$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/821ff32e-07d4-3b00-9b7a-0fca8537383a.roa File: 821ff32e-07d4-3b00-9b7a-0fca8537383a.roa (raw, json) Hash identifier: yrRURq4dJ1o2ij4o5x2lg4iCUMz21QMfv7ykE7cESsU= Subject key identifier: 0D:45:F2:42:27:C3:6A:1A:A8:E6:A7:77:78:60:77:7D:82:65:E5:A3 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584DC135C37F792F6E13A92E9400 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/821ff32e-07d4-3b00-9b7a-0fca8537383a.roa Signing time: Thu 07 May 2026 13:00:31 +0000 ROA not before: Thu 07 May 2026 13:00:31 +0000 ROA not after: Wed 05 Aug 2026 13:00:31 +0000 asID: 1824 IP address blocks: 192.252.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c1:35:c3:7f:79:2f:6e:13:a9:2e:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: May 7 13:00:31 2026 GMT Not After : Aug 5 13:00:31 2026 GMT Subject: CN=2e18d785-8bdf-4fdb-8481-2b3df181ffda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:17:92:b8:92:d3:e8:d5:66:27:ca:1a:8e:48: 50:20:d3:39:cc:b3:b6:f7:72:1a:02:47:58:da:81: 79:54:a6:68:ee:26:fe:32:a6:59:97:96:37:28:c9: be:6e:b4:6c:40:ed:41:a9:92:84:00:3b:18:7e:39: 00:88:40:46:b9:7f:85:0e:43:21:bb:6e:22:2a:03: 45:32:7d:a4:9c:41:0d:7f:59:d7:2d:2f:f0:18:ab: 3f:73:67:29:53:4a:b9:d0:33:5f:40:3b:b4:38:87: 16:14:7a:1c:77:96:20:85:e4:ae:00:02:50:3c:27: aa:88:6b:b4:c7:b6:0a:0b:aa:99:c5:af:f9:6b:de: 73:27:88:9d:2c:26:68:a8:66:55:31:93:ac:ee:30: 22:bb:42:d0:24:ee:16:e4:4b:2c:90:b1:9f:e9:b1: 63:d0:43:91:2c:57:29:3d:14:6d:2d:c3:da:b5:ee: 7e:f1:d4:69:68:00:31:d1:eb:31:c8:95:fd:42:2a: 23:1e:4a:d1:a5:78:24:02:18:6d:86:0e:b9:25:b8: ec:7f:a4:94:52:69:9c:17:70:95:6b:6c:76:f9:83: 2d:56:f6:79:87:56:f7:58:ea:38:a9:72:c0:bd:80: 44:b8:d0:5e:80:f2:1a:c6:69:fd:a9:29:e5:f5:ca: 1b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:45:F2:42:27:C3:6A:1A:A8:E6:A7:77:78:60:77:7D:82:65:E5:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/821ff32e-07d4-3b00-9b7a-0fca8537383a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 192.252.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:ba:bb:49:dd:0a:04:f0:3a:78:07:30:2b:8c:b2:5c:7d:4a: f5:61:0d:e6:32:c4:4f:47:52:ee:fa:e6:1d:2e:88:df:5f:fb: c3:c6:6a:89:61:f4:a9:14:d7:02:c7:4b:b0:9f:67:7b:b8:5c: 03:a1:b3:7b:c2:1d:7d:61:41:99:16:82:f6:25:36:0d:d6:3a: 7c:7c:8b:69:fe:1c:1a:8f:ec:bf:bb:95:cf:ce:62:5a:ff:c3: 80:97:ae:94:65:cd:54:65:12:b6:2d:c8:40:e1:7c:1d:37:41: 99:e9:46:02:94:e9:a4:85:17:bc:07:08:b2:49:ca:d6:38:5e: a1:72:4d:c5:2a:0a:c2:07:10:20:55:53:69:a5:25:49:5b:4b: e2:f3:99:9c:36:09:86:62:9f:d8:f2:24:3a:08:5f:46:81:e5: 9f:4f:4e:86:55:95:d4:5a:7c:70:e2:3b:26:44:3c:58:75:70: bd:77:2f:9f:9a:d9:9b:a3:54:d3:0d:18:f7:71:95:03:e2:0c: 7e:2f:a7:4f:44:39:82:5a:e4:1e:23:46:52:a2:a6:ba:48:48: cd:aa:1a:5e:75:fb:a5:ae:a3:a0:f8:59:5f:dd:9f:ba:5c:43: 8f:e2:45:dd:f8:d4:5f:ff:6d:c8:cc:f7:3e:08:85:f8:92:f0: 3c:7d:59:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3BNcN/eS9uE6kulAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI2MDUwNzEzMDAzMVoXDTI2MDgwNTEzMDAzMVowLzEtMCsGA1UEAxMk MmUxOGQ3ODUtOGJkZi00ZmRiLTg0ODEtMmIzZGYxODFmZmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBeSuJLT6NVmJ8oajkhQINM5zLO293IaAkdY 2oF5VKZo7ib+MqZZl5Y3KMm+brRsQO1BqZKEADsYfjkAiEBGuX+FDkMhu24iKgNF Mn2knEENf1nXLS/wGKs/c2cpU0q50DNfQDu0OIcWFHocd5YgheSuAAJQPCeqiGu0 x7YKC6qZxa/5a95zJ4idLCZoqGZVMZOs7jAiu0LQJO4W5EsskLGf6bFj0EORLFcp PRRtLcPate5+8dRpaAAx0esxyJX9QiojHkrRpXgkAhhthg65Jbjsf6SUUmmcF3CV a2x2+YMtVvZ5h1b3WOo4qXLAvYBEuNBegPIaxmn9qSnl9cob2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1F8kInw2oaqOand3hgd32CZeWjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvODIxZmYzMmUtMDdkNC0z YjAwLTliN2EtMGZjYTg1MzczODNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPyEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABm6u0ndCgTwOngHMCuMslx9SvVhDeYyxE9HUu765h0uiN9f+8PGaolh 9KkU1wLHS7CfZ3u4XAOhs3vCHX1hQZkWgvYlNg3WOnx8i2n+HBqP7L+7lc/OYlr/ w4CXrpRlzVRlErYtyEDhfB03QZnpRgKU6aSFF7wHCLJJytY4XqFyTcUqCsIHECBV U2mlJUlbS+LzmZw2CYZin9jyJDoIX0aB5Z9PToZVldRafHDiOyZEPFh1cL13L5+a 2ZujVNMNGPdxlQPiDH4vp09EOYJa5B4jRlKiprpISM2qGl51+6Wuo6D4WV/dn7pc Q4/iRd341F//bcjM9z4IhfiS8Dx9Wds= -----END CERTIFICATE-----Generated at Sat May 9 19:29:26 2026 by rpki-client