$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/321d74cf-cbe4-3233-b790-c21d1a17ed55.roa File: 321d74cf-cbe4-3233-b790-c21d1a17ed55.roa (raw, json) Hash identifier: X2ffROMgLejj2VwphcX471TevX6Ix9YAtl3pweq44L0= Subject key identifier: AD:5F:E1:E5:09:7E:9F:26:25:73:C6:3F:D8:30:A9:60:C0:78:B9:47 Certificate issuer: /CN=a68ef886-c437-4b77-8d56-b917b6150d9a Certificate serial: 010D0C9F4328584DD35B0A40949DEA9F27AE0600 Authority key identifier: 7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/321d74cf-cbe4-3233-b790-c21d1a17ed55.roa Signing time: Thu 14 May 2026 01:00:25 +0000 ROA not before: Thu 14 May 2026 01:00:25 +0000 ROA not after: Wed 12 Aug 2026 01:00:25 +0000 asID: 91 IP address blocks: 192.12.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d3:5b:0a:40:94:9d:ea:9f:27:ae:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a68ef886-c437-4b77-8d56-b917b6150d9a Validity Not Before: May 14 01:00:25 2026 GMT Not After : Aug 12 01:00:25 2026 GMT Subject: CN=8c0feeaf-244c-4427-9012-030ff1d9c4c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ae:ad:12:51:64:5d:44:2d:4d:94:94:3f:c5: af:4a:c3:62:78:2e:a2:55:15:63:52:7f:94:d2:fd: d3:9b:cb:8f:f7:2b:8f:f5:b0:66:63:d8:55:8a:1f: 29:81:8a:fb:c4:e5:de:dd:70:27:d4:51:cd:5f:a6: 5b:d9:54:39:3b:ff:4b:34:23:b5:70:6d:48:ec:29: 8a:d4:63:83:76:47:8d:45:e7:67:4b:fc:83:da:6b: 2c:eb:f2:39:b6:d6:1c:d8:44:03:e3:b5:0c:f7:17: f0:d5:8a:70:d0:8d:7d:30:73:cb:3f:19:22:1d:55: c5:b7:1c:0c:9c:eb:72:eb:b2:92:36:99:6c:1a:c1: 22:56:36:b8:9d:8a:03:41:ae:5c:0b:c7:8c:f5:fa: bc:f0:0f:ad:61:16:21:43:29:a5:62:2a:f9:05:0e: c4:e5:1d:dd:67:9b:1f:c8:65:33:74:a2:da:9e:cc: 1b:54:f3:2e:fe:00:c5:5d:58:35:44:05:11:7a:aa: 69:15:04:41:1c:1e:b7:1d:5d:ac:27:f7:70:bb:1a: 4f:f4:90:db:06:c6:02:b2:18:46:9d:4f:09:c9:51: 3b:43:52:b5:83:16:79:1d:c7:10:1c:46:e2:ed:59: f8:27:af:d2:51:c3:a0:2b:ee:d5:38:c8:6b:50:a6: 7a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:5F:E1:E5:09:7E:9F:26:25:73:C6:3F:D8:30:A9:60:C0:78:B9:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/321d74cf-cbe4-3233-b790-c21d1a17ed55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl X509v3 Authority Key Identifier: keyid:7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer sbgp-ipAddrBlock: critical IPv4: 192.12.