$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/20ba3136-7192-3d31-ba1d-b329c8840df5.roa File: 20ba3136-7192-3d31-ba1d-b329c8840df5.roa (raw, json) Hash identifier: rNgA3kcookA1Y3YjJB5E52BRTpGsXVAhYNUaPh76QKE= Subject key identifier: 5B:FA:74:FC:E0:89:13:77:29:82:23:7F:BA:BD:D0:D4:D2:91:21:A9 Certificate issuer: /CN=9f8abfb1-5f91-4570-a775-7435d3e52012 Certificate serial: 010D0C9F4328584D40CA49F73473DBCD82C20100 Authority key identifier: 40:25:3A:F9:1F:A1:03:19:E2:97:8A:59:30:22:60:98:D8:BB:2D:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/20ba3136-7192-3d31-ba1d-b329c8840df5.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 53405 IP address blocks: 192.199.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:49:f7:34:73:db:cd:82:c2:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f8abfb1-5f91-4570-a775-7435d3e52012 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=7a21a348-7ddc-4774-98fb-3a1210848420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fa:07:cc:c6:10:e8:84:4d:de:0c:f2:8d:7c: 21:d5:3e:78:9c:9d:ca:4c:28:fd:5b:46:d7:1a:bd: 2a:ab:b2:38:ad:59:38:5e:54:db:8a:f7:49:cd:38: 08:95:cb:e5:55:52:f4:38:1d:97:9f:6c:df:81:c3: 3b:88:93:8f:2c:60:f5:6b:e8:53:7c:03:0a:0e:1e: 03:8d:64:99:32:f5:59:de:5e:d3:bb:4d:ca:3e:64: 0d:ea:c9:60:30:a7:9d:4b:c6:ec:ab:bc:f5:e6:90: 33:27:d4:dd:79:a3:79:c2:5b:c2:51:89:88:77:0f: a3:71:8e:8a:9a:a7:d4:55:d9:43:46:54:db:33:ce: 4c:e1:09:bc:5b:ac:f0:29:97:6f:69:c9:9c:81:94: 64:24:23:40:cf:c9:47:55:15:90:11:fb:77:dd:36: 62:47:ed:08:cb:8d:f6:ef:e6:7c:c9:52:4d:ac:60: 4f:b7:2e:25:17:73:36:52:15:69:8d:fc:4b:a1:28: 59:35:eb:f2:63:d4:cb:bc:87:48:69:27:f4:e3:0d: b2:45:3d:f8:9e:84:33:6c:1c:ed:f2:53:d6:95:3c: 10:70:a4:9c:7a:46:a3:39:71:7a:0b:18:2b:21:82: 5d:f9:5f:eb:c9:bb:7b:2b:3d:d0:31:75:bb:d9:9e: d5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:FA:74:FC:E0:89:13:77:29:82:23:7F:BA:BD:D0:D4:D2:91:21:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/20ba3136-7192-3d31-ba1d-b329c8840df5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.crl X509v3 Authority Key Identifier: keyid:40:25:3A:F9:1F:A1:03:19:E2:97:8A:59:30:22:60:98:D8:BB:2D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer sbgp-ipAddrBlock: critical IPv4: 192.199.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:64:3f:d7:0b:24:25:16:c5:9d:8a:84:13:b4:04:d7:5a:14: f7:1c:b8:fc:1a:65:56:dd:26:84:8d:6f:70:fe:2d:f8:87:35: d9:bb:d2:90:f9:b4:9b:cc:3a:bb:5f:76:42:83:8a:f4:36:25: 15:cf:59:05:2f:27:bd:12:dd:e4:37:26:d9:45:62:07:1c:34: 95:64:65:b4:c8:52:b8:1f:1e:03:a7:f3:5c:c6:42:52:a8:ad: e9:3e:1c:da:37:68:f9:50:59:2c:26:7c:3c:77:2e:62:1d:0e: 4c:20:ee:10:41:10:4e:fa:72:6e:40:50:52:85:4e:94:a8:93: 86:db:ca:f4:4f:f9:d2:97:34:25:13:c8:f5:2d:54:5b:ae:47: fd:1a:fd:9c:66:d0:1c:28:ac:9c:e0:b8:69:3e:33:6c:3a:e9: 48:d1:86:2a:b5:0a:16:34:4b:8b:1a:08:eb:67:c3:10:3f:e8: 9d:26:27:fe:15:50:69:81:d8:91:3c:7c:91:2f:04:cf:17:f2: 3f:bd:bf:4f:53:8a:37:63:69:6d:13:d0:a4:f6:9b:eb:08:16: 22:f4:da:a9:8a:62:b8:58:6d:15:c7:30:1c:ab:da:a3:53:82: 31:e8:ef:ab:b6:c3:51:3b:34:95:9e:1f:6c:93:f5:4e:e9:4a: 7a:96:28:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Aykn3NHPbzYLCAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWY4YWJmYjEtNWY5MS00NTcwLWE3NzUtNzQzNWQzZTUy MDEyMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk N2EyMWEzNDgtN2RkYy00Nzc0LTk4ZmItM2ExMjEwODQ4NDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvoHzMYQ6IRN3gzyjXwh1T54nJ3KTCj9W0bX Gr0qq7I4rVk4XlTbivdJzTgIlcvlVVL0OB2Xn2zfgcM7iJOPLGD1a+hTfAMKDh4D jWSZMvVZ3l7Tu03KPmQN6slgMKedS8bsq7z15pAzJ9TdeaN5wlvCUYmIdw+jcY6K mqfUVdlDRlTbM85M4Qm8W6zwKZdvacmcgZRkJCNAz8lHVRWQEft33TZiR+0Iy432 7+Z8yVJNrGBPty4lF3M2UhVpjfxLoShZNevyY9TLvIdIaSf04w2yRT34noQzbBzt 8lPWlTwQcKScekajOXF6CxgrIYJd+V/rybt7Kz3QMXW72Z7VAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFv6dPzgiRN3KYIjf7q90NTSkSGpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Zjhh YmZiMS01ZjkxLTQ1NzAtYTc3NS03NDM1ZDNlNTIwMTIvMjBiYTMxMzYtNzE5Mi0z ZDMxLWJhMWQtYjMyOWM4ODQwZGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWY4YWJmYjEtNWY5MS00NTcwLWE3 NzUtNzQzNWQzZTUyMDEyLzlmOGFiZmIxLTVmOTEtNDU3MC1hNzc1LTc0MzVkM2U1 MjAxMi5jcmwwHwYDVR0jBBgwFoAUQCU6+R+hAxnil4pZMCJgmNi7LRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZjhhYmZiMS01ZjkxLTQ1NzAtYTc3NS03NDM1 ZDNlNTIwMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwMfAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlkP9cLJCUWxZ2KhBO0BNdaFPccuPwaZVbdJoSNb3D+LfiHNdm70pD5 tJvMOrtfdkKDivQ2JRXPWQUvJ70S3eQ3JtlFYgccNJVkZbTIUrgfHgOn81zGQlKo rek+HNo3aPlQWSwmfDx3LmIdDkwg7hBBEE76cm5AUFKFTpSok4bbyvRP+dKXNCUT yPUtVFuuR/0a/Zxm0BworJzguGk+M2w66UjRhiq1ChY0S4saCOtnwxA/6J0mJ/4V UGmB2JE8fJEvBM8X8j+9v09TijdjaW0T0KT2m+sIFiL02qmKYrhYbRXHMByr2qNT gjHo76u2w1E7NJWeH2yT9U7pSnqWKBo= -----END CERTIFICATE-----Generated at Thu Mar 26 18:51:07 2026 by rpki-client