$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/41387a42-8a00-3750-bed6-58a6e3fafc54.roa File: 41387a42-8a00-3750-bed6-58a6e3fafc54.roa (raw, json) Hash identifier: w9ZuY4uj+CbCViDUI7Rz48Q6OlxpyBJwn+s3v4IycyU= Subject key identifier: 80:7B:4F:B1:C4:8E:CA:60:95:D1:38:63:8E:C3:00:2C:15:CF:41:EA Certificate issuer: /CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Certificate serial: 010D0C9F4328584D8D8FFC92939DBCD0ECCA9C00 Authority key identifier: 83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/41387a42-8a00-3750-bed6-58a6e3fafc54.roa Signing time: Sun 19 Apr 2026 01:00:23 +0000 ROA not before: Sun 19 Apr 2026 01:00:23 +0000 ROA not after: Sat 18 Jul 2026 01:00:23 +0000 asID: 136806 IP address blocks: 192.163.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:8f:fc:92:93:9d:bc:d0:ec:ca:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Validity Not Before: Apr 19 01:00:23 2026 GMT Not After : Jul 18 01:00:23 2026 GMT Subject: CN=c86d2edd-8084-49c3-a4c3-8a3c8b94fe71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:73:02:81:ab:99:06:c3:39:a2:20:72:08:8d: 5f:4e:f4:43:5f:fd:b6:f8:0f:66:0d:30:02:c4:12: 88:ce:20:53:90:9e:b7:10:7f:84:14:5f:97:be:c1: 73:5c:fc:1b:b4:46:4b:b5:dd:c3:7a:32:35:2b:b4: 41:a7:ca:59:42:5c:6a:e2:1a:cd:7d:b7:98:be:57: 5e:0c:9f:0f:a4:41:ba:35:b6:79:e0:7e:09:fa:29: e1:77:7b:8a:38:51:74:1b:83:33:42:2a:41:31:1f: 93:d3:ae:79:08:62:55:b4:10:95:e4:f6:c8:12:bb: 5e:a8:50:20:c9:2f:b8:d3:b7:81:bf:80:6c:52:04: 9a:7c:91:41:cb:60:40:ab:4b:3c:e0:12:82:d9:51: f8:18:ef:ac:c0:66:bb:e1:36:8b:23:b6:ce:0b:78: cd:72:2f:4f:95:ed:de:f7:8e:fa:23:7a:10:33:2f: a0:3d:54:38:58:80:d5:d4:8d:21:f0:d2:fe:9e:9f: 81:58:2d:6a:8a:e1:c5:7b:54:00:80:24:0f:f6:5c: f0:5e:87:f8:34:af:59:4f:ec:3a:61:c9:d9:0d:82: 4c:23:ce:a3:f3:eb:e6:aa:5d:04:c4:b5:6b:1d:6d: ec:a4:40:ae:c3:7a:ea:ec:a1:75:3e:29:9e:b9:b4: 36:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:7B:4F:B1:C4:8E:CA:60:95:D1:38:63:8E:C3:00:2C:15:CF:41:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/41387a42-8a00-3750-bed6-58a6e3fafc54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl X509v3 Authority Key Identifier: keyid:83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer sbgp-ipAddrBlock: critical IPv4: 192.163.