$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/121123d8-f74f-33d5-8776-bedc2864efb9.roa File: 121123d8-f74f-33d5-8776-bedc2864efb9.roa (raw, json) Hash identifier: ym9MGno+WlkSuXd32uoTEy/0mFm445hb1UbgWmDLqOI= Subject key identifier: CB:85:FF:0D:A5:2A:1D:4C:83:85:39:6D:7B:AC:37:F0:AD:B7:33:27 Certificate issuer: /CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc Certificate serial: 010D0C9F4328584D0D426768AB40F89C920FD270 Authority key identifier: 56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/121123d8-f74f-33d5-8776-bedc2864efb9.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 10497 IP address blocks: 192.86.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:67:68:ab:40:f8:9c:92:0f:d2:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=86bd2b44-56a0-49c4-b60c-33bc27b63b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:29:9c:69:c5:70:3c:58:29:65:91:a1:01:8b: 00:c2:96:92:b4:60:32:ff:18:8b:d2:4a:89:70:9b: cb:a9:19:84:0e:30:32:ef:f8:12:c8:32:50:a1:70: 41:d4:95:45:5a:9b:04:55:fe:bb:6c:dc:04:f0:7a: fe:ae:10:43:f6:1c:a1:fa:8e:ca:c3:de:31:05:5b: 06:e9:eb:2c:24:5d:b1:a9:4c:63:28:63:30:68:98: 45:2b:a0:33:5f:c8:17:a4:f6:48:cd:13:5d:15:43: e4:ba:c3:49:72:ad:93:c4:40:75:6e:8b:eb:59:aa: 20:60:8b:e3:c8:a4:83:84:73:33:a9:5b:89:2a:6b: 0e:c7:0f:92:c0:73:88:86:08:b4:cc:5e:70:cd:a0: b9:2e:fc:53:42:cf:49:62:fd:27:fc:55:64:16:ab: 59:a7:74:97:d1:b4:81:f9:3b:fd:c8:6c:00:81:3e: f3:34:49:1d:2e:1c:6b:31:67:02:d6:7e:da:9b:c6: f9:42:e1:e1:5e:e3:9f:af:48:a9:cc:8e:ef:31:06: a1:a5:36:63:39:a7:f6:60:d2:7e:ef:d9:b7:ec:e4: 04:b2:46:b0:fa:5d:33:d8:bf:4a:03:07:c1:00:4e: 07:1c:d1:02:73:5b:06:4d:12:c1:13:82:64:f9:00: 2e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:85:FF:0D:A5:2A:1D:4C:83:85:39:6D:7B:AC:37:F0:AD:B7:33:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/121123d8-f74f-33d5-8776-bedc2864efb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl X509v3 Authority Key Identifier: keyid:56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer sbgp-ipAddrBlock: critical IPv4: 192.86.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:74:ee:bd:5b:7b:32:14:88:bc:38:34:74:14:9a:24:04:59: 97:c2:c8:68:8c:38:f2:78:df:67:23:40:1b:ef:ed:63:4e:28: b4:ee:84:6b:34:55:11:d7:5d:32:c5:7b:52:38:22:8a:a2:35: 46:ef:33:8a:65:e6:36:33:1f:ca:2b:9d:ed:c5:32:f7:f7:06: d7:16:b6:09:f0:27:bb:1c:b7:0d:ae:3d:83:fb:24:05:91:62: c0:09:28:9e:17:a4:16:0c:bd:4f:23:37:25:40:1d:af:07:6b: 93:22:14:fc:e8:13:6d:c8:fa:47:71:f2:13:b2:4c:d5:5e:53: 4d:41:0c:ee:a8:de:af:6c:53:ff:6c:2f:62:df:da:9d:58:39: 4d:60:a0:27:07:db:ac:84:47:be:44:4c:e9:b4:89:15:2c:44: 62:1b:60:73:93:e0:68:31:89:55:07:83:5f:58:52:50:9a:6c: cb:fc:87:bd:aa:0f:23:35:8f:20:a2:e3:07:53:97:da:2a:90: 5d:a5:6e:15:31:10:07:c7:48:cc:1a:5c:20:bd:70:3b:b7:fe: 68:e0:d5:d4:d8:c8:d4:37:74:72:2e:f2:ef:c9:67:1d:81:42: ab:04:33:ba:66:b9:be:d6:01:b3:92:fd:87:9f:c3:f1:ff:fb: 4e:31:4b:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQmdoq0D4nJIP0nAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I2MzVmZGQtODFhNy00YzVkLThmOTAtOWU3NTEzYjNk Y2RjMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk ODZiZDJiNDQtNTZhMC00OWM0LWI2MGMtMzNiYzI3YjYzYjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsymcacVwPFgpZZGhAYsAwpaStGAy/xiL0kqJ cJvLqRmEDjAy7/gSyDJQoXBB1JVFWpsEVf67bNwE8Hr+rhBD9hyh+o7Kw94xBVsG 6essJF2xqUxjKGMwaJhFK6AzX8gXpPZIzRNdFUPkusNJcq2TxEB1bovrWaogYIvj yKSDhHMzqVuJKmsOxw+SwHOIhgi0zF5wzaC5LvxTQs9JYv0n/FVkFqtZp3SX0bSB +Tv9yGwAgT7zNEkdLhxrMWcC1n7am8b5QuHhXuOfr0ipzI7vMQahpTZjOaf2YNJ+ 79m37OQEskaw+l0z2L9KAwfBAE4HHNECc1sGTRLBE4Jk+QAuAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMuF/w2lKh1Mg4U5bXusN/CttzMnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYjYz NWZkZC04MWE3LTRjNWQtOGY5MC05ZTc1MTNiM2RjZGMvMTIxMTIzZDgtZjc0Zi0z M2Q1LTg3NzYtYmVkYzI4NjRlZmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2I2MzVmZGQtODFhNy00YzVkLThm OTAtOWU3NTEzYjNkY2RjLzNiNjM1ZmRkLTgxYTctNGM1ZC04ZjkwLTllNzUxM2Iz ZGNkYy5jcmwwHwYDVR0jBBgwFoAUVjRw2StghbGnfKCXfaV6HbgnVAUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYjYzNWZkZC04MWE3LTRjNWQtOGY5MC05ZTc1 MTNiM2RjZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFZkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB507r1bezIUiLw4NHQUmiQEWZfCyGiMOPJ432cjQBvv7WNOKLTuhGs0 VRHXXTLFe1I4IoqiNUbvM4pl5jYzH8orne3FMvf3BtcWtgnwJ7sctw2uPYP7JAWR YsAJKJ4XpBYMvU8jNyVAHa8Ha5MiFPzoE23I+kdx8hOyTNVeU01BDO6o3q9sU/9s L2Lf2p1YOU1goCcH26yER75ETOm0iRUsRGIbYHOT4GgxiVUHg19YUlCabMv8h72q DyM1jyCi4wdTl9oqkF2lbhUxEAfHSMwaXCC9cDu3/mjg1dTYyNQ3dHIu8u/JZx2B QqsEM7pmub7WAbOS/Yefw/H/+04xSxQ= -----END CERTIFICATE-----Generated at Thu Mar 26 23:18:25 2026 by rpki-client