$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/321d74cf-cbe4-3233-b790-c21d1a17ed55.roa File: 321d74cf-cbe4-3233-b790-c21d1a17ed55.roa (raw, json) Hash identifier: rB58P0V0ZUsbeTm2d4GaFa6aC6DYgBFk1GWO6Clv7+o= Subject key identifier: 74:5D:AF:B4:46:F5:1B:61:09:10:48:B3:D8:27:76:6E:F0:AF:85:2E Certificate issuer: /CN=a68ef886-c437-4b77-8d56-b917b6150d9a Certificate serial: 010D0C9F4328584CF2BCED3B9B8B822A3910C280 Authority key identifier: 7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/321d74cf-cbe4-3233-b790-c21d1a17ed55.roa Signing time: Sun 22 Feb 2026 14:00:41 +0000 ROA not before: Sun 22 Feb 2026 14:00:41 +0000 ROA not after: Sat 23 May 2026 13:00:41 +0000 asID: 91 IP address blocks: 192.12.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f2:bc:ed:3b:9b:8b:82:2a:39:10:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a68ef886-c437-4b77-8d56-b917b6150d9a Validity Not Before: Feb 22 14:00:41 2026 GMT Not After : May 23 13:00:41 2026 GMT Subject: CN=23f1f64c-6c83-408a-ad22-f1d3b990c053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0d:88:77:69:9d:49:dd:80:41:e5:de:32:8e: 94:37:37:f2:75:07:78:c5:6c:7a:f4:90:c9:0e:7a: 2c:4a:bd:47:cc:9c:29:e4:88:55:b8:41:8d:4a:16: 30:11:a6:4c:94:6c:15:55:14:fc:21:3e:57:3f:67: 6c:f6:9c:29:c6:66:1c:74:7b:f6:d2:03:8f:f1:ed: 4b:e9:c9:35:cd:10:73:82:4b:df:02:63:23:55:ff: b6:70:15:8a:9a:4d:65:ac:4d:67:98:6a:63:fe:7f: c0:81:9f:1b:77:4b:c0:f4:b8:37:51:1b:3f:c1:bc: 03:47:de:17:e9:66:16:87:e6:22:d4:0f:ed:9f:89: 87:86:01:ce:bf:d6:5e:da:2a:e2:90:94:8b:a8:fd: fc:14:ef:68:3b:36:3a:3f:62:0d:ad:ae:e5:9f:01: 5b:8d:eb:c1:c7:f2:b3:5b:86:68:50:b6:90:b7:67: 54:ce:06:81:5f:76:02:4a:6d:5a:4f:bd:1e:45:20: 44:7f:15:07:68:4f:ed:25:1a:59:fd:49:3f:e9:40: 36:b8:31:08:5c:f9:69:b2:22:52:4a:fa:70:40:38: d0:74:93:3c:e4:55:f8:c6:88:a1:4e:15:a0:5e:e7: 8d:ff:3b:39:22:c7:86:ad:c9:ed:67:4e:27:16:a7: 30:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:5D:AF:B4:46:F5:1B:61:09:10:48:B3:D8:27:76:6E:F0:AF:85:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/321d74cf-cbe4-3233-b790-c21d1a17ed55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl X509v3 Authority Key Identifier: keyid:7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer sbgp-ipAddrBlock: critical IPv4: 192.12.