$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/628939bb-a7c6-3271-85aa-eac98754c178.roa File: 628939bb-a7c6-3271-85aa-eac98754c178.roa (raw, json) Hash identifier: rug8UYF3bqKQQZeeKfIz3vgm7rTsYCaVS4bRXxa4uI8= Subject key identifier: 79:D8:8D:38:8E:00:8C:F0:A4:61:93:C2:39:79:49:FD:1D:61:8F:4E Certificate issuer: /CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Certificate serial: 010D0C9F4328584D8D8FED831D2F73275FC409A0 Authority key identifier: 83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/628939bb-a7c6-3271-85aa-eac98754c178.roa Signing time: Sun 19 Apr 2026 01:00:23 +0000 ROA not before: Sun 19 Apr 2026 01:00:23 +0000 ROA not after: Sat 18 Jul 2026 01:00:23 +0000 asID: 12801 IP address blocks: 192.91.60.0/24 maxlen: 24 192.91.62.0/24 maxlen: 24 192.91.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:8f:ed:83:1d:2f:73:27:5f:c4:09:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Validity Not Before: Apr 19 01:00:23 2026 GMT Not After : Jul 18 01:00:23 2026 GMT Subject: CN=28dbeb77-652f-457f-90ce-55a2adc2e1ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5e:50:e3:cb:22:83:73:45:d3:a5:1b:e5:f1: 87:18:9c:a7:46:c7:c3:81:05:31:ce:06:f8:f9:1b: e3:0b:6b:d0:9c:3e:bb:95:7b:38:3d:2f:2e:f3:e5: ef:8b:43:f1:b7:43:00:0b:71:3f:c6:1c:a3:5a:28: 7f:c2:ed:20:1f:7f:bf:81:7c:da:05:ef:cc:f6:4c: ff:b9:86:62:9c:d4:94:4d:89:5d:90:95:f3:58:10: 13:d3:ac:42:9c:7f:64:9f:34:5d:4c:f7:03:77:94: 34:6a:0c:1a:8a:0f:c3:ab:ba:3d:ea:d9:2d:72:cc: df:59:17:a8:d3:99:d2:85:ab:d1:86:50:67:e9:2a: 15:04:6e:4c:24:4f:35:f8:60:cf:c9:3b:2e:c4:5c: 00:e1:97:fa:25:c9:b0:32:3a:48:3a:c2:43:cc:d5: 89:a4:ca:9f:14:88:a4:54:e7:b8:48:1e:c8:30:ce: e4:aa:79:8f:bd:8e:e5:d4:81:7a:12:aa:c4:90:d3: 13:eb:8e:b5:56:79:d0:0e:1b:97:af:0d:98:ee:e2: 35:75:21:c3:ec:bc:fd:ea:19:f3:db:d6:46:43:88: 12:58:8c:92:84:dd:47:90:88:db:e4:f5:b0:1d:c9: d8:bb:89:cf:ce:32:53:34:68:e9:0f:f0:7f:bb:ad: d1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D8:8D:38:8E:00:8C:F0:A4:61:93:C2:39:79:49:FD:1D:61:8F:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/628939bb-a7c6-3271-85aa-eac98754c178.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl X509v3 Authority Key Identifier: keyid:83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer sbgp-ipAddrBlock: critical IPv4: 192.91.60.0/24 192.91.62.0/24 192.91.