$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/9af2c8b6-535e-3fd8-a8b9-b80572f8d1ca.roa File: 9af2c8b6-535e-3fd8-a8b9-b80572f8d1ca.roa (raw, json) Hash identifier: VAk9VMm4r+gfZZwpoOKhK98G2+ulXqKzz+2EVFzoUbM= Subject key identifier: 21:E6:27:00:E5:E8:8A:8F:83:4D:D9:19:BD:D9:5F:A7:0F:A6:AB:7F Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Certificate serial: 010D0C9F4328584D3DFFB16A813CC778EDBE7000 Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/9af2c8b6-535e-3fd8-a8b9-b80572f8d1ca.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 13807 IP address blocks: 192.189.248.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:b1:6a:81:3c:c7:78:ed:be:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=16871e50-08d6-4f02-987d-8cd71a1b5b1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:35:20:fb:9c:68:9d:eb:14:91:56:e4:f2:65: 2f:c7:d4:fa:72:60:49:82:31:57:9f:09:3b:8d:9e: a6:29:62:54:64:da:1b:5b:7d:ce:7d:d9:27:09:7d: 4f:f8:d0:c5:6c:ef:12:9a:08:97:50:82:93:fa:0f: 24:53:ac:c2:0f:17:7e:1c:66:a7:ac:76:4f:5a:41: 16:32:59:5d:0f:11:7f:7b:b6:b6:8d:1c:d3:6c:70: 27:f7:ed:c7:6b:e1:08:42:f6:aa:b3:94:4e:31:16: 89:e3:a5:aa:82:8c:3d:ed:f8:66:09:fc:88:51:66: 0e:61:33:03:16:c7:5a:a7:e3:9f:c4:38:4c:88:ce: 06:6b:4a:8b:2d:09:bf:83:44:1e:5b:e8:13:de:12: e5:05:df:88:7d:4d:6b:cd:d1:41:5a:42:f0:bc:cf: 63:79:0d:d5:d7:96:51:c1:f7:95:29:e7:19:9f:01: 04:2c:c0:6b:3d:e2:d2:22:8c:78:ee:04:03:f0:6e: ab:29:7e:34:1b:2a:d8:ac:70:cb:34:e2:d6:14:fc: 05:01:4e:74:5a:99:38:d1:a7:c7:4d:44:6a:2b:b7: 5e:d9:b6:f4:d7:a2:50:48:41:3a:f8:2f:c8:e6:d1: df:f4:0c:0d:b5:45:3b:2c:10:7e:dc:66:42:4e:4b: 71:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E6:27:00:E5:E8:8A:8F:83:4D:D9:19:BD:D9:5F:A7:0F:A6:AB:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/9af2c8b6-535e-3fd8-a8b9-b80572f8d1ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl X509v3 Authority Key Identifier: keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer sbgp-ipAddrBlock: critical IPv4: 192.189.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:26:c9:ac:e2:00:6e:ff:bf:0a:d7:55:f2:66:53:f1:35:6e: c9:2d:e0:df:e7:2e:58:82:9c:ce:99:05:77:01:bb:3e:6d:04: b4:69:32:06:07:db:5c:25:15:54:81:46:07:68:91:29:8f:0b: b9:00:31:df:95:50:0b:bb:5d:b9:2b:3a:43:49:55:50:26:19: 81:d8:48:28:a0:db:a6:5c:fa:08:33:16:a1:fb:63:6d:80:98: 75:6b:e9:3c:97:34:46:3f:d3:71:a5:9a:3c:bd:16:6e:e9:a9: 47:fd:df:fa:2c:06:1b:f9:7b:97:b6:49:60:76:9f:bf:de:27: 77:2d:cc:a0:c2:ff:93:8d:6e:43:f4:c6:82:b2:87:1c:97:ab: 5b:16:61:f3:51:fa:46:c7:15:23:1e:5c:03:e5:3d:f6:10:5f: 93:94:a8:64:11:17:42:e9:b5:1a:da:73:59:50:eb:7f:ec:61: 51:51:a4:7a:be:19:a0:75:b7:21:2b:6e:83:91:81:c2:09:f0: bc:d3:9c:a4:da:ac:3a:ef:f5:eb:dc:69:ac:31:68:a5:28:ed: 9e:b8:bc:0b:45:16:45:71:b4:9f:ff:bc:c5:9c:c0:e4:1d:de: 04:f4:e2:95:c8:01:58:5c:3a:42:fd:63:e2:31:77:bd:73:b7: 3d:5f:98:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/7FqgTzHeO2+cAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw NTM2MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MTY4NzFlNTAtMDhkNi00ZjAyLTk4N2QtOGNkNzFhMWI1YjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjUg+5xonesUkVbk8mUvx9T6cmBJgjFXnwk7 jZ6mKWJUZNobW33OfdknCX1P+NDFbO8SmgiXUIKT+g8kU6zCDxd+HGanrHZPWkEW MlldDxF/e7a2jRzTbHAn9+3Ha+EIQvaqs5ROMRaJ46Wqgow97fhmCfyIUWYOYTMD Fsdap+OfxDhMiM4Ga0qLLQm/g0QeW+gT3hLlBd+IfU1rzdFBWkLwvM9jeQ3V15ZR wfeVKecZnwEELMBrPeLSIox47gQD8G6rKX40GyrYrHDLNOLWFPwFAU50Wpk40afH TURqK7de2bb016JQSEE6+C/I5tHf9AwNtUU7LBB+3GZCTktxPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHmJwDl6IqPg03ZGb3ZX6cPpqt/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvOWFmMmM4YjYtNTM1ZS0z ZmQ4LWE4YjktYjgwNTcyZjhkMWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3 OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh ZWUwYzA1MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL34MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsmyaziAG7/vwrXVfJmU/E1bskt4N/nLliCnM6ZBXcBuz5tBLRpMgYH 21wlFVSBRgdokSmPC7kAMd+VUAu7XbkrOkNJVVAmGYHYSCig26Zc+ggzFqH7Y22A mHVr6TyXNEY/03Glmjy9Fm7pqUf93/osBhv5e5e2SWB2n7/eJ3ctzKDC/5ONbkP0 xoKyhxyXq1sWYfNR+kbHFSMeXAPlPfYQX5OUqGQRF0LptRrac1lQ63/sYVFRpHq+ GaB1tyErboORgcIJ8LzTnKTarDrv9evcaawxaKUo7Z64vAtFFkVxtJ//vMWcwOQd 3gT04pXIAVhcOkL9Y+Ixd71ztz1fmCE= -----END CERTIFICATE-----Generated at Thu Mar 26 03:33:01 2026 by rpki-client