$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/ce24c538-2f55-371a-a4e4-abc029cd8b1b.roa File: ce24c538-2f55-371a-a4e4-abc029cd8b1b.roa (raw, json) Hash identifier: JE+Kt4Fszz5xZhYGAwiuG2HV6Pu4FjZ0YCNUeDGM8zo= Subject key identifier: C4:FA:60:62:AE:A2:A7:E5:04:7F:02:A7:DB:2A:C7:D7:F0:F6:75:DA Certificate issuer: /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234 Certificate serial: 010D0C9F4328584CB0D9ADB62C3DFD0759AD6680 Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/ce24c538-2f55-371a-a4e4-abc029cd8b1b.roa Signing time: Thu 29 Jan 2026 23:35:30 +0000 ROA not before: Thu 29 Jan 2026 23:35:30 +0000 ROA not after: Wed 29 Apr 2026 22:35:30 +0000 asID: 15296 IP address blocks: 199.216.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b0:d9:ad:b6:2c:3d:fd:07:59:ad:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234 Validity Not Before: Jan 29 23:35:30 2026 GMT Not After : Apr 29 22:35:30 2026 GMT Subject: CN=2687b3df-51ec-4d56-9e57-081a3cdc8eec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:bf:62:da:f3:52:f5:ef:20:c8:f7:72:36:a4: 17:c3:99:85:47:4a:9e:84:06:2a:b3:fd:59:2e:2a: c1:19:60:66:7b:5b:71:87:0b:eb:88:e1:aa:a6:70: 08:1b:f8:3a:e4:e7:2e:b5:8c:45:b2:9f:21:cc:07: 53:e6:d9:9c:f7:50:61:50:5a:82:19:a7:ca:c8:c1: 49:a9:33:ca:48:53:b9:4b:2f:4f:66:6a:74:de:12: c5:ea:1d:31:4c:c1:a2:2c:43:f1:4a:da:8c:92:19: 18:37:0f:b0:b1:af:38:ef:aa:f3:11:ad:e6:dc:8c: 5f:24:56:3e:6a:fd:46:10:cb:7e:28:5d:2b:3d:20: fa:e7:7e:82:fd:7c:dc:62:57:41:e1:74:c4:97:0c: 75:36:16:d8:8c:24:8a:d6:a8:da:a2:72:bb:b0:c2: cb:48:ec:a4:77:44:e6:53:22:da:46:dd:ea:da:c9: 8e:f4:79:f6:22:8e:48:1c:d5:45:21:b8:63:53:9c: f3:24:0e:e3:6d:60:f6:a5:1c:70:cd:7f:e7:f6:c4: b2:bd:83:00:a4:7e:a4:97:71:b8:c0:a1:02:12:57: e8:f0:08:65:6f:19:04:02:4a:a2:3e:f8:25:28:48: f4:02:79:92:7d:7b:28:49:b0:22:bd:60:de:fe:9d: b4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:FA:60:62:AE:A2:A7:E5:04:7F:02:A7:DB:2A:C7:D7:F0:F6:75:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/ce24c538-2f55-371a-a4e4-abc029cd8b1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl X509v3 Authority Key Identifier: keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer sbgp-ipAddrBlock: critical IPv4: 199.216.