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:d0:33:30:85:ea:6b:74:35:6e:32:af:75:11:cc:be:b2:6a: 84:12:af:6e:63:9b:19:36:b3:a9:36:19:ea:a2:ea:ef:dd:6d: 34:ff:c3:6c:2c:1b:b2:a2:65:82:8e:be:65:61:c0:bf:4e:44: 28:f3:ff:e4:f3:f0:09:be:3e:2f:7a:1d:15:a5:32:6b:9c:fa: 1e:2a:b7:07:e0:44:da:39:d6:ae:11:60:1b:46:69:8b:59:b1: 5b:ed:7f:35:d6:93:53:42:2c:5f:88:d4:c8:5f:f8:cd:76:dd: fe:22:73:21:5a:20:cf:9d:87:03:e1:a5:9d:0a:61:1e:2f:29: 5d:6c:cb:3d:6e:1e:37:16:4d:43:f6:96:6f:38:4c:34:37:f9: 7f:fa:1f:67:ed:28:38:59:18:50:82:93:ed:f2:dd:9b:04:40: ca:e3:23:44:d5:0d:da:06:36:fa:12:c7:08:e5:12:be:30:42: ff:e8:cd:91:69:31:58:91:f6:5b:74:a7:ae:d8:77:fc:7e:4b: bd:29:c2:b8:5b:56:24:75:c3:34:c0:19:89:11:32:73:a2:2b: 32:ff:a2:e9:5a:3a:b4:5d:12:dc:02:70:0d:55:65:6e:44:b9: 10:e4:92:6c:fe:5a:8d:87:bb:d1:54:3f:df:61:b5:22:27:48: ec:95:08:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Nj/ySk5280OzKnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiMjIxMTctYzNiMS00Zjc0LWFkMmEtMGZjZDEwYTJk NzhlMB4XDTI2MDQxOTAxMDAyM1oXDTI2MDcxODAxMDAyM1owLzEtMCsGA1UEAxMk Yzg2ZDJlZGQtODA4NC00OWMzLWE0YzMtOGEzYzhiOTRmZTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXMCgauZBsM5oiByCI1fTvRDX/22+A9mDTAC xBKIziBTkJ63EH+EFF+XvsFzXPwbtEZLtd3DejI1K7RBp8pZQlxq4hrNfbeYvlde DJ8PpEG6NbZ54H4J+inhd3uKOFF0G4MzQipBMR+T0655CGJVtBCV5PbIErteqFAg yS+407eBv4BsUgSafJFBy2BAq0s84BKC2VH4GO+swGa74TaLI7bOC3jNci9Ple3e 9476I3oQMy+gPVQ4WIDV1I0h8NL+np+BWC1qiuHFe1QAgCQP9lzwXof4NK9ZT+w6 YcnZDYJMI86j8+vmql0ExLVrHW3spECuw3rq7KF1PimeubQ2AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIB7T7HEjspgldE4Y47DACwVz0HqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIy MjExNy1jM2IxLTRmNzQtYWQyYS0wZmNkMTBhMmQ3OGUvNDEzODdhNDItOGEwMC0z NzUwLWJlZDYtNThhNmUzZmFmYzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzRiMjIxMTctYzNiMS00Zjc0LWFk MmEtMGZjZDEwYTJkNzhlLzM0YjIyMTE3LWMzYjEtNGY3NC1hZDJhLTBmY2QxMGEy ZDc4ZS5jcmwwHwYDVR0jBBgwFoAUg10MEq+eKOvB66Bxguz0PklWr1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIyMjExNy1jM2IxLTRmNzQtYWQyYS0wZmNk MTBhMmQ3OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKMFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnQMzCF6mt0NW4yr3URzL6yaoQSr25jmxk2s6k2Geqi6u/dbTT/w2ws G7KiZYKOvmVhwL9ORCjz/+Tz8Am+Pi96HRWlMmuc+h4qtwfgRNo51q4RYBtGaYtZ sVvtfzXWk1NCLF+I1Mhf+M123f4icyFaIM+dhwPhpZ0KYR4vKV1syz1uHjcWTUP2 lm84TDQ3+X/6H2ftKDhZGFCCk+3y3ZsEQMrjI0TVDdoGNvoSxwjlEr4wQv/ozZFp MViR9lt0p67Yd/x+S70pwrhbViR1wzTAGYkRMnOiKzL/oulaOrRdEtwCcA1VZW5E uRDkkmz+Wo2Hu9FUP99htSInSOyVCLY= -----END CERTIFICATE-----Generated at Sun Apr 19 05:17:50 2026 by rpki-client