$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/4ff2818a-7e07-3796-b6a7-ef39d891bdf9.roa File: 4ff2818a-7e07-3796-b6a7-ef39d891bdf9.roa (raw, json) Hash identifier: guokI7iCPlPM+Cds3kOHqNeV4geZxDytiOJVTKS70Lg= Subject key identifier: 7B:A4:04:C2:13:CC:8E:AA:43:3A:95:75:B6:AD:26:14:C3:68:09:76 Certificate issuer: /CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b Certificate serial: 010D0C9F4328584D98BAAA1260A92E480D1CCE40 Authority key identifier: 83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/4ff2818a-7e07-3796-b6a7-ef39d891bdf9.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 30045 IP address blocks: 192.219.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:aa:12:60:a9:2e:48:0d:1c:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=c65bf37f-14db-4a48-9c93-4064a91cbf21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:96:38:8d:6a:52:91:ad:f5:11:12:c9:19:c8: 1b:30:a5:c5:f8:9e:7d:06:b4:72:9d:60:6a:28:49: b4:d1:35:d9:ea:77:44:3c:36:b9:39:35:ef:3f:e6: 9b:9c:2f:6a:61:17:28:ad:aa:82:ba:ef:25:f4:ad: 6c:53:b3:f2:0c:44:40:41:b7:66:49:d1:34:72:92: 28:02:32:be:8a:be:bd:69:f5:5c:55:ba:19:63:a9: d9:6c:73:03:92:04:4f:e1:3a:54:68:02:62:55:5b: a7:49:d1:cb:ab:59:4a:ba:28:39:e6:d2:bf:d8:04: 96:81:e6:de:cd:08:60:4e:0d:f6:08:7f:c6:12:51: 15:5e:17:07:6f:d8:c2:15:ed:af:eb:a3:05:f4:98: 0c:aa:11:ab:e6:a6:ff:3f:3a:0e:e9:aa:3b:42:40: 90:6e:90:09:45:35:4f:b8:55:5f:a0:c7:31:d0:3f: 5e:eb:02:aa:0c:5b:01:e6:3e:a5:d2:67:20:90:25: 10:e4:cc:db:43:15:11:80:52:29:48:f7:18:24:f9: 72:ba:7d:06:d3:79:86:3a:e0:81:a9:dc:a0:f9:16: 65:48:1c:f1:25:58:e3:06:a0:7f:df:6d:1e:df:1e: 94:40:37:b8:1b:54:c7:a8:4a:bc:e7:d8:2f:71:89: da:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A4:04:C2:13:CC:8E:AA:43:3A:95:75:B6:AD:26:14:C3:68:09:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/4ff2818a-7e07-3796-b6a7-ef39d891bdf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl X509v3 Authority Key Identifier: keyid:83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer sbgp-ipAddrBlock: critical IPv4: 192.219.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:17:f6:81:05:5a:0a:ae:84:dd:01:0e:50:0e:9a:01:d3:24: 2f:42:4d:2c:ae:be:20:fe:38:4c:56:5c:6a:09:c5:90:af:3e: 0d:72:d3:44:e4:fa:f8:c3:d2:93:51:71:e9:a2:c7:10:4a:32: 04:97:e4:43:8b:68:92:37:96:77:ae:8b:67:26:40:82:93:b3: 8f:a3:af:84:d6:49:22:87:c4:28:26:ad:0b:65:e5:ac:fe:d4: 94:98:27:08:c3:d6:0f:fd:86:52:b2:6f:1a:44:10:39:dc:3b: 87:b4:89:b4:7a:d7:55:6e:b7:53:cd:00:5c:5c:c5:5c:48:da: df:87:f8:2a:f6:5d:b5:10:75:cc:3f:ec:ea:59:04:fb:af:67: 62:84:7b:f5:55:a0:0c:bd:60:88:e8:e6:28:92:50:95:57:ce: 30:16:3d:bc:8c:44:2a:26:44:d0:cf:92:96:13:70:2f:63:2e: e8:2c:d2:1d:9a:d4:56:41:b4:58:65:60:f4:8f:62:c0:e9:4f: 0f:c5:15:83:55:07:44:cb:d2:b5:2d:ae:fa:18:fc:ea:34:09: 03:9a:ca:44:31:97:bb:20:bd:9f:23:f8:55:70:c0:dc:9e:b8: fa:46:21:52:f8:3f:0c:95:40:0b:c5:b1:e2:28:28:8a:11:68: f2:52:a7:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YuqoSYKkuSA0czkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFjMWE1NmItZWEzMy00YmQ2LTlkM2UtMDA4OTZhOTFk YjZiMB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk YzY1YmYzN2YtMTRkYi00YTQ4LTljOTMtNDA2NGE5MWNiZjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZY4jWpSka31ERLJGcgbMKXF+J59BrRynWBq KEm00TXZ6ndEPDa5OTXvP+abnC9qYRcoraqCuu8l9K1sU7PyDERAQbdmSdE0cpIo AjK+ir69afVcVboZY6nZbHMDkgRP4TpUaAJiVVunSdHLq1lKuig55tK/2ASWgebe zQhgTg32CH/GElEVXhcHb9jCFe2v66MF9JgMqhGr5qb/PzoO6ao7QkCQbpAJRTVP uFVfoMcx0D9e6wKqDFsB5j6l0mcgkCUQ5MzbQxURgFIpSPcYJPlyun0G03mGOuCB qdyg+RZlSBzxJVjjBqB/320e3x6UQDe4G1THqEq859gvcYnaDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHukBMITzI6qQzqVdbatJhTDaAl2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YWMx YTU2Yi1lYTMzLTRiZDYtOWQzZS0wMDg5NmE5MWRiNmIvNGZmMjgxOGEtN2UwNy0z Nzk2LWI2YTctZWYzOWQ4OTFiZGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGFjMWE1NmItZWEzMy00YmQ2LTlk M2UtMDA4OTZhOTFkYjZiLzhhYzFhNTZiLWVhMzMtNGJkNi05ZDNlLTAwODk2YTkx ZGI2Yi5jcmwwHwYDVR0jBBgwFoAUg3U6Yyir4o99wKc7TDozymMHEyUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YWMxYTU2Yi1lYTMzLTRiZDYtOWQzZS0wMDg5 NmE5MWRiNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwNsEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4X9oEFWgquhN0BDlAOmgHTJC9CTSyuviD+OExWXGoJxZCvPg1y00Tk +vjD0pNRcemixxBKMgSX5EOLaJI3lneui2cmQIKTs4+jr4TWSSKHxCgmrQtl5az+ 1JSYJwjD1g/9hlKybxpEEDncO4e0ibR611Vut1PNAFxcxVxI2t+H+Cr2XbUQdcw/ 7OpZBPuvZ2KEe/VVoAy9YIjo5iiSUJVXzjAWPbyMRComRNDPkpYTcC9jLugs0h2a 1FZBtFhlYPSPYsDpTw/FFYNVB0TL0rUtrvoY/Oo0CQOaykQxl7sgvZ8j+FVwwNye uPpGIVL4PwyVQAvFseIoKIoRaPJSp+k= -----END CERTIFICATE-----Generated at Wed May 13 07:43:09 2026 by rpki-client