$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f90e28e6-da06-4a5c-8fb6-c3d235623025/848b855e-8eb3-349d-94d8-c2e2329802a2.roa File: 848b855e-8eb3-349d-94d8-c2e2329802a2.roa (raw, json) Hash identifier: kWkaMoZPZEebXDokoMS91fz8EtEys0qFlzv4wU2kV3I= Subject key identifier: 1B:E8:D3:72:DC:14:E9:29:55:D3:6F:F4:E5:91:A9:E6:5F:FA:E6:EF Certificate issuer: /CN=f90e28e6-da06-4a5c-8fb6-c3d235623025 Certificate serial: 010D0C9F4328584E6C0EE3AA64D77F58B4690180 Authority key identifier: 27:05:D6:51:87:0F:1C:B0:7F:B5:1B:D1:A5:2E:F3:F1:F6:95:56:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f90e28e6-da06-4a5c-8fb6-c3d235623025.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f90e28e6-da06-4a5c-8fb6-c3d235623025/848b855e-8eb3-349d-94d8-c2e2329802a2.roa Signing time: Tue 07 Jul 2026 17:45:49 +0000 ROA not before: Tue 07 Jul 2026 17:45:49 +0000 ROA not after: Mon 05 Oct 2026 17:17:49 +0000 asID: 12001 IP address blocks: 192.126.80.0/21 maxlen: 24 192.126.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f90e28e6-da06-4a5c-8fb6-c3d235623025/f90e28e6-da06-4a5c-8fb6-c3d235623025.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f90e28e6-da06-4a5c-8fb6-c3d235623025/f90e28e6-da06-4a5c-8fb6-c3d235623025.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f90e28e6-da06-4a5c-8fb6-c3d235623025.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:0e:e3:aa:64:d7:7f:58:b4:69:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f90e28e6-da06-4a5c-8fb6-c3d235623025 Validity Not Before: Jul 7 17:45:49 2026 GMT Not After : Oct 5 17:17:49 2026 GMT Subject: CN=d53d1f34-0e45-4cb0-9e88-d281b8073faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:87:1c:92:7e:3d:c4:49:57:d4:d4:68:39:77: d0:7b:b0:9f:63:49:82:06:a9:cd:43:8d:e2:b5:f9: e8:52:60:21:3b:e1:6c:00:46:65:56:f4:f7:2c:93: 72:2e:04:d4:98:e0:82:3e:33:2b:32:2d:c0:6b:be: eb:dd:2e:12:3c:39:16:b2:11:be:74:6f:ff:d4:40: cd:e1:63:5e:b5:73:40:23:95:d4:3e:ab:2c:91:fb: 0e:d1:3f:7c:b4:5c:c2:7c:2e:b3:9a:1e:47:c2:c9: e5:ec:2e:6c:4e:e3:d5:2e:a9:c6:1d:31:35:b7:e9: 3c:2f:da:22:dd:40:ac:ca:82:97:c4:ca:ad:df:03: 88:3a:52:8d:43:8e:75:5a:f4:11:96:a8:8b:eb:94: e2:36:a1:a0:99:a6:a0:38:5a:92:9b:51:4a:e9:27: 00:d6:55:8a:a8:d5:04:3f:78:63:1c:c4:34:bb:73: 6e:d9:77:64:7d:75:19:65:5b:cd:61:85:9b:e1:02: 51:0f:74:7c:d4:43:7e:d1:96:4a:ba:22:0a:7c:8f: 4e:6f:06:08:3f:0d:4a:b8:f6:eb:bc:a2:94:b7:5b: 53:91:e8:3f:90:eb:3f:d4:61:09:1e:ca:3c:09:0b: ae:06:b9:ac:2b:39:a9:3b:78:f1:e4:e5:df:c6:1d: ee:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E8:D3:72:DC:14:E9:29:55:D3:6F:F4:E5:91:A9:E6:5F:FA:E6:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f90e28e6-da06-4a5c-8fb6-c3d235623025/848b855e-8eb3-349d-94d8-c2e2329802a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f90e28e6-da06-4a5c-8fb6-c3d235623025/f90e28e6-da06-4a5c-8fb6-c3d235623025.crl X509v3 Authority Key Identifier: keyid:27:05:D6:51:87:0F:1C:B0:7F:B5:1B:D1:A5:2E:F3:F1:F6:95:56:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f90e28e6-da06-4a5c-8fb6-c3d235623025.cer sbgp-ipAddrBlock: critical IPv4: 192.126.80.0/21 192.126.