$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/3f78d547-de25-3602-8b01-99ce611f7b81.roa File: 3f78d547-de25-3602-8b01-99ce611f7b81.roa (raw, json) Hash identifier: xLdcLEwtbBq0GwNMajgVeEx8Y28wWymkj7mRhba0gsA= Subject key identifier: 1A:3C:5E:9D:59:3A:33:8F:64:E0:59:4A:47:1C:27:7B:B9:C7:1C:17 Certificate issuer: /CN=835152c2-2ed8-4151-8f82-ac9407335b2c Certificate serial: 010D0C9F4328584D39CF74B8357E5B80C5CEBC00 Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/3f78d547-de25-3602-8b01-99ce611f7b81.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 198949 IP address blocks: 192.254.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:74:b8:35:7e:5b:80:c5:ce:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=0e05354f-6058-4b13-9fa1-c440f5e8e9e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b9:d7:56:28:ab:47:95:30:25:75:3b:fe:e3: d3:33:a1:54:cd:c2:8b:da:3c:2e:92:6d:2b:d1:cf: d7:da:91:c2:48:46:9a:41:8e:17:f0:3f:fe:49:2b: 25:d1:fa:ad:63:24:17:76:f4:94:63:c9:f6:0d:72: 3e:70:8c:a5:42:a0:47:62:98:e5:6a:e9:e1:8a:2a: 0f:27:f9:71:37:24:d9:af:80:cb:95:85:73:61:fe: 4e:22:01:72:4e:ef:84:65:31:9c:43:2d:23:a0:9b: 3d:33:61:f1:b4:8d:7c:11:75:07:50:9f:61:c2:7f: 65:9a:10:98:1d:f8:9b:bf:e8:81:0c:41:26:6f:96: c0:3f:05:ef:85:28:5e:d4:6a:e9:bb:f5:95:e0:dd: 2e:d0:7a:ba:6e:f6:72:64:d3:8d:2e:af:5f:1c:d3: 88:ee:72:15:df:d9:26:0c:01:e7:6c:88:67:83:ed: 2c:f2:00:06:f9:79:4e:33:93:3a:71:bc:b1:31:25: 64:41:0d:4b:a1:a2:bd:f1:57:21:1d:6f:f9:3e:4d: c0:a2:33:72:9f:e1:d3:63:0b:cb:b3:ef:cd:59:98: dc:76:f1:1c:d1:4a:55:78:03:28:8b:17:02:b9:18: 84:12:f9:f8:3c:d5:9a:33:b6:b0:83:a0:ec:cd:3d: b5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:3C:5E:9D:59:3A:33:8F:64:E0:59:4A:47:1C:27:7B:B9:C7:1C:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/3f78d547-de25-3602-8b01-99ce611f7b81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl X509v3 Authority Key Identifier: keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer sbgp-ipAddrBlock: critical IPv4: 192.254.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:08:4f:cb:87:4f:fd:99:99:0f:63:0f:a8:ec:78:0d:08:85: 34:4f:a6:6a:87:93:2f:d4:0a:e8:0f:0b:0f:56:ec:b7:d2:4b: 77:4d:e2:ed:90:c2:7b:59:03:20:b3:8c:c2:33:e2:e7:da:86: 91:e0:e3:47:4a:cb:ec:ce:d5:f3:fa:51:e8:c2:c6:08:00:ce: 79:31:f5:7f:dd:c4:8b:8f:27:74:31:fd:8e:fb:0f:f8:93:05: 3a:ca:81:e9:e6:0b:1f:92:4c:15:a3:c2:04:e4:de:78:98:49: 9f:82:fe:d8:bd:67:c5:28:ae:cd:fe:8d:3c:b2:6d:9f:14:1d: ec:a6:a0:a1:71:ae:a1:95:d9:d9:ac:54:63:66:5b:30:7a:e4: f5:6a:8f:62:c9:68:bc:c1:ba:a9:06:e5:91:70:7f:b6:74:0a: 6c:9e:94:e1:a6:2f:96:ec:cb:c6:c2:bc:7e:b5:13:45:17:8a: 4a:ae:c8:d9:09:be:74:b8:91:1b:bf:ce:ef:9e:45:57:60:f6: 13:0b:c1:b8:f6:b8:a9:72:4a:3b:3d:42:b4:10:ef:56:c7:23: 42:87:90:da:29:64:db:e1:bf:f6:08:21:4e:a2:38:b0:f9:0c: d6:5c:a9:f4:8c:00:7a:c9:d7:5f:d3:8d:73:28:5b:3e:4f:5e: ed:35:62:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z3S4NX5bgMXOvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODM1MTUyYzItMmVkOC00MTUxLThmODItYWM5NDA3MzM1 YjJjMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk MGUwNTM1NGYtNjA1OC00YjEzLTlmYTEtYzQ0MGY1ZThlOWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37nXViirR5UwJXU7/uPTM6FUzcKL2jwukm0r 0c/X2pHCSEaaQY4X8D/+SSsl0fqtYyQXdvSUY8n2DXI+cIylQqBHYpjlaunhiioP J/lxNyTZr4DLlYVzYf5OIgFyTu+EZTGcQy0joJs9M2HxtI18EXUHUJ9hwn9lmhCY Hfibv+iBDEEmb5bAPwXvhShe1Grpu/WV4N0u0Hq6bvZyZNONLq9fHNOI7nIV39km DAHnbIhng+0s8gAG+XlOM5M6cbyxMSVkQQ1LoaK98VchHW/5Pk3AojNyn+HTYwvL s+/NWZjcdvEc0UpVeAMoixcCuRiEEvn4PNWaM7awg6DszT21SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBo8Xp1ZOjOPZOBZSkccJ3u5xxwXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84MzUx NTJjMi0yZWQ4LTQxNTEtOGY4Mi1hYzk0MDczMzViMmMvM2Y3OGQ1NDctZGUyNS0z NjAyLThiMDEtOTljZTYxMWY3YjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODM1MTUyYzItMmVkOC00MTUxLThm ODItYWM5NDA3MzM1YjJjLzgzNTE1MmMyLTJlZDgtNDE1MS04ZjgyLWFjOTQwNzMz NWIyYy5jcmwwHwYDVR0jBBgwFoAUip902Uy3YwUwNo8P7EWat+Zpdd4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84MzUxNTJjMi0yZWQ4LTQxNTEtOGY4Mi1hYzk0 MDczMzViMmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHwP6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMcIT8uHT/2ZmQ9jD6jseA0IhTRPpmqHky/UCugPCw9W7LfSS3dN4u2Q wntZAyCzjMIz4ufahpHg40dKy+zO1fP6UejCxggAznkx9X/dxIuPJ3Qx/Y77D/iT BTrKgenmCx+STBWjwgTk3niYSZ+C/ti9Z8Uors3+jTyybZ8UHeymoKFxrqGV2dms VGNmWzB65PVqj2LJaLzBuqkG5ZFwf7Z0CmyelOGmL5bsy8bCvH61E0UXikquyNkJ vnS4kRu/zu+eRVdg9hMLwbj2uKlySjs9QrQQ71bHI0KHkNopZNvhv/YIIU6iOLD5 DNZcqfSMAHrJ11/TjXMoWz5PXu01Ykg= -----END CERTIFICATE-----Generated at Thu Mar 26 18:30:28 2026 by rpki-client