$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/6fa801e3-3342-3f1c-a396-6f9201c0d56d.roa File: 6fa801e3-3342-3f1c-a396-6f9201c0d56d.roa (raw, json) Hash identifier: yqkBT2iXywbAq+3qKdcpbLGMSI7ZIR6bQCR63cAi4GA= Subject key identifier: 92:29:ED:90:27:94:0F:32:3E:36:C5:38:21:A9:3A:BE:EE:E5:5E:04 Certificate issuer: /CN=d3c1e47f-2bd9-4e42-a950-0f81e45cd461 Certificate serial: 010D0C9F4328584D8AC539D3FD47047801DE5880 Authority key identifier: F8:E0:54:64:56:2E:06:FC:45:40:3B:F8:F6:1F:52:85:28:DA:22:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/6fa801e3-3342-3f1c-a396-6f9201c0d56d.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 6579 IP address blocks: 192.75.24.0/24 maxlen: 24 192.219.31.0/24 maxlen: 24 208.85.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:39:d3:fd:47:04:78:01:de:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c1e47f-2bd9-4e42-a950-0f81e45cd461 Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=d6ffae84-cd66-4989-b1b4-f38461419442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e4:05:e0:d8:de:c0:1f:07:a0:dc:cb:cb:99: 3e:a1:b6:64:fd:00:29:0c:66:4a:cd:74:4d:41:33: 49:a9:13:b6:64:6c:6d:f4:fa:8d:7a:09:7b:e9:e3: 5b:96:19:35:dc:eb:d2:88:89:0b:fd:77:13:c6:e2: e3:b0:44:a0:31:71:36:e6:59:d3:b2:82:e8:c8:50: 0e:2a:26:75:ca:8a:19:33:d7:e2:ae:dd:d8:77:aa: f0:f9:ca:53:1f:80:dd:16:f6:88:09:e7:cd:ee:a7: c2:81:b1:01:f9:07:ce:a0:6c:56:39:06:48:6d:c7: 07:be:a7:6f:37:3b:4b:a8:5c:f8:42:0f:df:90:b2: 44:e3:49:68:c8:55:db:b9:53:de:4d:58:b1:b4:6d: f0:d9:20:b8:99:27:da:15:1f:bf:7a:52:00:bf:4b: 5d:c2:29:77:60:51:b5:5d:af:6e:83:69:3c:c1:e2: 45:ae:3a:7b:5e:49:f2:b9:bb:28:62:ad:84:c6:7a: 66:29:b9:4d:e5:25:fd:83:1d:cc:c8:cd:32:91:f2: e1:20:c5:26:68:f3:f5:82:48:65:79:22:90:0e:b8: 7d:dc:5d:12:0e:08:f6:36:a6:78:90:b7:e8:96:b5: 9a:ee:5b:5e:17:ea:c9:aa:d0:2f:21:bb:3c:8d:a7: a5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:29:ED:90:27:94:0F:32:3E:36:C5:38:21:A9:3A:BE:EE:E5:5E:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/6fa801e3-3342-3f1c-a396-6f9201c0d56d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl X509v3 Authority Key Identifier: keyid:F8:E0:54:64:56:2E:06:FC:45:40:3B:F8:F6:1F:52:85:28:DA:22:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer sbgp-ipAddrBlock: critical IPv4: 192.75.24.0/24 192.219.31.0/24 208.85.