$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/d0ba8e4a-1e28-3248-bc86-097345421556.roa File: d0ba8e4a-1e28-3248-bc86-097345421556.roa (raw, json) Hash identifier: qjapmCfxQsN3Gxl+2AzkrHr7zBSnwqdE3YwK+TjqC0A= Subject key identifier: 86:50:FB:CA:7C:96:60:28:BA:01:1B:13:C7:E5:10:B7:15:89:0A:52 Certificate issuer: /CN=0e43d693-397f-4f90-96eb-2da9e8465ff5 Certificate serial: 010D0C9F4328584D2A74D79C2BF32BACC5433280 Authority key identifier: 37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/d0ba8e4a-1e28-3248-bc86-097345421556.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 683 IP address blocks: 192.5.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:d7:9c:2b:f3:2b:ac:c5:43:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e43d693-397f-4f90-96eb-2da9e8465ff5 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=d98eb259-a7b1-479c-b46e-e9ee01fa13b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:02:c6:23:c8:67:37:db:2d:f2:9e:75:f0:1b: b1:36:c5:b4:9e:ae:0e:a6:3d:1d:00:34:7d:1f:16: 0d:27:11:7b:a7:78:b0:bd:9a:82:8d:10:7a:61:44: a9:3d:aa:63:80:e0:99:7e:36:ec:f0:40:e9:8d:fd: 95:64:1d:ba:81:50:9f:1a:8c:60:16:72:6d:0d:21: e6:ad:70:99:36:51:00:38:ab:7a:3b:55:2b:e0:76: 81:db:d4:6a:50:98:47:9b:8a:14:7d:46:63:93:5f: a3:cc:e3:1c:55:a8:d9:26:14:7f:af:51:d1:da:46: 37:bc:56:bb:97:a5:13:b4:b2:a1:c7:3a:9e:cb:ec: 8b:1f:70:a6:ff:98:7e:af:5f:02:3c:cb:26:5d:3b: 53:40:ac:4c:63:19:70:af:7d:c3:15:64:e0:07:4d: ea:05:e7:51:d2:7e:1c:d5:4b:f8:5c:d2:0b:0b:0c: f2:b9:89:6f:de:cb:40:7a:02:d7:9d:bd:49:03:41: 23:1e:d6:03:78:d9:d0:d5:b9:56:64:56:dd:d5:40: 0f:22:0c:70:49:02:07:96:b6:c3:c8:52:b2:47:70: 55:39:04:5a:90:96:c2:7f:81:d1:dc:63:11:a7:6f: 8a:1e:85:7d:01:e5:64:5a:26:84:04:54:f6:76:c8: b1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:50:FB:CA:7C:96:60:28:BA:01:1B:13:C7:E5:10:B7:15:89:0A:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/d0ba8e4a-1e28-3248-bc86-097345421556.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl X509v3 Authority Key Identifier: keyid:37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer sbgp-ipAddrBlock: critical IPv4: 192.5.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:6e:ba:a6:27:fd:db:57:bd:fd:bb:f8:9f:ab:69:51:ea:8d: aa:3d:fc:fd:75:ff:b2:1b:f9:b7:7e:cb:e1:da:11:68:cf:22: e9:52:19:cf:d6:f9:83:3f:a6:89:53:86:8a:5d:76:93:fd:9d: 83:c2:f2:b5:9b:98:cd:7a:9d:af:de:c8:73:be:f6:1d:04:0e: dc:72:ae:90:a7:da:39:b9:f6:aa:de:1f:54:fb:12:24:bd:27: a0:2f:1a:37:4e:c0:2a:49:22:a4:a1:ca:01:cb:02:05:e0:85: 0b:34:fc:a5:48:ea:79:c4:4f:1a:11:f3:22:7d:ae:6e:26:bd: b9:62:9e:d6:cd:99:f3:92:c7:93:4d:e9:e1:ea:f3:93:9e:4c: 7e:c9:a6:e5:fb:da:14:28:ad:f3:c0:8e:a0:fb:75:a6:c1:1b: 87:fc:47:06:eb:cf:4e:49:4c:fa:22:39:bf:33:5f:23:65:d1: 93:6c:a2:4c:90:7c:5b:40:e9:61:7c:53:1c:ea:84:80:85:e7: 1d:4e:38:58:0b:a9:98:e3:52:34:e5:75:5a:d7:e0:a7:23:53: 13:2e:31:9f:04:ea:99:09:e4:cb:76:d7:0a:fe:ff:6a:96:d8: d5:0f:53:94:dd:84:e0:78:6c:71:eb:f4:ec:89:8e:d1:6d:ac: f3:a3:e1:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdNecK/MrrMVDMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGU0M2Q2OTMtMzk3Zi00ZjkwLTk2ZWItMmRhOWU4NDY1 ZmY1MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk ZDk4ZWIyNTktYTdiMS00NzljLWI0NmUtZTllZTAxZmExM2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQLGI8hnN9st8p518BuxNsW0nq4Opj0dADR9 HxYNJxF7p3iwvZqCjRB6YUSpPapjgOCZfjbs8EDpjf2VZB26gVCfGoxgFnJtDSHm rXCZNlEAOKt6O1Ur4HaB29RqUJhHm4oUfUZjk1+jzOMcVajZJhR/r1HR2kY3vFa7 l6UTtLKhxzqey+yLH3Cm/5h+r18CPMsmXTtTQKxMYxlwr33DFWTgB03qBedR0n4c 1Uv4XNILCwzyuYlv3stAegLXnb1JA0EjHtYDeNnQ1blWZFbd1UAPIgxwSQIHlrbD yFKyR3BVOQRakJbCf4HR3GMRp2+KHoV9AeVkWiaEBFT2dsixjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZQ+8p8lmAougEbE8flELcViQpSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTQz ZDY5My0zOTdmLTRmOTAtOTZlYi0yZGE5ZTg0NjVmZjUvZDBiYThlNGEtMWUyOC0z MjQ4LWJjODYtMDk3MzQ1NDIxNTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGU0M2Q2OTMtMzk3Zi00ZjkwLTk2 ZWItMmRhOWU4NDY1ZmY1LzBlNDNkNjkzLTM5N2YtNGY5MC05NmViLTJkYTllODQ2 NWZmNS5jcmwwHwYDVR0jBBgwFoAUN04o9CXpjNBwif9JO2tz/WIVviYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTQzZDY5My0zOTdmLTRmOTAtOTZlYi0yZGE5 ZTg0NjVmZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwAXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpuuqYn/dtXvf27+J+raVHqjao9/P11/7Ib+bd+y+HaEWjPIulSGc/W +YM/polThopddpP9nYPC8rWbmM16na/eyHO+9h0EDtxyrpCn2jm59qreH1T7EiS9 J6AvGjdOwCpJIqShygHLAgXghQs0/KVI6nnETxoR8yJ9rm4mvblintbNmfOSx5NN 6eHq85OeTH7JpuX72hQorfPAjqD7dabBG4f8Rwbrz05JTPoiOb8zXyNl0ZNsokyQ fFtA6WF8UxzqhICF5x1OOFgLqZjjUjTldVrX4KcjUxMuMZ8E6pkJ5Mt21wr+/2qW 2NUPU5TdhOB4bHHr9OyJjtFtrPOj4Qs= -----END CERTIFICATE-----Generated at Wed Mar 25 03:37:00 2026 by rpki-client