$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/bb344849-76d8-36a8-801c-c856e304a3a6.roa File: bb344849-76d8-36a8-801c-c856e304a3a6.roa (raw, json) Hash identifier: XL5FPpODz3DubuDj6qKutQIQLMGs8b7dd3WTuuSjny0= Subject key identifier: D1:95:CE:59:ED:81:0B:4D:4D:F3:FA:7A:89:F0:85:95:78:71:BF:FA Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Certificate serial: 010D0C9F4328584D3DFFA86F784AE6704AF65000 Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/bb344849-76d8-36a8-801c-c856e304a3a6.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 33141 IP address blocks: 24.38.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:a8:6f:78:4a:e6:70:4a:f6:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=e27fc27a-9fb7-4c2e-bd80-c55417c1f56c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8f:a6:ce:15:aa:ea:e0:f2:e6:0d:e6:22:67: d7:e7:e3:6a:2e:e6:cb:56:01:81:b2:99:75:fd:20: 04:fd:2f:8f:0b:ff:9a:c3:d4:5a:5c:71:cd:e2:f1: 1d:43:39:e3:d7:a9:7c:02:f5:ef:30:2c:59:ab:40: 6c:04:69:4b:71:18:d2:bf:c4:ec:5b:b0:17:2c:bf: 2d:e6:8f:a9:5d:da:1d:3a:0b:c8:b5:b9:33:e6:00: c9:2f:da:ae:94:80:53:e9:69:b7:41:3b:36:76:93: e5:94:a5:73:ca:56:0f:b4:99:af:22:1c:88:2d:26: 56:40:ad:75:a9:1d:51:9c:64:b0:31:e4:78:6f:f8: c3:9b:8d:5d:91:cf:7f:4e:b1:73:d8:09:99:ba:9f: 21:f6:46:b8:79:27:cf:f3:f6:c1:3d:d0:18:86:c6: 7c:6b:51:eb:e8:74:31:f9:8f:8c:af:1d:fe:d8:cc: 01:6e:41:ac:04:21:cc:cf:6f:22:19:26:c1:c3:d3: 2c:0d:be:a8:80:f0:86:ae:04:e2:e4:36:35:79:d8: 94:3f:63:2c:cc:85:53:dd:17:f3:39:dd:30:7f:de: d7:ba:14:05:4c:7d:c5:d0:03:53:d2:e1:e5:50:c6: 78:de:d2:54:01:64:cf:f1:9b:7f:18:e0:59:72:cc: b5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:95:CE:59:ED:81:0B:4D:4D:F3:FA:7A:89:F0:85:95:78:71:BF:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/bb344849-76d8-36a8-801c-c856e304a3a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl X509v3 Authority Key Identifier: keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer sbgp-ipAddrBlock: critical IPv4: 24.38.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:27:c0:6f:a2:77:44:14:33:67:e0:e3:d2:3e:74:98:ff:2d: c2:fb:d9:2a:1c:58:f8:53:08:24:93:7f:85:e8:7e:1c:91:ac: 72:c1:e5:9a:a0:64:78:f8:f7:12:90:39:5e:a6:6b:95:70:59: d7:e4:c2:4d:91:ca:2f:d5:f1:78:a5:f8:08:f0:25:07:0b:23: a2:bd:53:57:c1:8f:b1:0d:2c:89:e6:fb:28:c2:68:6d:a2:0c: 02:6a:da:77:17:05:c7:56:d6:c7:1d:7f:ef:af:4e:fd:63:2d: 7b:bf:b5:8c:5e:18:67:a2:9f:8f:e3:af:9a:37:c3:20:7f:5d: d4:7a:eb:2f:19:dc:82:e1:44:bd:84:23:f0:53:b2:9a:89:ac: 4b:d1:4b:ec:92:86:95:b6:fe:b5:11:9f:34:ac:20:7f:ed:d8: 8f:1c:bc:18:8a:63:58:2d:21:17:9d:33:62:58:a2:27:50:b2: ef:00:eb:c4:c0:33:11:31:94:c4:e0:ab:62:ac:c0:ce:41:c3: bb:1c:0f:3c:3e:82:4c:43:d0:69:d8:09:35:f8:31:62:dd:2b: d8:c8:e3:fc:cb:19:d1:bc:91:29:15:62:69:ff:de:e9:a2:35: f3:99:89:17:52:06:be:42:4c:34:58:c5:4f:08:26:4d:b8:58: a7:43:55:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/6hveErmcEr2UAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh ZDE1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZTI3ZmMyN2EtOWZiNy00YzJlLWJkODAtYzU1NDE3YzFmNTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgI+mzhWq6uDy5g3mImfX5+NqLubLVgGBspl1 /SAE/S+PC/+aw9RaXHHN4vEdQznj16l8AvXvMCxZq0BsBGlLcRjSv8TsW7AXLL8t 5o+pXdodOgvItbkz5gDJL9qulIBT6Wm3QTs2dpPllKVzylYPtJmvIhyILSZWQK11 qR1RnGSwMeR4b/jDm41dkc9/TrFz2AmZup8h9ka4eSfP8/bBPdAYhsZ8a1Hr6HQx +Y+Mrx3+2MwBbkGsBCHMz28iGSbBw9MsDb6ogPCGrgTi5DY1ediUP2MszIVT3Rfz Od0wf97XuhQFTH3F0ANT0uHlUMZ43tJUAWTP8Zt/GOBZcsy1MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGVzlntgQtNTfP6eonwhZV4cb/6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4 YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvYmIzNDQ4NDktNzZkOC0z NmE4LTgwMWMtYzg1NmUzMDRhM2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGCYUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMnwG+id0QUM2fg49I+dJj/LcL72SocWPhTCCSTf4XofhyRrHLB5Zqg ZHj49xKQOV6ma5VwWdfkwk2Ryi/V8Xil+AjwJQcLI6K9U1fBj7ENLInm+yjCaG2i DAJq2ncXBcdW1scdf++vTv1jLXu/tYxeGGein4/jr5o3wyB/XdR66y8Z3ILhRL2E I/BTspqJrEvRS+yShpW2/rURnzSsIH/t2I8cvBiKY1gtIRedM2JYoidQsu8A68TA MxExlMTgq2KswM5Bw7scDzw+gkxD0GnYCTX4MWLdK9jI4/zLGdG8kSkVYmn/3umi NfOZiRdSBr5CTDRYxU8IJk24WKdDVZA= -----END CERTIFICATE-----Generated at Sun Mar 22 12:33:53 2026 by rpki-client