$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db/6f20a05d-7cb2-3925-8015-0d100bc87c3e.roa File: 6f20a05d-7cb2-3925-8015-0d100bc87c3e.roa (raw, json) Hash identifier: s/6dR/ft+/GvCxXi44puivHx/qLMWaiXxzq5k2cHgyQ= Subject key identifier: 20:9E:AF:3E:3C:31:CF:4D:FA:AE:42:1F:18:50:05:43:D7:6E:42:49 Certificate issuer: /CN=e11e0f43-7d84-4ecc-a694-873b3d92a8db Certificate serial: 010D0C9F4328584D300A55C48E101E80DD4EDC80 Authority key identifier: 82:6B:47:39:40:65:5E:42:3F:33:D1:8E:3D:7A:3D:AC:B4:B9:F2:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db/6f20a05d-7cb2-3925-8015-0d100bc87c3e.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 3066 IP address blocks: 192.148.252.0/23 maxlen: 23 192.148.252.0/24 maxlen: 24 192.148.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db/e11e0f43-7d84-4ecc-a694-873b3d92a8db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db/e11e0f43-7d84-4ecc-a694-873b3d92a8db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:55:c4:8e:10:1e:80:dd:4e:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e11e0f43-7d84-4ecc-a694-873b3d92a8db Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=103a32ca-1636-4290-b955-a9d21c4aa6ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ef:26:7a:75:6a:53:3e:01:6d:c9:b1:ac:99: 36:ad:d0:d4:dd:ef:64:89:8d:2f:bb:2b:6f:3b:8f: 13:80:df:6d:b4:46:3a:c5:f9:a0:21:5a:1a:e5:10: 2d:0c:e1:28:1a:dc:9c:ff:23:e7:d8:8f:7d:a0:52: 88:60:fe:8d:88:fb:f1:da:10:b9:9b:7e:81:3e:86: b0:a7:75:02:23:7a:2f:08:8c:9c:29:42:e0:f1:d5: bd:ea:66:13:65:60:07:c9:7d:2d:c5:90:08:2a:22: f3:7a:3c:64:0c:07:91:63:86:e7:2a:50:88:d8:e4: cc:73:a5:d6:82:89:57:69:c5:fd:98:d9:c8:9b:44: ad:32:10:13:aa:54:ca:ba:9d:75:3e:62:42:71:0c: a7:31:3a:08:0c:13:04:ea:c7:93:2b:e7:88:47:6d: 0d:d8:88:f7:3c:e9:5f:7e:18:b8:92:84:a0:cb:61: 93:86:3c:ea:dc:1b:15:d2:fe:65:ce:ab:b4:b6:c2: 73:b1:60:22:3c:5e:58:5e:b0:35:f1:bf:74:42:6a: c6:e3:88:85:22:c2:2c:fe:4c:c2:a8:49:03:f3:d4: 3a:72:d6:49:95:36:95:d4:6f:7a:70:e3:50:14:01: 9c:62:17:af:0c:5f:c0:a5:6c:3a:f7:4a:67:12:33: f0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9E:AF:3E:3C:31:CF:4D:FA:AE:42:1F:18:50:05:43:D7:6E:42:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db/6f20a05d-7cb2-3925-8015-0d100bc87c3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db/e11e0f43-7d84-4ecc-a694-873b3d92a8db.crl X509v3 Authority Key Identifier: keyid:82:6B:47:39:40:65:5E:42:3F:33:D1:8E:3D:7A:3D:AC:B4:B9:F2:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db.cer sbgp-ipAddrBlock: critical IPv4: 192.148.