$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/138a75c4-c512-3da3-9a83-d1c2d2e7a216.roa File: 138a75c4-c512-3da3-9a83-d1c2d2e7a216.roa (raw, json) Hash identifier: glGBJ9SvJpzsDO0QUY0rUyvppjy7Ijc1teX0mO27qVU= Subject key identifier: 14:73:43:16:A4:C5:42:4E:61:08:77:46:9F:60:76:4E:3B:B2:52:B1 Certificate issuer: /CN=04bd1965-5757-479c-b2af-44967b5e0539 Certificate serial: 010D0C9F4328584D19B4AF12EDB398C720ED7FC0 Authority key identifier: B5:78:2D:55:7A:A0:51:AA:E0:15:64:BB:40:15:08:8D:34:54:FF:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/138a75c4-c512-3da3-9a83-d1c2d2e7a216.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 400671 IP address blocks: 206.168.193.0/24 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/04bd1965-5757-479c-b2af-44967b5e0539.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/04bd1965-5757-479c-b2af-44967b5e0539.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:af:12:ed:b3:98:c7:20:ed:7f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04bd1965-5757-479c-b2af-44967b5e0539 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=b8575244-9d4c-44d6-b4ef-2379f6a432ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5b:ad:0b:16:23:26:03:f7:d5:76:4a:14:78: 91:3e:51:48:5c:8b:2b:57:dd:38:ab:50:44:9d:69: e0:ce:00:84:d1:0b:6a:b2:e9:b0:f2:ea:c0:47:9e: 3f:ad:7b:4e:a8:60:3b:83:ed:08:8e:4a:36:7e:b7: 4f:bc:c6:4d:80:ac:43:01:e0:c1:df:4e:25:31:c1: f4:31:d2:a9:4b:d9:c1:8a:44:8a:b2:38:b3:08:e1: b8:30:a0:e9:1e:d3:37:c3:b9:fe:f9:1b:dc:8e:01: cd:4a:be:4c:28:30:97:58:d5:97:e9:3d:c3:8b:f2: 54:60:e3:e9:82:e7:81:be:0a:3e:e7:39:76:23:64: fb:64:3f:42:0b:26:d8:79:02:bc:e8:6c:ad:4e:3a: c6:89:0b:76:d4:e2:5b:99:47:7f:03:80:3f:ec:c7: 3d:a5:06:2b:18:04:ef:32:9f:28:44:29:7d:3b:ab: ea:91:2c:43:4a:f6:c8:e6:38:3b:8e:45:4d:a3:69: 41:b1:a3:06:88:7b:20:16:d5:b6:b7:4f:e3:42:5c: 59:a8:50:93:84:69:18:7d:36:5e:19:32:e8:ec:ab: b5:92:dc:84:29:45:1e:d4:2e:78:4c:92:7d:b6:f1: c4:38:85:0f:73:a7:10:1b:99:16:5d:0f:4c:fd:55: 71:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:73:43:16:A4:C5:42:4E:61:08:77:46:9F:60:76:4E:3B:B2:52:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/138a75c4-c512-3da3-9a83-d1c2d2e7a216.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/04bd1965-5757-479c-b2af-44967b5e0539.crl X509v3 Authority Key Identifier: keyid:B5:78:2D:55:7A:A0:51:AA:E0:15:64:BB:40:15:08:8D:34:54:FF:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539.cer sbgp-ipAddrBlock: critical IPv4: 206.168.