$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/d68ed165-7389-3232-85d4-20e1edff7e2f.roa File: d68ed165-7389-3232-85d4-20e1edff7e2f.roa (raw, json) Hash identifier: zMk4hzHY8RbCYlcY47KfKhWGzLRTpYP7RLL1AFH1PEA= Subject key identifier: 17:32:A2:10:34:10:2B:11:AD:A0:8D:00:EA:9E:EA:53:CC:22:03:24 Certificate issuer: /CN=8bb8bd36-b264-4279-a16e-360f4a33eb80 Certificate serial: 010D0C9F4328584D6C0FB8A698CC631B524B4580 Authority key identifier: 9A:14:65:DF:F1:9B:5E:23:25:AB:9B:30:D0:F1:24:8C:6C:27:AD:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/d68ed165-7389-3232-85d4-20e1edff7e2f.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 7922 IP address blocks: 192.48.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:b8:a6:98:cc:63:1b:52:4b:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bb8bd36-b264-4279-a16e-360f4a33eb80 Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=8f3574b0-4caa-4348-8146-f41c7cb3ce20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4f:23:fa:c3:e3:53:14:a6:97:2a:9a:e9:3a: 3a:69:a2:00:b6:d8:16:de:31:b2:e8:3a:c1:3f:bb: bc:e0:a9:94:7a:39:ce:8a:ef:62:e7:2c:0d:53:46: ee:c7:fe:b7:a9:0f:3d:f2:6a:b2:21:4c:01:b1:8c: 9e:3a:33:30:96:7d:9c:40:24:b5:12:4a:00:f0:16: ce:f8:94:8c:91:a8:a2:00:47:60:0b:13:04:fe:f5: 0b:11:26:6c:53:27:0f:56:2e:08:03:90:eb:47:32: 4c:ee:8e:7b:6c:3e:04:46:1c:f5:e8:70:13:ae:56: 0d:93:a7:ee:cd:8c:e9:af:a7:19:b2:ac:79:bb:2c: d8:9a:b9:c9:e6:25:72:e7:12:d3:c7:d9:10:2b:d7: e5:02:03:e6:be:e6:ee:68:05:c1:1e:d8:e6:4e:f5: 19:94:56:30:6b:40:86:ca:1c:4f:c7:05:4b:86:b8: b2:ce:98:e2:66:25:86:e2:61:c9:d1:99:b2:8b:e2: 9e:e0:58:3d:be:45:a6:c5:6e:f2:8a:94:dc:33:bc: ba:c4:d7:f3:9e:7c:5e:ae:08:8f:73:0d:28:3b:a1: 70:c7:86:0c:e5:80:a7:4a:35:06:bd:9c:0f:83:ab: e0:7b:f2:d7:0b:68:39:3b:1e:27:3c:15:fa:02:3a: 19:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:32:A2:10:34:10:2B:11:AD:A0:8D:00:EA:9E:EA:53:CC:22:03:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/d68ed165-7389-3232-85d4-20e1edff7e2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.crl X509v3 Authority Key Identifier: keyid:9A:14:65:DF:F1:9B:5E:23:25:AB:9B:30:D0:F1:24:8C:6C:27:AD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer sbgp-ipAddrBlock: critical IPv4: 192.48.