$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/6fa801e3-3342-3f1c-a396-6f9201c0d56d.roa File: 6fa801e3-3342-3f1c-a396-6f9201c0d56d.roa (raw, json) Hash identifier: ROvcVUNgClHio/oIXuQyw4YERBkjMWoLzLrnPeV7u48= Subject key identifier: 5C:DA:29:27:39:6D:AE:C8:4A:E4:F3:19:A8:72:8E:E4:29:51:C7:6F Certificate issuer: /CN=d3c1e47f-2bd9-4e42-a950-0f81e45cd461 Certificate serial: 010D0C9F4328584CAA270A69BFA1933C7CC495C0 Authority key identifier: F8:E0:54:64:56:2E:06:FC:45:40:3B:F8:F6:1F:52:85:28:DA:22:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/6fa801e3-3342-3f1c-a396-6f9201c0d56d.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 6579 IP address blocks: 192.75.24.0/24 maxlen: 24 192.219.31.0/24 maxlen: 24 208.85.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:0a:69:bf:a1:93:3c:7c:c4:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c1e47f-2bd9-4e42-a950-0f81e45cd461 Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=4ea0d406-5206-4e07-9641-0d883d909c81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:76:a4:55:76:08:4f:a7:2f:95:22:84:34:1a: d9:ab:31:46:9e:89:1d:ea:db:8a:79:e3:63:d0:4f: 08:0b:a1:40:f9:49:38:84:4d:c5:7c:fc:ec:ea:c1: 6f:e8:f4:a4:d7:eb:4f:ad:67:30:5b:d4:41:60:44: 11:7b:6d:ca:de:4c:c5:a8:81:b7:34:f6:93:82:ae: 56:2d:1e:01:ec:34:18:72:4f:4b:62:ad:71:89:99: 43:37:b2:92:5f:ca:7c:02:bb:ba:1f:ae:4c:c2:fe: d2:2d:6c:fb:66:bb:99:14:59:d2:8f:c3:3a:4e:36: 66:bf:5d:32:2d:03:15:3c:12:08:b0:55:e6:4b:71: 44:5e:d6:f5:aa:bb:b1:7b:b3:9a:c1:16:2e:4e:0b: 99:5b:3a:2e:1f:d0:c7:83:9a:d0:2f:cf:62:15:f2: b7:d7:de:5e:66:aa:34:76:63:32:27:88:35:d9:5b: f2:20:4d:f9:24:6b:d0:13:3a:16:f3:f2:c9:4d:09: a2:66:67:3e:ef:23:82:9f:0e:b6:86:46:8c:b8:79: 1d:58:e1:13:25:b8:b9:a7:09:22:45:83:e7:d3:ee: d1:96:78:74:64:32:a1:ce:4f:08:f8:d5:aa:15:45: d2:8e:62:d9:be:2c:8b:db:72:c4:fe:83:a3:a6:d4: 7f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DA:29:27:39:6D:AE:C8:4A:E4:F3:19:A8:72:8E:E4:29:51:C7:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/6fa801e3-3342-3f1c-a396-6f9201c0d56d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl X509v3 Authority Key Identifier: keyid:F8:E0:54:64:56:2E:06:FC:45:40:3B:F8:F6:1F:52:85:28:DA:22:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer sbgp-ipAddrBlock: critical IPv4: 192.75.24.0/24 192.219.31.0/24 208.85.