$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1424fbc-ead2-49df-84a4-74d708933d62/3d0ac9fc-8378-36d0-82a8-b10dd2e608b4.roa File: 3d0ac9fc-8378-36d0-82a8-b10dd2e608b4.roa (raw, json) Hash identifier: yZGCj2ZKjUCbf7weXs00Ku1qWD4LLrDpXmmPoqlDKcY= Subject key identifier: A9:19:EE:18:96:E6:87:01:BC:89:53:B1:99:EF:40:40:A4:3C:E0:4B Certificate issuer: /CN=b1424fbc-ead2-49df-84a4-74d708933d62 Certificate serial: 010D0C9F4328584D5243C7BB9C0B437C728C3180 Authority key identifier: 24:4A:19:DE:B8:80:D1:5C:1F:C3:7A:4D:43:0E:FD:63:C1:7B:27:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1424fbc-ead2-49df-84a4-74d708933d62.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1424fbc-ead2-49df-84a4-74d708933d62/3d0ac9fc-8378-36d0-82a8-b10dd2e608b4.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 393866 IP address blocks: 216.203.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1424fbc-ead2-49df-84a4-74d708933d62/b1424fbc-ead2-49df-84a4-74d708933d62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1424fbc-ead2-49df-84a4-74d708933d62/b1424fbc-ead2-49df-84a4-74d708933d62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1424fbc-ead2-49df-84a4-74d708933d62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:c7:bb:9c:0b:43:7c:72:8c:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1424fbc-ead2-49df-84a4-74d708933d62 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=c64df0cb-c1d5-4823-9c05-e366eb56fe01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0a:4e:f3:3c:40:95:30:3f:0c:0d:51:23:8d: d2:f9:a0:ce:75:bf:a6:70:e3:8e:65:7b:27:6b:38: 98:ee:cf:10:65:a1:81:ee:a8:34:45:47:0a:53:c4: ba:1d:3d:4d:8a:49:11:fa:cb:35:24:60:e5:77:04: 7e:1d:6a:58:11:3e:a4:3a:81:0e:93:4f:4c:4f:7f: 48:5f:3f:1a:80:b2:21:24:14:d5:24:01:77:2d:53: 29:84:a0:ad:82:22:87:15:74:70:43:f4:fd:85:f5: a8:1c:9f:5c:8f:f6:ab:f9:45:a1:08:1b:ee:9f:87: c2:15:b9:88:4f:b1:6f:1a:db:0e:aa:bd:9c:66:d0: de:5f:8f:b2:73:c9:0a:5d:91:9a:1a:a2:bd:75:92: 28:85:e4:f2:48:0f:10:99:f6:1f:b8:cf:9f:b6:92: 13:a8:7a:37:40:8a:f2:81:ea:56:c3:4e:5c:07:0d: 73:b9:c6:c5:52:38:da:2c:34:45:45:92:bc:36:30: 26:d9:0a:35:89:9d:9b:00:ca:6e:ef:4e:7a:cb:46: e5:ce:b9:c2:58:15:b2:e8:e1:13:f6:ff:00:5b:40: e0:5a:34:22:0b:39:06:bf:ef:ed:bf:8a:72:2d:d0: 5a:76:89:e1:40:7f:c0:67:60:b1:7f:9e:54:ff:41: 60:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:19:EE:18:96:E6:87:01:BC:89:53:B1:99:EF:40:40:A4:3C:E0:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1424fbc-ead2-49df-84a4-74d708933d62/3d0ac9fc-8378-36d0-82a8-b10dd2e608b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1424fbc-ead2-49df-84a4-74d708933d62/b1424fbc-ead2-49df-84a4-74d708933d62.crl X509v3 Authority Key Identifier: keyid:24:4A:19:DE:B8:80:D1:5C:1F:C3:7A:4D:43:0E:FD:63:C1:7B:27:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1424fbc-ead2-49df-84a4-74d708933d62.cer sbgp-ipAddrBlock: critical IPv4: 216.203.