$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/233641ab-3c96-3d68-91dd-1823e3407136.roa File: 233641ab-3c96-3d68-91dd-1823e3407136.roa (raw, json) Hash identifier: sdQ6zSY8BjUfuFjyNh7oWyD6C/vff2Q/IeYD7rMcWz8= Subject key identifier: 08:C8:92:90:43:CB:FF:CB:D9:FA:59:82:DD:85:AF:8A:74:94:D6:88 Certificate issuer: /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234 Certificate serial: 010D0C9F4328584CB0D8E79EC8B7F159DE128380 Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/233641ab-3c96-3d68-91dd-1823e3407136.roa Signing time: Thu 29 Jan 2026 23:33:57 +0000 ROA not before: Thu 29 Jan 2026 23:33:57 +0000 ROA not after: Wed 29 Apr 2026 22:33:57 +0000 asID: 15296 IP address blocks: 199.216.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b0:d8:e7:9e:c8:b7:f1:59:de:12:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234 Validity Not Before: Jan 29 23:33:57 2026 GMT Not After : Apr 29 22:33:57 2026 GMT Subject: CN=b6261edd-6b92-452c-8dd6-1912c612054d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1a:24:c5:b1:6a:3c:ac:d6:6e:be:cb:ec:c9: e7:6b:0e:81:08:53:29:54:c4:55:35:ab:26:fe:d4: fb:32:8a:24:84:f0:92:66:5b:f2:48:9d:fd:3d:9a: 4a:2f:2c:a4:ac:97:f1:cf:61:e9:c0:47:5b:50:41: 83:cc:d5:3f:8b:77:39:40:d8:39:42:ea:cc:ea:cb: 32:b0:48:e8:16:39:95:6f:65:d6:0b:ed:75:d6:55: 5b:b0:bc:20:c3:b7:6e:a0:7a:0e:c2:da:82:b3:6b: e6:e1:0a:a1:d6:66:c5:15:a9:1a:a0:f5:e6:9b:ac: 2e:ae:f0:61:de:71:17:bb:10:20:63:19:1f:e0:c0: 7d:ec:a5:e6:11:ad:76:c9:f3:06:ec:ee:7a:f5:b0: 90:a5:6f:40:3b:1f:46:cb:a9:0e:6d:8d:48:6a:2b: 20:84:c9:eb:87:f7:5a:b9:c3:51:41:ee:83:24:67: 8a:01:98:63:b6:54:6b:42:65:3c:de:04:43:39:12: 84:f5:0d:2a:45:e1:bf:4f:48:8c:10:86:ec:26:18: bf:4c:08:a7:10:6a:cc:0d:75:bb:b1:98:a6:6d:d8: 38:90:09:e8:5c:91:85:b7:48:d9:65:c3:e4:ee:da: 48:bd:84:f0:67:df:ca:1b:0d:a3:3d:10:95:c5:a4: 5d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C8:92:90:43:CB:FF:CB:D9:FA:59:82:DD:85:AF:8A:74:94:D6:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/233641ab-3c96-3d68-91dd-1823e3407136.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl X509v3 Authority Key Identifier: keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer sbgp-ipAddrBlock: critical IPv4: 199.216.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:56:1a:0b:95:1f:6a:0e:7f:8b:d3:cf:92:3e:aa:7b:53:94: 0b:23:e5:49:7f:02:76:a9:fd:bc:3a:b3:0b:28:71:df:51:35: 25:9d:9c:b3:84:79:3f:b7:87:be:61:43:1f:b8:8b:57:64:84: 20:b7:4f:2b:d4:cc:6d:87:8f:14:aa:be:28:ff:b1:06:93:fc: e6:ba:26:55:70:30:a2:30:f4:37:81:0e:0f:99:df:5f:92:a2: e3:c2:2e:f4:67:55:1e:37:8f:6f:f9:51:2b:0e:a6:d3:51:b9: 0a:15:e1:6e:ff:76:80:c9:2d:c1:37:98:fd:70:d7:64:8a:e6: e9:e5:e6:72:8e:ce:10:4b:57:82:60:7d:b5:1a:f2:16:99:1b: 2c:31:1b:04:f8:70:23:a5:53:ba:c3:17:f9:54:f8:38:2d:70: a5:af:4f:e2:29:80:87:13:0d:42:8d:88:74:cc:bb:51:60:42: 9a:0b:6b:30:3b:4a:cc:7e:62:0d:03:0d:a1:7b:51:1a:b0:eb: 07:21:ec:ff:67:ee:6d:5d:3e:94:13:72:91:77:a8:ef:30:55: 56:f0:a1:42:14:59:96:56:d7:93:54:54:9f:d9:c7:47:4a:ee: a5:00:08:79:ea:41:d0:f8:d8:ad:b3:04:1a:b2:05:89:52:e2: 6d:0d:b2:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyw2OeeyLfxWd4Sg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFmM2M3YzQtYTc3MS00N2E5LWE0ZTgtMGFhZTdkZjdi MjM0MB4XDTI2MDEyOTIzMzM1N1oXDTI2MDQyOTIyMzM1N1owLzEtMCsGA1UEAxMk YjYyNjFlZGQtNmI5Mi00NTJjLThkZDYtMTkxMmM2MTIwNTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxokxbFqPKzWbr7L7Mnnaw6BCFMpVMRVNasm /tT7MookhPCSZlvySJ39PZpKLyykrJfxz2HpwEdbUEGDzNU/i3c5QNg5QurM6ssy sEjoFjmVb2XWC+111lVbsLwgw7duoHoOwtqCs2vm4Qqh1mbFFakaoPXmm6wurvBh 3nEXuxAgYxkf4MB97KXmEa12yfMG7O569bCQpW9AOx9Gy6kObY1IaisghMnrh/da ucNRQe6DJGeKAZhjtlRrQmU83gRDORKE9Q0qReG/T0iMEIbsJhi/TAinEGrMDXW7 sZimbdg4kAnoXJGFt0jZZcPk7tpIvYTwZ9/KGw2jPRCVxaRdHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjIkpBDy//L2fpZgt2Fr4p0lNaIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYz YzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFlN2RmN2IyMzQvMjMzNjQxYWItM2M5Ni0z ZDY4LTkxZGQtMTgyM2UzNDA3MTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjFmM2M3YzQtYTc3MS00N2E5LWE0 ZTgtMGFhZTdkZjdiMjM0LzYxZjNjN2M0LWE3NzEtNDdhOS1hNGU4LTBhYWU3ZGY3 YjIzNC5jcmwwHwYDVR0jBBgwFoAUu4hNX94f3LZip94TiP38oD8P+I4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYzYzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFl N2RmN2IyMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9giMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNWGguVH2oOf4vTz5I+qntTlAsj5Ul/Anap/bw6swsocd9RNSWdnLOE eT+3h75hQx+4i1dkhCC3TyvUzG2HjxSqvij/sQaT/Oa6JlVwMKIw9DeBDg+Z31+S ouPCLvRnVR43j2/5USsOptNRuQoV4W7/doDJLcE3mP1w12SK5unl5nKOzhBLV4Jg fbUa8haZGywxGwT4cCOlU7rDF/lU+DgtcKWvT+IpgIcTDUKNiHTMu1FgQpoLazA7 Ssx+Yg0DDaF7URqw6wch7P9n7m1dPpQTcpF3qO8wVVbwoUIUWZZW15NUVJ/Zx0dK 7qUACHnqQdD42K2zBBqyBYlS4m0NssA= -----END CERTIFICATE-----Generated at Mon Mar 2 18:42:33 2026 by rpki-client