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:65:d1:bb:f3:3e:10:21:f5:bf:c2:c6:a5:4d:7b:2c:a6:2b: e5:76:16:8a:ca:ec:90:b4:df:b0:c0:4c:16:ea:4b:5a:9c:f9: 6d:f3:c3:a5:03:54:cb:04:8e:df:46:da:7d:f2:ec:03:ae:16: 17:30:38:1d:a0:76:ba:64:85:e6:8f:9b:bf:38:e5:21:4a:90: de:de:f7:0c:53:0b:dc:d4:c6:59:07:90:e0:96:3d:75:3f:76: c1:f2:f4:56:56:07:96:e1:e3:2c:d8:db:fa:e6:21:44:23:f9: a9:76:28:2a:85:12:e3:36:b1:ab:9a:2b:15:67:f9:4a:95:ae: da:13:a0:31:27:47:34:07:11:f2:16:13:42:c5:2a:5f:55:c6: cf:8b:25:a7:48:93:73:ed:0a:16:e1:8d:f2:e9:f6:40:8f:cd: bb:64:81:82:92:15:25:eb:82:8d:4a:55:ba:fa:3a:43:a6:2f: 01:11:6d:1e:e2:40:5b:a6:38:4a:01:78:dc:d7:59:9f:1b:d2: df:2c:68:c0:2e:5b:c6:a8:5a:5f:59:0e:15:fa:a8:24:3c:01: fd:b2:23:52:59:f9:26:8c:91:1c:77:70:94:fe:36:f7:56:62: 50:aa:a3:0c:dc:82:7b:3e:e0:fd:f8:d5:8f:37:c1:f5:c2:61: 0e:94:3f:2d -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE2KxTnT/UcEeAHeWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNjMWU0N2YtMmJkOS00ZTQyLWE5NTAtMGY4MWU0NWNk NDYxMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk ZDZmZmFlODQtY2Q2Ni00OTg5LWIxYjQtZjM4NDYxNDE5NDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieQF4NjewB8HoNzLy5k+obZk/QApDGZKzXRN QTNJqRO2ZGxt9PqNegl76eNblhk13OvSiIkL/XcTxuLjsESgMXE25lnTsoLoyFAO KiZ1yooZM9firt3Yd6rw+cpTH4DdFvaICefN7qfCgbEB+QfOoGxWOQZIbccHvqdv NztLqFz4Qg/fkLJE40loyFXbuVPeTVixtG3w2SC4mSfaFR+/elIAv0tdwil3YFG1 Xa9ug2k8weJFrjp7XknyubsoYq2ExnpmKblN5SX9gx3MyM0ykfLhIMUmaPP1gkhl eSKQDrh93F0SDgj2NqZ4kLfolrWa7lteF+rJqtAvIbs8jaelCwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFJIp7ZAnlA8yPjbFOCGpOr7u5V4EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kM2Mx ZTQ3Zi0yYmQ5LTRlNDItYTk1MC0wZjgxZTQ1Y2Q0NjEvNmZhODAxZTMtMzM0Mi0z ZjFjLWEzOTYtNmY5MjAxYzBkNTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDNjMWU0N2YtMmJkOS00ZTQyLWE5 NTAtMGY4MWU0NWNkNDYxL2QzYzFlNDdmLTJiZDktNGU0Mi1hOTUwLTBmODFlNDVj ZDQ2MS5jcmwwHwYDVR0jBBgwFoAU+OBUZFYuBvxFQDv49h9ShSjaIsowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kM2MxZTQ3Zi0yYmQ5LTRlNDItYTk1MC0wZjgx ZTQ1Y2Q0NjEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwEsYAwQA wNsfAwQC0FVQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAExl0bvzPhAh9b/CxqVNeyymK+V2ForK7JC037DA TBbqS1qc+W3zw6UDVMsEjt9G2n3y7AOuFhcwOB2gdrpkheaPm7845SFKkN7e9wxT C9zUxlkHkOCWPXU/dsHy9FZWB5bh4yzY2/rmIUQj+al2KCqFEuM2sauaKxVn+UqV rtoToDEnRzQHEfIWE0LFKl9Vxs+LJadIk3PtChbhjfLp9kCPzbtkgYKSFSXrgo1K Vbr6OkOmLwERbR7iQFumOEoBeNzXWZ8b0t8saMAuW8aoWl9ZDhX6qCQ8Af2yI1JZ +SaMkRx3cJT+NvdWYlCqowzcgns+4P341Y83wfXCYQ6UPy0= -----END CERTIFICATE-----Generated at Wed May 13 06:40:33 2026 by rpki-client