$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/c4946efd-1521-3de8-b345-a5a5a880c146.roa File: c4946efd-1521-3de8-b345-a5a5a880c146.roa (raw, json) Hash identifier: YV3CmbU/8l8kKGSYaTVkPXJ7YEUGJwY5Zr5Ahj+jWDg= Subject key identifier: 2C:EE:D1:35:3A:B7:64:A2:07:E6:32:88:D2:52:F6:9E:B5:3A:11:B3 Certificate issuer: /CN=32262fda-73b9-4875-8f83-9733217ce893 Certificate serial: 010D0C9F4328584D571FA787DF0BA457FF74FDE0 Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/c4946efd-1521-3de8-b345-a5a5a880c146.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 20278 IP address blocks: 172.93.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:a7:87:df:0b:a4:57:ff:74:fd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=81609a94-c998-402d-b81e-5175e40153f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:da:5b:41:23:0d:7a:19:cd:ed:70:bc:fe:19: 2d:a8:e9:b4:4c:d8:41:f1:dc:f6:42:59:c4:ca:57: d3:1b:af:17:3a:69:39:a3:ac:39:46:06:72:40:95: 62:e6:c4:57:e0:98:74:76:9c:55:b3:35:06:ce:c8: 60:0c:df:84:95:49:39:ee:b8:52:27:37:2c:e3:0d: c4:f2:43:69:a7:0e:16:0e:e0:cc:07:e1:a9:2f:7a: 79:e2:b7:3e:dc:5d:f7:df:13:bc:da:20:f5:e5:72: 90:08:f5:3f:59:20:7d:d5:51:d7:c6:cb:43:08:f9: da:1a:9b:34:83:a6:0d:b7:3b:4a:7d:90:b3:13:36: e6:74:09:f8:50:da:07:ed:d2:87:92:0b:17:a0:d2: ae:f8:ba:42:1c:5a:0d:99:31:d8:5d:81:f9:c6:f0: 38:3a:96:45:5e:94:27:28:10:fe:4b:4c:50:f1:62: bd:9f:cf:06:a8:53:cb:f9:fa:af:da:f9:63:c6:cc: 7d:da:94:46:20:e5:74:c9:9c:30:46:e7:52:d3:26: 08:e0:62:cd:10:f7:42:0b:cd:f0:c6:3d:14:3d:eb: 94:40:b6:63:5e:cd:75:f3:8e:95:49:72:0d:0a:f7: 55:47:2a:c1:73:21:ac:80:f3:c7:d6:4d:ae:01:28: 52:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:EE:D1:35:3A:B7:64:A2:07:E6:32:88:D2:52:F6:9E:B5:3A:11:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/c4946efd-1521-3de8-b345-a5a5a880c146.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl X509v3 Authority Key Identifier: keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer sbgp-ipAddrBlock: critical IPv4: 172.93.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:55:32:35:10:b2:63:11:45:b5:b7:c8:0c:15:9b:c2:6e:2f: b4:76:c0:6b:4c:a1:8d:b6:b4:7e:49:91:99:be:3c:3f:66:f7: 35:41:2a:d6:b0:d1:69:bf:75:79:91:a4:fe:1f:13:22:43:69: 66:7d:43:23:b0:95:80:7f:64:ad:90:2a:a0:56:4c:04:30:5c: 00:f4:cf:66:cd:f1:33:5b:40:4a:bd:97:ac:bf:60:c6:7b:9f: cd:a2:af:c9:78:83:6a:9f:c1:12:ae:ab:70:ec:96:a5:ce:9f: f0:21:0f:e8:7f:0c:1b:57:27:01:97:c2:82:0b:90:20:c7:18: b8:36:24:31:5f:e3:ae:22:f3:52:e6:5b:92:8f:b1:8e:81:d9: 77:08:00:d7:56:e6:b3:e1:7f:c0:33:00:7b:06:a8:04:4b:93: b5:08:7b:f5:50:44:6b:63:1b:3a:e6:ab:10:15:b8:95:f9:86: 6e:5a:3e:2d:05:c3:bb:1a:a8:85:58:08:8d:e8:3c:86:60:bf: f2:70:7c:4b:5f:72:50:69:68:11:56:c9:2d:c8:25:8b:40:7e: e1:8d:45:33:c5:e1:29:6c:46:cf:d6:b4:10:9b:9f:8d:b7:f9: c1:ed:13:73:fc:5e:93:39:14:fb:cb:39:ca:39:7e:fc:2c:b1: d8:94:44:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH6eH3wukV/90/eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl ODkzMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk ODE2MDlhOTQtYzk5OC00MDJkLWI4MWUtNTE3NWU0MDE1M2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49pbQSMNehnN7XC8/hktqOm0TNhB8dz2QlnE ylfTG68XOmk5o6w5RgZyQJVi5sRX4Jh0dpxVszUGzshgDN+ElUk57rhSJzcs4w3E 8kNppw4WDuDMB+GpL3p54rc+3F333xO82iD15XKQCPU/WSB91VHXxstDCPnaGps0 g6YNtztKfZCzEzbmdAn4UNoH7dKHkgsXoNKu+LpCHFoNmTHYXYH5xvA4OpZFXpQn KBD+S0xQ8WK9n88GqFPL+fqv2vljxsx92pRGIOV0yZwwRudS0yYI4GLNEPdCC83w xj0UPeuUQLZjXs11846VSXINCvdVRyrBcyGsgPPH1k2uAShSXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzu0TU6t2SiB+YyiNJS9p61OhGzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2 MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvYzQ5NDZlZmQtMTUyMS0z ZGU4LWIzNDUtYTVhNWE4ODBjMTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz MjE3Y2U4OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErF3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxVMjUQsmMRRbW3yAwVm8JuL7R2wGtMoY22tH5JkZm+PD9m9zVBKtaw 0Wm/dXmRpP4fEyJDaWZ9QyOwlYB/ZK2QKqBWTAQwXAD0z2bN8TNbQEq9l6y/YMZ7 n82ir8l4g2qfwRKuq3DslqXOn/AhD+h/DBtXJwGXwoILkCDHGLg2JDFf464i81Lm W5KPsY6B2XcIANdW5rPhf8AzAHsGqARLk7UIe/VQRGtjGzrmqxAVuJX5hm5aPi0F w7saqIVYCI3oPIZgv/JwfEtfclBpaBFWyS3IJYtAfuGNRTPF4SlsRs/WtBCbn423 +cHtE3P8XpM5FPvLOco5fvwssdiURKk= -----END CERTIFICATE-----Generated at Mon Apr 13 12:30:20 2026 by rpki-client