$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0868c43b-6638-30f2-9a3d-4e6c062d3b7b.roa File: 0868c43b-6638-30f2-9a3d-4e6c062d3b7b.roa (raw, json) Hash identifier: JWQlocVFM5FQFcYNnjespFIlHL5w8zD65bu6itRxv8o= Subject key identifier: 8E:58:AF:22:D9:28:84:95:CE:74:17:9C:06:C6:0F:F6:62:C1:42:AE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D5243C6129A84516BEB7FBA00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0868c43b-6638-30f2-9a3d-4e6c062d3b7b.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 25485 IP address blocks: 192.82.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 01 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:c6:12:9a:84:51:6b:eb:7f:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=ebd99c85-3765-4ede-bb4a-de877d7725ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:25:c4:cb:58:cc:78:55:13:a4:7d:32:da:19: f4:25:28:c1:47:3f:3b:f4:62:b8:f2:2c:89:49:6c: 0c:84:3b:7e:34:de:bb:5b:8e:c6:2c:51:eb:85:3a: 49:f8:1a:da:90:ac:cf:36:f2:c7:7b:7f:c5:0b:32: 3e:83:a2:a1:1e:31:51:c2:5e:d9:d5:6c:20:3f:d5: 7d:92:51:6e:20:0c:d8:43:e3:39:a4:bb:b9:45:27: 95:da:2c:47:b2:72:05:21:be:3c:40:09:bd:73:2d: 93:a0:a7:47:82:16:47:bf:d3:ed:2b:ba:9d:35:36: 30:22:3e:0a:81:d6:e7:41:98:43:04:11:8f:55:c8: 5c:af:14:13:3e:21:ad:52:d7:b3:a1:c9:2f:d5:3c: e3:94:38:b3:63:e5:48:ff:82:01:09:8e:89:87:b3: 57:37:60:be:57:f2:e5:e8:19:b1:33:87:0c:0c:cf: bd:19:4b:a5:18:5f:87:0e:a2:f1:34:c0:38:05:bc: c2:d0:1c:8e:ce:d5:c2:32:27:c1:6a:b9:c8:45:c2: ae:a7:e8:2c:50:02:8c:1a:e1:5c:75:8f:46:56:3c: a1:df:b4:4f:5a:79:78:df:71:1a:c8:5e:8f:8a:b0: 85:3f:62:cd:31:8f:a9:e9:74:34:0d:da:8a:32:10: 0c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:58:AF:22:D9:28:84:95:CE:74:17:9C:06:C6:0F:F6:62:C1:42:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0868c43b-6638-30f2-9a3d-4e6c062d3b7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.82.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:6d:83:76:b4:f3:6b:e7:28:d7:8e:8d:c9:f2:8a:be:af:7e: 00:14:30:95:75:0c:c5:75:02:11:fe:4d:62:ee:b6:5a:41:a9: 0d:e4:65:85:f2:fd:41:60:18:f5:62:c4:47:33:82:25:dd:63: ed:2c:4e:a3:68:29:95:ac:0b:f1:76:58:62:81:64:56:40:b3: 51:d0:40:a9:58:e8:c0:a9:bf:9a:d7:25:ab:1e:16:60:86:f3: 14:a1:b7:04:c1:e4:a6:db:ec:6a:0a:69:e9:89:d4:fe:50:4b: cf:89:d7:1b:bb:62:c2:48:06:74:7b:5e:f3:ed:03:71:71:d9: 52:c5:91:33:45:1a:e6:20:9a:b3:4a:0b:6b:be:05:1b:7b:4d: a7:9b:52:76:4c:6d:de:b4:87:bf:1a:82:1a:f5:9f:ed:b6:37: f3:df:c4:64:2d:57:04:93:04:ae:73:61:66:e3:eb:20:05:d2: 87:95:34:79:b1:b1:f1:4c:3d:40:14:e2:d2:31:1e:99:8b:3a: 79:a9:19:b0:d1:af:7d:87:b8:a3:09:68:6a:3b:8a:f9:69:fd: 03:02:cf:df:24:90:86:25:f4:0e:ab:72:77:92:d0:65:8b:e2: cf:50:4c:df:a3:f7:7d:a4:79:3e:be:f9:3e:4e:d4:58:c1:0e: 94:4f:1d:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ8YSmoRRa+t/ugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk ZWJkOTljODUtMzc2NS00ZWRlLWJiNGEtZGU4NzdkNzcyNWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CXEy1jMeFUTpH0y2hn0JSjBRz879GK48iyJ SWwMhDt+NN67W47GLFHrhTpJ+BrakKzPNvLHe3/FCzI+g6KhHjFRwl7Z1WwgP9V9 klFuIAzYQ+M5pLu5RSeV2ixHsnIFIb48QAm9cy2ToKdHghZHv9PtK7qdNTYwIj4K gdbnQZhDBBGPVchcrxQTPiGtUtezockv1TzjlDizY+VI/4IBCY6Jh7NXN2C+V/Ll 6BmxM4cMDM+9GUulGF+HDqLxNMA4BbzC0ByOztXCMifBarnIRcKup+gsUAKMGuFc dY9GVjyh37RPWnl433EayF6PirCFP2LNMY+p6XQ0DdqKMhAM6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5YryLZKISVznQXnAbGD/ZiwUKuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDg2OGM0M2ItNjYzOC0z MGYyLTlhM2QtNGU2YzA2MmQzYjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFKFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5tg3a082vnKNeOjcnyir6vfgAUMJV1DMV1AhH+TWLutlpBqQ3kZYXy /UFgGPVixEczgiXdY+0sTqNoKZWsC/F2WGKBZFZAs1HQQKlY6MCpv5rXJaseFmCG 8xShtwTB5Kbb7GoKaemJ1P5QS8+J1xu7YsJIBnR7XvPtA3Fx2VLFkTNFGuYgmrNK C2u+BRt7TaebUnZMbd60h78aghr1n+22N/PfxGQtVwSTBK5zYWbj6yAF0oeVNHmx sfFMPUAU4tIxHpmLOnmpGbDRr32HuKMJaGo7ivlp/QMCz98kkIYl9A6rcneS0GWL 4s9QTN+j932keT6++T5O1FjBDpRPHXE= -----END CERTIFICATE-----Generated at Sun Mar 29 23:49:58 2026 by rpki-client