$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/337099e7-4ae6-3200-84db-2441bbde1298.roa File: 337099e7-4ae6-3200-84db-2441bbde1298.roa (raw, json) Hash identifier: sjhNnxtirVfmszaxp0olx+MdfJwbED29VYCa/7kvnhg= Subject key identifier: 17:64:EB:E3:FA:93:A3:D6:94:31:51:A8:B5:41:EF:E0:FA:63:ED:66 Certificate issuer: /CN=161143c9-c030-4270-91a4-41e54bbb2357 Certificate serial: 010D0C9F4328584D4D5A4C68F9072FA225820F86 Authority key identifier: 3F:1F:91:EE:51:47:94:04:0E:68:02:55:C7:6B:C2:2A:74:D9:CE:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/337099e7-4ae6-3200-84db-2441bbde1298.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 14630 IP address blocks: 199.230.0.0/21 maxlen: 24 199.230.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/161143c9-c030-4270-91a4-41e54bbb2357.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/161143c9-c030-4270-91a4-41e54bbb2357.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:4c:68:f9:07:2f:a2:25:82:0f:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=161143c9-c030-4270-91a4-41e54bbb2357 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=8cbef2d5-bed8-4e09-a39e-3b077a844ae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d2:5a:ee:14:f5:a3:73:7c:3f:2d:c7:d0:b2: e9:d3:01:7d:fb:e2:48:b9:46:df:44:63:ea:08:38: ce:2a:9c:32:3d:49:78:b4:95:72:77:c7:a4:3c:62: 2c:3b:67:7d:d2:b1:19:07:b6:2b:eb:4b:13:6b:b7: 41:a6:30:0a:fd:bb:49:1b:48:7f:bb:4b:58:05:40: 94:78:5c:f5:83:ce:c3:a2:ef:89:4a:ff:0c:cf:e3: 5e:fe:53:72:67:82:9d:60:28:e5:59:48:b9:01:da: 38:d2:23:37:88:80:eb:e3:36:dc:dd:db:19:5c:66: 72:02:c5:d1:b8:69:23:dd:8f:9f:66:4f:08:42:5f: 57:ce:0b:de:6b:63:dc:12:8a:7a:b0:e0:ee:86:3c: 1d:30:cb:29:d2:9a:33:f4:6f:de:9d:d6:15:26:ee: f1:9c:8e:64:55:09:5f:73:1d:42:45:f9:ae:e4:14: 95:bc:ab:0e:3b:94:83:67:e7:9e:b4:0c:a5:c7:5e: 50:3f:bc:eb:66:e0:7b:4f:91:84:38:f3:e9:28:de: 37:86:96:c3:81:45:52:57:5f:cc:e3:c4:be:d3:df: 66:6a:c4:73:61:ec:40:30:31:d7:d4:16:33:c3:9a: 09:b9:01:88:19:de:d4:8f:a2:35:05:dd:d0:16:05: 39:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:64:EB:E3:FA:93:A3:D6:94:31:51:A8:B5:41:EF:E0:FA:63:ED:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/337099e7-4ae6-3200-84db-2441bbde1298.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/161143c9-c030-4270-91a4-41e54bbb2357.crl X509v3 Authority Key Identifier: keyid:3F:1F:91:EE:51:47:94:04:0E:68:02:55:C7:6B:C2:2A:74:D9:CE:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357.cer sbgp-ipAddrBlock: critical IPv4: 199.230.0.0-199.230.9.