$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af6ec85a-91a2-3a34-96e5-9e7cb78a49d5.roa File: af6ec85a-91a2-3a34-96e5-9e7cb78a49d5.roa (raw, json) Hash identifier: P/DCnJtK52bDJtH8YMvL83IUrFG+qiWvSev7ZJKBSb4= Subject key identifier: 3D:63:F7:95:C8:92:9A:AB:9B:1B:72:8F:48:11:60:BB:F8:8E:2A:5F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D0D57FC51A97BEDBA279F2F40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af6ec85a-91a2-3a34-96e5-9e7cb78a49d5.roa Signing time: Wed 04 Mar 2026 02:44:22 +0000 ROA not before: Wed 04 Mar 2026 02:44:22 +0000 ROA not after: Tue 02 Jun 2026 01:44:22 +0000 asID: 15169 IP address blocks: 192.179.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:57:fc:51:a9:7b:ed:ba:27:9f:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 4 02:44:22 2026 GMT Not After : Jun 2 01:44:22 2026 GMT Subject: CN=4067f86c-722a-4788-952d-c77cfe82854e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:87:44:ad:33:da:4e:ef:3e:db:91:42:79:cd: 72:69:80:0e:2d:a0:20:d5:da:db:89:c1:df:cf:7b: 27:67:d3:a0:63:f7:88:77:90:c6:a9:f4:ca:19:22: 5c:95:10:e1:88:4d:e9:ad:f5:c5:91:69:4c:09:47: 8a:03:10:00:67:3b:5c:c7:1d:9a:c2:30:cc:95:2a: 47:a5:d3:e1:44:2b:bc:ff:97:e4:8b:8a:13:8a:ce: 4f:94:c5:52:6e:54:85:69:3e:24:c3:ab:5e:df:9b: bf:aa:95:4d:3f:ba:70:d8:ce:76:5e:9f:4e:29:61: 62:b5:15:c8:6f:a9:fe:a5:8b:55:c4:81:18:79:84: 6a:f1:b7:14:8a:10:ae:d5:5a:36:aa:75:e9:d9:ab: 13:e8:7d:85:ae:57:82:3f:a5:f0:85:11:21:4b:33: 6a:e9:54:90:96:7b:a8:85:ee:9a:85:b9:bf:03:7a: d2:a7:f1:a6:a3:39:5c:6b:3e:67:eb:2c:09:f5:cb: 5f:66:85:4f:c2:79:dc:70:bb:5a:f2:6d:84:1d:fb: c5:1f:f8:29:fa:7f:44:94:ff:53:ca:53:54:53:c4: e2:ab:3b:eb:fd:14:0d:2e:e6:07:8c:13:af:2c:4a: 83:ec:09:8d:2a:5f:c6:cd:78:22:e0:8f:be:34:9c: 0f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:63:F7:95:C8:92:9A:AB:9B:1B:72:8F:48:11:60:BB:F8:8E:2A:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af6ec85a-91a2-3a34-96e5-9e7cb78a49d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.179.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:f2:e9:2c:7a:47:98:21:27:0d:62:81:0d:db:e7:82:d4:78: d9:d7:3c:49:63:7f:31:14:10:a8:d6:d3:f4:7f:e4:9d:ad:12: f2:11:ed:aa:ae:53:d5:2a:b3:56:b7:4e:b7:f3:4e:b4:55:a1: 2c:3c:ac:d3:c3:b2:64:eb:f7:62:07:91:b8:25:e3:37:59:5e: 54:61:4b:af:23:28:1f:b6:ed:72:5f:27:84:33:8b:c5:e7:d4: 91:c1:35:1b:15:c9:5c:f8:5c:5d:d9:13:1f:79:05:75:50:89: 31:e8:9d:d6:86:b5:bb:3f:02:19:50:46:4a:2b:2c:1b:05:05: f2:27:3a:85:4e:80:c6:e6:cb:b6:6e:de:86:70:4c:cd:17:7c: 4d:70:03:40:76:ab:e5:c1:fa:ef:87:78:13:e6:dc:2c:80:e9: 6d:bd:ef:a0:5a:3f:c6:11:7b:d2:70:fa:ae:4d:15:c4:cf:23: 40:c4:19:79:16:f0:1e:ac:f7:3f:49:c2:a0:83:15:86:61:d9: f6:aa:a1:4c:d3:2a:c9:a6:53:3c:a7:71:00:07:47:62:c5:24: 97:ff:fe:be:b0:29:21:ff:a4:e7:e4:1c:0f:b2:c4:73:66:3e: 41:fb:b9:97:d4:0b:d6:5a:98:c5:0d:a0:87:91:fe:b0:e6:19: dc:a1:5e:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NV/xRqXvtuiefL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMwNDAyNDQyMloXDTI2MDYwMjAxNDQyMlowLzEtMCsGA1UEAxMk NDA2N2Y4NmMtNzIyYS00Nzg4LTk1MmQtYzc3Y2ZlODI4NTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4dErTPaTu8+25FCec1yaYAOLaAg1drbicHf z3snZ9OgY/eId5DGqfTKGSJclRDhiE3prfXFkWlMCUeKAxAAZztcxx2awjDMlSpH pdPhRCu8/5fki4oTis5PlMVSblSFaT4kw6te35u/qpVNP7pw2M52Xp9OKWFitRXI b6n+pYtVxIEYeYRq8bcUihCu1Vo2qnXp2asT6H2FrleCP6XwhREhSzNq6VSQlnuo he6ahbm/A3rSp/Gmozlcaz5n6ywJ9ctfZoVPwnnccLta8m2EHfvFH/gp+n9ElP9T ylNUU8Tiqzvr/RQNLuYHjBOvLEqD7AmNKl/GzXgi4I++NJwPrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1j95XIkpqrmxtyj0gRYLv4jipfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWY2ZWM4NWEtOTFhMi0z YTM0LTk2ZTUtOWU3Y2I3OGE0OWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLMVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDy6Sx6R5ghJw1igQ3b54LUeNnXPEljfzEUEKjW0/R/5J2tEvIR7aqu U9Uqs1a3TrfzTrRVoSw8rNPDsmTr92IHkbgl4zdZXlRhS68jKB+27XJfJ4Qzi8Xn 1JHBNRsVyVz4XF3ZEx95BXVQiTHondaGtbs/AhlQRkorLBsFBfInOoVOgMbmy7Zu 3oZwTM0XfE1wA0B2q+XB+u+HeBPm3CyA6W2976BaP8YRe9Jw+q5NFcTPI0DEGXkW 8B6s9z9JwqCDFYZh2faqoUzTKsmmUzyncQAHR2LFJJf//r6wKSH/pOfkHA+yxHNm PkH7uZfUC9ZamMUNoIeR/rDmGdyhXpY= -----END CERTIFICATE-----Generated at Wed Mar 18 20:29:28 2026 by rpki-client