$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/2ae40c95-4cc5-33a5-8aa3-054c920d5b48.roa File: 2ae40c95-4cc5-33a5-8aa3-054c920d5b48.roa (raw, json) Hash identifier: xneEaNjzlfz6ywfTuDanHpwpbvNiOoyTcpzSQEZMcCU= Subject key identifier: DF:DF:30:B0:CD:B0:61:06:3F:38:F9:C0:55:05:CD:1A:CF:BF:38:D7 Certificate issuer: /CN=cbf6809f-0b45-47d5-b7cc-7f892ddda0dc Certificate serial: 010D0C9F4328584D4D5A585ECD3A53C9DC83FD80 Authority key identifier: 9B:06:A9:E2:32:92:2E:F1:AD:4C:84:04:3E:28:D8:DF:11:75:0D:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/2ae40c95-4cc5-33a5-8aa3-054c920d5b48.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 14618 IP address blocks: 192.58.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:58:5e:cd:3a:53:c9:dc:83:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbf6809f-0b45-47d5-b7cc-7f892ddda0dc Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=bf6a2313-ea56-4aa9-ac94-a95f68a1063a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:be:c3:48:d8:cb:87:56:62:08:23:80:5f:4c: bf:24:98:40:49:90:a5:1d:2c:21:2c:20:86:bf:22: 8b:f1:72:91:93:2b:f3:3d:fb:84:68:fe:91:e2:96: d1:be:96:65:48:1e:0d:cb:af:25:99:76:ca:36:ca: 8a:06:1b:99:e3:70:ef:2f:8a:65:49:18:4c:09:87: 52:1d:5e:c6:45:e9:84:a6:6a:75:54:3d:4c:3a:44: 1a:89:05:c9:28:27:55:b3:f0:44:70:b9:77:bf:4f: c9:2c:9e:9a:78:87:a0:24:c9:b3:f7:ae:2c:68:cf: 85:60:a9:4c:b0:a8:f1:57:27:5d:04:d7:48:ca:1e: e9:a6:ba:85:32:45:89:9c:6a:b9:fd:a6:f1:9b:da: f4:a0:11:cb:8d:4e:99:b6:a1:19:26:f6:f6:ad:1f: 66:36:e8:19:f9:e8:7e:ce:8d:3d:9d:8a:62:f1:1d: 2d:a0:ff:ed:23:c0:60:23:bd:9f:98:83:ae:6d:10: 7a:80:01:41:00:3b:f0:7f:ab:9a:62:8a:31:ae:3f: 6d:5a:73:00:b4:75:b7:12:77:84:48:f8:7b:86:fe: 76:e2:a0:af:d1:54:59:a6:21:fd:fa:cd:18:8c:ac: 50:e0:45:46:99:29:18:91:9c:82:7f:07:8e:74:5d: d7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:DF:30:B0:CD:B0:61:06:3F:38:F9:C0:55:05:CD:1A:CF:BF:38:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/2ae40c95-4cc5-33a5-8aa3-054c920d5b48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.crl X509v3 Authority Key Identifier: keyid:9B:06:A9:E2:32:92:2E:F1:AD:4C:84:04:3E:28:D8:DF:11:75:0D:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.cer sbgp-ipAddrBlock: critical IPv4: 192.58.