$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/be14934f-b3aa-3c8e-9ab3-eaebaa311063.roa File: be14934f-b3aa-3c8e-9ab3-eaebaa311063.roa (raw, json) Hash identifier: ZuOtAbeo83hrTFulZo/ON/JcFIFh1SvpcjUhoI3h4Lo= Subject key identifier: 5D:3E:29:60:99:61:FF:6B:03:7E:7E:DD:5A:5F:97:AC:24:4A:5D:71 Certificate issuer: /CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Certificate serial: 010D0C9F4328584D09126F7F771D9973A5B35500 Authority key identifier: 43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/be14934f-b3aa-3c8e-9ab3-eaebaa311063.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 395567 IP address blocks: 216.153.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:6f:7f:77:1d:99:73:a5:b3:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=92bd2b78-d8f5-4081-b367-0b86f8248353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2a:bd:88:7c:1b:4e:01:74:94:0c:82:30:9f: 65:bf:62:5c:9a:d3:eb:c5:2a:d2:8d:f4:10:09:e9: 30:33:73:ca:8c:ec:85:51:15:87:58:5e:aa:93:a1: b8:26:14:d7:71:c0:64:40:df:cf:75:a5:a9:a5:f0: 3c:80:45:9a:1a:f0:9b:88:df:fa:86:07:ee:67:b7: 2a:61:a1:8f:0f:ec:a8:48:2b:6e:e7:23:b5:d4:b6: f5:d8:1d:65:aa:54:c7:d6:50:b8:9c:79:7d:69:47: 73:6f:6b:54:04:8a:19:3f:42:29:b0:9f:2b:d7:63: ca:fa:27:2b:a1:95:c2:5d:07:60:6c:4b:63:d1:e3: 3b:cf:7d:cf:36:d6:6a:2d:45:61:3b:df:c6:6a:77: f4:41:f9:7e:28:93:0d:d9:23:bc:56:20:3e:44:3a: 6c:9a:62:8d:bd:b1:72:5f:1b:af:8e:a6:be:d3:cd: a6:df:e4:36:26:21:b2:2f:47:fc:b7:a2:a7:0f:7a: 2a:39:55:5c:a3:37:b5:14:88:ab:51:36:5c:8c:f9: ea:47:e8:94:59:b8:8e:29:f1:f5:a0:59:2f:31:67: 70:3e:2d:96:41:72:d4:50:c6:83:42:1d:b7:38:d6: 4f:a2:b7:7d:f4:92:15:0b:82:ca:ec:84:5e:96:90: 2e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:3E:29:60:99:61:FF:6B:03:7E:7E:DD:5A:5F:97:AC:24:4A:5D:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/be14934f-b3aa-3c8e-9ab3-eaebaa311063.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl X509v3 Authority Key Identifier: keyid:43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer sbgp-ipAddrBlock: critical IPv4: 216.153.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:d0:65:1c:55:63:5d:e9:0a:46:d0:7f:0c:57:6e:0e:c1:8a: 3d:2d:13:63:df:5a:69:77:c9:fb:9c:68:83:0d:b5:9b:41:f1: ba:d4:c2:40:88:26:6c:68:d2:a9:16:37:8d:30:64:f2:42:b6: f8:c8:ae:cd:93:39:48:cb:57:a5:3b:5a:c1:3e:1a:e3:9a:35: cd:89:49:25:63:29:78:aa:f9:de:bd:15:bb:18:15:22:1c:f6: 7d:7d:17:c5:60:16:53:22:c6:4c:eb:6a:b8:7f:0b:5b:66:3c: ef:51:46:ab:d3:2e:3e:df:42:36:64:ea:25:d1:27:3a:f6:27: e6:06:87:f4:07:a9:ad:38:d2:64:60:c2:dc:ff:0d:d3:5a:ed: 85:72:9f:a3:c9:58:d9:a0:85:e4:c3:cb:7a:60:af:5b:65:5e: a5:06:e5:7d:31:88:5e:3e:da:9e:a4:ff:a4:48:a3:dc:86:7b: 4c:15:68:86:a4:c6:bf:64:16:b4:48:75:f1:0d:e8:95:68:f7: 43:79:a0:fe:a6:b2:f8:df:84:e7:3d:8b:c5:bc:29:9e:7d:83: 0b:17:6c:54:ed:fe:c8:cd:4a:58:71:f3:0a:c5:f6:48:62:02: 8e:1b:c7:36:ce:7a:c5:70:23:d0:30:47:94:9a:bb:39:d0:48: b5:da:3e:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEm9/dx2Zc6WzVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU3N2I1YWYtYTFiNS00ODU4LWI2MWQtZjA5ZmQ2N2Y3 Y2IzMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk OTJiZDJiNzgtZDhmNS00MDgxLWIzNjctMGI4NmY4MjQ4MzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyq9iHwbTgF0lAyCMJ9lv2JcmtPrxSrSjfQQ CekwM3PKjOyFURWHWF6qk6G4JhTXccBkQN/PdaWppfA8gEWaGvCbiN/6hgfuZ7cq YaGPD+yoSCtu5yO11Lb12B1lqlTH1lC4nHl9aUdzb2tUBIoZP0IpsJ8r12PK+icr oZXCXQdgbEtj0eM7z33PNtZqLUVhO9/Ganf0Qfl+KJMN2SO8ViA+RDpsmmKNvbFy Xxuvjqa+082m3+Q2JiGyL0f8t6KnD3oqOVVcoze1FIirUTZcjPnqR+iUWbiOKfH1 oFkvMWdwPi2WQXLUUMaDQh23ONZPord99JIVC4LK7IRelpAufQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0+KWCZYf9rA35+3Vpfl6wkSl1xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3 YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlmZDY3ZjdjYjMvYmUxNDkzNGYtYjNhYS0z YzhlLTlhYjMtZWFlYmFhMzExMDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWU3N2I1YWYtYTFiNS00ODU4LWI2 MWQtZjA5ZmQ2N2Y3Y2IzL2FlNzdiNWFmLWExYjUtNDg1OC1iNjFkLWYwOWZkNjdm N2NiMy5jcmwwHwYDVR0jBBgwFoAUQ8bZZVYwh5KCSgXB185ho81dPhkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlm ZDY3ZjdjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2JkYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLQZRxVY13pCkbQfwxXbg7Bij0tE2PfWml3yfucaIMNtZtB8brUwkCI Jmxo0qkWN40wZPJCtvjIrs2TOUjLV6U7WsE+GuOaNc2JSSVjKXiq+d69FbsYFSIc 9n19F8VgFlMixkzrarh/C1tmPO9RRqvTLj7fQjZk6iXRJzr2J+YGh/QHqa040mRg wtz/DdNa7YVyn6PJWNmgheTDy3pgr1tlXqUG5X0xiF4+2p6k/6RIo9yGe0wVaIak xr9kFrRIdfEN6JVo90N5oP6msvjfhOc9i8W8KZ59gwsXbFTt/sjNSlhx8wrF9khi Ao4bxzbOesVwI9AwR5SauznQSLXaPrw= -----END CERTIFICATE-----Generated at Mon Mar 2 19:51:22 2026 by rpki-client