$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/43425afd-e380-3275-b610-aa2206fe32e5.roa File: 43425afd-e380-3275-b610-aa2206fe32e5.roa (raw, json) Hash identifier: G0Tca7MiCmTe3HL4OxkotYWweQPT069+XlB28EwP9V0= Subject key identifier: B9:BB:A6:8C:AE:09:3D:A7:EF:58:5E:15:C7:B8:1C:08:9F:55:5B:9D Certificate issuer: /CN=7bcbe16b-0dde-46c3-837f-a940a0e9d4cb Certificate serial: 010D0C9F4328584D0D4264C7612B549B1DB26190 Authority key identifier: 7E:A7:29:61:89:AE:48:BE:BA:26:38:81:C2:93:FC:85:AB:0B:5C:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/43425afd-e380-3275-b610-aa2206fe32e5.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 10753 IP address blocks: 192.228.20.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:64:c7:61:2b:54:9b:1d:b2:61:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bcbe16b-0dde-46c3-837f-a940a0e9d4cb Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=db42ffd1-7c08-4514-bc14-554f926025d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7b:9b:27:6d:58:6e:16:35:b1:43:59:5f:1e: ab:1e:f3:c3:d0:bf:50:34:22:5c:f5:68:3b:21:64: f8:74:2b:db:40:bc:7a:97:ea:4f:b9:3b:ff:60:14: 43:6d:3f:bf:c2:db:58:d2:fb:ca:97:04:71:11:ff: ca:28:ea:68:ea:88:d1:23:0e:07:ef:f5:1f:b8:d3: 44:33:5b:7c:c0:0c:40:9d:d7:d6:4e:68:9a:95:b7: f1:9b:07:e5:f6:f5:76:0a:ab:c7:eb:2f:ae:f6:d6: e2:67:68:a5:73:51:05:0c:35:2e:40:32:cf:26:3f: 82:29:b2:73:8e:ea:51:6c:45:9d:c8:19:02:f2:48: 5f:d4:a0:eb:e1:64:37:6c:0a:5b:16:f0:03:89:a5: ca:2b:5e:e7:fe:0e:0f:44:16:87:cd:f2:48:5d:e5: 26:c1:6f:f9:28:b1:f5:11:be:80:3e:e8:9c:1e:74: 14:15:c8:b3:be:5d:f7:d7:85:2c:a9:d7:80:01:e3: 27:5f:ab:ae:96:d6:60:93:b7:7c:61:08:50:23:49: fb:21:32:d2:a4:b1:8c:de:ab:7a:f2:1f:82:74:46: 3e:ca:3e:9a:03:c8:b0:ca:e4:22:72:98:1c:bd:a6: 50:56:f7:b1:83:45:0c:10:8b:98:c6:21:8b:b7:1f: a7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:BB:A6:8C:AE:09:3D:A7:EF:58:5E:15:C7:B8:1C:08:9F:55:5B:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/43425afd-e380-3275-b610-aa2206fe32e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.crl X509v3 Authority Key Identifier: keyid:7E:A7:29:61:89:AE:48:BE:BA:26:38:81:C2:93:FC:85:AB:0B:5C:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer sbgp-ipAddrBlock: critical IPv4: 192.228.