$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/5c92f33f-ed63-3965-921b-f63d669ebe20.roa File: 5c92f33f-ed63-3965-921b-f63d669ebe20.roa (raw, json) Hash identifier: 0K3A7Q1uoPjAWdDlywNYbQJYrObvgr2ramc9WmJHCAM= Subject key identifier: 89:3E:89:CE:A3:AF:03:3D:7C:0C:21:83:4A:11:F9:16:1F:20:05:86 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584D60E50620E7F53255FEF37640 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/5c92f33f-ed63-3965-921b-f63d669ebe20.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 6649 IP address blocks: 199.193.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:06:20:e7:f5:32:55:fe:f3:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=8fe72f31-32ad-4ae8-a9e0-a2ff60566bfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:73:7b:e1:c6:64:69:4c:a0:24:02:2f:7c:a1: f6:b8:c0:67:42:04:19:2b:70:7c:16:08:96:6e:e6: 6e:08:e2:e3:5b:4e:a0:c3:10:dc:5d:ec:0f:08:c4: df:00:15:74:5a:84:82:83:bc:64:71:f9:a4:f8:14: 8f:82:3a:16:45:77:da:c7:f4:ad:95:3d:ed:8d:ae: 30:54:82:54:00:de:b7:5b:c8:bf:db:ca:a9:ca:35: b5:16:92:28:05:be:ee:4c:26:aa:87:56:5b:47:79: 8a:42:d8:df:bc:4a:6b:8c:2a:51:fe:8b:3f:6a:4d: 65:e5:7a:bc:f5:32:c6:2f:44:83:7e:64:d1:c9:29: 02:a9:79:96:2f:9c:cf:7e:e3:01:b0:72:51:7f:04: fd:aa:0a:c6:ea:38:7d:17:4e:ee:d9:ba:9c:97:08: 57:99:48:5d:b9:f2:64:8e:58:a8:e8:76:a9:b0:42: 34:f0:58:cd:55:39:d0:aa:d6:59:b4:79:ca:a9:5d: 4c:91:cd:0e:60:8d:bb:98:76:6d:e0:47:b2:04:22: 5e:6a:4e:de:ea:58:0a:6f:80:e2:5d:14:bc:12:3c: ec:af:23:c8:b1:5f:91:fd:c9:c2:95:96:f6:49:de: 02:4f:7e:43:32:53:3b:63:8a:41:f4:14:85:9f:ad: d2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:3E:89:CE:A3:AF:03:3D:7C:0C:21:83:4A:11:F9:16:1F:20:05:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/5c92f33f-ed63-3965-921b-f63d669ebe20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 199.193.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:58:c9:d4:b7:c5:7a:83:ff:bc:be:12:fd:56:e3:1c:c4:8c: 52:6b:3d:db:bc:d7:aa:28:49:5d:7c:ee:f0:c5:bf:63:a5:b4: fe:d8:94:34:41:9a:e0:a0:b5:bd:0c:37:1b:83:80:2a:e5:46: 49:f9:0d:f8:b2:fb:8e:ea:a9:18:db:94:7e:5e:43:d9:95:4c: 3e:17:ec:d3:99:02:7e:30:11:3b:0d:24:a8:7a:86:15:60:59: d3:de:d3:9e:57:c2:cc:a1:57:43:ec:11:82:d0:a4:dc:c0:34: 7f:ee:1d:45:ec:6d:a9:a7:32:46:72:a9:ec:e9:f2:45:f7:35: 93:79:a1:f2:59:8f:3f:c9:0c:c4:3c:03:5f:77:3b:15:ba:20: a0:61:f2:9f:8c:7e:e2:eb:c8:69:1c:8a:67:cb:50:0d:ab:30: 68:de:69:45:55:0e:cd:b4:14:17:f9:5a:7d:60:b4:56:6d:0e: 81:15:e9:f3:28:3c:35:53:0b:69:01:e5:d6:ea:10:51:88:c8: 12:f3:3c:af:59:e2:a5:90:31:a0:44:2a:69:c2:c4:7d:28:4d: b5:4e:ad:5f:7a:b8:f3:57:fc:15:52:3f:68:a0:8b:94:6e:e9: 1e:51:29:c8:2c:c2:46:e4:bf:43:cd:33:57:39:36:0a:59:f9: d7:4c:05:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5QYg5/UyVf7zdkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk OGZlNzJmMzEtMzJhZC00YWU4LWE5ZTAtYTJmZjYwNTY2YmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHN74cZkaUygJAIvfKH2uMBnQgQZK3B8FgiW buZuCOLjW06gwxDcXewPCMTfABV0WoSCg7xkcfmk+BSPgjoWRXfax/StlT3tja4w VIJUAN63W8i/28qpyjW1FpIoBb7uTCaqh1ZbR3mKQtjfvEprjCpR/os/ak1l5Xq8 9TLGL0SDfmTRySkCqXmWL5zPfuMBsHJRfwT9qgrG6jh9F07u2bqclwhXmUhdufJk jlio6HapsEI08FjNVTnQqtZZtHnKqV1Mkc0OYI27mHZt4EeyBCJeak7e6lgKb4Di XRS8EjzsryPIsV+R/cnClZb2Sd4CT35DMlM7Y4pB9BSFn63SIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIk+ic6jrwM9fAwhg0oR+RYfIAWGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvNWM5MmYzM2YtZWQ2My0z OTY1LTkyMWItZjYzZDY2OWViZTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8HuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxYydS3xXqD/7y+Ev1W4xzEjFJrPdu816ooSV187vDFv2OltP7YlDRB muCgtb0MNxuDgCrlRkn5Dfiy+47qqRjblH5eQ9mVTD4X7NOZAn4wETsNJKh6hhVg WdPe055XwsyhV0PsEYLQpNzANH/uHUXsbamnMkZyqezp8kX3NZN5ofJZjz/JDMQ8 A193OxW6IKBh8p+MfuLryGkcimfLUA2rMGjeaUVVDs20FBf5Wn1gtFZtDoEV6fMo PDVTC2kB5dbqEFGIyBLzPK9Z4qWQMaBEKmnCxH0oTbVOrV96uPNX/BVSP2igi5Ru 6R5RKcgswkbkv0PNM1c5NgpZ+ddMBQU= -----END CERTIFICATE-----Generated at Mon Apr 13 17:52:38 2026 by rpki-client