjdmZjRkODRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw NjJiYmRlZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9dHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdo+c54QpFaHn5HO2IRMVlQWBvbjWuUYWI3FEN67Rv+5YiGLLYbxP6o gw3AidVyZr6JeVrwX/Az0nuBu4hRDx2ts6VkpGH1Jo9Jz+UIfd/GwI8td4JkwHmc M77qchc2fD9o4s292KGlr4oGB5vdFnOlx4MrjCaodVAoADOpja5oDX52yWI+oohn GjFu+lgolI4sC7I9TmX9R7MB7VlMN4UARB7sDH/w4+5gwJz9yHwga53tgFciqxJs 2q5vYqDWfyTLmsrcajG1D/7whvXlRHxgXkVDGAt9vNL/qULSxGUEYlVXtMWIxJXj D5/ujQeMG8GCoZDfhZmICUJ9ksb2CUo= -----END CERTIFICATE-----Generated at Thu Mar 26 08:34:56 2026 by rpki-client