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:53:95:eb:dc:1d:32:de:69:ba:86:6b:7d:55:8b:f4:18:68: 0e:ce:22:3a:d1:78:2e:f9:9a:d5:f9:31:75:57:c0:8b:cf:cd: 15:58:38:92:9b:6e:a1:fe:6f:af:ed:5d:4a:9e:eb:97:2a:1e: 1b:51:5b:02:b1:62:e8:38:cf:64:32:0d:dd:92:df:70:4b:e7: a2:92:7a:d9:f5:3e:ed:34:51:99:58:d8:e6:3a:87:a2:38:d4: 77:f8:d6:51:ed:46:85:7c:bc:b2:80:80:ec:8a:be:95:9f:36: bb:58:07:6a:67:6b:d8:ec:84:7e:b8:17:3e:c0:7d:e5:94:0e: 2e:17:70:78:ad:11:73:9d:50:59:32:89:a2:c8:9f:12:c0:53: b1:dc:77:21:3c:47:e3:7e:62:ad:0d:f1:a0:69:74:1b:4e:2c: f4:ba:75:1c:00:fe:53:23:b0:67:e2:ea:47:df:e3:7e:5e:8c: 59:6f:24:7c:19:66:2c:35:17:bf:13:c6:bf:82:5d:b1:e0:a4: 35:3c:e5:c5:09:b1:0f:d7:ea:dc:57:65:ae:80:5a:c5:5e:07: a9:84:a3:1a:99:a6:01:5f:a1:c5:4e:f2:c2:f0:01:35:48:d6: 93:fb:72:cc:35:ca:fc:86:85:b6:a2:de:44:eb:58:ba:9c:53: b1:57:e0:65 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE5sDuOqZNd/WLRpAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjkwZTI4ZTYtZGEwNi00YTVjLThmYjYtYzNkMjM1NjIz MDI1MB4XDTI2MDcwNzE3NDU0OVoXDTI2MTAwNTE3MTc0OVowLzEtMCsGA1UEAxMk ZDUzZDFmMzQtMGU0NS00Y2IwLTllODgtZDI4MWI4MDczZmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4cckn49xElX1NRoOXfQe7CfY0mCBqnNQ43i tfnoUmAhO+FsAEZlVvT3LJNyLgTUmOCCPjMrMi3Aa77r3S4SPDkWshG+dG//1EDN 4WNetXNAI5XUPqsskfsO0T98tFzCfC6zmh5Hwsnl7C5sTuPVLqnGHTE1t+k8L9oi 3UCsyoKXxMqt3wOIOlKNQ451WvQRlqiL65TiNqGgmaagOFqSm1FK6ScA1lWKqNUE P3hjHMQ0u3Nu2XdkfXUZZVvNYYWb4QJRD3R81EN+0ZZKuiIKfI9ObwYIPw1KuPbr vKKUt1tTkeg/kOs/1GEJHso8CQuuBrmsKzmpO3jx5OXfxh3uqwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBvo03LcFOkpVdNv9OWRqeZf+ubvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9mOTBl MjhlNi1kYTA2LTRhNWMtOGZiNi1jM2QyMzU2MjMwMjUvODQ4Yjg1NWUtOGViMy0z NDlkLTk0ZDgtYzJlMjMyOTgwMmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZjkwZTI4ZTYtZGEwNi00YTVjLThm YjYtYzNkMjM1NjIzMDI1L2Y5MGUyOGU2LWRhMDYtNGE1Yy04ZmI2LWMzZDIzNTYy MzAyNS5jcmwwHwYDVR0jBBgwFoAUJwXWUYcPHLB/tRvRpS7z8faVVpkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9mOTBlMjhlNi1kYTA2LTRhNWMtOGZiNi1jM2Qy MzU2MjMwMjUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDwH5QAwQC wH5cMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACpTlevcHTLeabqGa31Vi/QYaA7OIjrReC75mtX5MXVXwIvP zRVYOJKbbqH+b6/tXUqe65cqHhtRWwKxYug4z2QyDd2S33BL56KSetn1Pu00UZlY 2OY6h6I41Hf41lHtRoV8vLKAgOyKvpWfNrtYB2pna9jshH64Fz7AfeWUDi4XcHit EXOdUFkyiaLInxLAU7HcdyE8R+N+Yq0N8aBpdBtOLPS6dRwA/lMjsGfi6kff435e jFlvJHwZZiw1F78Txr+CXbHgpDU85cUJsQ/X6txXZa6AWsVeB6mEoxqZpgFfocVO 8sLwATVI1pP7csw1yvyGhbai3kTrWLqcU7FX4GU= -----END CERTIFICATE-----Generated at Tue Jul 21 20:12:07 2026 by rpki-client