$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/58118f22-7af9-3fdf-8cdd-d817dd791c4a.roa File: 58118f22-7af9-3fdf-8cdd-d817dd791c4a.roa (raw, json) Hash identifier: nKwvCXPyu8o3ZcN/rOrFBzZmYMPnFfwH/xI8c/FHqzw= Subject key identifier: 31:79:AB:3B:EB:60:5B:8C:53:BE:73:45:A5:22:87:88:B1:D2:33:0C Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584D85A7D1180DCBF8EA1C3835A0 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/58118f22-7af9-3fdf-8cdd-d817dd791c4a.roa Signing time: Thu 16 Apr 2026 05:02:13 +0000 ROA not before: Thu 16 Apr 2026 05:02:13 +0000 ROA not after: Wed 15 Jul 2026 05:02:13 +0000 asID: 3503 IP address blocks: 200.229.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:85:a7:d1:18:0d:cb:f8:ea:1c:38:35:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Apr 16 05:02:13 2026 GMT Not After : Jul 15 05:02:13 2026 GMT Subject: CN=5755a1d5-6d90-4c1a-bb34-bf6ae7aa1779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:09:d2:08:50:c2:24:5e:e9:88:2a:1a:99:40: fc:7c:81:39:c4:39:a0:9b:0f:55:1f:a9:b2:72:de: 91:2b:42:8d:42:c9:b5:ff:36:31:6d:0a:29:c2:4c: d0:78:69:d1:87:6c:0c:6e:e9:11:36:42:cc:76:bf: c2:96:23:69:5e:fd:04:6c:80:72:4b:99:c2:58:d4: 06:ca:b1:7c:cc:47:8a:35:45:09:f3:48:1c:68:e0: 65:ba:ec:53:37:8e:0f:98:71:b2:03:40:05:ea:f3: 2f:fc:1f:b7:fd:e9:7e:0e:1e:97:2c:df:57:a4:5e: 7a:56:49:49:c0:ad:c0:2d:a6:1f:e4:ae:8c:ea:8f: ef:2a:1f:56:67:75:22:06:12:12:f1:32:8f:54:1b: dd:d3:e4:fa:37:fa:89:04:b1:4d:9e:84:11:71:d4: 5e:b3:96:85:4e:b3:40:88:3b:bf:60:8d:70:62:4e: 7d:8f:42:51:c2:5e:e7:02:71:7e:88:0a:c1:2c:5d: 13:c1:0c:5f:2e:eb:d0:16:42:ae:4d:5e:aa:dc:06: ee:5a:98:af:a7:be:4b:5c:34:ba:16:3d:ce:14:74: cc:26:df:77:51:9e:90:65:c6:84:cc:4b:a0:25:a1: 38:17:e0:5c:e8:3c:9f:e5:b8:9a:d0:c4:af:e6:17: a5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:79:AB:3B:EB:60:5B:8C:53:BE:73:45:A5:22:87:88:B1:D2:33:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/58118f22-7af9-3fdf-8cdd-d817dd791c4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 200.229.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:f3:b7:ba:44:e0:b4:73:ce:59:f7:99:b4:e1:16:1f:b7:3b: 68:9d:34:74:70:23:84:2d:45:29:c3:d4:84:19:5d:44:25:5a: 62:a2:27:7e:34:a5:37:74:8d:73:f9:19:75:18:82:ff:c8:ab: 92:d8:4f:82:0c:b3:9b:08:59:67:27:29:e2:be:ec:4c:b1:3a: df:6c:f4:a6:2e:53:d1:09:41:bb:2b:81:6e:27:90:9a:7e:4d: 55:6c:88:05:b1:52:01:1b:e1:f4:4b:a9:ed:17:3b:09:58:ee: 70:76:04:09:b7:63:70:1b:40:19:29:9a:6b:cf:55:1a:01:97: e9:17:05:76:4e:e7:a3:d1:a9:e9:61:44:da:46:40:fd:a4:9d: f6:37:18:9b:87:3c:b8:29:6d:42:6a:72:36:61:b7:8b:47:c3: c5:eb:c7:41:df:dd:bd:74:68:7d:30:40:a0:c9:28:53:c7:7d: 73:2d:88:0d:a3:f2:14:7b:5e:83:fd:f5:ec:f2:7f:a0:92:6d: ca:c8:e8:6c:1b:f3:a0:c3:30:7b:bb:1c:31:38:1b:5d:d8:44: 05:e1:e5:c8:85:d7:c0:62:7d:34:8e:a5:8b:89:6f:9b:63:ad: 32:f2:56:a1:80:95:05:1a:7b:c4:1f:70:b7:ec:a7:c5:96:6a: 93:54:cf:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Fp9EYDcv46hw4NaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI2MDQxNjA1MDIxM1oXDTI2MDcxNTA1MDIxM1owLzEtMCsGA1UEAxMk NTc1NWExZDUtNmQ5MC00YzFhLWJiMzQtYmY2YWU3YWExNzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwnSCFDCJF7piCoamUD8fIE5xDmgmw9VH6my ct6RK0KNQsm1/zYxbQopwkzQeGnRh2wMbukRNkLMdr/CliNpXv0EbIByS5nCWNQG yrF8zEeKNUUJ80gcaOBluuxTN44PmHGyA0AF6vMv/B+3/el+Dh6XLN9XpF56VklJ wK3ALaYf5K6M6o/vKh9WZ3UiBhIS8TKPVBvd0+T6N/qJBLFNnoQRcdRes5aFTrNA iDu/YI1wYk59j0JRwl7nAnF+iArBLF0TwQxfLuvQFkKuTV6q3AbuWpivp75LXDS6 Fj3OFHTMJt93UZ6QZcaEzEugJaE4F+Bc6Dyf5bia0MSv5hel7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDF5qzvrYFuMU75zRaUih4ix0jMMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvNTgxMThmMjItN2FmOS0z ZmRmLThjZGQtZDgxN2RkNzkxYzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyOUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDzt7pE4LRzzln3mbThFh+3O2idNHRwI4QtRSnD1IQZXUQlWmKiJ340 pTd0jXP5GXUYgv/Iq5LYT4IMs5sIWWcnKeK+7EyxOt9s9KYuU9EJQbsrgW4nkJp+ TVVsiAWxUgEb4fRLqe0XOwlY7nB2BAm3Y3AbQBkpmmvPVRoBl+kXBXZO56PRqelh RNpGQP2knfY3GJuHPLgpbUJqcjZht4tHw8Xrx0Hf3b10aH0wQKDJKFPHfXMtiA2j 8hR7XoP99ezyf6CSbcrI6Gwb86DDMHu7HDE4G13YRAXh5ciF18BifTSOpYuJb5tj rTLyVqGAlQUae8QfcLfsp8WWapNUz+o= -----END CERTIFICATE-----Generated at Fri Apr 17 17:58:48 2026 by rpki-client