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:b2:83:67:29:70:9c:41:54:17:85:36:8a:47:cd:ac:38:31: ca:84:bd:5d:79:51:09:38:28:cf:00:a1:16:26:d5:8f:75:14: 3c:ed:c1:7c:70:18:f3:cf:59:a7:d0:5c:c3:03:15:ed:9f:0f: 53:80:9e:a9:15:ae:72:42:04:c7:4f:d5:c0:23:57:ba:21:18: a9:45:b6:cd:73:af:9b:86:78:a5:5d:55:eb:73:28:cd:88:0b: 3e:58:52:55:37:29:f8:0d:1a:b1:61:de:5d:a0:fa:4e:d9:b3: 34:bf:b1:21:07:62:aa:21:c1:c9:ab:bb:d8:47:bf:3e:75:8d: 0e:d3:13:a0:4e:ec:d5:8c:20:13:1c:a2:14:07:2a:c3:68:c3: dc:12:64:22:69:22:fc:7a:58:15:ba:4f:d7:ef:e8:d8:ea:d4: 05:76:aa:f6:b4:bb:88:27:a1:59:ac:5b:c9:06:04:9e:ae:2b: 30:5b:da:fa:24:55:72:9e:20:8a:dd:39:f9:58:19:23:59:11: 36:2f:12:a5:51:07:1f:7b:0a:33:61:4f:5a:da:1e:0c:23:6b: 98:38:de:5e:c3:da:0e:9c:05:f4:cf:84:85:d8:51:42:e0:f5: 86:aa:e7:cd:91:4a:88:eb:a3:8d:7e:72:1a:a5:64:fd:ab:bd: 6b:6a:2f:7c -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE2Nj+2DHS9zJ1/ECaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiMjIxMTctYzNiMS00Zjc0LWFkMmEtMGZjZDEwYTJk NzhlMB4XDTI2MDQxOTAxMDAyM1oXDTI2MDcxODAxMDAyM1owLzEtMCsGA1UEAxMk MjhkYmViNzctNjUyZi00NTdmLTkwY2UtNTVhMmFkYzJlMWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgV5Q48sig3NF06Ub5fGHGJynRsfDgQUxzgb4 +RvjC2vQnD67lXs4PS8u8+Xvi0Pxt0MAC3E/xhyjWih/wu0gH3+/gXzaBe/M9kz/ uYZinNSUTYldkJXzWBAT06xCnH9knzRdTPcDd5Q0agwaig/Dq7o96tktcszfWReo 05nShavRhlBn6SoVBG5MJE81+GDPyTsuxFwA4Zf6JcmwMjpIOsJDzNWJpMqfFIik VOe4SB7IMM7kqnmPvY7l1IF6EqrEkNMT6461VnnQDhuXrw2Y7uI1dSHD7Lz96hnz 29ZGQ4gSWIyShN1HkIjb5PWwHcnYu4nPzjJTNGjpD/B/u63RuQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFHnYjTiOAIzwpGGTwjl5Sf0dYY9OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIy MjExNy1jM2IxLTRmNzQtYWQyYS0wZmNkMTBhMmQ3OGUvNjI4OTM5YmItYTdjNi0z MjcxLTg1YWEtZWFjOTg3NTRjMTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzRiMjIxMTctYzNiMS00Zjc0LWFk MmEtMGZjZDEwYTJkNzhlLzM0YjIyMTE3LWMzYjEtNGY3NC1hZDJhLTBmY2QxMGEy ZDc4ZS5jcmwwHwYDVR0jBBgwFoAUg10MEq+eKOvB66Bxguz0PklWr1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIyMjExNy1jM2IxLTRmNzQtYWQyYS0wZmNk MTBhMmQ3OGUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwFs8AwQA wFs+AwQAwFtAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAGOyg2cpcJxBVBeFNopHzaw4McqEvV15UQk4KM8A oRYm1Y91FDztwXxwGPPPWafQXMMDFe2fD1OAnqkVrnJCBMdP1cAjV7ohGKlFts1z r5uGeKVdVetzKM2ICz5YUlU3KfgNGrFh3l2g+k7ZszS/sSEHYqohwcmru9hHvz51 jQ7TE6BO7NWMIBMcohQHKsNow9wSZCJpIvx6WBW6T9fv6Njq1AV2qva0u4gnoVms W8kGBJ6uKzBb2vokVXKeIIrdOflYGSNZETYvEqVRBx97CjNhT1raHgwja5g43l7D 2g6cBfTPhIXYUULg9Yaq582RSojro41+chqlZP2rvWtqL3w= -----END CERTIFICATE-----Generated at Sun Apr 19 05:16:36 2026 by rpki-client