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:03:88:88:db:04:1e:d4:f0:78:cb:1d:81:84:e8:d0:10:05: 6b:9e:09:85:3a:98:7a:a4:fa:7a:ff:cc:74:03:1b:43:cc:81: 7a:c1:4e:2a:5d:d8:33:53:b1:c0:43:79:9c:3e:41:6f:11:81: 6d:14:43:c0:46:d1:38:4b:58:ac:8e:87:fd:9c:35:7c:0a:1d: 8e:f4:97:be:27:6c:33:3f:c1:33:87:be:1f:5d:a6:45:fa:25: fe:21:26:06:73:52:21:83:0b:2f:51:24:e4:9a:5a:71:63:07: 55:93:a1:5d:d3:49:13:1c:1b:a2:81:6b:f9:f4:30:d2:5d:e1: 92:87:a8:ab:74:57:4a:30:41:f8:97:dc:e3:c3:3a:5f:3e:0f: 95:9e:e0:76:17:c8:58:e6:b1:f2:5c:0c:a4:ef:25:65:3b:d4: 31:78:95:6d:c0:22:b7:5e:91:b7:2a:e7:74:73:e2:5a:e1:39: e8:37:91:c7:ac:39:f4:df:2d:43:f0:0d:a4:8f:fb:17:24:71: ad:be:4a:5d:77:e7:e6:1d:50:99:2e:21:4b:ed:5e:6f:a1:31: 33:7a:9c:07:99:bb:97:73:5e:8c:c6:ee:1e:45:27:10:c8:22: 93:7c:78:ff:1c:24:08:64:3d:b4:d7:5d:24:cc:29:76:c5:40: eb:e9:02:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWlhezTpTydyD/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmNjgwOWYtMGI0NS00N2Q1LWI3Y2MtN2Y4OTJkZGRh MGRjMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk YmY2YTIzMTMtZWE1Ni00YWE5LWFjOTQtYTk1ZjY4YTEwNjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7b7DSNjLh1ZiCCOAX0y/JJhASZClHSwhLCCG vyKL8XKRkyvzPfuEaP6R4pbRvpZlSB4Ny68lmXbKNsqKBhuZ43DvL4plSRhMCYdS HV7GRemEpmp1VD1MOkQaiQXJKCdVs/BEcLl3v0/JLJ6aeIegJMmz964saM+FYKlM sKjxVyddBNdIyh7pprqFMkWJnGq5/abxm9r0oBHLjU6ZtqEZJvb2rR9mNugZ+eh+ zo09nYpi8R0toP/tI8BgI72fmIOubRB6gAFBADvwf6uaYooxrj9tWnMAtHW3EneE SPh7hv524qCv0VRZpiH9+s0YjKxQ4EVGmSkYkZyCfweOdF3XrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/fMLDNsGEGPzj5wFUFzRrPvzjXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jYmY2 ODA5Zi0wYjQ1LTQ3ZDUtYjdjYy03Zjg5MmRkZGEwZGMvMmFlNDBjOTUtNGNjNS0z M2E1LThhYTMtMDU0YzkyMGQ1YjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2JmNjgwOWYtMGI0NS00N2Q1LWI3 Y2MtN2Y4OTJkZGRhMGRjL2NiZjY4MDlmLTBiNDUtNDdkNS1iN2NjLTdmODkyZGRk YTBkYy5jcmwwHwYDVR0jBBgwFoAUmwap4jKSLvGtTIQEPijY3xF1DZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jYmY2ODA5Zi0wYjQ1LTQ3ZDUtYjdjYy03Zjg5 MmRkZGEwZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDr8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwDiIjbBB7U8HjLHYGE6NAQBWueCYU6mHqk+nr/zHQDG0PMgXrBTipd 2DNTscBDeZw+QW8RgW0UQ8BG0ThLWKyOh/2cNXwKHY70l74nbDM/wTOHvh9dpkX6 Jf4hJgZzUiGDCy9RJOSaWnFjB1WToV3TSRMcG6KBa/n0MNJd4ZKHqKt0V0owQfiX 3OPDOl8+D5We4HYXyFjmsfJcDKTvJWU71DF4lW3AIrdekbcq53Rz4lrhOeg3kces OfTfLUPwDaSP+xckca2+Sl135+YdUJkuIUvtXm+hMTN6nAeZu5dzXozG7h5FJxDI IpN8eP8cJAhkPbTXXSTMKXbFQOvpAtM= -----END CERTIFICATE-----Generated at Tue Apr 7 10:34:14 2026 by rpki-client