$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/10133c7e-00c4-388b-b0f5-61b7c67ebe2b.roa File: 10133c7e-00c4-388b-b0f5-61b7c67ebe2b.roa (raw, json) Hash identifier: h181xiwJR6ktXeDkCQoapceo5Ky1otvtChAgsKcU89g= Subject key identifier: 8D:4C:CB:7C:53:E4:B0:03:0A:DB:91:A0:5A:86:E5:29:93:D6:64:DC Certificate issuer: /CN=44bc2b87-223c-4280-a9b3-634e66111eeb Certificate serial: 010D0C9F4328584D0D426F601A1CEC7446DCBB00 Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/10133c7e-00c4-388b-b0f5-61b7c67ebe2b.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 13768 IP address blocks: 192.154.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:6f:60:1a:1c:ec:74:46:dc:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=33e26ec4-82c0-42a4-9a51-7dbc27f4e697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:59:5a:a2:f5:90:df:2f:2f:39:51:7a:b9:8a: dd:b5:65:d1:fb:74:ea:a4:22:25:56:9a:bd:4a:a2: 87:f4:32:20:61:a1:36:c5:3c:55:cd:15:0a:70:93: 43:ea:06:a4:ce:46:e2:66:ca:3f:76:0a:6b:78:b2: 88:be:64:be:fb:e9:1e:ed:71:3e:b3:4e:97:1b:dc: b4:72:06:ce:be:be:99:e1:71:9b:ee:9d:86:72:c6: bb:ed:fc:2f:3b:b0:45:d5:4f:2a:40:9e:cd:d9:e8: 8e:4b:bc:28:01:2b:09:de:a5:bb:bc:8e:1b:27:8c: 82:47:ce:66:a9:03:93:b1:85:06:b1:35:ef:13:43: 96:32:11:ff:91:eb:e4:ac:c3:6b:46:1d:4a:18:f6: d2:77:cf:62:ad:22:1f:d8:75:95:d3:1d:fb:a0:c0: 73:6b:92:c5:dc:a3:21:39:50:11:5c:49:85:6b:33: 17:b9:56:d9:ce:c7:e5:2e:5c:52:bd:94:08:2f:e5: 1a:bb:ef:98:79:d7:30:fa:d4:dd:b2:1f:42:01:60: a1:6a:85:9b:f1:1c:db:69:89:6e:65:43:10:29:a5: 5c:aa:d4:64:27:d7:2f:4a:bd:e2:78:ac:4a:e9:15: 30:47:14:61:e6:07:08:86:57:d5:76:3e:4e:c0:8f: 8b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4C:CB:7C:53:E4:B0:03:0A:DB:91:A0:5A:86:E5:29:93:D6:64:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/10133c7e-00c4-388b-b0f5-61b7c67ebe2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl X509v3 Authority Key Identifier: keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer sbgp-ipAddrBlock: critical IPv4: 192.154.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:22:6c:64:26:19:ef:ed:37:26:f4:32:76:fe:b4:d6:0c:47: 31:ed:9e:81:41:3c:e0:ac:47:a0:90:23:43:26:87:a7:71:c1: f9:8b:33:a8:59:0d:ae:a0:d9:c7:9a:4f:65:ef:24:f7:0b:2a: fa:1f:4d:aa:e3:54:a6:5a:b9:00:61:83:c6:73:79:40:33:7f: e8:6e:27:c1:96:0a:fa:07:41:77:58:8d:dd:cf:cc:fd:a6:cf: 2c:15:72:9c:b2:cf:36:aa:88:04:0c:e5:95:74:3d:0e:53:7d: 48:7b:d0:2a:8b:3b:1e:43:f2:76:34:46:19:33:28:80:83:a7: 29:00:c4:35:da:5c:7e:d1:6e:fd:a1:d0:28:7f:a6:5d:66:c1: 19:b4:be:02:37:af:d8:53:8b:62:05:72:85:8a:64:0f:87:59: a2:a0:ef:32:e1:c2:1b:f4:07:34:67:2e:db:20:dd:83:6c:35: 40:d4:2a:b7:7c:41:fd:e9:de:7d:f7:7a:47:4a:69:80:50:1e: 3a:10:8a:47:e0:2c:06:a8:55:72:56:70:a8:66:d0:4f:d1:6c: 22:27:2d:9c:39:41:fe:51:46:16:47:37:f2:e8:5b:cc:ab:7b: fb:78:68:63:b4:5d:2d:5d:7e:e2:d3:16:a7:0c:3c:0e:19:ba: f4:ff:83:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQm9gGhzsdEbcuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDRiYzJiODctMjIzYy00MjgwLWE5YjMtNjM0ZTY2MTEx ZWViMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk MzNlMjZlYzQtODJjMC00MmE0LTlhNTEtN2RiYzI3ZjRlNjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVlaovWQ3y8vOVF6uYrdtWXR+3TqpCIlVpq9 SqKH9DIgYaE2xTxVzRUKcJND6gakzkbiZso/dgpreLKIvmS+++ke7XE+s06XG9y0 cgbOvr6Z4XGb7p2Gcsa77fwvO7BF1U8qQJ7N2eiOS7woASsJ3qW7vI4bJ4yCR85m qQOTsYUGsTXvE0OWMhH/kevkrMNrRh1KGPbSd89irSIf2HWV0x37oMBza5LF3KMh OVARXEmFazMXuVbZzsflLlxSvZQIL+Uau++Yedcw+tTdsh9CAWChaoWb8RzbaYlu ZUMQKaVcqtRkJ9cvSr3ieKxK6RUwRxRh5gcIhlfVdj5OwI+LJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1My3xT5LADCtuRoFqG5SmT1mTcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NGJj MmI4Ny0yMjNjLTQyODAtYTliMy02MzRlNjYxMTFlZWIvMTAxMzNjN2UtMDBjNC0z ODhiLWIwZjUtNjFiN2M2N2ViZTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDRiYzJiODctMjIzYy00MjgwLWE5 YjMtNjM0ZTY2MTExZWViLzQ0YmMyYjg3LTIyM2MtNDI4MC1hOWIzLTYzNGU2NjEx MWVlYi5jcmwwHwYDVR0jBBgwFoAUPxjW1UuMY2iuDtn3fpgQlOXg7XowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NGJjMmI4Ny0yMjNjLTQyODAtYTliMy02MzRl NjYxMTFlZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJrWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgibGQmGe/tNyb0Mnb+tNYMRzHtnoFBPOCsR6CQI0Mmh6dxwfmLM6hZ Da6g2ceaT2XvJPcLKvofTarjVKZauQBhg8ZzeUAzf+huJ8GWCvoHQXdYjd3PzP2m zywVcpyyzzaqiAQM5ZV0PQ5TfUh70CqLOx5D8nY0RhkzKICDpykAxDXaXH7Rbv2h 0Ch/pl1mwRm0vgI3r9hTi2IFcoWKZA+HWaKg7zLhwhv0BzRnLtsg3YNsNUDUKrd8 Qf3p3n33ekdKaYBQHjoQikfgLAaoVXJWcKhm0E/RbCInLZw5Qf5RRhZHN/LoW8yr e/t4aGO0XS1dfuLTFqcMPA4ZuvT/g9o= -----END CERTIFICATE-----Generated at Sat Mar 7 20:50:56 2026 by rpki-client