$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/c1539d45-e25a-3367-9754-f7eba01827f3.roa File: c1539d45-e25a-3367-9754-f7eba01827f3.roa (raw, json) Hash identifier: 4M80u915qA2i+AWb131p3MeJYCqSblt16j1T31o45F4= Subject key identifier: 81:A6:58:7D:79:69:B2:13:21:9B:2B:2C:6D:CC:D6:98:A3:05:1C:F6 Certificate issuer: /CN=968bda65-4161-4dee-a348-29486c17acb2 Certificate serial: 010D0C9F4328584D492A7ED34A80A4414FBCB880 Authority key identifier: C1:27:54:97:DA:CC:09:8C:4C:78:60:01:D1:F3:4E:01:B1:F1:3A:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/c1539d45-e25a-3367-9754-f7eba01827f3.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 31898 IP address blocks: 192.30.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:7e:d3:4a:80:a4:41:4f:bc:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968bda65-4161-4dee-a348-29486c17acb2 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=3133d1f9-dd80-4e80-ac61-291dd7cbe6bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d5:2f:5d:19:86:7b:74:39:ba:1c:7b:1f:a4: 30:98:28:e7:63:72:ee:d0:1e:0e:c8:09:25:c1:4a: 6b:59:3d:85:d6:d9:73:b7:eb:0f:73:c3:ae:29:04: 2a:d3:bc:50:23:3f:ae:49:ae:f2:21:f0:3f:dd:5c: 33:8d:de:bc:5f:0d:23:2a:78:fd:83:a6:a5:2e:52: 7e:72:fc:6a:b4:ca:8e:b9:31:19:07:17:9b:08:46: 58:f3:d3:dc:a8:df:cf:08:cb:b8:69:4c:cd:7b:3b: eb:d3:27:e6:4d:da:e0:05:7f:f8:14:e7:de:f4:4a: 06:e3:fe:ba:63:64:c3:f1:2b:a7:93:87:46:17:4f: b3:84:bc:1c:3a:4d:2f:0a:5c:11:81:1b:51:82:74: ed:c5:f0:7f:3c:01:fa:62:68:c8:be:0d:42:58:04: 38:28:aa:b7:94:fe:19:2a:98:99:d9:12:75:3a:83: ed:07:a9:6d:07:d1:f7:da:0e:5b:65:09:ab:87:10: 00:99:f7:15:81:d2:7a:d1:97:d5:ea:f3:de:7e:53: f8:14:5f:ae:f9:b3:60:97:00:da:f9:fe:a1:6f:50: f0:00:1f:11:bc:8e:2c:94:ae:ee:54:bc:9e:c2:1c: 29:7c:65:dc:03:af:e8:99:0f:3c:d5:24:6d:49:5b: fe:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A6:58:7D:79:69:B2:13:21:9B:2B:2C:6D:CC:D6:98:A3:05:1C:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/c1539d45-e25a-3367-9754-f7eba01827f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.crl X509v3 Authority Key Identifier: keyid:C1:27:54:97:DA:CC:09:8C:4C:78:60:01:D1:F3:4E:01:B1:F1:3A:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2.cer sbgp-ipAddrBlock: critical IPv4: 192.30.