$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/d3cc9cc7-d6cb-3672-bcce-1a437c34d50d.roa File: d3cc9cc7-d6cb-3672-bcce-1a437c34d50d.roa (raw, json) Hash identifier: C1CshEkwEhZHC2IuTyhcW5A2YEcwRkz+LHqIS4mKSUA= Subject key identifier: 31:5A:56:38:4D:DC:AE:C1:30:51:E0:7E:69:8D:37:FB:27:C4:17:B3 Certificate issuer: /CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Certificate serial: 010D0C9F4328584D8D8FEE86CC84E3B824BFF880 Authority key identifier: 83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/d3cc9cc7-d6cb-3672-bcce-1a437c34d50d.roa Signing time: Sun 19 Apr 2026 01:00:23 +0000 ROA not before: Sun 19 Apr 2026 01:00:23 +0000 ROA not after: Sat 18 Jul 2026 01:00:23 +0000 asID: 133462 IP address blocks: 192.91.108.0/24 maxlen: 24 192.91.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:8f:ee:86:cc:84:e3:b8:24:bf:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Validity Not Before: Apr 19 01:00:23 2026 GMT Not After : Jul 18 01:00:23 2026 GMT Subject: CN=7f15aa4d-e951-4216-93bf-6b11683dc6e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3c:5b:b8:29:a0:90:80:37:ae:a9:fd:dc:e2: 33:c3:0b:17:03:95:1a:24:7c:e4:54:b7:75:f2:68: 32:eb:0d:1e:7a:59:8f:c3:4c:47:d0:5a:c7:68:ab: 64:04:9c:85:82:39:c8:ba:53:1d:c4:bb:15:aa:df: 8f:7a:da:74:e3:fd:80:b0:8d:34:96:dd:51:ef:f6: 77:1c:37:41:33:7f:e1:84:62:46:36:b5:3d:35:b9: 4b:16:ff:57:cd:fe:d1:98:03:32:70:2e:0e:a1:83: 21:bb:08:47:92:c8:6d:ff:a5:28:b9:d9:69:f5:f6: 84:71:45:94:d7:cf:fa:04:27:c1:2d:9a:13:54:88: f1:e3:43:47:3e:44:3b:31:a8:1d:9e:95:9b:57:7a: 9c:cb:f9:8c:75:f7:04:09:56:c5:ed:a4:1c:43:58: 48:30:30:2b:04:fc:06:bd:bd:20:04:dc:4d:66:b3: fb:4b:8e:67:66:9c:f7:a5:75:18:da:8c:3d:62:57: 07:d8:3d:36:46:cb:05:b5:25:c5:a3:53:b7:e9:90: 7b:7c:4b:14:b0:d9:41:d9:dc:9d:45:01:9a:70:56: 19:89:2d:1b:85:7f:d6:fe:7b:04:0f:f7:e1:8b:02: 2f:37:0b:31:eb:c8:f4:c3:ad:63:c4:3a:99:42:a1: 69:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:5A:56:38:4D:DC:AE:C1:30:51:E0:7E:69:8D:37:FB:27:C4:17:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/d3cc9cc7-d6cb-3672-bcce-1a437c34d50d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl X509v3 Authority Key Identifier: keyid:83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer sbgp-ipAddrBlock: critical IPv4: 192.91.