$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232/02a99f07-8e81-33cf-a3e4-39b637121671.roa File: 02a99f07-8e81-33cf-a3e4-39b637121671.roa (raw, json) Hash identifier: bCfhS21FoKMWsq1wi4yT9BN3s1tKfdDbyhAeI3ekrNc= Subject key identifier: 29:CA:A7:42:C8:ED:DD:FD:B1:13:EC:52:DD:40:41:26:DA:40:DA:8C Certificate issuer: /CN=9b4862b0-8a7d-4d69-bc18-38b430a8c232 Certificate serial: 010D0C9F4328584D300A3AC4CA31532E13BDD400 Authority key identifier: 30:C6:EC:74:BB:9F:46:DC:2C:85:0C:72:B8:78:D5:FE:A1:22:2C:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232/02a99f07-8e81-33cf-a3e4-39b637121671.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 32220 IP address blocks: 24.233.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232/9b4862b0-8a7d-4d69-bc18-38b430a8c232.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232/9b4862b0-8a7d-4d69-bc18-38b430a8c232.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:3a:c4:ca:31:53:2e:13:bd:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b4862b0-8a7d-4d69-bc18-38b430a8c232 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=e82416e5-0691-4c10-b710-c7b6d11576eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e2:de:4a:9f:d2:06:f5:c8:b8:af:3a:f1:61: 9c:fa:d4:57:39:c6:ea:ad:b0:e7:fa:56:48:d7:8f: f6:72:8e:42:8b:8f:9a:2c:73:34:67:e1:d5:53:e7: 70:24:5b:9c:5d:58:42:e8:6b:1a:af:f2:94:d9:0c: 71:28:64:cf:69:c6:b4:b6:9f:68:54:cc:bf:a6:39: 71:67:56:8f:2f:28:e6:0d:c0:86:87:67:da:23:32: 2c:94:1c:ff:98:92:8b:ab:82:f9:ef:0c:9d:f7:b7: 20:99:bb:81:0a:dc:b3:e0:5f:f4:c9:07:86:92:f7: c9:93:30:c9:c3:8c:41:29:12:18:f2:1c:dd:31:0a: 3d:f4:2a:9c:9e:cc:29:e2:d2:97:f7:4f:a2:a7:e1: 09:c0:0a:0c:3e:7d:55:05:11:6e:f1:6d:1e:3a:04: 27:c5:ab:f0:94:e4:76:cf:69:1c:15:98:c9:31:41: 2d:f8:14:6e:6c:48:2a:38:19:d0:f7:83:69:96:40: 30:c0:50:1d:1c:c9:75:37:4d:e4:5b:1c:66:17:8b: 92:98:c1:7d:ec:e0:ae:ee:1d:f3:14:62:a8:a3:5a: 46:e4:28:e7:7b:92:23:62:ac:40:4a:d1:4f:36:92: c3:b5:3b:00:35:4a:bd:d6:8d:f8:5a:d0:8a:d0:c8: bd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:CA:A7:42:C8:ED:DD:FD:B1:13:EC:52:DD:40:41:26:DA:40:DA:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232/02a99f07-8e81-33cf-a3e4-39b637121671.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232/9b4862b0-8a7d-4d69-bc18-38b430a8c232.crl X509v3 Authority Key Identifier: keyid:30:C6:EC:74:BB:9F:46:DC:2C:85:0C:72:B8:78:D5:FE:A1:22:2C:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232.cer sbgp-ipAddrBlock: critical IPv4: 24.233.