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:e6:40:6c:7f:9b:e9:21:4f:91:c4:c4:0f:35:f3:46:78:33: 4e:7e:5e:dc:ac:c6:99:42:57:03:2d:95:3c:a8:64:4b:7b:91: 81:53:e0:66:80:4b:2b:3c:6d:4d:5b:72:cb:cf:1f:ab:67:c4: 69:b4:c5:ab:cd:2b:ed:34:b5:46:74:56:c8:c9:43:6e:45:02: fd:65:89:ce:e8:3d:35:ca:ba:a5:76:66:41:44:d7:54:0a:fb: bf:08:66:b3:1a:9c:16:f4:63:bc:d0:3c:9d:ba:77:74:8b:2c: 9e:11:9a:b0:a3:d0:38:fa:9b:3d:0c:4e:9a:5b:52:98:0b:e3: ee:8e:d7:0e:24:46:71:ca:80:20:24:b0:8f:a9:95:f0:14:fb: 9a:7a:d6:62:87:6b:99:6d:ce:d1:01:1e:82:ee:4d:fa:db:0f: ec:63:fd:2b:7a:e8:77:ef:ef:94:08:37:d5:90:63:c5:24:df: 30:53:ea:24:16:36:03:97:14:18:28:dc:67:ab:65:7a:15:3a: e5:dc:d2:d6:8e:73:ef:94:64:e0:3d:6f:52:18:dd:7d:33:58: a1:88:a7:6b:7a:81:ab:8d:37:d6:c7:74:7e:03:41:7e:70:a0: 21:1c:24:80:29:06:5f:48:fe:bb:c6:0c:22:4c:f5:6a:da:d9: 9f:1d:49:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ8e7nAtDfHKMMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjE0MjRmYmMtZWFkMi00OWRmLTg0YTQtNzRkNzA4OTMz ZDYyMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk YzY0ZGYwY2ItYzFkNS00ODIzLTljMDUtZTM2NmViNTZmZTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgpO8zxAlTA/DA1RI43S+aDOdb+mcOOOZXsn aziY7s8QZaGB7qg0RUcKU8S6HT1NikkR+ss1JGDldwR+HWpYET6kOoEOk09MT39I Xz8agLIhJBTVJAF3LVMphKCtgiKHFXRwQ/T9hfWoHJ9cj/ar+UWhCBvun4fCFbmI T7FvGtsOqr2cZtDeX4+yc8kKXZGaGqK9dZIoheTySA8QmfYfuM+ftpITqHo3QIry gepWw05cBw1zucbFUjjaLDRFRZK8NjAm2Qo1iZ2bAMpu7056y0blzrnCWBWy6OET 9v8AW0DgWjQiCzkGv+/tv4pyLdBadonhQH/AZ2Cxf55U/0FgQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkZ7hiW5ocBvIlTsZnvQECkPOBLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iMTQy NGZiYy1lYWQyLTQ5ZGYtODRhNC03NGQ3MDg5MzNkNjIvM2QwYWM5ZmMtODM3OC0z NmQwLTgyYTgtYjEwZGQyZTYwOGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjE0MjRmYmMtZWFkMi00OWRmLTg0 YTQtNzRkNzA4OTMzZDYyL2IxNDI0ZmJjLWVhZDItNDlkZi04NGE0LTc0ZDcwODkz M2Q2Mi5jcmwwHwYDVR0jBBgwFoAUJEoZ3riA0Vwfw3pNQw79Y8F7J6YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iMTQyNGZiYy1lYWQyLTQ5ZGYtODRhNC03NGQ3 MDg5MzNkNjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2MsdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXmQGx/m+khT5HExA8180Z4M05+XtysxplCVwMtlTyoZEt7kYFT4GaA Sys8bU1bcsvPH6tnxGm0xavNK+00tUZ0VsjJQ25FAv1lic7oPTXKuqV2ZkFE11QK +78IZrManBb0Y7zQPJ26d3SLLJ4RmrCj0Dj6mz0MTppbUpgL4+6O1w4kRnHKgCAk sI+plfAU+5p61mKHa5ltztEBHoLuTfrbD+xj/St66Hfv75QIN9WQY8Uk3zBT6iQW NgOXFBgo3GerZXoVOuXc0taOc++UZOA9b1IY3X0zWKGIp2t6gauNN9bHdH4DQX5w oCEcJIApBl9I/rvGDCJM9Wra2Z8dSUs= -----END CERTIFICATE-----Generated at Wed Apr 8 23:06:16 2026 by rpki-client