$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/5a5b48ba-6889-3933-8cc3-e5c7c7ee12a6.roa File: 5a5b48ba-6889-3933-8cc3-e5c7c7ee12a6.roa (raw, json) Hash identifier: v9F0WEYRjX8mvdwBa8PHt8vjMRxRH+chFxKEfuwdsJY= Subject key identifier: 71:3D:DE:CC:82:72:FC:5F:AB:B4:D7:4C:41:63:35:46:D6:F6:6B:3D Certificate issuer: /CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6 Certificate serial: 010D0C9F4328584D52EF7DC13767E5E13349BE14 Authority key identifier: 53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/5a5b48ba-6889-3933-8cc3-e5c7c7ee12a6.roa Signing time: Sun 29 Mar 2026 01:00:24 +0000 ROA not before: Sun 29 Mar 2026 01:00:24 +0000 ROA not after: Sat 27 Jun 2026 01:00:24 +0000 asID: 4543 IP address blocks: 199.181.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:ef:7d:c1:37:67:e5:e1:33:49:be:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6 Validity Not Before: Mar 29 01:00:24 2026 GMT Not After : Jun 27 01:00:24 2026 GMT Subject: CN=8decb30e-7feb-4942-b446-95e220d523da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:84:b7:92:c5:43:52:02:d8:fd:9a:38:54:d1: c7:5f:ff:82:97:14:79:a7:4c:43:a7:de:d1:76:5d: 48:46:a9:c0:11:32:88:d4:15:92:1c:c0:e8:a3:77: cd:9c:9c:fd:85:9b:8b:72:38:6a:0f:ed:d2:23:36: c8:28:f5:12:85:df:14:a3:44:83:98:ca:bf:fa:78: 58:eb:7c:d2:fb:18:18:25:c3:13:95:0e:2b:88:d5: e1:bc:cb:33:84:ce:63:10:7f:9b:51:04:0f:31:f9: fb:11:28:a9:7b:ca:83:15:5a:9a:28:33:72:c3:ae: c8:aa:c6:06:b2:a5:65:ba:c4:56:0e:06:46:d4:78: 19:0c:e3:c7:c7:62:01:27:f8:21:36:7f:94:e0:fb: 89:c3:00:98:b5:20:2c:a0:97:6d:9b:58:31:73:b6: c5:5c:15:12:d7:3b:56:b9:43:40:38:6c:8f:d7:da: fd:e8:d7:a1:81:16:9d:7b:42:9d:fa:f3:f3:7a:71: 51:ca:72:e4:3e:b8:12:27:12:74:07:21:45:dc:a0: 75:cb:b5:32:44:6d:57:5f:09:3b:1e:f1:6a:ef:f7: e9:31:55:e6:05:cd:4c:c8:dc:ea:f5:90:5e:af:0e: 0f:b7:ff:63:2f:af:6a:61:ea:5c:5c:3d:ce:ab:b7: 9b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3D:DE:CC:82:72:FC:5F:AB:B4:D7:4C:41:63:35:46:D6:F6:6B:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/5a5b48ba-6889-3933-8cc3-e5c7c7ee12a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl X509v3 Authority Key Identifier: keyid:53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer sbgp-ipAddrBlock: critical IPv4: 199.181.