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:1d:cd:ba:dd:a3:9c:5c:1c:5f:3f:5b:f4:9c:0b:c6:2c:28: 5a:a6:b7:b8:85:39:09:9a:c8:2a:33:c3:1e:91:91:7b:c7:aa: ab:36:37:28:06:d6:15:56:e2:b0:5b:dd:4c:4e:f1:a5:87:76: 29:89:31:92:8d:c7:0c:37:69:db:13:b0:3f:c9:cc:04:96:b0: 8e:71:6a:e9:e9:ca:b9:54:36:71:c5:d4:28:4d:ee:46:2a:10: b9:bd:bc:54:ac:9a:9f:63:e5:b8:10:0b:b9:f5:b4:78:43:1f: d9:cc:15:2e:56:94:a8:7d:47:3e:c1:9c:ef:fc:60:b4:ff:53: 6b:be:3a:c6:44:83:6b:11:82:6a:53:80:07:5b:47:20:02:9f: 67:e3:75:bd:d8:c0:bf:cf:f0:1d:42:97:d2:e5:68:8b:66:f7: ec:b8:58:9e:60:e3:73:5c:26:8b:94:17:cc:8d:56:77:4b:4d: 6e:e7:68:60:75:9e:c8:a3:93:53:1c:43:3e:05:c6:c8:2d:32: d6:0c:4a:9f:53:1f:1d:d2:68:33:09:a7:b1:7f:be:fc:a6:64: aa:f5:e0:65:3b:2f:9c:65:d7:27:07:8d:e9:fa:d8:c5:a6:b4: c1:5a:22:34:7b:c0:55:22:d4:53:1a:0c:33:23:ca:fb:40:28: 07:ae:8d:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCjrEyjFTLhO91AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWI0ODYyYjAtOGE3ZC00ZDY5LWJjMTgtMzhiNDMwYThj MjMyMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZTgyNDE2ZTUtMDY5MS00YzEwLWI3MTAtYzdiNmQxMTU3NmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeLeSp/SBvXIuK868WGc+tRXOcbqrbDn+lZI 14/2co5Ci4+aLHM0Z+HVU+dwJFucXVhC6Gsar/KU2QxxKGTPaca0tp9oVMy/pjlx Z1aPLyjmDcCGh2faIzIslBz/mJKLq4L57wyd97cgmbuBCtyz4F/0yQeGkvfJkzDJ w4xBKRIY8hzdMQo99Cqcnswp4tKX90+ip+EJwAoMPn1VBRFu8W0eOgQnxavwlOR2 z2kcFZjJMUEt+BRubEgqOBnQ94NplkAwwFAdHMl1N03kWxxmF4uSmMF97OCu7h3z FGKoo1pG5Cjne5IjYqxAStFPNpLDtTsANUq91o34WtCK0Mi9ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnKp0LI7d39sRPsUt1AQSbaQNqMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85YjQ4 NjJiMC04YTdkLTRkNjktYmMxOC0zOGI0MzBhOGMyMzIvMDJhOTlmMDctOGU4MS0z M2NmLWEzZTQtMzliNjM3MTIxNjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWI0ODYyYjAtOGE3ZC00ZDY5LWJj MTgtMzhiNDMwYThjMjMyLzliNDg2MmIwLThhN2QtNGQ2OS1iYzE4LTM4YjQzMGE4 YzIzMi5jcmwwHwYDVR0jBBgwFoAUMMbsdLufRtwshQxyuHjV/qEiLFkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85YjQ4NjJiMC04YTdkLTRkNjktYmMxOC0zOGI0 MzBhOGMyMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGOlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0dzbrdo5xcHF8/W/ScC8YsKFqmt7iFOQmayCozwx6RkXvHqqs2NygG 1hVW4rBb3UxO8aWHdimJMZKNxww3adsTsD/JzASWsI5xaunpyrlUNnHF1ChN7kYq ELm9vFSsmp9j5bgQC7n1tHhDH9nMFS5WlKh9Rz7BnO/8YLT/U2u+OsZEg2sRgmpT gAdbRyACn2fjdb3YwL/P8B1Cl9LlaItm9+y4WJ5g43NcJouUF8yNVndLTW7naGB1 nsijk1McQz4FxsgtMtYMSp9THx3SaDMJp7F/vvymZKr14GU7L5xl1ycHjen62MWm tMFaIjR7wFUi1FMaDDMjyvtAKAeujSo= -----END CERTIFICATE-----Generated at Thu Mar 26 10:57:07 2026 by rpki-client