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:1d:bc:ee:7e:ae:1a:f8:d5:9b:04:83:8d:f3:8f:f3:dc:d7: 47:a0:2b:fd:d5:4b:d0:a5:b5:e5:8c:da:7f:d0:dd:72:b9:9c: 83:b3:4c:d5:9b:22:03:7d:dc:f1:6e:05:42:8c:0c:83:5a:6a: 4c:2e:2e:7d:41:5f:5b:45:08:ff:5e:34:86:9a:bd:e0:2c:d9: ef:52:d4:d6:cc:ab:59:45:d3:b1:d6:24:bd:90:42:27:3d:11: 55:34:e2:8b:77:69:72:30:ab:98:28:65:c5:45:e4:89:7b:a5: c6:a4:11:f6:64:a2:f0:71:c8:03:6c:24:b7:17:82:0b:9d:f8: f1:66:9c:fc:67:74:49:9a:01:cd:97:72:c5:96:86:89:04:79: e4:f5:35:dd:1d:1b:d5:cf:ea:12:94:96:43:1c:e6:93:cc:0a: d7:bd:a0:d7:f6:c5:63:07:42:91:48:d0:da:29:74:82:20:55: b3:90:9e:54:08:38:b5:54:a4:9b:f2:8c:c3:8a:cf:35:5e:1c: 58:c4:99:9d:83:1e:f4:7b:9f:50:18:fe:4a:10:c1:13:52:85: f7:13:92:11:bf:2b:09:d1:16:88:72:b3:65:ab:8c:cf:14:79: eb:38:99:e4:ac:c3:d5:cb:be:84:b9:4f:00:89:9a:26:12:3f: c6:ae:55:76 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEyqJwppv6GTPHzElcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNjMWU0N2YtMmJkOS00ZTQyLWE5NTAtMGY4MWU0NWNk NDYxMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk NGVhMGQ0MDYtNTIwNi00ZTA3LTk2NDEtMGQ4ODNkOTA5YzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nakVXYIT6cvlSKENBrZqzFGnokd6tuKeeNj 0E8IC6FA+Uk4hE3FfPzs6sFv6PSk1+tPrWcwW9RBYEQRe23K3kzFqIG3NPaTgq5W LR4B7DQYck9LYq1xiZlDN7KSX8p8Aru6H65Mwv7SLWz7ZruZFFnSj8M6TjZmv10y LQMVPBIIsFXmS3FEXtb1qruxe7OawRYuTguZWzouH9DHg5rQL89iFfK3195eZqo0 dmMyJ4g12VvyIE35JGvQEzoW8/LJTQmiZmc+7yOCnw62hkaMuHkdWOETJbi5pwki RYPn0+7Rlnh0ZDKhzk8I+NWqFUXSjmLZviyL23LE/oOjptR/lQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFFzaKSc5ba7ISuTzGahyjuQpUcdvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kM2Mx ZTQ3Zi0yYmQ5LTRlNDItYTk1MC0wZjgxZTQ1Y2Q0NjEvNmZhODAxZTMtMzM0Mi0z ZjFjLWEzOTYtNmY5MjAxYzBkNTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDNjMWU0N2YtMmJkOS00ZTQyLWE5 NTAtMGY4MWU0NWNkNDYxL2QzYzFlNDdmLTJiZDktNGU0Mi1hOTUwLTBmODFlNDVj ZDQ2MS5jcmwwHwYDVR0jBBgwFoAU+OBUZFYuBvxFQDv49h9ShSjaIsowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kM2MxZTQ3Zi0yYmQ5LTRlNDItYTk1MC0wZjgx ZTQ1Y2Q0NjEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwEsYAwQA wNsfAwQC0FVQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAKsdvO5+rhr41ZsEg43zj/Pc10egK/3VS9ClteWM 2n/Q3XK5nIOzTNWbIgN93PFuBUKMDINaakwuLn1BX1tFCP9eNIaaveAs2e9S1NbM q1lF07HWJL2QQic9EVU04ot3aXIwq5goZcVF5Il7pcakEfZkovBxyANsJLcXggud +PFmnPxndEmaAc2XcsWWhokEeeT1Nd0dG9XP6hKUlkMc5pPMCte9oNf2xWMHQpFI 0NopdIIgVbOQnlQIOLVUpJvyjMOKzzVeHFjEmZ2DHvR7n1AY/koQwRNShfcTkhG/ KwnRFohys2WrjM8Uees4meSsw9XLvoS5TwCJmiYSP8auVXY= -----END CERTIFICATE-----Generated at Fri Feb 27 07:33:00 2026 by rpki-client