$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/85393fe7-712a-3e81-ab68-4d49a239e152.roa File: 85393fe7-712a-3e81-ab68-4d49a239e152.roa (raw, json) Hash identifier: NMKYHOtneuBZ8tQf+EZQLWvHJp7bkldvCj3WdQZhoRQ= Subject key identifier: A3:5F:8C:CF:BB:7A:5D:A8:C7:F9:6A:52:9A:81:69:C4:26:C8:26:3E Certificate issuer: /CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Certificate serial: 010D0C9F4328584D1B1A13F295532809D83FE0B0 Authority key identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/85393fe7-712a-3e81-ab68-4d49a239e152.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 16509 IP address blocks: 168.203.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:13:f2:95:53:28:09:d8:3f:e0:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=c03a85d2-b272-4d57-b372-aafade38648b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:67:35:82:3a:55:e6:ee:94:93:99:af:74:bf: db:6f:4f:13:c6:50:21:c3:86:a0:13:f5:56:6c:11: 05:8f:e3:5d:83:44:c9:dc:9f:96:36:06:f8:c7:48: 1f:70:53:36:16:de:a3:0a:d6:c6:e1:72:3a:a1:87: de:dc:07:30:bf:1c:85:d1:fa:0d:b0:1f:2e:bf:0c: bc:08:31:25:a3:86:49:56:10:fc:e9:00:85:cb:43: 8c:f1:dd:5a:3c:66:28:d3:7f:cf:c3:4a:14:4f:6d: d8:bb:c9:12:1f:99:24:3a:5f:d4:17:8e:65:f2:74: 84:c9:3d:c0:3f:59:60:13:f0:d0:09:cd:9f:34:0e: c9:14:f9:13:25:f7:ce:1f:00:34:1a:d1:8f:7b:31: f2:d3:49:13:27:1c:70:8b:8b:0f:c3:54:98:ff:0d: 57:c0:59:ad:fa:81:19:4e:83:ff:e6:d6:a4:ab:c0: 7f:17:fc:d4:8c:ef:ad:12:49:b8:10:2d:bc:bd:ef: 18:a1:b6:f1:9c:f6:94:bb:23:87:9a:f5:ac:06:bc: 7d:09:e2:47:2e:93:2c:14:c7:d8:de:d0:5b:02:74: 68:de:a5:40:45:b6:b7:bd:25:4f:69:61:4a:93:53: fc:58:23:06:70:1a:d3:31:0d:f1:e6:04:41:bf:75: a9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:5F:8C:CF:BB:7A:5D:A8:C7:F9:6A:52:9A:81:69:C4:26:C8:26:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/85393fe7-712a-3e81-ab68-4d49a239e152.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl X509v3 Authority Key Identifier: keyid:31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer sbgp-ipAddrBlock: critical IPv4: 168.203.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:75:05:2d:6d:ed:ca:0a:4a:34:10:8b:a4:ba:bc:79:e4:81: b8:1f:01:a7:33:2e:96:dc:a3:a4:ed:76:80:fb:fb:bc:62:33: 51:b7:58:13:c3:65:32:cf:db:1c:1a:14:40:00:d9:e8:7b:12: 00:cd:a0:25:ab:a6:30:e6:1d:35:4f:0b:9a:41:c3:83:b9:7a: a3:8f:e1:e1:d7:21:bd:c4:7b:80:81:64:93:0b:ae:88:72:a9: f6:46:57:3d:bd:7d:b3:f6:be:b7:5c:85:73:01:47:91:24:81: 26:46:03:c7:78:83:a5:be:16:2e:49:e0:da:37:08:88:11:ef: 88:ee:3c:0c:0f:a0:da:c8:48:43:fe:5f:f6:2c:77:ee:72:86: ea:73:90:f1:df:ec:78:d4:e7:c6:4a:d0:3e:c0:a3:24:6f:70: 59:e7:d5:6f:3b:a7:85:f7:86:16:5b:fe:92:27:a0:81:ad:dc: 17:cb:84:c8:05:ab:b7:9c:85:5a:21:f4:2e:cd:70:60:52:80: 53:c0:58:17:a4:91:61:39:c7:57:f6:c1:b7:a2:31:92:4d:0b: 4a:77:d3:f7:0f:94:7e:2a:dd:08:6d:30:a5:24:85:3e:b8:31: 0e:ab:d0:88:e1:b6:77:e4:57:1c:e4:9d:d4:61:ca:5a:7b:4b: aa:d2:3b:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGhPylVMoCdg/4LAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM4YzgzMTYtMDhkYy00YmVmLTk5ZjYtYTQxNmZmYTBi MDRhMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk YzAzYTg1ZDItYjI3Mi00ZDU3LWIzNzItYWFmYWRlMzg2NDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmc1gjpV5u6Uk5mvdL/bb08TxlAhw4agE/VW bBEFj+Ndg0TJ3J+WNgb4x0gfcFM2Ft6jCtbG4XI6oYfe3AcwvxyF0foNsB8uvwy8 CDElo4ZJVhD86QCFy0OM8d1aPGYo03/Pw0oUT23Yu8kSH5kkOl/UF45l8nSEyT3A P1lgE/DQCc2fNA7JFPkTJffOHwA0GtGPezHy00kTJxxwi4sPw1SY/w1XwFmt+oEZ ToP/5takq8B/F/zUjO+tEkm4EC28ve8YobbxnPaUuyOHmvWsBrx9CeJHLpMsFMfY 3tBbAnRo3qVARba3vSVPaWFKk1P8WCMGcBrTMQ3x5gRBv3WpDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNfjM+7el2ox/lqUpqBacQmyCY+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81Yzhj ODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2ZmZhMGIwNGEvODUzOTNmZTctNzEyYS0z ZTgxLWFiNjgtNGQ0OWEyMzllMTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWM4YzgzMTYtMDhkYy00YmVmLTk5 ZjYtYTQxNmZmYTBiMDRhLzVjOGM4MzE2LTA4ZGMtNGJlZi05OWY2LWE0MTZmZmEw YjA0YS5jcmwwHwYDVR0jBBgwFoAUMTSeCHAsq7KeL7SqUigmFPMcCSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81YzhjODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2 ZmZhMGIwNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqMs/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJR1BS1t7coKSjQQi6S6vHnkgbgfAaczLpbco6TtdoD7+7xiM1G3WBPD ZTLP2xwaFEAA2eh7EgDNoCWrpjDmHTVPC5pBw4O5eqOP4eHXIb3Ee4CBZJMLrohy qfZGVz29fbP2vrdchXMBR5EkgSZGA8d4g6W+Fi5J4No3CIgR74juPAwPoNrISEP+ X/Ysd+5yhupzkPHf7HjU58ZK0D7AoyRvcFnn1W87p4X3hhZb/pInoIGt3BfLhMgF q7echVoh9C7NcGBSgFPAWBekkWE5x1f2wbeiMZJNC0p30/cPlH4q3QhtMKUkhT64 MQ6r0IjhtnfkVxzkndRhylp7S6rSO14= -----END CERTIFICATE-----Generated at Tue Mar 24 16:49:34 2026 by rpki-client