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:bd:f5:c2:d5:a7:03:1c:9f:9e:83:6f:bb:ae:30:c9:db:4c: 92:00:7c:62:de:dc:20:1e:44:4d:c5:86:35:28:7e:3f:ab:1c: 5a:a9:45:05:11:a9:8e:57:e6:ba:2f:a1:6f:41:ce:a3:77:b3: 4e:a3:75:9f:84:d0:86:2e:37:e5:64:0c:da:b0:7b:d0:3a:9b: 47:4f:af:8c:dc:c1:d5:43:78:3e:a9:9f:0f:5d:9d:1a:38:43: 4a:f2:06:e1:bf:fd:65:af:27:71:eb:10:b3:36:14:15:11:c4: 4b:52:bd:72:9c:d1:dd:94:7b:b1:47:a2:8f:ae:f6:e8:11:48: 40:03:e1:b6:a1:31:11:03:ae:8c:a8:f4:9b:8d:73:b2:40:89: ef:74:76:2f:48:7a:e2:47:80:ef:aa:ae:2d:fb:1b:22:82:ad: 43:35:3c:78:22:22:94:f2:7f:f3:55:44:24:a8:9a:7c:50:5e: b7:75:cc:19:c1:88:b0:c4:dc:4e:87:e0:1a:bd:33:dc:15:9b: d4:0e:f0:cb:b8:10:ce:a4:a0:56:16:c0:73:36:b3:02:ca:77: cd:2d:d8:4f:7f:e8:54:fb:23:8e:5b:8a:22:e2:d0:cb:1b:df: 9b:67:fa:c4:17:6e:49:1e:90:31:ac:3a:14:8b:d1:94:d8:63: 7c:88:ca:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyw2a22LD39B1mtZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFmM2M3YzQtYTc3MS00N2E5LWE0ZTgtMGFhZTdkZjdi MjM0MB4XDTI2MDEyOTIzMzUzMFoXDTI2MDQyOTIyMzUzMFowLzEtMCsGA1UEAxMk MjY4N2IzZGYtNTFlYy00ZDU2LTllNTctMDgxYTNjZGM4ZWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3b9i2vNS9e8gyPdyNqQXw5mFR0qehAYqs/1Z LirBGWBme1txhwvriOGqpnAIG/g65OcutYxFsp8hzAdT5tmc91BhUFqCGafKyMFJ qTPKSFO5Sy9PZmp03hLF6h0xTMGiLEPxStqMkhkYNw+wsa8476rzEa3m3IxfJFY+ av1GEMt+KF0rPSD6536C/XzcYldB4XTElwx1NhbYjCSK1qjaonK7sMLLSOykd0Tm UyLaRt3q2smO9Hn2Io5IHNVFIbhjU5zzJA7jbWD2pRxwzX/n9sSyvYMApH6kl3G4 wKECElfo8AhlbxkEAkqiPvglKEj0AnmSfXsoSbAivWDe/p20CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMT6YGKuoqflBH8Cp9sqx9fw9nXaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYz YzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFlN2RmN2IyMzQvY2UyNGM1MzgtMmY1NS0z NzFhLWE0ZTQtYWJjMDI5Y2Q4YjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjFmM2M3YzQtYTc3MS00N2E5LWE0 ZTgtMGFhZTdkZjdiMjM0LzYxZjNjN2M0LWE3NzEtNDdhOS1hNGU4LTBhYWU3ZGY3 YjIzNC5jcmwwHwYDVR0jBBgwFoAUu4hNX94f3LZip94TiP38oD8P+I4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYzYzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFl N2RmN2IyMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9glMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALq99cLVpwMcn56Db7uuMMnbTJIAfGLe3CAeRE3FhjUofj+rHFqpRQUR qY5X5rovoW9BzqN3s06jdZ+E0IYuN+VkDNqwe9A6m0dPr4zcwdVDeD6pnw9dnRo4 Q0ryBuG//WWvJ3HrELM2FBURxEtSvXKc0d2Ue7FHoo+u9ugRSEAD4bahMREDroyo 9JuNc7JAie90di9IeuJHgO+qri37GyKCrUM1PHgiIpTyf/NVRCSomnxQXrd1zBnB iLDE3E6H4Bq9M9wVm9QO8Mu4EM6koFYWwHM2swLKd80t2E9/6FT7I45biiLi0Msb 35tn+sQXbkkekDGsOhSL0ZTYY3yIyp4= -----END CERTIFICATE-----Generated at Mon Mar 2 02:27:41 2026 by rpki-client