$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/d3834ffa-cce3-3357-aab0-1d60dc3a359c.roa File: d3834ffa-cce3-3357-aab0-1d60dc3a359c.roa (raw, json) Hash identifier: kI98MisLJ44pQZEPHKS/f/0zkqGJcKnKhZmOLky9X+Q= Subject key identifier: 6C:6D:DA:A9:D1:C5:60:D5:7E:4A:35:DE:F1:3D:9F:65:4F:7E:65:6F Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584CBDB1ECF5579E9BA94D7FEC00 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/d3834ffa-cce3-3357-aab0-1d60dc3a359c.roa Signing time: Tue 03 Feb 2026 14:00:39 +0000 ROA not before: Tue 03 Feb 2026 14:00:39 +0000 ROA not after: Mon 04 May 2026 13:00:39 +0000 asID: 31898 IP address blocks: 192.86.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bd:b1:ec:f5:57:9e:9b:a9:4d:7f:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Feb 3 14:00:39 2026 GMT Not After : May 4 13:00:39 2026 GMT Subject: CN=4b79dc9b-33cb-4530-bc98-eb7e6d2381e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:66:c9:50:94:1b:34:14:2a:5e:b7:01:fd:dc: 4c:6c:9a:d7:fd:70:bb:80:e5:51:85:52:d6:dd:3d: a7:46:b5:83:a6:ba:81:fc:a6:34:c6:8b:45:8c:33: 54:bb:98:42:44:eb:51:c5:a0:91:03:c5:4a:d7:13: 80:d2:8f:b4:d2:ad:e7:69:6b:86:e9:9e:95:65:b7: fe:03:d8:61:04:fa:d1:4c:7b:44:7d:ea:56:e4:bc: 3b:c9:b3:e6:8e:94:0d:b2:60:48:c6:e1:31:7d:6d: 79:61:6e:a1:ed:5e:b4:3e:5f:dd:9b:43:c9:d4:d1: 97:5d:eb:d0:af:db:87:d9:57:3a:d4:52:1e:48:ef: 4e:40:88:d7:da:38:10:48:0d:8f:b5:e9:84:92:01: 7e:8e:c9:59:6c:56:0f:50:1f:17:ae:fc:94:45:0e: 04:2d:5a:ac:49:60:1d:54:ab:50:3d:c1:37:38:62: 53:83:6e:ce:3b:fa:f7:6f:20:96:ae:09:d8:17:cf: 5b:01:60:58:28:4b:66:2f:d8:4d:7b:d8:b1:aa:d6: 27:9a:ad:b5:f8:87:75:11:ca:29:6d:38:27:6e:8a: 83:78:dc:b0:42:0f:85:c5:b6:c7:f0:15:89:64:dc: 4d:47:e2:a4:ed:5a:c0:87:99:22:5d:11:68:25:c4: 2e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:6D:DA:A9:D1:C5:60:D5:7E:4A:35:DE:F1:3D:9F:65:4F:7E:65:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/d3834ffa-cce3-3357-aab0-1d60dc3a359c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 192.86.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:7e:05:b9:79:65:18:c1:aa:ab:99:99:c4:f2:4f:97:05:54: 0b:df:5e:23:1a:52:0b:4f:8e:a5:4d:ba:a8:37:ff:1b:12:1c: 5a:92:05:eb:d9:49:de:88:17:7c:7e:51:56:15:2c:dc:eb:93: 6f:a9:62:f7:7a:53:47:84:8a:32:5e:ae:29:31:84:df:b3:1d: 55:b8:37:b0:d4:f7:c5:c1:f3:8b:79:f5:3b:08:06:56:59:04: b1:fe:ce:57:99:91:a9:4b:fd:11:94:9e:b8:2e:27:57:89:5e: 04:25:56:7b:43:65:0f:33:83:81:a9:8a:cf:93:f0:36:6e:c9: 4a:36:ce:e1:7d:53:17:15:da:95:9c:6c:8a:68:d5:7c:f9:95: 30:cd:86:5f:1c:43:fe:68:94:b1:cf:f6:6f:fd:8c:a4:69:50: 94:bc:bf:b7:c2:1e:53:97:68:ae:94:6f:80:4b:ff:d4:c5:b4: 4c:53:0e:1a:2c:5f:d0:a3:98:f3:aa:55:5f:e1:1e:7e:77:e0: d9:68:33:03:2a:fc:71:6e:78:56:de:2f:63:3b:b5:22:e3:38: 3e:cc:7d:95:2e:b0:a7:ed:4c:af:51:82:a3:72:e0:fd:6c:cc: 67:fa:1f:9a:c7:1c:07:51:9a:56:04:b0:0d:5f:9f:e9:b6:9d: a6:c6:dc:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy9sez1V56bqU1/7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk NGI3OWRjOWItMzNjYi00NTMwLWJjOTgtZWI3ZTZkMjM4MWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmbJUJQbNBQqXrcB/dxMbJrX/XC7gOVRhVLW 3T2nRrWDprqB/KY0xotFjDNUu5hCROtRxaCRA8VK1xOA0o+00q3naWuG6Z6VZbf+ A9hhBPrRTHtEfepW5Lw7ybPmjpQNsmBIxuExfW15YW6h7V60Pl/dm0PJ1NGXXevQ r9uH2Vc61FIeSO9OQIjX2jgQSA2PtemEkgF+jslZbFYPUB8XrvyURQ4ELVqsSWAd VKtQPcE3OGJTg27OO/r3byCWrgnYF89bAWBYKEtmL9hNe9ixqtYnmq21+Id1Ecop bTgnboqDeNywQg+FxbbH8BWJZNxNR+Kk7VrAh5kiXRFoJcQuXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxt2qnRxWDVfko13vE9n2VPfmVvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZDM4MzRmZmEtY2NlMy0z MzU3LWFhYjAtMWQ2MGRjM2EzNTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFaeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACt+Bbl5ZRjBqquZmcTyT5cFVAvfXiMaUgtPjqVNuqg3/xsSHFqSBevZ Sd6IF3x+UVYVLNzrk2+pYvd6U0eEijJerikxhN+zHVW4N7DU98XB84t59TsIBlZZ BLH+zleZkalL/RGUnrguJ1eJXgQlVntDZQ8zg4Gpis+T8DZuyUo2zuF9UxcV2pWc bIpo1Xz5lTDNhl8cQ/5olLHP9m/9jKRpUJS8v7fCHlOXaK6Ub4BL/9TFtExTDhos X9CjmPOqVV/hHn534NloMwMq/HFueFbeL2M7tSLjOD7MfZUusKftTK9RgqNy4P1s zGf6H5rHHAdRmlYEsA1fn+m2nabG3MQ= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:39 2026 by rpki-client