$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/d70902c7-9960-3f77-8eb5-6f69fcff1f6b.roa File: d70902c7-9960-3f77-8eb5-6f69fcff1f6b.roa (raw, json) Hash identifier: 4QhyV+ol/P8SHERp0FF/fLmZCFgD3EV1E+np5omafqM= Subject key identifier: 64:71:BB:5C:A2:12:E7:60:FF:A8:98:1C:DD:D6:71:93:A5:1D:8D:91 Certificate issuer: /CN=791fee1c-1b1f-448c-8937-9a315eb8e9de Certificate serial: 010D0C9F4328584DADAADE7B374DD3E4B7528A80 Authority key identifier: BA:4F:2B:6E:2B:E8:E9:DE:12:1A:E4:BF:63:30:7F:63:C3:A0:3B:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/d70902c7-9960-3f77-8eb5-6f69fcff1f6b.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 271 IP address blocks: 192.197.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/791fee1c-1b1f-448c-8937-9a315eb8e9de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/791fee1c-1b1f-448c-8937-9a315eb8e9de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:de:7b:37:4d:d3:e4:b7:52:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=791fee1c-1b1f-448c-8937-9a315eb8e9de Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=4a01cd3f-8d7f-4e0a-854e-19272eaf0a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e9:22:08:c2:0b:0a:7e:d6:a9:8f:11:17:08: 71:44:bf:7c:5a:ea:00:f2:9b:73:8a:a6:52:52:3b: 34:eb:90:b1:78:8f:d4:6f:9e:83:a4:07:e1:4c:43: f7:31:6a:1f:30:76:96:e1:64:a5:3b:73:83:86:47: fe:8e:37:25:ab:6a:5d:a5:bb:78:81:55:c5:47:63: b9:45:1b:c7:01:c2:de:47:2c:23:83:f4:10:c1:fd: ea:ba:9d:db:ef:96:9c:a0:3f:5d:a3:11:47:dc:46: 50:e2:71:d9:ef:a9:bc:dc:3f:14:dc:b1:be:97:a7: ca:54:4b:dc:06:dc:86:e6:f4:97:f9:8f:fa:aa:50: 74:96:7a:ce:eb:18:5e:04:a9:37:db:73:b8:ef:2b: 70:92:3e:18:7e:23:db:f3:d1:27:9c:e2:be:48:d2: c3:ef:3a:a8:43:16:59:28:ff:77:7b:3e:22:26:fd: fc:1d:c8:c8:2a:df:5e:ff:3d:e2:61:de:97:f3:d8: 75:0a:e1:70:f1:8f:88:b0:8e:c8:40:29:18:ae:d5: cd:c9:c9:65:ed:f7:8d:da:4c:59:bc:6c:a6:c8:13: f7:15:de:29:ce:3e:6f:59:15:09:83:02:dc:11:1a: b1:7b:68:31:42:ab:41:67:24:f8:83:61:5d:6e:d8: 4f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:71:BB:5C:A2:12:E7:60:FF:A8:98:1C:DD:D6:71:93:A5:1D:8D:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/d70902c7-9960-3f77-8eb5-6f69fcff1f6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/791fee1c-1b1f-448c-8937-9a315eb8e9de.crl X509v3 Authority Key Identifier: keyid:BA:4F:2B:6E:2B:E8:E9:DE:12:1A:E4:BF:63:30:7F:63:C3:A0:3B:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de.cer sbgp-ipAddrBlock: critical IPv4: 192.197.