$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3b0b3161-daf9-3eb2-8ec6-5634902677a2.roa File: 3b0b3161-daf9-3eb2-8ec6-5634902677a2.roa (raw, json) Hash identifier: CqIFrBHDGvDBf7Ojnxe9aAykthuJtiNapkMvR34TUp8= Subject key identifier: 2F:05:A1:1E:39:B2:AF:CB:92:75:AC:19:52:61:EF:95:EE:95:5B:18 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584D15A26DCBD7407CDA74CC9100 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3b0b3161-daf9-3eb2-8ec6-5634902677a2.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 14315 IP address blocks: 200.229.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:6d:cb:d7:40:7c:da:74:cc:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=fcb5ac00-9a42-4756-acb8-74fe6e66e30e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b2:e7:88:e7:c9:89:ea:10:b4:64:06:cd:93: 23:59:86:33:57:30:0d:76:9c:28:b0:41:5b:2e:e2: cd:9e:43:bd:5b:c4:c4:9c:46:b6:70:a8:29:35:85: 54:ad:6f:44:d2:8c:5a:77:69:59:c2:c3:8c:48:0d: 9e:9e:7b:6a:c8:46:01:ab:4b:58:53:42:7a:0f:26: fd:77:c7:80:df:ff:1e:8d:0e:4e:b6:06:9b:11:a8: 60:94:aa:1d:aa:72:f3:cc:e3:f9:ad:9a:da:f7:56: c0:f4:9b:f4:7d:6d:8a:01:c2:88:0d:44:74:4b:2d: 73:fa:13:a1:4c:87:e4:f0:11:63:a1:60:b0:f1:d7: 1e:af:c7:46:d4:f9:3f:96:cb:a9:2d:35:f3:79:61: 89:0b:92:a1:81:60:8b:f6:46:ca:42:1d:5c:46:21: 2b:42:72:37:12:1c:55:ed:45:6f:e5:cc:48:c5:7d: 98:71:44:41:3a:40:81:df:7b:94:66:a5:fa:85:7c: b6:58:74:6f:08:a5:8e:45:01:27:7a:53:c8:6e:72: 8c:4e:37:3d:bd:c1:2d:b3:42:e5:1b:ea:35:92:ef: 0c:41:39:1f:52:dc:23:45:88:ed:39:22:23:be:60: 28:a7:45:2d:09:13:3b:9d:5a:91:83:eb:ad:bf:ea: 94:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:05:A1:1E:39:B2:AF:CB:92:75:AC:19:52:61:EF:95:EE:95:5B:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3b0b3161-daf9-3eb2-8ec6-5634902677a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 200.229.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:d0:c6:4a:d8:21:49:b2:32:4c:09:dc:35:6b:73:41:b0:c7: a7:0a:da:cd:4e:11:ad:92:7f:ef:8c:ce:b6:bd:7c:32:a5:20: b9:75:09:df:6d:9c:7d:0b:45:dd:aa:78:a9:12:13:91:56:57: f8:b9:7a:d4:43:5e:78:39:89:41:d4:33:38:23:5d:6f:14:c7: 08:8f:67:ce:ab:29:89:9e:c0:a8:7c:e6:5c:a1:d6:5e:4f:ce: 43:77:7b:4b:8e:66:3e:6f:95:c8:4a:19:94:eb:ff:79:9d:18: 3f:fb:b8:c9:ea:39:23:7d:56:4c:64:26:0c:78:97:cc:b8:ef: 16:78:63:9a:78:26:b8:1e:4a:7b:3a:37:49:97:e8:38:98:32: 1d:dd:2f:3c:dc:07:86:19:5d:12:be:b3:75:84:c0:6c:c4:02: 32:65:0c:af:d6:fd:cd:8c:97:20:72:d7:ad:c2:49:a6:3b:21: 95:b6:27:3b:d9:bc:2c:3d:0e:39:78:4c:10:f7:81:b1:8a:35: a9:da:78:45:f5:91:7f:d5:04:0b:0e:22:7a:bf:b1:2d:7b:ad: 78:e0:87:4a:4c:7e:d2:bd:7c:7a:a1:b8:03:0c:37:41:69:ab: ed:70:e3:8a:3c:10:39:e8:da:e7:d5:e9:9a:df:de:36:eb:6f: 1f:de:2b:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Vom3L10B82nTMkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk ZmNiNWFjMDAtOWE0Mi00NzU2LWFjYjgtNzRmZTZlNjZlMzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7LniOfJieoQtGQGzZMjWYYzVzANdpwosEFb LuLNnkO9W8TEnEa2cKgpNYVUrW9E0oxad2lZwsOMSA2enntqyEYBq0tYU0J6Dyb9 d8eA3/8ejQ5OtgabEahglKodqnLzzOP5rZra91bA9Jv0fW2KAcKIDUR0Sy1z+hOh TIfk8BFjoWCw8dcer8dG1Pk/lsupLTXzeWGJC5KhgWCL9kbKQh1cRiErQnI3EhxV 7UVv5cxIxX2YcURBOkCB33uUZqX6hXy2WHRvCKWORQEnelPIbnKMTjc9vcEts0Ll G+o1ku8MQTkfUtwjRYjtOSIjvmAop0UtCRM7nVqRg+utv+qUMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8FoR45sq/LknWsGVJh75XulVsYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvM2IwYjMxNjEtZGFmOS0z ZWIyLThlYzYtNTYzNDkwMjY3N2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyOUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALQxkrYIUmyMkwJ3DVrc0Gwx6cK2s1OEa2Sf++Mzra9fDKlILl1Cd9t nH0LRd2qeKkSE5FWV/i5etRDXng5iUHUMzgjXW8UxwiPZ86rKYmewKh85lyh1l5P zkN3e0uOZj5vlchKGZTr/3mdGD/7uMnqOSN9VkxkJgx4l8y47xZ4Y5p4JrgeSns6 N0mX6DiYMh3dLzzcB4YZXRK+s3WEwGzEAjJlDK/W/c2MlyBy163CSaY7IZW2JzvZ vCw9Djl4TBD3gbGKNanaeEX1kX/VBAsOInq/sS17rXjgh0pMftK9fHqhuAMMN0Fp q+1w44o8EDno2ufV6Zrf3jbrbx/eKxE= -----END CERTIFICATE-----Generated at Sat Mar 7 19:04:43 2026 by rpki-client