$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8e36b8ab-b1b8-37a9-bf95-ef5f08b25f1c.roa File: 8e36b8ab-b1b8-37a9-bf95-ef5f08b25f1c.roa (raw, json) Hash identifier: 2cl/mD2vikAwzbkIWYX4ReDveXqISCJISk6GJOcRf6U= Subject key identifier: 24:05:FC:C8:D0:79:B4:98:D8:F2:25:44:76:90:30:FB:96:51:FF:7D Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F4328584D4A8F8F9A7A2E73D144710280 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8e36b8ab-b1b8-37a9-bf95-ef5f08b25f1c.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 1207 IP address blocks: 192.231.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:8f:9a:7a:2e:73:d1:44:71:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=3c67cc56-e269-441f-84a8-372e3afbb3e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d4:fa:e0:a8:8b:29:4a:df:d4:f8:7f:f7:6c: 96:06:05:3f:1a:6b:5e:af:5d:14:f6:cc:11:99:9a: 50:50:dc:3d:8b:78:7e:ec:1c:2f:e7:65:15:20:c8: 85:67:5e:83:41:e5:c6:f5:4d:8c:bd:1b:b2:ec:7b: f1:2a:da:2b:60:62:58:58:01:7a:c1:29:7a:98:3b: 92:d5:fa:e3:5b:3f:ff:84:01:01:9a:bb:d3:25:7b: 19:fb:97:d4:72:a0:b3:fb:05:a7:09:16:b2:b4:42: 50:e6:b0:54:a2:cf:72:63:a7:5c:68:cb:4b:0f:79: 8a:16:9c:a7:ec:f0:28:ea:e9:a6:00:99:76:57:29: 2b:51:aa:a5:bf:c4:d6:7b:af:da:2f:f7:34:67:93: f7:6e:c2:bb:81:5d:82:44:59:89:44:4f:56:c5:77: 8c:aa:02:96:cf:bb:78:da:54:b6:ae:41:66:73:be: 52:76:0e:25:2c:f3:5e:7e:ed:16:2c:68:c4:7a:e6: c1:ce:ea:8f:79:89:96:31:9e:90:60:f1:27:cc:7f: 80:5c:e1:e6:54:ef:fa:a2:ac:8e:b3:21:e1:9e:ad: 6e:04:fd:65:87:65:49:25:0f:2d:8a:c8:c7:a3:25: 0d:8a:c3:d3:a2:a6:98:10:07:76:03:34:bf:ac:8f: ca:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:05:FC:C8:D0:79:B4:98:D8:F2:25:44:76:90:30:FB:96:51:FF:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8e36b8ab-b1b8-37a9-bf95-ef5f08b25f1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 192.231.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:97:5e:e3:d1:7e:33:9c:95:84:5e:9a:a5:6e:a9:13:39:03: 57:ba:4c:91:89:77:05:04:b4:0b:fd:12:b3:91:88:08:3c:27: c0:9f:45:8e:2e:af:9d:e9:1e:17:32:b5:f3:6c:46:37:3c:bd: c8:9d:83:95:05:2a:4f:0d:6b:42:71:d6:6c:ec:19:40:43:28: e5:c4:96:a1:d0:24:a2:2c:d2:88:77:07:36:63:ad:4b:0d:57: 21:32:95:47:50:ed:6a:c7:30:05:22:dc:97:36:34:20:36:a3: 6d:b7:09:52:30:d1:b4:7f:57:a0:5e:63:3d:44:3a:99:ed:97: 00:e1:59:40:6b:22:0c:38:a4:06:a1:44:c8:b6:f0:62:4f:7b: a2:8d:7d:bf:ae:ed:eb:2e:d4:f3:97:21:5f:cb:a0:61:68:1c: 9a:c8:13:2a:21:9a:8c:d2:5c:ce:88:7a:15:16:08:28:42:a1: a6:9c:11:3a:d7:34:2f:ca:d6:11:61:a8:dd:a5:93:44:55:87: 00:20:28:f9:0c:4f:e9:bd:9f:bc:cb:af:af:3e:0f:c8:d3:2a: 77:92:f5:21:32:7f:da:4d:1b:0f:60:cc:4c:12:6c:5a:25:3b: 00:94:bc:3a:d5:c2:b1:54:25:57:81:2a:16:75:63:5a:5e:45: 08:0d:5c:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj4+aei5z0URxAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk M2M2N2NjNTYtZTI2OS00NDFmLTg0YTgtMzcyZTNhZmJiM2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodT64KiLKUrf1Ph/92yWBgU/Gmter10U9swR mZpQUNw9i3h+7Bwv52UVIMiFZ16DQeXG9U2MvRuy7HvxKtorYGJYWAF6wSl6mDuS 1frjWz//hAEBmrvTJXsZ+5fUcqCz+wWnCRaytEJQ5rBUos9yY6dcaMtLD3mKFpyn 7PAo6ummAJl2VykrUaqlv8TWe6/aL/c0Z5P3bsK7gV2CRFmJRE9WxXeMqgKWz7t4 2lS2rkFmc75Sdg4lLPNefu0WLGjEeubBzuqPeYmWMZ6QYPEnzH+AXOHmVO/6oqyO syHhnq1uBP1lh2VJJQ8tisjHoyUNisPToqaYEAd2AzS/rI/KWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQF/MjQebSY2PIlRHaQMPuWUf99MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvOGUzNmI4YWItYjFiOC0z N2E5LWJmOTUtZWY1ZjA4YjI1ZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOfzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyXXuPRfjOclYRemqVuqRM5A1e6TJGJdwUEtAv9ErORiAg8J8CfRY4u r53pHhcytfNsRjc8vcidg5UFKk8Na0Jx1mzsGUBDKOXElqHQJKIs0oh3BzZjrUsN VyEylUdQ7WrHMAUi3Jc2NCA2o223CVIw0bR/V6BeYz1EOpntlwDhWUBrIgw4pAah RMi28GJPe6KNfb+u7esu1POXIV/LoGFoHJrIEyohmozSXM6IehUWCChCoaacETrX NC/K1hFhqN2lk0RVhwAgKPkMT+m9n7zLr68+D8jTKneS9SEyf9pNGw9gzEwSbFol OwCUvDrVwrFUJVeBKhZ1Y1peRQgNXNQ= -----END CERTIFICATE-----Generated at Thu Mar 26 03:46:14 2026 by rpki-client