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:c1:43:d1:31:ed:57:f9:a0:7f:6e:3e:dc:0e:5a:8f:36:18: 75:8e:38:10:4a:d2:07:7b:78:aa:05:fd:12:45:2a:36:a5:fb: 5f:65:72:8c:65:1e:2f:42:6d:3a:df:c7:d4:ee:5f:0c:16:93: f1:47:46:70:a2:b1:50:c7:0f:a2:73:ba:e8:5f:12:d5:26:f0: 8f:88:ba:9a:87:e6:39:59:0a:25:9f:b8:7d:61:a6:2c:93:27: d0:ed:82:b0:20:2a:e3:dc:d0:2a:76:9d:f2:2c:66:0c:00:ce: cf:fb:d8:e3:e1:d0:c2:09:e7:9d:16:a3:c9:1c:3f:b2:c4:8a: 7c:f3:9c:08:b4:ac:f5:c9:f8:9c:f5:90:f0:0e:64:1d:1d:d0: d5:ad:7e:8c:7c:ba:1e:0d:d9:62:6e:e5:2a:56:cf:e3:4e:fa: db:b3:00:60:16:50:d4:ed:c6:38:8e:0e:e7:01:df:02:8f:64: 01:b6:49:6f:e6:09:b3:b6:d1:36:4e:9c:e9:96:05:da:ed:06: b2:6a:d5:28:8f:2b:5c:59:3c:e0:9e:9e:7f:f3:33:61:a6:92: ce:89:9f:ab:c6:cb:b3:08:07:cd:ac:09:da:51:42:db:0f:86: c2:9e:34:e9:fc:14:92:10:c7:f2:74:e2:30:08:ad:0b:2b:5f: 01:80:9b:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tqt57N03T5LdSioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzkxZmVlMWMtMWIxZi00NDhjLTg5MzctOWEzMTVlYjhl OWRlMB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk NGEwMWNkM2YtOGQ3Zi00ZTBhLTg1NGUtMTkyNzJlYWYwYTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+kiCMILCn7WqY8RFwhxRL98WuoA8ptziqZS Ujs065CxeI/Ub56DpAfhTEP3MWofMHaW4WSlO3ODhkf+jjclq2pdpbt4gVXFR2O5 RRvHAcLeRywjg/QQwf3qup3b75acoD9doxFH3EZQ4nHZ76m83D8U3LG+l6fKVEvc BtyG5vSX+Y/6qlB0lnrO6xheBKk323O47ytwkj4YfiPb89EnnOK+SNLD7zqoQxZZ KP93ez4iJv38HcjIKt9e/z3iYd6X89h1CuFw8Y+IsI7IQCkYrtXNycll7feN2kxZ vGymyBP3Fd4pzj5vWRUJgwLcERqxe2gxQqtBZyT4g2FdbthPIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRxu1yiEudg/6iYHN3WcZOlHY2RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83OTFm ZWUxYy0xYjFmLTQ0OGMtODkzNy05YTMxNWViOGU5ZGUvZDcwOTAyYzctOTk2MC0z Zjc3LThlYjUtNmY2OWZjZmYxZjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzkxZmVlMWMtMWIxZi00NDhjLTg5 MzctOWEzMTVlYjhlOWRlLzc5MWZlZTFjLTFiMWYtNDQ4Yy04OTM3LTlhMzE1ZWI4 ZTlkZS5jcmwwHwYDVR0jBBgwFoAUuk8rbivo6d4SGuS/YzB/Y8OgO9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83OTFmZWUxYy0xYjFmLTQ0OGMtODkzNy05YTMx NWViOGU5ZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMXhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnBQ9Ex7Vf5oH9uPtwOWo82GHWOOBBK0gd7eKoF/RJFKjal+19lcoxl Hi9CbTrfx9TuXwwWk/FHRnCisVDHD6JzuuhfEtUm8I+IupqH5jlZCiWfuH1hpiyT J9DtgrAgKuPc0Cp2nfIsZgwAzs/72OPh0MIJ550Wo8kcP7LEinzznAi0rPXJ+Jz1 kPAOZB0d0NWtfox8uh4N2WJu5SpWz+NO+tuzAGAWUNTtxjiODucB3wKPZAG2SW/m CbO20TZOnOmWBdrtBrJq1SiPK1xZPOCenn/zM2Gmks6Jn6vGy7MIB82sCdpRQtsP hsKeNOn8FJIQx/J04jAIrQsrXwGAm34= -----END CERTIFICATE-----Generated at Fri May 1 01:42:01 2026 by rpki-client