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:3d:8b:4d:d5:f3:c8:ed:2d:b7:0c:63:3b:4b:6d:99:49:a9: 3a:6f:e3:5e:b7:c6:0a:92:b5:cd:f6:28:a2:b3:49:54:6a:23: 74:8a:2d:47:60:12:9d:67:b8:cb:05:52:26:f8:fa:d4:66:28: e4:fa:22:be:b1:47:f1:d5:76:d3:3b:62:fb:0c:1a:e9:bd:84: a0:2c:a4:85:7b:50:cc:9f:ee:36:8a:bc:e7:88:9e:e5:b6:08: 0d:e2:f9:4f:08:ae:0c:43:6d:cc:49:dc:07:09:8c:af:63:25: 93:90:15:a3:21:33:5f:4e:bb:50:66:e6:e4:32:a0:37:c2:65: cb:6c:80:e1:80:57:d4:ff:93:1b:a6:5e:f7:00:cc:0c:66:56: 4d:4a:48:0a:73:a9:e8:5a:69:e9:54:3a:71:89:7f:79:6f:65: a0:5a:1b:dc:0b:be:4d:4e:57:7c:6e:45:e9:d8:bb:4c:8e:61: fd:fb:75:d0:c6:43:78:37:f8:f7:f9:c8:5e:06:3b:33:d0:82: 09:d0:8e:f0:4c:35:a7:92:ab:c1:c3:27:83:d3:8a:18:e6:d0: 98:86:31:64:44:07:ed:81:61:1e:d5:57:0c:c3:cc:af:ad:67: 8a:c7:e1:48:14:54:d7:73:43:02:ef:d4:ea:8b:75:28:3e:de: 7d:16:12:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wClXEjhAegN1O3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTExZTBmNDMtN2Q4NC00ZWNjLWE2OTQtODczYjNkOTJh OGRiMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MTAzYTMyY2EtMTYzNi00MjkwLWI5NTUtYTlkMjFjNGFhNmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+8menVqUz4BbcmxrJk2rdDU3e9kiY0vuytv O48TgN9ttEY6xfmgIVoa5RAtDOEoGtyc/yPn2I99oFKIYP6NiPvx2hC5m36BPoaw p3UCI3ovCIycKULg8dW96mYTZWAHyX0txZAIKiLzejxkDAeRY4bnKlCI2OTMc6XW golXacX9mNnIm0StMhATqlTKup11PmJCcQynMToIDBME6seTK+eIR20N2Ij3POlf fhi4koSgy2GThjzq3BsV0v5lzqu0tsJzsWAiPF5YXrA18b90QmrG44iFIsIs/kzC qEkD89Q6ctZJlTaV1G96cONQFAGcYhevDF/ApWw690pnEjPwwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCerz48Mc9N+q5CHxhQBUPXbkJJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lMTFl MGY0My03ZDg0LTRlY2MtYTY5NC04NzNiM2Q5MmE4ZGIvNmYyMGEwNWQtN2NiMi0z OTI1LTgwMTUtMGQxMDBiYzg3YzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZTExZTBmNDMtN2Q4NC00ZWNjLWE2 OTQtODczYjNkOTJhOGRiL2UxMWUwZjQzLTdkODQtNGVjYy1hNjk0LTg3M2IzZDky YThkYi5jcmwwHwYDVR0jBBgwFoAUgmtHOUBlXkI/M9GOPXo9rLS58t4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lMTFlMGY0My03ZDg0LTRlY2MtYTY5NC04NzNi M2Q5MmE4ZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJT8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGc9i03V88jtLbcMYztLbZlJqTpv4163xgqStc32KKKzSVRqI3SKLUdg Ep1nuMsFUib4+tRmKOT6Ir6xR/HVdtM7YvsMGum9hKAspIV7UMyf7jaKvOeInuW2 CA3i+U8IrgxDbcxJ3AcJjK9jJZOQFaMhM19Ou1Bm5uQyoDfCZctsgOGAV9T/kxum XvcAzAxmVk1KSApzqehaaelUOnGJf3lvZaBaG9wLvk1OV3xuRenYu0yOYf37ddDG Q3g3+Pf5yF4GOzPQggnQjvBMNaeSq8HDJ4PTihjm0JiGMWREB+2BYR7VVwzDzK+t Z4rH4UgUVNdzQwLv1OqLdSg+3n0WEgI= -----END CERTIFICATE-----Generated at Mon Mar 23 20:39:30 2026 by rpki-client