$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/f7b3e1e4-f7e6-365d-b936-0927d756844d.roa File: f7b3e1e4-f7e6-365d-b936-0927d756844d.roa (raw, json) Hash identifier: NXQ/xCPCZ4AHo7Xjf6pCiOkoJ+WisD03OJXINnNM6+4= Subject key identifier: D5:DE:00:87:60:DD:9F:8C:0D:CD:1C:87:BE:31:D6:0C:E8:87:B4:F5 Certificate issuer: /CN=44bc2b87-223c-4280-a9b3-634e66111eeb Certificate serial: 010D0C9F4328584D0D426F5059601CE37FBC1580 Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/f7b3e1e4-f7e6-365d-b936-0927d756844d.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 13768 IP address blocks: 192.154.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:6f:50:59:60:1c:e3:7f:bc:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=9cca34ab-55b6-4d7f-b5ef-f4d532caa063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2f:6f:59:8b:8e:27:59:bb:3f:58:ac:25:a0: 66:11:1f:1f:4b:f8:23:c6:46:0c:61:d6:e4:0b:0e: 5e:88:2b:9e:1a:f6:bd:28:9f:6d:33:31:a4:85:01: 47:c9:e9:b8:4f:b7:2a:bf:23:53:0f:f3:e3:dd:98: 2d:20:58:6d:9d:6b:13:09:be:69:85:c8:ee:fe:e1: f8:d9:b5:7b:b7:05:42:9e:39:5f:7b:bc:cb:71:bd: f8:18:8f:cb:ad:ad:2f:10:2b:0d:b3:4c:78:5d:26: f4:0b:97:ab:60:2d:44:8a:eb:a7:f3:76:c5:31:3a: 31:81:20:f5:78:e1:6b:0d:53:6e:2a:ff:fc:b7:48: 4f:4a:ee:7f:48:d0:bd:31:4e:f0:88:96:1f:8e:d6: e9:e6:6a:cb:2d:67:5d:f8:92:fa:92:49:27:b0:4d: 58:92:de:88:37:71:40:ec:21:e4:72:46:33:44:68: f4:e9:95:23:0e:10:09:f4:a0:c0:a9:e7:43:9a:ac: 01:7d:b4:df:1c:a8:db:9d:99:5a:79:69:7c:ea:ae: 1b:93:93:25:e1:a9:85:e2:c1:a8:19:71:8d:44:d6: 21:37:6b:60:8f:6e:eb:75:0a:f1:1e:09:a8:58:41: f7:1f:20:15:a6:e5:db:d5:c4:db:5f:bf:12:88:33: 56:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:DE:00:87:60:DD:9F:8C:0D:CD:1C:87:BE:31:D6:0C:E8:87:B4:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/f7b3e1e4-f7e6-365d-b936-0927d756844d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl X509v3 Authority Key Identifier: keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer sbgp-ipAddrBlock: critical IPv4: 192.154.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:16:1e:2d:41:af:ca:54:26:24:35:1d:bb:1e:05:a0:66:40: 53:40:89:86:85:f9:28:06:b2:12:fd:25:1e:f3:ec:16:d0:dc: 40:72:15:e7:95:a7:da:46:75:f1:bd:e7:01:5e:d2:d4:0b:b7: 93:e1:47:9b:01:cf:a4:5b:b3:7e:ec:c7:19:91:ab:b7:40:c4: 4e:ca:4f:e0:b0:89:2a:56:13:00:34:7d:ba:fd:14:49:e7:ed: dc:43:38:1c:d4:dc:24:21:31:58:81:81:e0:58:99:72:2b:52: b1:00:1d:70:56:37:b7:97:c0:b2:bc:29:cd:4b:76:38:88:ac: eb:bc:dd:0b:35:00:d3:b5:8e:39:fc:a4:3b:e7:d8:8c:ad:d6: 7b:ab:4b:ea:e9:9c:2d:61:7b:72:7e:21:a2:7e:4b:f3:ff:f0: 76:59:5b:ae:ef:09:f8:b8:33:be:cb:a8:45:02:d8:21:44:e6: 09:72:dd:65:df:73:be:4f:5a:33:ee:fa:34:d8:77:c2:6b:72: 1d:c2:c9:c2:98:c7:16:b7:41:e3:a9:39:91:f9:63:dc:13:c5: 0d:c4:c4:0d:fc:eb:ca:da:14:6a:85:fe:be:c4:4b:0f:e6:93: 16:f6:49:64:b5:08:5b:48:c9:cf:f9:0a:17:df:a0:96:c2:91: 40:b1:1e:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQm9QWWAc43+8FYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDRiYzJiODctMjIzYy00MjgwLWE5YjMtNjM0ZTY2MTEx ZWViMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk OWNjYTM0YWItNTViNi00ZDdmLWI1ZWYtZjRkNTMyY2FhMDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji9vWYuOJ1m7P1isJaBmER8fS/gjxkYMYdbk Cw5eiCueGva9KJ9tMzGkhQFHyem4T7cqvyNTD/Pj3ZgtIFhtnWsTCb5phcju/uH4 2bV7twVCnjlfe7zLcb34GI/Lra0vECsNs0x4XSb0C5erYC1Eiuun83bFMToxgSD1 eOFrDVNuKv/8t0hPSu5/SNC9MU7wiJYfjtbp5mrLLWdd+JL6kkknsE1Ykt6IN3FA 7CHkckYzRGj06ZUjDhAJ9KDAqedDmqwBfbTfHKjbnZlaeWl86q4bk5Ml4amF4sGo GXGNRNYhN2tgj27rdQrxHgmoWEH3HyAVpuXb1cTbX78SiDNWMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXeAIdg3Z+MDc0ch74x1gzoh7T1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NGJj MmI4Ny0yMjNjLTQyODAtYTliMy02MzRlNjYxMTFlZWIvZjdiM2UxZTQtZjdlNi0z NjVkLWI5MzYtMDkyN2Q3NTY4NDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDRiYzJiODctMjIzYy00MjgwLWE5 YjMtNjM0ZTY2MTExZWViLzQ0YmMyYjg3LTIyM2MtNDI4MC1hOWIzLTYzNGU2NjEx MWVlYi5jcmwwHwYDVR0jBBgwFoAUPxjW1UuMY2iuDtn3fpgQlOXg7XowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NGJjMmI4Ny0yMjNjLTQyODAtYTliMy02MzRl NjYxMTFlZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJrMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAWHi1Br8pUJiQ1HbseBaBmQFNAiYaF+SgGshL9JR7z7BbQ3EByFeeV p9pGdfG95wFe0tQLt5PhR5sBz6Rbs37sxxmRq7dAxE7KT+CwiSpWEwA0fbr9FEnn 7dxDOBzU3CQhMViBgeBYmXIrUrEAHXBWN7eXwLK8Kc1LdjiIrOu83Qs1ANO1jjn8 pDvn2Iyt1nurS+rpnC1he3J+IaJ+S/P/8HZZW67vCfi4M77LqEUC2CFE5gly3WXf c75PWjPu+jTYd8Jrch3CycKYxxa3QeOpOZH5Y9wTxQ3ExA3868raFGqF/r7ESw/m kxb2SWS1CFtIyc/5ChffoJbCkUCxHjg= -----END CERTIFICATE-----Generated at Sat Mar 7 20:52:43 2026 by rpki-client