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:b9:aa:1b:1f:b2:71:52:98:d8:5e:95:e7:bb:86:ee:1c:3a: 95:71:ca:23:49:57:fd:92:a0:70:6c:78:a4:ac:0a:a5:a3:2a: ea:4b:ef:fc:f0:2b:c8:8e:a5:43:15:41:04:29:81:f0:a7:6b: bd:42:d0:ed:db:51:e7:e6:e7:98:b8:87:f5:e4:86:be:58:95: 79:e0:14:15:fb:8f:2b:89:a8:99:a5:57:73:d3:13:1d:41:fc: b1:3b:1d:8f:48:96:d8:fa:1b:05:21:7e:50:9f:5e:c3:5f:c2: 89:b7:44:8e:2c:5c:0f:1f:5d:6d:ce:a6:44:f0:eb:cd:65:fe: 83:de:35:09:40:70:2c:01:2a:62:20:6c:b6:f5:29:9d:06:10: f1:cd:95:e0:cb:61:ed:c4:ce:90:d4:c1:6f:31:1b:cf:21:1c: 28:52:d4:fd:af:42:2d:79:aa:16:27:df:cf:a5:9a:5d:86:f5: 03:e8:34:07:c8:e4:ba:d7:f9:64:4e:d4:22:7c:30:cf:71:03: 51:c6:cf:f0:a4:67:97:07:9d:48:1e:02:f5:82:5e:62:68:5a: ff:15:36:c6:5b:b3:66:fb:aa:5d:fb:90:ee:d1:86:1f:c9:6b: 84:ba:f6:7e:54:7c:f5:c4:17:11:fb:46:4b:dd:b9:1f:2e:08: ca:dc:07:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzyvO07m4uCKjkQwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY4ZWY4ODYtYzQzNy00Yjc3LThkNTYtYjkxN2I2MTUw ZDlhMB4XDTI2MDIyMjE0MDA0MVoXDTI2MDUyMzEzMDA0MVowLzEtMCsGA1UEAxMk MjNmMWY2NGMtNmM4My00MDhhLWFkMjItZjFkM2I5OTBjMDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig2Id2mdSd2AQeXeMo6UNzfydQd4xWx69JDJ DnosSr1HzJwp5IhVuEGNShYwEaZMlGwVVRT8IT5XP2ds9pwpxmYcdHv20gOP8e1L 6ck1zRBzgkvfAmMjVf+2cBWKmk1lrE1nmGpj/n/AgZ8bd0vA9Lg3URs/wbwDR94X 6WYWh+Yi1A/tn4mHhgHOv9Ze2irikJSLqP38FO9oOzY6P2INra7lnwFbjevBx/Kz W4ZoULaQt2dUzgaBX3YCSm1aT70eRSBEfxUHaE/tJRpZ/Uk/6UA2uDEIXPlpsiJS SvpwQDjQdJM85FX4xoihThWgXueN/zs5IseGrcntZ04nFqcwDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRdr7RG9RthCRBIs9gndm7wr4UuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjhl Zjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3YjYxNTBkOWEvMzIxZDc0Y2YtY2JlNC0z MjMzLWI3OTAtYzIxZDFhMTdlZDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTY4ZWY4ODYtYzQzNy00Yjc3LThk NTYtYjkxN2I2MTUwZDlhL2E2OGVmODg2LWM0MzctNGI3Ny04ZDU2LWI5MTdiNjE1 MGQ5YS5jcmwwHwYDVR0jBBgwFoAUfAnor+6RefUILLfICjw4Y9TiHA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNjhlZjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3 YjYxNTBkOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC25qhsfsnFSmNhelee7hu4cOpVxyiNJV/2SoHBseKSsCqWjKupL7/zw K8iOpUMVQQQpgfCna71C0O3bUefm55i4h/Xkhr5YlXngFBX7jyuJqJmlV3PTEx1B /LE7HY9Iltj6GwUhflCfXsNfwom3RI4sXA8fXW3OpkTw681l/oPeNQlAcCwBKmIg bLb1KZ0GEPHNleDLYe3EzpDUwW8xG88hHChS1P2vQi15qhYn38+lml2G9QPoNAfI 5LrX+WRO1CJ8MM9xA1HGz/CkZ5cHnUgeAvWCXmJoWv8VNsZbs2b7ql37kO7Rhh/J a4S69n5UfPXEFxH7RkvduR8uCMrcByg= -----END CERTIFICATE-----Generated at Sun Mar 1 15:08:16 2026 by rpki-client