$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/95cbce52-a0f0-382c-8b81-d23c70ca3529.roa File: 95cbce52-a0f0-382c-8b81-d23c70ca3529.roa (raw, json) Hash identifier: n3S4fnJ2tPTUqx19WPfvs2LPBwXVp588ob5jjCauYGI= Subject key identifier: B3:8D:41:83:E9:D6:E2:30:5F:60:8A:B3:D9:62:AE:25:52:18:5C:10 Certificate issuer: /CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Certificate serial: 010D0C9F4328584CB2872AB57D351013A227D180 Authority key identifier: 60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/95cbce52-a0f0-382c-8b81-d23c70ca3529.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 395464 IP address blocks: 192.68.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:2a:b5:7d:35:10:13:a2:27:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=9aaf2e71-e285-484a-80d5-70922ee8202e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e9:ca:8a:36:35:e3:10:05:a6:ec:2d:75:65: 3c:6b:cf:e9:a9:f9:d9:e4:a6:f5:ac:2a:3a:12:68: bd:a3:43:c7:a7:6b:a9:8a:de:50:98:be:34:08:de: 66:fa:99:22:f7:0a:56:01:60:8f:24:04:cc:65:4e: 68:24:f8:6c:bc:03:64:26:85:dd:79:ea:16:e1:a7: d6:60:c6:0d:9f:d5:cf:af:a9:2d:4c:1c:60:c2:c5: e6:e7:17:33:2d:16:0e:b8:f4:cd:8b:84:df:89:54: a1:c5:f8:a2:9b:bf:60:ac:d7:c9:7c:86:4c:11:59: c8:83:92:10:78:c0:73:86:39:a5:7e:c5:f3:b8:72: 80:42:bf:5a:3e:5a:e7:cb:79:7c:3e:09:2e:95:68: 15:ed:bb:2a:d7:81:9b:c4:0d:a0:cf:d4:88:5d:8a: 73:6b:2b:12:9a:f9:9a:5e:f7:28:18:76:af:0a:e0: ac:b7:8c:75:26:80:c5:4e:a3:2a:a5:e0:ba:0f:93: 98:63:db:f6:44:02:52:1d:6c:6d:b5:92:82:cc:cd: b5:a5:02:41:53:f7:24:98:64:76:ae:d9:7e:f7:93: 1d:5a:bc:2e:ec:37:e7:70:a5:c8:5d:30:d2:fc:82: f3:46:32:89:3c:2d:f8:04:16:22:84:c7:87:bd:fd: f5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:8D:41:83:E9:D6:E2:30:5F:60:8A:B3:D9:62:AE:25:52:18:5C:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/95cbce52-a0f0-382c-8b81-d23c70ca3529.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl X509v3 Authority Key Identifier: keyid:60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer sbgp-ipAddrBlock: critical IPv4: 192.68.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:02:5d:c5:1f:5e:cc:63:3b:6b:3b:8c:1d:c2:fc:38:60:bf: 45:8e:21:e2:60:06:57:d2:53:b1:e0:e8:59:5b:ca:ae:73:03: d4:8c:51:fb:c9:b1:92:c8:48:dd:ca:82:08:99:1d:d2:56:d4: 8b:21:8b:5b:c7:59:85:30:10:de:fb:87:78:71:e0:e6:cd:bf: 25:06:f8:da:7c:12:4b:4b:97:77:e6:15:22:3c:66:a4:1c:1b: ec:21:e3:d1:71:be:60:90:ae:5e:f4:59:ab:f2:c4:12:dd:93: 00:b1:f6:70:1f:7c:77:ca:e5:4d:8e:c5:45:e7:84:b6:b8:f1: 9c:42:9a:c5:be:05:c9:66:9c:f1:d0:c5:5c:28:ea:7b:6a:ba: 11:22:50:da:c3:14:40:2e:2b:b5:20:b2:58:02:9b:89:6d:ff: 53:a3:b5:cf:de:3a:7d:d2:08:01:38:c6:d4:12:5c:3d:08:de: 09:20:05:1a:07:ce:07:a1:a2:60:45:73:1e:2c:64:51:ff:23: f4:4f:c3:59:26:95:07:da:f3:3e:43:a1:a9:0d:a1:7b:72:39: 3f:d3:6e:40:08:1d:c9:72:25:73:93:c0:85:18:28:7b:17:7a: a3:5b:96:69:c7:bf:c1:23:8c:98:46:ac:7e:98:8a:95:fe:b5: 2f:e2:a9:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyhyq1fTUQE6In0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVjMmZlNzgtYTQ0Ny00MGQ5LThlMTEtOWM5ZTZmODFk MDgyMB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk OWFhZjJlNzEtZTI4NS00ODRhLTgwZDUtNzA5MjJlZTgyMDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6unKijY14xAFpuwtdWU8a8/pqfnZ5Kb1rCo6 Emi9o0PHp2upit5QmL40CN5m+pki9wpWAWCPJATMZU5oJPhsvANkJoXdeeoW4afW YMYNn9XPr6ktTBxgwsXm5xczLRYOuPTNi4TfiVShxfiim79grNfJfIZMEVnIg5IQ eMBzhjmlfsXzuHKAQr9aPlrny3l8PgkulWgV7bsq14GbxA2gz9SIXYpzaysSmvma XvcoGHavCuCst4x1JoDFTqMqpeC6D5OYY9v2RAJSHWxttZKCzM21pQJBU/ckmGR2 rtl+95MdWrwu7DfncKXIXTDS/ILzRjKJPC34BBYihMeHvf31WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLONQYPp1uIwX2CKs9liriVSGFwQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMy ZmU3OC1hNDQ3LTQwZDktOGUxMS05YzllNmY4MWQwODIvOTVjYmNlNTItYTBmMC0z ODJjLThiODEtZDIzYzcwY2EzNTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjVjMmZlNzgtYTQ0Ny00MGQ5LThl MTEtOWM5ZTZmODFkMDgyL2I1YzJmZTc4LWE0NDctNDBkOS04ZTExLTljOWU2Zjgx ZDA4Mi5jcmwwHwYDVR0jBBgwFoAUYEP282rtaIKx8gBu2kkraw9jVZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMyZmU3OC1hNDQ3LTQwZDktOGUxMS05Yzll NmY4MWQwODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwERwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMCXcUfXsxjO2s7jB3C/Dhgv0WOIeJgBlfSU7Hg6Flbyq5zA9SMUfvJ sZLISN3KggiZHdJW1Ishi1vHWYUwEN77h3hx4ObNvyUG+Np8EktLl3fmFSI8ZqQc G+wh49FxvmCQrl70WavyxBLdkwCx9nAffHfK5U2OxUXnhLa48ZxCmsW+BclmnPHQ xVwo6ntquhEiUNrDFEAuK7UgslgCm4lt/1Ojtc/eOn3SCAE4xtQSXD0I3gkgBRoH zgehomBFcx4sZFH/I/RPw1kmlQfa8z5DoakNoXtyOT/TbkAIHclyJXOTwIUYKHsX eqNblmnHv8EjjJhGrH6YipX+tS/iqao= -----END CERTIFICATE-----Generated at Thu Feb 26 10:38:36 2026 by rpki-client