$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/2c4b35cf-7564-33b2-82cc-cee4d0eaab70.roa File: 2c4b35cf-7564-33b2-82cc-cee4d0eaab70.roa (raw, json) Hash identifier: bmHhw1prhVxopsGseEtuyPFKn2IDFGLH0pT3dQO7Qww= Subject key identifier: 01:7A:1D:4A:2B:52:3E:3E:B8:97:60:D9:B8:00:18:D4:C1:77:86:C1 Certificate issuer: /CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b Certificate serial: 010D0C9F4328584D2A74E0B83F4AFDCDB871CAE0 Authority key identifier: 19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/2c4b35cf-7564-33b2-82cc-cee4d0eaab70.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 5377 IP address blocks: 204.8.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:e0:b8:3f:4a:fd:cd:b8:71:ca:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=297fd964-4806-4a6a-adc7-5eceb7ca032f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5e:e2:97:cf:8c:51:c4:fd:1a:f0:b0:f1:7e: 71:bf:8a:be:28:e4:cb:08:5f:2a:71:cb:52:b6:58: 99:92:e4:e4:9c:22:70:85:39:c8:44:36:9b:0a:63: 7b:e9:d6:5f:02:8d:e7:d2:71:e8:4c:4d:fe:e8:e6: 1d:df:45:56:5b:87:d4:85:6a:e4:e1:49:0d:00:74: da:c8:51:55:21:5d:23:8c:b4:7e:ae:c8:60:3a:b7: c1:fa:66:c1:25:bd:a3:29:f2:19:9e:83:6b:33:9f: 36:af:85:8e:98:12:6d:22:d4:f5:37:52:79:ea:fe: 5d:ad:99:4f:79:86:3a:a6:ad:0d:38:f8:f9:f0:9c: 3e:c7:e4:6e:6b:ca:84:8b:42:d0:84:87:6f:e0:47: ba:ef:66:74:e6:6b:1d:07:a4:e9:e9:9c:9f:c7:82: 63:b9:55:39:1f:52:db:de:36:a9:9a:a0:ba:64:37: 1d:01:9e:f8:35:31:55:cb:8a:97:75:65:08:b2:de: 57:01:5a:6a:a7:91:ad:29:e6:fe:7f:17:3b:57:ac: 4b:61:8a:b4:d1:d9:5a:35:a3:e9:4c:c1:7d:4f:84: 76:94:6d:af:0a:7e:21:c4:b1:85:c6:17:8b:0c:37: 8b:17:a5:df:2c:a6:bb:5d:da:eb:e1:8b:7f:fd:97: c0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:7A:1D:4A:2B:52:3E:3E:B8:97:60:D9:B8:00:18:D4:C1:77:86:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/2c4b35cf-7564-33b2-82cc-cee4d0eaab70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl X509v3 Authority Key Identifier: keyid:19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer sbgp-ipAddrBlock: critical IPv4: 204.8.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:ff:2b:6c:c3:c8:79:a7:a8:69:8d:0a:e1:c5:61:c6:13:be: d5:26:3c:66:86:5e:92:43:78:1f:68:c9:7d:c8:07:ff:66:70: 6f:41:46:01:7c:9d:32:95:81:80:6f:70:c6:2b:e3:65:c8:94: 43:d5:9e:2d:7c:c8:25:5d:1f:04:53:2c:c5:31:3b:e6:e9:b2: f8:5d:d1:7a:ae:41:e4:b3:e1:29:b7:d4:7b:a3:ab:3a:9c:9c: 49:e8:ed:7d:dd:83:4c:b6:8d:69:3b:cc:07:ba:0c:d0:e9:20: 94:38:51:ab:d4:4d:ed:9c:32:4e:7e:0c:5c:1a:0f:fa:87:c5: ab:02:fc:c5:86:b6:c7:15:7d:3c:94:5d:55:84:08:b7:e4:b3: 6a:44:bf:6f:f4:36:b2:b8:10:3a:13:9a:88:81:ee:f7:7d:61: c7:48:f7:a0:e8:58:09:55:ad:8e:ef:a4:5c:5c:bc:18:3a:72: d7:11:c8:41:f7:a8:82:1c:0b:d2:cb:96:33:db:fd:df:25:5a: c7:1c:f9:0a:a7:43:ee:d8:07:51:67:5b:2c:f3:a9:2e:86:99: 0d:61:e1:4a:22:4f:0a:9a:7b:8f:49:dd:ca:0b:33:cd:79:58: e0:cf:1c:80:a6:6b:7d:22:ae:3f:47:f7:f1:49:4e:a5:48:77: 9c:58:89:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdOC4P0r9zbhxyuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMzNGY2OGItMmY3Zi00ZWYzLWJkZWUtNWEwZTJkNjhh MDNiMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk Mjk3ZmQ5NjQtNDgwNi00YTZhLWFkYzctNWVjZWI3Y2EwMzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA617il8+MUcT9GvCw8X5xv4q+KOTLCF8qcctS tliZkuTknCJwhTnIRDabCmN76dZfAo3n0nHoTE3+6OYd30VWW4fUhWrk4UkNAHTa yFFVIV0jjLR+rshgOrfB+mbBJb2jKfIZnoNrM582r4WOmBJtItT1N1J56v5drZlP eYY6pq0NOPj58Jw+x+Rua8qEi0LQhIdv4Ee672Z05msdB6Tp6Zyfx4JjuVU5H1Lb 3japmqC6ZDcdAZ74NTFVy4qXdWUIst5XAVpqp5GtKeb+fxc7V6xLYYq00dlaNaPp TMF9T4R2lG2vCn4hxLGFxheLDDeLF6XfLKa7Xdrr4Yt//ZfAYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAF6HUorUj4+uJdg2bgAGNTBd4bBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYzM0 ZjY4Yi0yZjdmLTRlZjMtYmRlZS01YTBlMmQ2OGEwM2IvMmM0YjM1Y2YtNzU2NC0z M2IyLTgyY2MtY2VlNGQwZWFhYjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGMzNGY2OGItMmY3Zi00ZWYzLWJk ZWUtNWEwZTJkNjhhMDNiLzBjMzRmNjhiLTJmN2YtNGVmMy1iZGVlLTVhMGUyZDY4 YTAzYi5jcmwwHwYDVR0jBBgwFoAUGT96sPm60yA6FwWVB8+TKk6ScCwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYzM0ZjY4Yi0yZjdmLTRlZjMtYmRlZS01YTBl MmQ2OGEwM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAgpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJD/K2zDyHmnqGmNCuHFYcYTvtUmPGaGXpJDeB9oyX3IB/9mcG9BRgF8 nTKVgYBvcMYr42XIlEPVni18yCVdHwRTLMUxO+bpsvhd0XquQeSz4Sm31Hujqzqc nEno7X3dg0y2jWk7zAe6DNDpIJQ4UavUTe2cMk5+DFwaD/qHxasC/MWGtscVfTyU XVWECLfks2pEv2/0NrK4EDoTmoiB7vd9YcdI96DoWAlVrY7vpFxcvBg6ctcRyEH3 qIIcC9LLljPb/d8lWscc+QqnQ+7YB1FnWyzzqS6GmQ1h4UoiTwqae49J3coLM815 WODPHICma30irj9H9/FJTqVId5xYiZ8= -----END CERTIFICATE-----Generated at Wed Mar 25 05:24:12 2026 by rpki-client