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:48:08:a3:4d:93:bb:06:7b:19:89:43:ff:ea:bb:e4:e1:bb: a4:31:e1:7e:d8:a5:12:04:08:b5:16:64:51:cd:c4:62:98:99: 3a:18:45:25:43:2e:b8:d7:99:8c:6c:cf:9d:5c:0b:1f:a3:7f: ad:19:21:3c:e5:7f:53:a5:1a:84:14:9a:d5:16:16:cc:31:9e: 4a:d1:1b:bd:e1:26:c3:69:b8:aa:e8:57:b2:5a:47:07:89:1d: c1:36:cd:09:92:e9:8a:41:74:35:e7:9a:ed:68:55:69:56:0b: a2:de:e0:97:d7:fa:72:91:b6:06:48:05:8f:82:5c:45:de:89: 7a:51:cf:a9:0d:e8:17:9e:02:dc:eb:dd:67:26:e9:d3:69:d8: 87:f1:f9:75:76:14:b7:0f:29:7b:ab:40:fa:4f:df:73:dc:6e: 75:8d:3a:45:bc:c2:43:86:fd:ab:a6:a9:d6:d7:69:6c:6a:08: ae:b6:98:7b:7a:a8:29:f8:2f:b9:4d:81:f6:af:82:a0:1d:91: b7:17:3b:c2:52:24:16:14:8f:70:d6:7b:a9:74:d9:90:13:74: b9:ac:04:f1:f6:3e:01:05:09:ba:dd:b9:59:3f:5e:d1:15:c1: 45:51:d9:82:d0:df:d0:22:3e:90:7e:be:55:ed:93:85:6f:39: 85:08:66:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtK8S7bOYxyDtf8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDRiZDE5NjUtNTc1Ny00NzljLWIyYWYtNDQ5NjdiNWUw NTM5MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk Yjg1NzUyNDQtOWQ0Yy00NGQ2LWI0ZWYtMjM3OWY2YTQzMmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVutCxYjJgP31XZKFHiRPlFIXIsrV904q1BE nWngzgCE0Qtqsumw8urAR54/rXtOqGA7g+0Ijko2frdPvMZNgKxDAeDB304lMcH0 MdKpS9nBikSKsjizCOG4MKDpHtM3w7n++RvcjgHNSr5MKDCXWNWX6T3Di/JUYOPp gueBvgo+5zl2I2T7ZD9CCybYeQK86GytTjrGiQt21OJbmUd/A4A/7Mc9pQYrGATv Mp8oRCl9O6vqkSxDSvbI5jg7jkVNo2lBsaMGiHsgFtW2t0/jQlxZqFCThGkYfTZe GTLo7Ku1ktyEKUUe1C54TJJ9tvHEOIUPc6cQG5kWXQ9M/VVxiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRzQxakxUJOYQh3Rp9gdk47slKxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wNGJk MTk2NS01NzU3LTQ3OWMtYjJhZi00NDk2N2I1ZTA1MzkvMTM4YTc1YzQtYzUxMi0z ZGEzLTlhODMtZDFjMmQyZTdhMjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDRiZDE5NjUtNTc1Ny00NzljLWIy YWYtNDQ5NjdiNWUwNTM5LzA0YmQxOTY1LTU3NTctNDc5Yy1iMmFmLTQ0OTY3YjVl MDUzOS5jcmwwHwYDVR0jBBgwFoAUtXgtVXqgUargFWS7QBUIjTRU/5kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wNGJkMTk2NS01NzU3LTQ3OWMtYjJhZi00NDk2 N2I1ZTA1MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqjBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhICKNNk7sGexmJQ//qu+Thu6Qx4X7YpRIECLUWZFHNxGKYmToYRSVD LrjXmYxsz51cCx+jf60ZITzlf1OlGoQUmtUWFswxnkrRG73hJsNpuKroV7JaRweJ HcE2zQmS6YpBdDXnmu1oVWlWC6Le4JfX+nKRtgZIBY+CXEXeiXpRz6kN6BeeAtzr 3Wcm6dNp2Ifx+XV2FLcPKXurQPpP33PcbnWNOkW8wkOG/aumqdbXaWxqCK62mHt6 qCn4L7lNgfavgqAdkbcXO8JSJBYUj3DWe6l02ZATdLmsBPH2PgEFCbrduVk/XtEV wUVR2YLQ39AiPpB+vlXtk4VvOYUIZt0= -----END CERTIFICATE-----Generated at Sat Mar 14 13:52:12 2026 by rpki-client