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:f8:d2:c2:79:7b:92:8b:cd:dc:b2:4e:bf:6e:15:0c:dc:af: 7f:a0:b6:75:83:d7:a4:4d:de:ad:7c:7c:50:99:3d:07:3a:d7: 44:cb:b5:ec:fe:e2:f1:46:e3:c5:f5:47:e5:d4:7a:e4:d4:31: be:5c:30:11:71:c3:59:05:2b:93:8e:12:01:01:f7:05:89:da: a7:be:4a:1a:22:b1:59:cb:74:d7:96:a0:3e:67:7f:0f:36:a1: be:7d:32:6f:21:8a:2e:e9:9b:a9:52:b6:a9:cb:67:68:33:3b: 2a:8d:c4:79:65:78:3c:ff:a5:e9:c8:ec:17:c2:8f:06:82:18: 82:e0:86:4d:cd:30:ac:b1:01:16:18:23:2e:d6:ba:a5:25:5c: 74:17:5f:eb:bb:a6:04:39:cf:f2:78:d8:8d:83:de:a6:fb:e0: 5d:f2:a9:90:d0:25:09:21:42:d0:ff:c8:03:64:70:26:4b:d9: 60:ad:ca:40:54:c6:c0:44:4e:a9:c0:dd:17:f8:dd:9d:c6:31: fc:a3:6b:1f:78:44:b8:82:f4:e4:fc:2e:c4:3e:11:e0:1c:28: e4:b6:12:6e:9a:0c:ba:d5:8f:f6:d9:e6:ab:5b:a0:bc:b5:f5: b1:b3:09:75:ec:17:71:94:f2:71:97:13:0a:fb:15:7b:da:f4: c8:a1:b4:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQmTHYStUmx2yYZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JjYmUxNmItMGRkZS00NmMzLTgzN2YtYTk0MGEwZTlk NGNiMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk ZGI0MmZmZDEtN2MwOC00NTE0LWJjMTQtNTU0ZjkyNjAyNWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXubJ21YbhY1sUNZXx6rHvPD0L9QNCJc9Wg7 IWT4dCvbQLx6l+pPuTv/YBRDbT+/wttY0vvKlwRxEf/KKOpo6ojRIw4H7/UfuNNE M1t8wAxAndfWTmialbfxmwfl9vV2CqvH6y+u9tbiZ2ilc1EFDDUuQDLPJj+CKbJz jupRbEWdyBkC8khf1KDr4WQ3bApbFvADiaXKK17n/g4PRBaHzfJIXeUmwW/5KLH1 Eb6APuicHnQUFcizvl3314UsqdeAAeMnX6uultZgk7d8YQhQI0n7ITLSpLGM3qt6 8h+CdEY+yj6aA8iwyuQicpgcvaZQVvexg0UMEIuYxiGLtx+n9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLm7poyuCT2n71heFce4HAifVVudMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83YmNi ZTE2Yi0wZGRlLTQ2YzMtODM3Zi1hOTQwYTBlOWQ0Y2IvNDM0MjVhZmQtZTM4MC0z Mjc1LWI2MTAtYWEyMjA2ZmUzMmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvN2JjYmUxNmItMGRkZS00NmMzLTgz N2YtYTk0MGEwZTlkNGNiLzdiY2JlMTZiLTBkZGUtNDZjMy04MzdmLWE5NDBhMGU5 ZDRjYi5jcmwwHwYDVR0jBBgwFoAUfqcpYYmuSL66JjiBwpP8hasLXKYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83YmNiZTE2Yi0wZGRlLTQ2YzMtODM3Zi1hOTQw YTBlOWQ0Y2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGX40sJ5e5KLzdyyTr9uFQzcr3+gtnWD16RN3q18fFCZPQc610TLtez+ 4vFG48X1R+XUeuTUMb5cMBFxw1kFK5OOEgEB9wWJ2qe+ShoisVnLdNeWoD5nfw82 ob59Mm8hii7pm6lStqnLZ2gzOyqNxHlleDz/penI7BfCjwaCGILghk3NMKyxARYY Iy7WuqUlXHQXX+u7pgQ5z/J42I2D3qb74F3yqZDQJQkhQtD/yANkcCZL2WCtykBU xsBETqnA3Rf43Z3GMfyjax94RLiC9OT8LsQ+EeAcKOS2Em6aDLrVj/bZ5qtboLy1 9bGzCXXsF3GU8nGXEwr7FXva9MihtFI= -----END CERTIFICATE-----Generated at Thu Mar 26 14:43:03 2026 by rpki-client