$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/cd00af14-086a-320d-acc3-d521035dec44.roa File: cd00af14-086a-320d-acc3-d521035dec44.roa (raw, json) Hash identifier: 8H4rN279io73iGpXaIOvW1fXIz/d0kWOuKvjFPRMb18= Subject key identifier: D6:DF:7B:6C:08:AD:D4:64:2C:02:BE:20:24:06:27:CE:C7:0C:8E:77 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584D44FA72402D2AD9AB341441A0 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/cd00af14-086a-320d-acc3-d521035dec44.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 36352 IP address blocks: 192.119.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:72:40:2d:2a:d9:ab:34:14:41:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=d458e3cb-e5ea-4311-a216-14e2feb403eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0f:c5:47:5a:34:b0:18:b0:e6:78:94:56:90: de:c1:d0:a1:9d:ab:5a:a1:1f:96:65:ce:ba:b9:ce: 94:e8:00:9a:5b:ff:84:4e:cc:e6:79:18:10:fe:87: 1c:a2:7a:c0:04:ad:6e:40:54:87:bb:88:1e:e0:94: 30:bd:2b:70:0a:a7:84:76:74:fa:0e:8f:06:2d:36: 21:ea:d9:04:25:64:f0:87:2a:14:11:98:48:d4:d5: 2d:3f:ea:a6:d7:bc:8b:4a:1c:6a:18:e7:58:40:bf: d9:a7:04:27:58:09:13:8b:20:38:91:c1:6a:e6:69: 78:26:01:bd:44:8d:7b:57:ed:17:6d:c4:82:80:9f: 16:b2:2f:c5:53:bb:34:78:a1:a8:ec:28:67:74:1f: 65:e3:ca:0a:36:3c:e7:95:d6:a7:5f:d3:63:89:0b: c3:32:98:ce:bb:4b:df:b1:4a:d6:f5:3b:e6:3a:6e: 03:6a:b9:ec:8a:59:e0:a2:fd:b1:7d:88:09:26:e5: 45:2f:dd:de:ac:7e:ff:a7:6a:77:23:93:99:24:32: 45:a3:a2:4c:ae:ed:85:df:1c:f0:25:c4:38:24:6f: 19:cb:74:48:9d:cc:54:4b:60:42:64:9c:f8:4e:b6: d0:d1:9d:b7:6d:95:78:8d:bf:cd:a4:b1:5f:ff:20: 2f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:DF:7B:6C:08:AD:D4:64:2C:02:BE:20:24:06:27:CE:C7:0C:8E:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/cd00af14-086a-320d-acc3-d521035dec44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 192.119.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:e1:9b:a1:77:b8:1d:f6:c6:75:6c:19:56:4a:cb:09:27:da: b3:42:72:88:da:29:7c:06:2c:79:27:4b:ac:33:e5:03:56:42: 34:4c:51:1f:9f:b7:fd:01:93:68:28:c6:e2:45:9a:07:b2:4e: 0e:0e:b9:22:28:06:1d:cf:5d:cb:91:07:b1:9e:ff:6e:90:27: 78:c8:83:98:ce:ff:5f:c5:98:ec:59:9e:d1:69:ff:3a:b3:17: 77:41:bf:26:cc:a6:4d:3e:c8:d7:d7:65:d2:8f:e5:55:af:74: c1:0e:3a:42:d6:45:e7:c9:89:ab:09:b6:f4:f4:a3:b1:10:a0: 04:57:f7:be:8d:c9:a7:a5:a4:f3:be:43:e9:d2:a4:37:3a:50: 06:7f:91:50:26:f1:a5:b6:5c:63:8a:ae:7b:e5:1a:5b:8d:96: 70:d8:c9:06:4c:08:9f:99:04:a9:42:04:9d:1e:53:26:3f:a8: a3:13:fb:3e:65:7b:c6:c2:94:91:fe:03:84:e1:92:cc:60:8a: af:82:48:b2:b1:89:eb:3d:9e:a3:8f:06:06:cd:ac:b4:85:72: 1a:71:8d:01:b6:5b:63:f0:c6:bf:8c:09:c1:d6:b9:5d:10:06: 05:3e:a4:d8:49:d1:c8:9a:9c:1b:35:ac:77:aa:63:17:c2:04: 28:b2:71:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+nJALSrZqzQUQaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ZDQ1OGUzY2ItZTVlYS00MzExLWEyMTYtMTRlMmZlYjQwM2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1A/FR1o0sBiw5niUVpDewdChnataoR+WZc66 uc6U6ACaW/+ETszmeRgQ/occonrABK1uQFSHu4ge4JQwvStwCqeEdnT6Do8GLTYh 6tkEJWTwhyoUEZhI1NUtP+qm17yLShxqGOdYQL/ZpwQnWAkTiyA4kcFq5ml4JgG9 RI17V+0XbcSCgJ8Wsi/FU7s0eKGo7ChndB9l48oKNjznldanX9NjiQvDMpjOu0vf sUrW9TvmOm4Darnsilngov2xfYgJJuVFL93erH7/p2p3I5OZJDJFo6JMru2F3xzw JcQ4JG8Zy3RIncxUS2BCZJz4TrbQ0Z23bZV4jb/NpLFf/yAviQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbfe2wIrdRkLAK+ICQGJ87HDI53MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvY2QwMGFmMTQtMDg2YS0z MjBkLWFjYzMtZDUyMTAzNWRlYzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwHeMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjhm6F3uB32xnVsGVZKywkn2rNCcojaKXwGLHknS6wz5QNWQjRMUR+f t/0Bk2goxuJFmgeyTg4OuSIoBh3PXcuRB7Ge/26QJ3jIg5jO/1/FmOxZntFp/zqz F3dBvybMpk0+yNfXZdKP5VWvdMEOOkLWRefJiasJtvT0o7EQoARX976NyaelpPO+ Q+nSpDc6UAZ/kVAm8aW2XGOKrnvlGluNlnDYyQZMCJ+ZBKlCBJ0eUyY/qKMT+z5l e8bClJH+A4Thksxgiq+CSLKxies9nqOPBgbNrLSFchpxjQG2W2Pwxr+MCcHWuV0Q BgU+pNhJ0cianBs1rHeqYxfCBCiycaE= -----END CERTIFICATE-----Generated at Thu Mar 26 17:24:16 2026 by rpki-client