$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/0ae8d332-3fb0-3cd7-a988-fa16bef5c85e.roa File: 0ae8d332-3fb0-3cd7-a988-fa16bef5c85e.roa (raw, json) Hash identifier: H4PGBlG7/t/hHU93507P22pkhtL5NAdc1dBY9+fkE0Q= Subject key identifier: CD:ED:63:3C:0D:9E:44:CE:46:87:40:E9:0D:96:F1:BB:EA:B2:33:A1 Certificate issuer: /CN=d58ab4c9-6933-49bf-b6b4-e4d3935eda22 Certificate serial: 010D0C9F4328584DADCC94D37160C211D1662B80 Authority key identifier: 2D:73:7F:53:E8:59:77:9D:04:98:F4:22:CD:FB:1A:73:64:84:6C:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/0ae8d332-3fb0-3cd7-a988-fa16bef5c85e.roa Signing time: Thu 30 Apr 2026 14:08:38 +0000 ROA not before: Thu 30 Apr 2026 14:08:38 +0000 ROA not after: Wed 29 Jul 2026 14:08:38 +0000 asID: 393669 IP address blocks: 192.234.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:cc:94:d3:71:60:c2:11:d1:66:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58ab4c9-6933-49bf-b6b4-e4d3935eda22 Validity Not Before: Apr 30 14:08:38 2026 GMT Not After : Jul 29 14:08:38 2026 GMT Subject: CN=b4e3ac32-0073-41ae-b78d-ce526fc0bec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7a:8c:0d:41:18:a4:65:29:be:1b:70:6f:05: 57:05:f7:02:a0:e6:0c:ce:65:5c:2d:11:b5:09:9d: 15:ae:df:2d:dc:b6:a4:d0:40:f6:16:7e:9f:10:0f: a3:0c:be:7e:ca:ae:c5:f4:56:23:76:4e:95:47:9c: f9:53:ff:f2:22:17:c0:2e:93:98:dd:ea:70:79:04: fa:98:35:5c:65:41:58:4f:cb:1a:b3:d0:31:f5:67: 92:fe:77:00:cf:5f:cd:5b:a8:ff:93:0d:78:3d:7c: c5:ad:fb:ed:ba:48:af:33:b4:e0:c1:5b:5f:49:c8: d0:94:bb:70:89:40:d8:b4:44:13:7d:0a:c4:57:30: 21:55:24:f6:d4:34:1b:51:c8:57:94:5b:53:69:49: dd:9e:4e:3a:ff:87:11:4d:b3:84:23:fd:03:56:5a: f7:ec:97:6b:6d:ea:7e:07:c4:6f:8a:c9:7e:aa:13: 45:40:5d:63:c0:39:0a:98:70:8d:e2:44:7e:b6:45: 8f:74:b7:b0:de:06:66:e0:c1:59:12:70:67:43:a4: 67:fb:ca:a9:c9:22:40:82:93:b1:7b:3d:d2:09:2d: 96:fd:ee:42:58:3f:22:ba:57:db:a6:68:f7:12:d1: 67:ef:ca:4f:27:5a:36:38:98:55:ef:46:79:9a:01: 6a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:ED:63:3C:0D:9E:44:CE:46:87:40:E9:0D:96:F1:BB:EA:B2:33:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/0ae8d332-3fb0-3cd7-a988-fa16bef5c85e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.crl X509v3 Authority Key Identifier: keyid:2D:73:7F:53:E8:59:77:9D:04:98:F4:22:CD:FB:1A:73:64:84:6C:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.cer sbgp-ipAddrBlock: critical IPv4: 192.234.