$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/b3f00458-a136-35b3-ad08-5b39fe91d777.roa File: b3f00458-a136-35b3-ad08-5b39fe91d777.roa (raw, json) Hash identifier: BT11Tvpxmk1ZNLE6fvvJONCLs20f++pU8BxOt0IxKLA= Subject key identifier: B2:87:50:81:E5:C0:08:C8:04:F6:AF:3E:56:6C:9C:7A:B4:D5:C6:AF Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584D07ACE819E76BF7719D869B40 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/b3f00458-a136-35b3-ad08-5b39fe91d777.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 55256 IP address blocks: 24.239.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:e8:19:e7:6b:f7:71:9d:86:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=ab19340a-a462-437b-8a60-41f930b8ddfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3e:7d:35:99:a9:47:51:63:95:71:e5:79:e9: 1a:4f:ac:4b:4e:35:d6:d1:b1:0d:ba:08:c3:73:01: d1:b9:e9:17:b5:96:37:fb:e0:f4:73:c3:07:8d:c1: 1e:96:e9:af:12:05:18:d1:ea:1b:52:91:be:f7:b7: d6:44:ee:e0:a3:04:b2:6a:f6:3d:3c:af:e1:65:fb: 46:0f:57:34:c7:19:99:5c:2c:18:a2:59:51:a1:b2: 47:1c:3e:d8:45:e8:a8:45:37:9f:d6:70:57:d7:94: 34:72:b5:e4:c2:7d:74:b3:e6:5e:f2:3b:a0:12:af: 19:11:6c:86:37:a1:19:30:94:78:94:1f:1f:02:9a: 37:34:47:eb:7a:9f:86:23:4e:92:5d:95:12:7f:af: 77:89:dc:34:53:53:bf:8b:c5:40:7e:c6:ab:05:b6: 03:f1:c1:05:4c:7a:05:f1:03:47:cf:63:d8:73:ec: a6:a6:18:5e:bb:97:9e:56:5d:6c:41:e7:6e:6a:aa: e7:c2:4b:e0:5a:40:df:b9:29:40:e3:17:38:03:49: b0:04:01:48:b1:26:a6:6b:32:d1:29:86:2d:93:16: 5c:b0:ac:1c:38:d3:59:ad:9d:2f:71:f1:01:2e:34: f6:bf:67:2a:fa:11:e2:a4:24:e0:df:d2:44:71:1b: 97:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:87:50:81:E5:C0:08:C8:04:F6:AF:3E:56:6C:9C:7A:B4:D5:C6:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/b3f00458-a136-35b3-ad08-5b39fe91d777.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 24.239.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:44:fc:53:00:20:c1:ff:6a:0d:43:29:e5:b9:ff:c9:ad:7f: 8b:cd:99:ef:df:5e:cd:59:9e:9a:4b:bd:14:d5:2b:2f:8c:1a: 8d:0f:ab:b5:48:5f:6e:3c:ac:09:72:83:2d:f8:77:37:10:f9: e7:26:d1:64:78:47:39:df:31:92:e5:97:78:13:ad:ec:df:30: b2:7f:bd:5b:1a:55:70:9f:82:e2:bc:76:00:fe:f6:32:24:89: 14:a6:3e:74:fd:d3:a4:e3:2a:c1:ef:bc:00:40:cc:5f:86:bc: 87:34:9a:38:0a:1a:eb:19:b2:e8:a6:77:5b:5d:50:31:c6:a2: cb:d2:5f:9e:0a:c2:4a:a8:98:fe:d6:07:44:62:08:b4:2a:fe: e9:68:76:23:a2:e7:93:1f:e6:32:77:cc:e0:c5:5c:7e:90:89: 24:c3:c5:2b:5e:b0:82:9d:38:0f:11:e8:43:fe:41:11:94:bf: 20:fd:38:80:d7:c5:31:18:1d:42:96:c0:58:6c:b2:c7:b0:ad: fe:84:4d:b5:60:b7:b4:64:f0:42:b5:00:7a:c9:bf:16:58:aa: 7b:8f:b3:38:18:63:65:43:86:75:09:9a:e4:40:2f:3a:a2:41: 31:43:3f:a8:f7:3a:84:0c:82:54:ce:19:0f:28:5e:0b:6f:a5: 19:c6:39:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrOgZ52v3cZ2Gm0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk YWIxOTM0MGEtYTQ2Mi00MzdiLThhNjAtNDFmOTMwYjhkZGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmj59NZmpR1FjlXHleekaT6xLTjXW0bENugjD cwHRuekXtZY3++D0c8MHjcEelumvEgUY0eobUpG+97fWRO7gowSyavY9PK/hZftG D1c0xxmZXCwYollRobJHHD7YReioRTef1nBX15Q0crXkwn10s+Ze8jugEq8ZEWyG N6EZMJR4lB8fApo3NEfrep+GI06SXZUSf693idw0U1O/i8VAfsarBbYD8cEFTHoF 8QNHz2PYc+ymphheu5eeVl1sQeduaqrnwkvgWkDfuSlA4xc4A0mwBAFIsSamazLR KYYtkxZcsKwcONNZrZ0vcfEBLjT2v2cq+hHipCTg39JEcRuXfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKHUIHlwAjIBPavPlZsnHq01cavMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvYjNmMDA0NTgtYTEzNi0z NWIzLWFkMDgtNWIzOWZlOTFkNzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGO+9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhE/FMAIMH/ag1DKeW5/8mtf4vNme/fXs1ZnppLvRTVKy+MGo0Pq7VI X248rAlygy34dzcQ+ecm0WR4RznfMZLll3gTrezfMLJ/vVsaVXCfguK8dgD+9jIk iRSmPnT906TjKsHvvABAzF+GvIc0mjgKGusZsuimd1tdUDHGosvSX54KwkqomP7W B0RiCLQq/ulodiOi55Mf5jJ3zODFXH6QiSTDxStesIKdOA8R6EP+QRGUvyD9OIDX xTEYHUKWwFhsssewrf6ETbVgt7Rk8EK1AHrJvxZYqnuPszgYY2VDhnUJmuRALzqi QTFDP6j3OoQMglTOGQ8oXgtvpRnGOY4= -----END CERTIFICATE-----Generated at Mon Mar 2 09:15:25 2026 by rpki-client