$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/c3caef46-c1ac-38a7-aaec-de2a302e391c.roa File: c3caef46-c1ac-38a7-aaec-de2a302e391c.roa (raw, json) Hash identifier: ZOJW++3cEzSsMSWS1pU/h5t2ig7A4gVAu7Guh9+aMcs= Subject key identifier: 60:08:E4:04:AA:8E:A3:DD:B4:19:41:F8:AA:32:11:23:15:77:22:3F Certificate issuer: /CN=d57d789e-7c0e-4086-93e5-04d300453dae Certificate serial: 010D0C9F4328584D143D80A600F73C44FDC39080 Authority key identifier: 2D:7A:3D:DF:E4:E3:E7:29:8A:98:51:FF:DF:5F:09:7B:AC:21:51:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/c3caef46-c1ac-38a7-aaec-de2a302e391c.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 14618 IP address blocks: 192.131.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:80:a6:00:f7:3c:44:fd:c3:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d57d789e-7c0e-4086-93e5-04d300453dae Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=fbe404a2-4a51-4aa3-819f-82ab9840130a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fc:a8:4d:cc:78:6c:91:97:fe:a8:85:fa:b2: ee:e2:0b:fa:ec:55:1f:65:1c:c3:67:a8:42:6f:58: d5:17:d0:d9:4b:51:c3:4a:ee:0a:42:88:84:1a:f2: 8c:40:90:38:4a:49:8d:eb:d8:31:58:55:0b:d7:04: 29:ae:2d:99:01:43:31:3f:ea:7e:6a:68:66:7f:f7: dc:16:e0:69:bb:05:e3:25:f8:41:ce:cb:9a:92:da: ba:d2:06:ca:fc:3d:6d:ff:b0:da:53:5f:3d:d1:32: 33:00:1c:fd:f2:ac:84:14:f7:a7:94:04:43:02:b9: 9a:ca:b0:9c:91:dc:4c:59:c9:39:29:7c:af:50:93: 0c:eb:54:1b:88:4e:b3:8d:3b:6f:eb:30:72:b2:4c: d9:93:11:c7:70:12:52:98:33:22:37:3e:b0:25:ea: 5f:f4:e1:ad:0d:1c:e2:44:91:9b:2c:6e:a8:fa:3a: 6a:5b:0e:c0:b7:42:60:a2:9d:84:78:7d:f4:90:95: 44:cb:7b:32:01:c1:e6:e0:31:0c:f7:39:e6:03:91: fe:a0:a0:82:f0:32:46:26:67:65:9d:fd:f0:52:ac: 28:5e:3b:1c:90:fb:b7:60:ce:13:2e:c2:c5:b8:20: f1:87:33:cc:d1:f8:df:1b:88:2f:73:48:ff:b6:56: 3d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:08:E4:04:AA:8E:A3:DD:B4:19:41:F8:AA:32:11:23:15:77:22:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/c3caef46-c1ac-38a7-aaec-de2a302e391c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.crl X509v3 Authority Key Identifier: keyid:2D:7A:3D:DF:E4:E3:E7:29:8A:98:51:FF:DF:5F:09:7B:AC:21:51:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer sbgp-ipAddrBlock: critical IPv4: 192.131.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:61:e2:a2:1e:56:b9:fa:ef:03:9f:fc:74:b6:f6:5c:2a:a7: 7c:fd:53:c9:b2:04:92:0a:81:0f:3f:1a:90:39:0f:1f:42:ad: 34:24:59:11:58:17:1d:bc:35:ef:c0:19:79:c3:ac:0d:b8:e3: 49:4d:60:62:60:cb:dc:ee:af:b2:fa:8a:e3:56:68:67:15:61: 7b:29:79:ec:c3:aa:38:80:38:74:6c:d5:79:dc:c4:e9:7a:2d: a1:10:72:d7:b3:ff:20:b2:6b:cb:ec:7e:9a:e7:07:61:5a:1d: bb:66:f1:ad:ee:4c:1e:11:ed:b5:ca:bb:54:ea:5c:2c:ef:01: ae:d7:dd:0f:21:ee:5c:5c:04:c7:5d:0f:ea:d7:0f:fc:13:ff: f8:aa:7d:00:e9:01:ee:b9:dd:be:01:14:ce:4f:9c:75:af:cf: 1b:b4:f6:a4:20:11:9e:ab:c1:d8:7d:b9:29:a1:f7:4d:a2:f3: a3:55:e6:98:0c:36:3b:77:76:30:64:f8:cd:ee:a5:f5:10:73: 14:c2:6f:1a:d6:7d:90:49:2d:c8:85:40:e6:2e:16:6e:c1:01: 21:74:02:63:5e:66:e5:7a:7e:4c:68:14:05:cf:fe:64:55:8f: 42:0e:7e:e8:f1:cc:ff:36:fd:76:12:a1:53:fa:e0:84:f5:8f: 59:03:8b:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPYCmAPc8RP3DkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU3ZDc4OWUtN2MwZS00MDg2LTkzZTUtMDRkMzAwNDUz ZGFlMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZmJlNDA0YTItNGE1MS00YWEzLTgxOWYtODJhYjk4NDAxMzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvyoTcx4bJGX/qiF+rLu4gv67FUfZRzDZ6hC b1jVF9DZS1HDSu4KQoiEGvKMQJA4SkmN69gxWFUL1wQpri2ZAUMxP+p+amhmf/fc FuBpuwXjJfhBzsuaktq60gbK/D1t/7DaU1890TIzABz98qyEFPenlARDArmayrCc kdxMWck5KXyvUJMM61QbiE6zjTtv6zByskzZkxHHcBJSmDMiNz6wJepf9OGtDRzi RJGbLG6o+jpqWw7At0Jgop2EeH30kJVEy3syAcHm4DEM9znmA5H+oKCC8DJGJmdl nf3wUqwoXjsckPu3YM4TLsLFuCDxhzPM0fjfG4gvc0j/tlY9hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAI5ASqjqPdtBlB+KoyESMVdyI/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kNTdk Nzg5ZS03YzBlLTQwODYtOTNlNS0wNGQzMDA0NTNkYWUvYzNjYWVmNDYtYzFhYy0z OGE3LWFhZWMtZGUyYTMwMmUzOTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDU3ZDc4OWUtN2MwZS00MDg2LTkz ZTUtMDRkMzAwNDUzZGFlL2Q1N2Q3ODllLTdjMGUtNDA4Ni05M2U1LTA0ZDMwMDQ1 M2RhZS5jcmwwHwYDVR0jBBgwFoAULXo93+Tj5ymKmFH/318Je6whUcQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kNTdkNzg5ZS03YzBlLTQwODYtOTNlNS0wNGQz MDA0NTNkYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIOaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlh4qIeVrn67wOf/HS29lwqp3z9U8myBJIKgQ8/GpA5Dx9CrTQkWRFY Fx28Ne/AGXnDrA2440lNYGJgy9zur7L6iuNWaGcVYXspeezDqjiAOHRs1XncxOl6 LaEQctez/yCya8vsfprnB2FaHbtm8a3uTB4R7bXKu1TqXCzvAa7X3Q8h7lxcBMdd D+rXD/wT//iqfQDpAe653b4BFM5PnHWvzxu09qQgEZ6rwdh9uSmh902i86NV5pgM Njt3djBk+M3upfUQcxTCbxrWfZBJLciFQOYuFm7BASF0AmNeZuV6fkxoFAXP/mRV j0IOfujxzP82/XYSoVP64IT1j1kDi6k= -----END CERTIFICATE-----Generated at Sun Mar 15 06:04:47 2026 by rpki-client