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:fa:ed:ad:93:5a:12:e2:a5:7a:c0:63:00:09:bd:16:ce:b2: 46:a7:bd:8b:81:27:cb:cc:10:ed:a4:36:c0:99:53:5a:a0:1a: 97:a8:d6:db:1e:73:94:d0:89:22:d0:23:16:1e:03:d2:b8:b6: 0c:91:87:52:80:ac:e9:aa:18:85:19:74:8c:bd:52:d2:ec:1e: 16:50:7d:16:a5:3d:be:b6:32:8e:6b:b6:54:17:1a:ee:9c:da: 5f:3b:83:15:e7:1b:ae:a9:2f:32:8c:f9:2a:2a:65:49:6b:70: 81:13:2d:bc:d0:71:d9:7c:1c:45:c5:5f:e9:e7:22:69:cd:94: 62:0c:3b:f8:70:d6:80:69:14:6d:f3:5b:00:f7:f8:54:b0:bf: c9:b4:b0:0e:be:e5:eb:cc:15:eb:8d:7c:af:54:73:85:c8:df: fb:e5:eb:0b:04:1d:cd:b9:f9:ff:d8:94:b0:84:3e:1a:68:ab: 51:39:28:c0:21:19:81:cf:25:5e:c4:27:99:1a:d1:06:61:83: d4:0c:46:8e:20:de:eb:fc:e6:6f:6a:ad:6d:be:3b:74:ba:20: c6:2c:f9:e8:e5:c3:45:30:74:d8:02:b6:8b:63:18:24:72:66: 4c:64:60:ae:0d:87:77:f1:70:79:8c:d2:c9:e4:df:5b:f0:f2: 72:b0:64:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1S733BN2fl4TNJvhQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRjMzEzMDctZTEwZC00NTM3LWFhN2EtNmJiZjM2OTJj NWQ2MB4XDTI2MDMyOTAxMDAyNFoXDTI2MDYyNzAxMDAyNFowLzEtMCsGA1UEAxMk OGRlY2IzMGUtN2ZlYi00OTQyLWI0NDYtOTVlMjIwZDUyM2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroS3ksVDUgLY/Zo4VNHHX/+ClxR5p0xDp97R dl1IRqnAETKI1BWSHMDoo3fNnJz9hZuLcjhqD+3SIzbIKPUShd8Uo0SDmMq/+nhY 63zS+xgYJcMTlQ4riNXhvMszhM5jEH+bUQQPMfn7ESipe8qDFVqaKDNyw67IqsYG sqVlusRWDgZG1HgZDOPHx2IBJ/ghNn+U4PuJwwCYtSAsoJdtm1gxc7bFXBUS1ztW uUNAOGyP19r96NehgRade0Kd+vPzenFRynLkPrgSJxJ0ByFF3KB1y7UyRG1XXwk7 HvFq7/fpMVXmBc1MyNzq9ZBerw4Pt/9jL69qYepcXD3Oq7ebNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHE93syCcvxfq7TXTEFjNUbW9ms9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNGMz MTMwNy1lMTBkLTQ1MzctYWE3YS02YmJmMzY5MmM1ZDYvNWE1YjQ4YmEtNjg4OS0z OTMzLThjYzMtZTVjN2M3ZWUxMmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjRjMzEzMDctZTEwZC00NTM3LWFh N2EtNmJiZjM2OTJjNWQ2LzI0YzMxMzA3LWUxMGQtNDUzNy1hYTdhLTZiYmYzNjky YzVkNi5jcmwwHwYDVR0jBBgwFoAUU0jWjSPeyR9it/CXVgVTm0JSO5wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNGMzMTMwNy1lMTBkLTQ1MzctYWE3YS02YmJm MzY5MmM1ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7WsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACb67a2TWhLipXrAYwAJvRbOskanvYuBJ8vMEO2kNsCZU1qgGpeo1tse c5TQiSLQIxYeA9K4tgyRh1KArOmqGIUZdIy9UtLsHhZQfRalPb62Mo5rtlQXGu6c 2l87gxXnG66pLzKM+SoqZUlrcIETLbzQcdl8HEXFX+nnImnNlGIMO/hw1oBpFG3z WwD3+FSwv8m0sA6+5evMFeuNfK9Uc4XI3/vl6wsEHc25+f/YlLCEPhpoq1E5KMAh GYHPJV7EJ5ka0QZhg9QMRo4g3uv85m9qrW2+O3S6IMYs+ejlw0UwdNgCtotjGCRy ZkxkYK4Nh3fxcHmM0snk31vw8nKwZA0= -----END CERTIFICATE-----Generated at Mon Apr 13 12:08:26 2026 by rpki-client