$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/8a2e6bbb-e211-3ae0-bbc0-3420243b3358.roa File: 8a2e6bbb-e211-3ae0-bbc0-3420243b3358.roa (raw, json) Hash identifier: cY5B1W5UE+fEoE4TRYkLQCTDsbWurj5OGAjaQX5oTPQ= Subject key identifier: 1E:7A:C6:A8:5A:E5:41:9C:AB:93:E2:69:FB:25:26:C4:9D:34:07:3E Certificate issuer: /CN=590468a2-be81-410c-b887-a35157322fb1 Certificate serial: 010D0C9F4328584D5E1A6508D71160EB0CD077C0 Authority key identifier: CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/8a2e6bbb-e211-3ae0-bbc0-3420243b3358.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 393891 IP address blocks: 192.103.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Apr 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:65:08:d7:11:60:eb:0c:d0:77:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590468a2-be81-410c-b887-a35157322fb1 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=ccf8a317-bcce-417f-99ad-ecf29c2c2771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:40:57:91:b9:12:b1:04:e5:17:8f:84:e5:1e: d1:aa:75:c4:d3:08:c4:e9:ea:44:29:58:0c:94:d7: 0f:1f:32:0b:4e:bb:dd:18:42:e7:a6:90:cc:5c:15: 67:a6:02:86:58:7b:ca:43:6c:b9:41:bb:0c:13:71: e3:01:cd:7e:67:f7:af:c0:53:f2:b5:eb:57:9c:f6: 43:6f:e1:0a:31:77:bf:3d:46:df:f6:d4:f8:c4:ee: fa:c2:2f:0f:ad:83:15:08:cf:22:14:3f:81:19:da: b1:8e:3f:3f:df:73:de:49:d7:21:19:fd:11:a0:ca: 02:88:4f:3d:56:09:3c:b9:23:0f:22:70:58:f5:c2: 3e:08:9d:13:c8:6f:fa:c0:ae:9a:d4:43:c0:e8:4e: 07:65:40:51:7d:52:bb:12:3d:48:97:70:e5:62:ac: 64:47:78:30:06:b4:94:c2:6b:52:81:14:91:69:a6: 14:3b:83:16:d3:ac:25:b9:87:82:6c:e7:75:e1:61: 5a:06:8f:29:5b:eb:e1:5e:0d:f5:29:71:03:c8:fc: 41:29:b7:3a:d4:c1:81:23:42:db:04:37:bf:44:e4: 0b:6c:50:f2:92:53:53:ad:05:7d:fa:12:bf:34:01: eb:d8:ee:2e:be:53:19:0e:7c:db:af:e1:c2:6c:5b: b3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7A:C6:A8:5A:E5:41:9C:AB:93:E2:69:FB:25:26:C4:9D:34:07:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/8a2e6bbb-e211-3ae0-bbc0-3420243b3358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl X509v3 Authority Key Identifier: keyid:CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer sbgp-ipAddrBlock: critical IPv4: 192.103.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:57:72:8c:11:0c:2a:82:c2:e8:4b:33:10:54:b8:2a:37:5d: 33:af:21:d2:c5:a6:9a:e0:96:d0:f3:1d:5a:26:df:7e:97:02: 05:03:bf:36:89:15:2f:83:a3:c9:fe:c7:3f:2d:2a:13:05:11: 16:a0:d0:20:44:0a:56:8d:05:60:44:f8:e1:b9:e9:dc:76:4c: bf:7e:55:a8:9d:9c:20:c1:8c:93:b4:0c:ee:5d:c6:f7:e5:ae: 6a:57:a3:e9:9d:94:ab:d2:bf:b9:68:c9:dd:72:8b:78:d8:92: 35:ba:12:62:7a:2b:6f:6c:6d:1f:41:ed:eb:2c:5e:f4:88:41: 7c:cc:4f:e4:d2:b7:b7:7c:2d:8e:22:79:40:f4:00:dd:ae:fd: 03:a9:9b:e6:79:a3:2c:31:16:2e:cf:df:af:25:4a:6e:6d:6f: ed:c2:87:e2:8e:c9:ab:91:0d:90:f0:4d:19:ad:03:7f:c3:2c: ef:ee:b8:50:78:3e:21:c5:ba:9a:d1:98:65:34:ff:4a:fc:39: 1e:f6:6d:b5:40:08:9d:3a:6f:f9:5f:dc:61:37:fe:c8:11:8d: dd:20:17:f6:d3:fe:23:1c:3b:23:ff:8a:db:f7:c0:4b:c0:d2: fe:86:aa:2f:e2:48:da:d9:90:e8:9d:5e:40:40:c2:b2:ac:ec: 90:0b:d5:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGmUI1xFg6wzQd8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkwNDY4YTItYmU4MS00MTBjLWI4ODctYTM1MTU3MzIy ZmIxMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk Y2NmOGEzMTctYmNjZS00MTdmLTk5YWQtZWNmMjljMmMyNzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEBXkbkSsQTlF4+E5R7RqnXE0wjE6epEKVgM lNcPHzILTrvdGELnppDMXBVnpgKGWHvKQ2y5QbsME3HjAc1+Z/evwFPytetXnPZD b+EKMXe/PUbf9tT4xO76wi8PrYMVCM8iFD+BGdqxjj8/33PeSdchGf0RoMoCiE89 Vgk8uSMPInBY9cI+CJ0TyG/6wK6a1EPA6E4HZUBRfVK7Ej1Il3DlYqxkR3gwBrSU wmtSgRSRaaYUO4MW06wluYeCbOd14WFaBo8pW+vhXg31KXEDyPxBKbc61MGBI0Lb BDe/ROQLbFDyklNTrQV9+hK/NAHr2O4uvlMZDnzbr+HCbFuzdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB56xqha5UGcq5PiafslJsSdNAc+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTA0 NjhhMi1iZTgxLTQxMGMtYjg4Ny1hMzUxNTczMjJmYjEvOGEyZTZiYmItZTIxMS0z YWUwLWJiYzAtMzQyMDI0M2IzMzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTkwNDY4YTItYmU4MS00MTBjLWI4 ODctYTM1MTU3MzIyZmIxLzU5MDQ2OGEyLWJlODEtNDEwYy1iODg3LWEzNTE1NzMy MmZiMS5jcmwwHwYDVR0jBBgwFoAUz9+cv10n/WlBCOCkwLzC2qnoDokwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTA0NjhhMi1iZTgxLTQxMGMtYjg4Ny1hMzUx NTczMjJmYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGd1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVXcowRDCqCwuhLMxBUuCo3XTOvIdLFpprgltDzHVom336XAgUDvzaJ FS+Do8n+xz8tKhMFERag0CBEClaNBWBE+OG56dx2TL9+VaidnCDBjJO0DO5dxvfl rmpXo+mdlKvSv7loyd1yi3jYkjW6EmJ6K29sbR9B7essXvSIQXzMT+TSt7d8LY4i eUD0AN2u/QOpm+Z5oywxFi7P368lSm5tb+3Ch+KOyauRDZDwTRmtA3/DLO/uuFB4 PiHFuprRmGU0/0r8OR72bbVACJ06b/lf3GE3/sgRjd0gF/bT/iMcOyP/itv3wEvA 0v6Gqi/iSNrZkOidXkBAwrKs7JAL1V8= -----END CERTIFICATE-----Generated at Fri Apr 10 08:39:22 2026 by rpki-client