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:99:68:bf:51:37:f4:82:b0:0b:3a:fc:38:f6:c7:72:7b:c8: 2e:15:30:43:d9:7c:b2:72:b4:79:44:83:30:ef:16:5c:80:40: da:1d:a2:d5:4e:85:47:15:38:59:28:f2:18:17:cb:fc:e1:e0: c1:2e:05:9f:ae:0c:73:0c:56:5d:6a:07:18:70:5e:e2:e3:cb: 55:46:03:3c:c2:01:7c:34:d1:3b:ff:d5:c0:1d:f7:ae:54:4f: ab:f4:14:0d:c2:0e:24:37:9f:16:91:66:9b:f6:af:aa:9d:9e: 61:e5:f3:d0:ca:03:50:33:84:5d:a7:7f:2f:f9:17:b3:b7:3d: a0:d4:da:4c:9a:ef:e5:d6:02:4f:4b:e5:97:08:45:a1:de:27: a8:c9:4f:36:80:4c:bf:07:11:f5:dc:a5:0d:37:9c:16:25:fd: aa:03:c3:54:b9:bc:30:6b:2d:14:a4:4e:2e:62:8c:99:93:7c: b2:18:cd:c7:48:2b:55:36:0b:d1:6e:8a:39:7d:1c:76:91:0d: 2b:9d:24:91:1b:aa:b1:9a:02:e4:ab:6e:bb:c8:e0:5f:5f:21: 38:66:0d:4b:2f:84:76:15:d9:dc:69:2a:b1:6f:70:a0:ad:a4: 5e:e0:93:84:7f:6d:1b:ab:74:1e:6d:04:6e:8b:df:80:1b:7a: 01:dd:d7:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tzJTTcWDCEdFmK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU4YWI0YzktNjkzMy00OWJmLWI2YjQtZTRkMzkzNWVk YTIyMB4XDTI2MDQzMDE0MDgzOFoXDTI2MDcyOTE0MDgzOFowLzEtMCsGA1UEAxMk YjRlM2FjMzItMDA3My00MWFlLWI3OGQtY2U1MjZmYzBiZWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnqMDUEYpGUpvhtwbwVXBfcCoOYMzmVcLRG1 CZ0Vrt8t3Lak0ED2Fn6fEA+jDL5+yq7F9FYjdk6VR5z5U//yIhfALpOY3epweQT6 mDVcZUFYT8sas9Ax9WeS/ncAz1/NW6j/kw14PXzFrfvtukivM7TgwVtfScjQlLtw iUDYtEQTfQrEVzAhVST21DQbUchXlFtTaUndnk46/4cRTbOEI/0DVlr37Jdrbep+ B8Rvisl+qhNFQF1jwDkKmHCN4kR+tkWPdLew3gZm4MFZEnBnQ6Rn+8qpySJAgpOx ez3SCS2W/e5CWD8iulfbpmj3EtFn78pPJ1o2OJhV70Z5mgFqTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3tYzwNnkTORodA6Q2W8bvqsjOhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNThh YjRjOS02OTMzLTQ5YmYtYjZiNC1lNGQzOTM1ZWRhMjIvMGFlOGQzMzItM2ZiMC0z Y2Q3LWE5ODgtZmExNmJlZjVjODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDU4YWI0YzktNjkzMy00OWJmLWI2 YjQtZTRkMzkzNWVkYTIyL2Q1OGFiNGM5LTY5MzMtNDliZi1iNmI0LWU0ZDM5MzVl ZGEyMi5jcmwwHwYDVR0jBBgwFoAULXN/U+hZd50EmPQizfsac2SEbJ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNThhYjRjOS02OTMzLTQ5YmYtYjZiNC1lNGQz OTM1ZWRhMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOqBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2ZaL9RN/SCsAs6/Dj2x3J7yC4VMEPZfLJytHlEgzDvFlyAQNodotVO hUcVOFko8hgXy/zh4MEuBZ+uDHMMVl1qBxhwXuLjy1VGAzzCAXw00Tv/1cAd965U T6v0FA3CDiQ3nxaRZpv2r6qdnmHl89DKA1AzhF2nfy/5F7O3PaDU2kya7+XWAk9L 5ZcIRaHeJ6jJTzaATL8HEfXcpQ03nBYl/aoDw1S5vDBrLRSkTi5ijJmTfLIYzcdI K1U2C9Fuijl9HHaRDSudJJEbqrGaAuSrbrvI4F9fIThmDUsvhHYV2dxpKrFvcKCt pF7gk4R/bRurdB5tBG6L34AbegHd16k= -----END CERTIFICATE-----Generated at Wed May 13 04:55:01 2026 by rpki-client