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:da:f9:10:4e:82:9a:7b:3f:5c:e3:52:25:34:aa:6e:3a:5f: d2:fd:fe:9c:61:b5:3f:fe:6b:b1:54:5b:10:a6:d9:bd:2a:08: bc:3c:c4:3f:03:cb:16:22:cd:5e:d3:b0:9b:c0:06:5e:7a:ec: 7b:98:c8:38:31:57:50:36:40:56:39:2c:a6:0a:2f:b8:9a:93: 7b:ee:9d:20:24:27:70:91:e7:8e:84:23:21:b0:6e:19:42:5c: 55:91:3c:b9:c3:2c:af:d1:61:b3:6e:d3:2d:5c:fc:9a:39:25: eb:e2:64:a1:e0:3d:03:3b:83:f5:3b:60:74:97:c5:6c:f1:f2: 77:b9:cc:24:6c:12:55:eb:bc:e0:d1:31:c1:8d:0e:4b:d1:d0: 62:59:d0:ac:e5:be:45:cb:4f:67:53:12:67:1c:3b:f7:dc:23: 74:6c:ed:dd:80:2a:0c:37:d1:2a:12:19:c9:19:ba:98:76:39: a9:64:34:c7:d7:cc:24:65:b3:29:b1:1f:ff:38:c6:d8:34:15: a5:77:8c:6a:54:0b:3b:ac:a7:96:1b:8b:cb:09:01:a7:3a:ef: 4b:d2:f6:ba:52:7e:28:60:8b:a2:b7:dc:1d:0a:d0:ec:0a:ad: 2e:98:8d:d3:11:59:5b:09:ef:69:5b:35:21:76:9a:5c:1d:7b: 2c:3d:92:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD7immMxjG1JLRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJiOGJkMzYtYjI2NC00Mjc5LWExNmUtMzYwZjRhMzNl YjgwMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk OGYzNTc0YjAtNGNhYS00MzQ4LTgxNDYtZjQxYzdjYjNjZTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApE8j+sPjUxSmlyqa6To6aaIAttgW3jGy6DrB P7u84KmUejnOiu9i5ywNU0bux/63qQ898mqyIUwBsYyeOjMwln2cQCS1EkoA8BbO +JSMkaiiAEdgCxME/vULESZsUycPVi4IA5DrRzJM7o57bD4ERhz16HATrlYNk6fu zYzpr6cZsqx5uyzYmrnJ5iVy5xLTx9kQK9flAgPmvubuaAXBHtjmTvUZlFYwa0CG yhxPxwVLhriyzpjiZiWG4mHJ0Zmyi+Ke4Fg9vkWmxW7yipTcM7y6xNfznnxergiP cw0oO6Fwx4YM5YCnSjUGvZwPg6vge/LXC2g5Ox4nPBX6AjoZ5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcyohA0ECsRraCNAOqe6lPMIgMkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84YmI4 YmQzNi1iMjY0LTQyNzktYTE2ZS0zNjBmNGEzM2ViODAvZDY4ZWQxNjUtNzM4OS0z MjMyLTg1ZDQtMjBlMWVkZmY3ZTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGJiOGJkMzYtYjI2NC00Mjc5LWEx NmUtMzYwZjRhMzNlYjgwLzhiYjhiZDM2LWIyNjQtNDI3OS1hMTZlLTM2MGY0YTMz ZWI4MC5jcmwwHwYDVR0jBBgwFoAUmhRl3/GbXiMlq5sw0PEkjGwnrbowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84YmI4YmQzNi1iMjY0LTQyNzktYTE2ZS0zNjBm NGEzM2ViODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDDpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMHa+RBOgpp7P1zjUiU0qm46X9L9/pxhtT/+a7FUWxCm2b0qCLw8xD8D yxYizV7TsJvABl567HuYyDgxV1A2QFY5LKYKL7iak3vunSAkJ3CR546EIyGwbhlC XFWRPLnDLK/RYbNu0y1c/Jo5JeviZKHgPQM7g/U7YHSXxWzx8ne5zCRsElXrvODR McGNDkvR0GJZ0KzlvkXLT2dTEmccO/fcI3Rs7d2AKgw30SoSGckZuph2OalkNMfX zCRlsymxH/84xtg0FaV3jGpUCzusp5Ybi8sJAac670vS9rpSfihgi6K33B0K0OwK rS6YjdMRWVsJ72lbNSF2mlwdeyw9kp8= -----END CERTIFICATE-----Generated at Sat Apr 11 01:30:12 2026 by rpki-client