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:12:ab:1f:8c:34:74:fd:7e:7c:be:91:f2:00:71:08:f0:a3: 81:c7:24:b0:ca:83:67:ed:ec:e8:db:7b:9f:e9:fc:d6:88:03: e8:80:ce:4d:d3:eb:2b:77:ea:b7:c8:d6:0e:72:98:d3:c9:fe: e2:c3:b7:f3:15:b1:3a:84:e5:0b:a8:ec:f4:f5:58:a1:ad:e7: d0:b3:c9:16:ec:b0:d0:43:3c:cf:74:87:9e:b8:e3:30:f9:19: 49:a2:06:12:16:3a:fc:ca:c0:c8:2e:8b:8a:98:83:5c:96:d2: e8:e0:79:a4:ee:8c:02:50:8c:fe:ea:e0:b7:0a:c7:bd:f6:31: 16:dd:c5:ed:f6:a7:02:c6:59:b2:65:27:15:bc:62:4c:d3:0e: a2:cf:c9:22:07:3d:5d:cb:81:d3:63:ad:31:d5:ef:e3:a1:08: 26:a9:a5:24:8d:f4:02:b6:69:68:a2:69:47:85:8f:38:6c:88: 83:11:93:cc:08:3b:0d:40:7c:ff:8c:61:78:ba:4c:ac:16:08: 0b:1c:a1:3a:51:71:13:09:2f:14:68:c5:ee:65:69:4f:74:d2: 8d:a3:de:67:62:01:9c:31:06:c7:e9:f9:5c:4a:e9:74:19:1c: 96:48:80:72:a8:37:a2:ca:8b:10:4a:71:08:e4:65:cd:ff:6b: d7:ef:bd:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3TWwpAlJ3qnyeuBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY4ZWY4ODYtYzQzNy00Yjc3LThkNTYtYjkxN2I2MTUw ZDlhMB4XDTI2MDUxNDAxMDAyNVoXDTI2MDgxMjAxMDAyNVowLzEtMCsGA1UEAxMk OGMwZmVlYWYtMjQ0Yy00NDI3LTkwMTItMDMwZmYxZDljNGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwK6tElFkXUQtTZSUP8WvSsNieC6iVRVjUn+U 0v3Tm8uP9yuP9bBmY9hVih8pgYr7xOXe3XAn1FHNX6Zb2VQ5O/9LNCO1cG1I7CmK 1GODdkeNRednS/yD2mss6/I5ttYc2EQD47UM9xfw1Ypw0I19MHPLPxkiHVXFtxwM nOty67KSNplsGsEiVja4nYoDQa5cC8eM9fq88A+tYRYhQymlYir5BQ7E5R3dZ5sf yGUzdKLanswbVPMu/gDFXVg1RAUReqppFQRBHB63HV2sJ/dwuxpP9JDbBsYCshhG nU8JyVE7Q1K1gxZ5HccQHEbi7Vn4J6/SUcOgK+7VOMhrUKZ6twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1f4eUJfp8mJXPGP9gwqWDAeLlHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjhl Zjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3YjYxNTBkOWEvMzIxZDc0Y2YtY2JlNC0z MjMzLWI3OTAtYzIxZDFhMTdlZDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTY4ZWY4ODYtYzQzNy00Yjc3LThk NTYtYjkxN2I2MTUwZDlhL2E2OGVmODg2LWM0MzctNGI3Ny04ZDU2LWI5MTdiNjE1 MGQ5YS5jcmwwHwYDVR0jBBgwFoAUfAnor+6RefUILLfICjw4Y9TiHA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNjhlZjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3 YjYxNTBkOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoSqx+MNHT9fny+kfIAcQjwo4HHJLDKg2ft7Ojbe5/p/NaIA+iAzk3T 6yt36rfI1g5ymNPJ/uLDt/MVsTqE5Quo7PT1WKGt59CzyRbssNBDPM90h5644zD5 GUmiBhIWOvzKwMgui4qYg1yW0ujgeaTujAJQjP7q4LcKx732MRbdxe32pwLGWbJl JxW8YkzTDqLPySIHPV3LgdNjrTHV7+OhCCappSSN9AK2aWiiaUeFjzhsiIMRk8wI Ow1AfP+MYXi6TKwWCAscoTpRcRMJLxRoxe5laU900o2j3mdiAZwxBsfp+VxK6XQZ HJZIgHKoN6LKixBKcQjkZc3/a9fvvXI= -----END CERTIFICATE-----Generated at Thu May 28 22:45:58 2026 by rpki-client