$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/57fcb634-1767-35bd-b179-1940002e85af.roa File: 57fcb634-1767-35bd-b179-1940002e85af.roa (raw, json) Hash identifier: mAETy/RjFsHXraeLdZ5IGTx4Y+ZHviQcwFbb9XxcY9k= Subject key identifier: C2:5C:35:92:A3:FE:61:A5:8C:1C:B1:F0:91:AA:15:2E:65:41:6B:6B Certificate issuer: /CN=601d8cf8-4cca-4295-8f3b-916dcd50b673 Certificate serial: 010D0C9F4328584D24DF7B15EFD551899AC4DA80 Authority key identifier: B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/57fcb634-1767-35bd-b179-1940002e85af.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 26037 IP address blocks: 192.139.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:7b:15:ef:d5:51:89:9a:c4:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601d8cf8-4cca-4295-8f3b-916dcd50b673 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=01af406e-66c6-43de-a237-d53654ae9785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cf:6f:1b:c1:89:99:d9:1d:16:b2:75:54:0d: 17:e9:00:67:10:8d:f7:82:f4:c2:29:fc:09:11:d9: f6:6f:d5:7c:b7:d9:fe:5f:74:93:cd:a3:60:3f:aa: 3c:1d:47:9a:2f:29:55:92:8e:19:92:35:22:5a:77: 45:20:6c:0b:2e:44:78:62:13:18:81:04:1c:3d:5d: 7b:31:d8:c0:0d:a9:a0:40:ab:5e:9b:2c:e2:bc:35: c2:7a:c0:0e:f2:74:db:af:ab:95:08:1b:b6:93:27: 88:ee:0a:cf:56:12:a1:eb:81:95:e0:b4:8b:6c:d4: 00:23:c2:c0:38:dd:6f:fe:46:fd:1e:59:bf:09:50: b9:3e:b9:b8:a0:5e:da:b3:9f:27:02:24:e4:6d:dc: 34:8b:62:40:0e:a9:0b:30:19:95:44:dc:0b:37:f0: 4e:ba:bf:72:62:3c:71:41:fb:e6:46:a9:fa:df:43: f7:6c:b4:28:b8:86:3b:c5:9d:8e:ba:43:e8:4a:09: e5:b6:8f:0b:b3:9c:4b:7e:f9:c1:01:61:42:33:a5: 93:69:a5:3d:9c:f1:1d:ac:46:05:95:2b:f1:55:5c: c1:da:8b:31:fd:fd:f7:21:85:34:ce:d0:4e:d3:7d: 43:61:01:e9:2c:6b:0f:2d:38:5a:b9:cf:89:8a:e8: 2b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:5C:35:92:A3:FE:61:A5:8C:1C:B1:F0:91:AA:15:2E:65:41:6B:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/57fcb634-1767-35bd-b179-1940002e85af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.crl X509v3 Authority Key Identifier: keyid:B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer sbgp-ipAddrBlock: critical IPv4: 192.139.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:03:15:ba:26:50:dc:f7:a0:07:89:92:5f:9a:8a:27:0c:37: 9a:cb:43:18:b0:0b:0d:01:40:30:30:f2:b0:69:7b:e1:25:27: e9:74:04:4d:4b:56:f7:0a:1c:b0:a8:55:4c:3a:21:5d:2b:d1: ce:f0:c3:25:c6:6c:a3:00:7a:af:42:f2:8b:67:4b:82:f6:4a: 62:7f:dc:a5:86:e2:61:64:75:49:3e:0c:bd:44:4e:3c:fa:10: a2:3c:e1:63:fe:ad:03:b7:48:94:08:5d:1f:3c:f7:23:c1:5b: cb:8e:75:8f:cc:8a:b1:e7:3f:ee:a1:7b:bc:99:0f:94:c5:a4: cb:b4:5a:e8:7c:bb:a9:ce:d7:04:8b:0c:08:74:bc:5a:1a:34: d4:d4:cc:6a:c9:16:b2:b2:f0:ef:2d:e6:dc:b9:21:2c:1c:65: 67:ca:44:13:fd:45:57:7a:56:84:66:96:60:75:a8:cf:8f:10: db:06:2a:ba:0c:4e:40:58:0e:69:fc:73:67:98:49:37:99:6a: d8:a8:dc:8f:88:be:5e:c4:92:31:c2:a3:e7:9e:2b:b4:1e:76: 50:60:45:9d:e1:28:e5:c1:ff:e1:3f:a1:53:3b:b5:1b:80:f2: ce:66:67:6c:27:09:61:85:16:8b:92:c6:0e:b4:25:78:2b:4a: 92:cc:34:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k33sV79VRiZrE2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZDhjZjgtNGNjYS00Mjk1LThmM2ItOTE2ZGNkNTBi NjczMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MDFhZjQwNmUtNjZjNi00M2RlLWEyMzctZDUzNjU0YWU5Nzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl89vG8GJmdkdFrJ1VA0X6QBnEI33gvTCKfwJ Edn2b9V8t9n+X3STzaNgP6o8HUeaLylVko4ZkjUiWndFIGwLLkR4YhMYgQQcPV17 MdjADamgQKtemyzivDXCesAO8nTbr6uVCBu2kyeI7grPVhKh64GV4LSLbNQAI8LA ON1v/kb9Hlm/CVC5Prm4oF7as58nAiTkbdw0i2JADqkLMBmVRNwLN/BOur9yYjxx QfvmRqn630P3bLQouIY7xZ2OukPoSgnlto8Ls5xLfvnBAWFCM6WTaaU9nPEdrEYF lSvxVVzB2osx/f33IYU0ztBO031DYQHpLGsPLThauc+JiugrqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJcNZKj/mGljByx8JGqFS5lQWtrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MDFk OGNmOC00Y2NhLTQyOTUtOGYzYi05MTZkY2Q1MGI2NzMvNTdmY2I2MzQtMTc2Ny0z NWJkLWIxNzktMTk0MDAwMmU4NWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjAxZDhjZjgtNGNjYS00Mjk1LThm M2ItOTE2ZGNkNTBiNjczLzYwMWQ4Y2Y4LTRjY2EtNDI5NS04ZjNiLTkxNmRjZDUw YjY3My5jcmwwHwYDVR0jBBgwFoAUtfu5dULYLw99YW7jd6Gh7U33ILswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MDFkOGNmOC00Y2NhLTQyOTUtOGYzYi05MTZk Y2Q1MGI2NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIskMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQDFbomUNz3oAeJkl+aiicMN5rLQxiwCw0BQDAw8rBpe+ElJ+l0BE1L VvcKHLCoVUw6IV0r0c7wwyXGbKMAeq9C8otnS4L2SmJ/3KWG4mFkdUk+DL1ETjz6 EKI84WP+rQO3SJQIXR889yPBW8uOdY/MirHnP+6he7yZD5TFpMu0Wuh8u6nO1wSL DAh0vFoaNNTUzGrJFrKy8O8t5ty5ISwcZWfKRBP9RVd6VoRmlmB1qM+PENsGKroM TkBYDmn8c2eYSTeZatio3I+Ivl7EkjHCo+eeK7QedlBgRZ3hKOXB/+E/oVM7tRuA 8s5mZ2wnCWGFFouSxg60JXgrSpLMNCc= -----END CERTIFICATE-----Generated at Thu Mar 26 20:14:35 2026 by rpki-client