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:ce:f2:4d:a7:fa:bb:fe:5d:0e:d5:4a:b7:06:31:87:fd:d1: 35:a0:b0:23:a8:34:15:e8:af:f6:39:d0:07:5a:29:45:11:99: e0:b9:2f:b2:64:ac:82:5f:14:60:0a:76:95:fd:64:b0:a9:03: 73:6d:9a:f6:06:f5:93:1d:21:0a:4d:66:8b:a2:f3:67:7e:c1: 49:f0:57:ff:ed:b6:bc:5b:2b:1c:c0:f9:5a:71:6b:1b:01:5c: 83:c2:25:a7:f1:82:4f:b7:55:65:de:04:9f:46:f5:e3:64:57: 51:08:2a:3c:95:80:90:90:ee:4e:46:84:b5:0a:21:c7:ec:b2: 50:2f:e5:84:8a:36:00:08:84:f7:9a:17:fc:43:4f:1c:be:d3: 07:a5:57:18:cc:3f:15:3a:af:eb:8c:95:7a:d3:d3:17:b1:06: dc:c3:96:44:84:f8:56:c2:d0:a6:b2:89:a5:79:e7:83:da:0a: c4:00:8b:a9:d4:8a:ef:ae:f1:16:10:52:3e:03:dd:0a:c0:67: f2:ef:71:39:88:d2:bb:4f:94:db:3c:93:c1:13:12:af:0b:ea: 3f:77:30:e8:7c:75:e3:51:c0:78:2e:6c:14:0d:6e:47:03:b9: b1:dd:d3:eb:7b:2f:9a:6d:8b:46:d5:66:c0:93:c7:79:e0:d3: 21:12:a0:39 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWE1NWkxo+QcvoiWCD4YwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTYxMTQzYzktYzAzMC00MjcwLTkxYTQtNDFlNTRiYmIy MzU3MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk OGNiZWYyZDUtYmVkOC00ZTA5LWEzOWUtM2IwNzdhODQ0YWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdJa7hT1o3N8Py3H0LLp0wF9++JIuUbfRGPq CDjOKpwyPUl4tJVyd8ekPGIsO2d90rEZB7Yr60sTa7dBpjAK/btJG0h/u0tYBUCU eFz1g87Dou+JSv8Mz+Ne/lNyZ4KdYCjlWUi5Ado40iM3iIDr4zbc3dsZXGZyAsXR uGkj3Y+fZk8IQl9Xzgvea2PcEop6sODuhjwdMMsp0poz9G/endYVJu7xnI5kVQlf cx1CRfmu5BSVvKsOO5SDZ+eetAylx15QP7zrZuB7T5GEOPPpKN43hpbDgUVSV1/M 48S+099masRzYexAMDHX1BYzw5oJuQGIGd7Uj6I1Bd3QFgU5BwIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFBdk6+P6k6PWlDFRqLVB7+D6Y+1mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNjEx NDNjOS1jMDMwLTQyNzAtOTFhNC00MWU1NGJiYjIzNTcvMzM3MDk5ZTctNGFlNi0z MjAwLTg0ZGItMjQ0MWJiZGUxMjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTYxMTQzYzktYzAzMC00MjcwLTkx YTQtNDFlNTRiYmIyMzU3LzE2MTE0M2M5LWMwMzAtNDI3MC05MWE0LTQxZTU0YmJi MjM1Ny5jcmwwHwYDVR0jBBgwFoAUPx+R7lFHlAQOaAJVx2vCKnTZzmwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNjExNDNjOS1jMDMwLTQyNzAtOTFhNC00MWU1 NGJiYjIzNTcuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwHH5gME AcfmCDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQBOzvJNp/q7/l0O1Uq3BjGH/dE1oLAjqDQV6K/2OdAHWilF EZnguS+yZKyCXxRgCnaV/WSwqQNzbZr2BvWTHSEKTWaLovNnfsFJ8Ff/7ba8Wysc wPlacWsbAVyDwiWn8YJPt1Vl3gSfRvXjZFdRCCo8lYCQkO5ORoS1CiHH7LJQL+WE ijYACIT3mhf8Q08cvtMHpVcYzD8VOq/rjJV609MXsQbcw5ZEhPhWwtCmsomleeeD 2grEAIup1IrvrvEWEFI+A90KwGfy73E5iNK7T5TbPJPBExKvC+o/dzDofHXjUcB4 LmwUDW5HA7mx3dPrey+abYtG1WbAk8d54NMhEqA5 -----END CERTIFICATE-----Generated at Fri Apr 17 23:43:07 2026 by rpki-client