$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d234659c-1476-33a0-8f9c-1ea470626726.roa File: d234659c-1476-33a0-8f9c-1ea470626726.roa (raw, json) Hash identifier: EjI92MRelEoZK4eQjC8zTcS+xgtbjOfptCOEn9PgOSI= Subject key identifier: EC:4F:99:A4:25:8F:CC:2A:D2:85:B5:CA:CF:13:27:F8:C8:9A:F2:3F Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D5A86233BA52FAFFA76F35400 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d234659c-1476-33a0-8f9c-1ea470626726.roa Signing time: Tue 31 Mar 2026 18:14:36 +0000 ROA not before: Tue 31 Mar 2026 18:14:36 +0000 ROA not after: Mon 29 Jun 2026 18:14:36 +0000 asID: 30103 IP address blocks: 192.204.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5a:86:23:3b:a5:2f:af:fa:76:f3:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 31 18:14:36 2026 GMT Not After : Jun 29 18:14:36 2026 GMT Subject: CN=ced9fe1c-ad59-448c-9a99-7ffd6e7aaa9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a4:b2:ac:72:da:b2:ba:69:a1:b6:ce:a0:8f: af:cf:c5:62:18:70:60:a7:9e:ba:78:36:59:6b:f5: cf:14:29:f7:90:f3:ac:f0:2a:f5:a5:d9:6f:25:bd: b0:36:5c:d2:e4:40:1a:4c:a1:53:53:7c:6b:e5:e0: 10:e5:f3:26:c5:a9:ec:c5:29:0d:b2:db:82:53:28: 16:6c:d2:c1:8d:68:a7:63:6d:58:98:fc:fb:42:1f: 05:ca:c1:bf:48:c9:ae:e3:b2:9e:94:4a:60:ef:fb: 65:03:a6:77:90:cf:82:3c:26:75:65:3d:9c:ea:7e: 2b:2d:3c:2f:ee:1b:6a:c1:6d:ec:6f:46:b5:6f:b8: 3b:30:e6:cf:82:a5:3b:dd:fc:9d:cb:5c:e9:92:0c: ba:fc:be:17:12:e2:90:ac:af:21:e0:85:93:fe:ef: 97:c3:23:a2:dd:44:c2:70:96:37:3d:04:a6:c9:b5: c1:da:f4:14:34:47:e5:81:19:36:b6:d2:1f:92:d6: 1d:27:46:b2:16:59:5a:2d:69:ab:42:a3:03:78:b7: 8b:19:3c:b3:04:18:2a:78:b7:7a:34:23:d4:7a:8d: a9:7d:6d:a9:91:aa:95:b6:e7:2c:50:4f:4c:be:a0: 85:3d:7a:03:ae:78:86:3c:9e:57:3e:8a:17:90:7a: 5a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:4F:99:A4:25:8F:CC:2A:D2:85:B5:CA:CF:13:27:F8:C8:9A:F2:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d234659c-1476-33a0-8f9c-1ea470626726.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 192.204.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:7c:6b:70:85:b7:a3:7a:86:97:c7:1e:b6:14:92:5c:91:33: 6b:88:1a:9d:3b:7d:6c:96:d3:bb:5c:ac:23:26:0b:c2:cc:0b: 0a:a1:6f:7e:50:7b:92:ff:83:d9:36:5b:fe:f6:80:5b:4e:24: 4f:a1:b7:b1:22:cb:a2:cc:4d:5e:c3:9c:cf:9e:9a:9f:54:88: d9:6f:d3:b9:f4:2d:49:ae:21:2c:b8:60:a3:ab:4f:ad:42:0e: 98:e2:f2:96:37:35:76:74:1c:3f:c3:e4:b1:d5:35:c0:ce:3a: 5b:0f:bf:54:d8:3d:04:9c:4e:93:e7:96:d9:cc:f8:48:ee:c8: 9a:fa:73:9f:29:71:eb:29:11:c8:4a:b0:1e:7d:1a:c5:d2:90: b3:49:d6:61:4a:65:ce:6f:8e:4a:49:42:fe:b9:93:71:d4:9e: b2:1f:de:0f:d1:80:f8:13:ce:5d:ab:54:70:21:d2:81:b2:70: cf:e3:4a:7f:d6:8f:a9:6c:0e:9a:c3:58:d1:6e:77:56:3a:5f: 41:c3:09:a8:88:71:21:9a:e9:12:7b:c7:10:35:0a:f9:67:2d: 22:6d:aa:db:88:28:bb:eb:a8:c7:f1:68:15:68:77:70:c4:18: f0:db:59:8c:58:a2:a0:4d:9a:c9:05:9a:5c:a5:82:81:7f:00: 52:b3:ae:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1ahiM7pS+v+nbzVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDMzMTE4MTQzNloXDTI2MDYyOTE4MTQzNlowLzEtMCsGA1UEAxMk Y2VkOWZlMWMtYWQ1OS00NDhjLTlhOTktN2ZmZDZlN2FhYTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6SyrHLasrppobbOoI+vz8ViGHBgp566eDZZ a/XPFCn3kPOs8Cr1pdlvJb2wNlzS5EAaTKFTU3xr5eAQ5fMmxansxSkNstuCUygW bNLBjWinY21YmPz7Qh8FysG/SMmu47KelEpg7/tlA6Z3kM+CPCZ1ZT2c6n4rLTwv 7htqwW3sb0a1b7g7MObPgqU73fydy1zpkgy6/L4XEuKQrK8h4IWT/u+XwyOi3UTC cJY3PQSmybXB2vQUNEflgRk2ttIfktYdJ0ayFllaLWmrQqMDeLeLGTyzBBgqeLd6 NCPUeo2pfW2pkaqVtucsUE9MvqCFPXoDrniGPJ5XPooXkHpa1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxPmaQlj8wq0oW1ys8TJ/jImvI/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZDIzNDY1OWMtMTQ3Ni0z M2EwLThmOWMtMWVhNDcwNjI2NzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwMwMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAF8a3CFt6N6hpfHHrYUklyRM2uIGp07fWyW07tcrCMmC8LMCwqhb35Q e5L/g9k2W/72gFtOJE+ht7Eiy6LMTV7DnM+emp9UiNlv07n0LUmuISy4YKOrT61C Dpji8pY3NXZ0HD/D5LHVNcDOOlsPv1TYPQScTpPnltnM+EjuyJr6c58pcespEchK sB59GsXSkLNJ1mFKZc5vjkpJQv65k3HUnrIf3g/RgPgTzl2rVHAh0oGycM/jSn/W j6lsDprDWNFud1Y6X0HDCaiIcSGa6RJ7xxA1CvlnLSJtqtuIKLvrqMfxaBVod3DE GPDbWYxYoqBNmskFmlylgoF/AFKzrmw= -----END CERTIFICATE-----Generated at Wed Apr 8 13:29:54 2026 by rpki-client