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:13:77:6f:fe:c2:89:11:66:8d:76:34:fb:31:d9:f3:3a:c0: d1:e2:ad:59:37:d2:ba:ba:2c:d4:ce:06:db:e7:d2:7a:a6:f7: 5d:77:78:63:35:58:77:43:68:59:cd:4a:63:05:f8:22:77:77: ca:a4:f5:a2:85:26:81:84:c1:3b:e2:1b:de:59:16:c2:12:b0: b3:16:fb:22:ca:92:a8:ed:d9:3c:dc:c0:ce:65:77:ae:e7:0e: 90:7b:a8:50:65:4c:ac:d0:92:c7:0a:7d:01:77:58:87:87:2b: a0:28:84:95:68:82:3b:88:af:60:81:45:cf:7f:5a:91:0f:86: 77:d1:46:fe:ee:9f:79:89:b3:50:93:62:cd:d2:2d:1b:23:c4: 88:3a:b3:03:e2:ad:76:13:6d:62:56:75:59:4a:f2:20:7d:45: 37:e5:20:b4:7f:f0:b9:39:63:38:eb:99:00:4d:df:08:6b:d0: d1:b8:e1:c7:7a:63:07:a2:57:d1:f3:22:8a:ce:ac:e3:4a:34: a0:db:f4:f5:4b:24:e4:bb:b5:5c:04:d5:09:3e:5e:4f:cd:d0: 56:50:fe:9f:96:f2:62:b5:57:65:d1:d6:b8:f7:46:82:49:95: 7f:f2:f8:cc:ce:da:76:92:3f:e4:a3:6e:fd:95:c4:75:20:88: f9:22:e7:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Nj+6GzITjuCS/+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiMjIxMTctYzNiMS00Zjc0LWFkMmEtMGZjZDEwYTJk NzhlMB4XDTI2MDQxOTAxMDAyM1oXDTI2MDcxODAxMDAyM1owLzEtMCsGA1UEAxMk N2YxNWFhNGQtZTk1MS00MjE2LTkzYmYtNmIxMTY4M2RjNmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDxbuCmgkIA3rqn93OIzwwsXA5UaJHzkVLd1 8mgy6w0eelmPw0xH0FrHaKtkBJyFgjnIulMdxLsVqt+Petp04/2AsI00lt1R7/Z3 HDdBM3/hhGJGNrU9NblLFv9Xzf7RmAMycC4OoYMhuwhHksht/6Uoudlp9faEcUWU 18/6BCfBLZoTVIjx40NHPkQ7MagdnpWbV3qcy/mMdfcECVbF7aQcQ1hIMDArBPwG vb0gBNxNZrP7S45nZpz3pXUY2ow9YlcH2D02RssFtSXFo1O36ZB7fEsUsNlB2dyd RQGacFYZiS0bhX/W/nsED/fhiwIvNwsx68j0w61jxDqZQqFpRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFaVjhN3K7BMFHgfmmNN/snxBezMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIy MjExNy1jM2IxLTRmNzQtYWQyYS0wZmNkMTBhMmQ3OGUvZDNjYzljYzctZDZjYi0z NjcyLWJjY2UtMWE0MzdjMzRkNTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzRiMjIxMTctYzNiMS00Zjc0LWFk MmEtMGZjZDEwYTJkNzhlLzM0YjIyMTE3LWMzYjEtNGY3NC1hZDJhLTBmY2QxMGEy ZDc4ZS5jcmwwHwYDVR0jBBgwFoAUg10MEq+eKOvB66Bxguz0PklWr1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIyMjExNy1jM2IxLTRmNzQtYWQyYS0wZmNk MTBhMmQ3OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwFtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcTd2/+wokRZo12NPsx2fM6wNHirVk30rq6LNTOBtvn0nqm9113eGM1 WHdDaFnNSmMF+CJ3d8qk9aKFJoGEwTviG95ZFsISsLMW+yLKkqjt2TzcwM5ld67n DpB7qFBlTKzQkscKfQF3WIeHK6AohJVogjuIr2CBRc9/WpEPhnfRRv7un3mJs1CT Ys3SLRsjxIg6swPirXYTbWJWdVlK8iB9RTflILR/8Lk5YzjrmQBN3whr0NG44cd6 YweiV9HzIorOrONKNKDb9PVLJOS7tVwE1Qk+Xk/N0FZQ/p+W8mK1V2XR1rj3RoJJ lX/y+MzO2naSP+Sjbv2VxHUgiPki57Y= -----END CERTIFICATE-----Generated at Sun Apr 19 05:16:36 2026 by rpki-client