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:6f:2c:6f:c0:90:0a:92:a8:53:71:63:e7:13:a6:92:d3:6f: 01:2f:05:c7:2d:86:39:a5:18:1b:cd:02:d7:24:32:a3:37:b3: 3a:e1:24:13:4a:29:b8:77:ca:23:5c:80:22:11:7c:22:9e:a9: ae:19:27:1f:a7:50:24:63:b7:ec:2e:f4:1f:17:19:b4:e6:e4: 90:dd:f5:db:ca:f5:d5:03:63:4f:e1:c1:dc:bd:fe:52:b0:19: 8f:08:eb:e6:96:65:2c:c7:08:fd:b8:bb:a5:a6:70:9a:1b:ca: c8:08:ac:ea:66:3c:ee:8e:44:9c:19:3c:8d:fd:64:61:6f:12: ca:f1:f9:ce:e7:74:a1:53:3a:d5:ec:61:8a:5b:f9:40:f3:55: 80:bd:d1:2f:ab:af:ed:f3:4e:04:f3:3b:d3:fc:51:44:68:e6: 68:ab:9d:44:99:5b:69:79:03:9e:e3:f5:23:ad:30:7a:5a:5c: ef:1e:24:c3:89:42:c8:f6:0e:f3:f0:82:bd:51:65:c7:3e:fa: 1b:fe:36:14:4f:d2:4e:ba:29:05:0f:27:77:bf:cb:86:e2:18: 89:b1:34:1d:2a:1c:5c:cf:b2:55:b5:ad:1e:d8:72:6f:ae:fb: cf:25:3b:f0:12:18:93:b3:a5:0f:43:3e:4f:fc:45:1d:6b:72: a3:fb:33:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKn7TSoCkQU+8uIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY4YmRhNjUtNDE2MS00ZGVlLWEzNDgtMjk0ODZjMTdh Y2IyMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk MzEzM2QxZjktZGQ4MC00ZTgwLWFjNjEtMjkxZGQ3Y2JlNmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdUvXRmGe3Q5uhx7H6QwmCjnY3Lu0B4OyAkl wUprWT2F1tlzt+sPc8OuKQQq07xQIz+uSa7yIfA/3Vwzjd68Xw0jKnj9g6alLlJ+ cvxqtMqOuTEZBxebCEZY89PcqN/PCMu4aUzNezvr0yfmTdrgBX/4FOfe9EoG4/66 Y2TD8Sunk4dGF0+zhLwcOk0vClwRgRtRgnTtxfB/PAH6YmjIvg1CWAQ4KKq3lP4Z KpiZ2RJ1OoPtB6ltB9H32g5bZQmrhxAAmfcVgdJ60ZfV6vPeflP4FF+u+bNglwDa +f6hb1DwAB8RvI4slK7uVLyewhwpfGXcA6/omQ881SRtSVv+twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGmWH15abITIZsrLG3M1pijBRz2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85Njhi ZGE2NS00MTYxLTRkZWUtYTM0OC0yOTQ4NmMxN2FjYjIvYzE1MzlkNDUtZTI1YS0z MzY3LTk3NTQtZjdlYmEwMTgyN2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTY4YmRhNjUtNDE2MS00ZGVlLWEz NDgtMjk0ODZjMTdhY2IyLzk2OGJkYTY1LTQxNjEtNGRlZS1hMzQ4LTI5NDg2YzE3 YWNiMi5jcmwwHwYDVR0jBBgwFoAUwSdUl9rMCYxMeGAB0fNOAbHxOkQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85NjhiZGE2NS00MTYxLTRkZWUtYTM0OC0yOTQ4 NmMxN2FjYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB7fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZvLG/AkAqSqFNxY+cTppLTbwEvBccthjmlGBvNAtckMqM3szrhJBNK Kbh3yiNcgCIRfCKeqa4ZJx+nUCRjt+wu9B8XGbTm5JDd9dvK9dUDY0/hwdy9/lKw GY8I6+aWZSzHCP24u6WmcJobysgIrOpmPO6ORJwZPI39ZGFvEsrx+c7ndKFTOtXs YYpb+UDzVYC90S+rr+3zTgTzO9P8UURo5mirnUSZW2l5A57j9SOtMHpaXO8eJMOJ Qsj2DvPwgr1RZcc++hv+NhRP0k66KQUPJ3e/y4biGImxNB0qHFzPslW1rR7Ycm+u +88lO/ASGJOzpQ9DPk/8RR1rcqP7Mw8= -----END CERTIFICATE-----Generated at Thu Mar 26 16:07:51 2026 by rpki-client