$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/8a40744a-ecf1-3610-b9d6-9da7da8707a0.roa File: 8a40744a-ecf1-3610-b9d6-9da7da8707a0.roa (raw, json) Hash identifier: WOpoloxSmoYNbRZKJnmBgc/wbYbnhwJZRzrsIZ5DcKs= Subject key identifier: E7:D8:79:54:C2:DC:38:16:12:EC:5A:89:3D:D8:A2:FE:E5:60:8F:97 Certificate issuer: /CN=c501b1e0-0018-475e-9d4b-5090237060ae Certificate serial: 010D0C9F4328584D237A6A69CD257E54FAB2E24C Authority key identifier: CB:88:97:9D:A7:79:1F:C4:E2:01:65:FC:6C:5D:DC:10:BB:BA:AC:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/8a40744a-ecf1-3610-b9d6-9da7da8707a0.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 54840 IP address blocks: 192.30.212.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:6a:69:cd:25:7e:54:fa:b2:e2:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c501b1e0-0018-475e-9d4b-5090237060ae Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=a0cfc525-d27e-42e1-bbd5-3c88c907a3da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:89:59:d5:89:64:67:66:d5:a7:97:1a:bd:d6: 05:0c:ec:2a:6c:d3:cc:e6:01:55:da:5d:ed:4b:c1: 83:13:8c:33:6b:56:2b:a1:0e:b5:e2:30:ee:4d:7e: 2a:1a:3d:88:62:6e:ac:d7:8d:12:41:cf:8c:65:a6: 7b:74:3b:f3:71:ca:bb:07:61:7c:2e:7a:9a:5c:78: 4a:a1:7a:81:31:2e:af:ff:30:8d:b2:8b:74:a4:2b: d9:2e:36:6c:9e:e5:c3:da:df:ec:f9:2b:13:1c:5d: 68:15:65:61:78:74:70:cc:b5:0d:81:60:9d:c5:46: e3:bf:85:15:f1:2f:15:24:8c:e1:cc:ef:75:75:fa: 8e:82:a9:fc:28:46:b2:91:83:cf:74:fe:d9:43:74: 96:41:a6:b5:85:ab:e6:b4:88:04:7c:4d:f9:97:cc: e6:d6:8b:59:b5:53:73:18:6e:06:54:80:38:5e:75: 9c:cc:bb:9f:60:b9:ec:18:fa:c3:65:9f:c3:7c:a3: b5:79:e4:e5:d5:78:0d:b9:7e:a2:a8:05:ee:4b:79: 1b:3c:bf:e2:82:90:a7:4e:02:b5:76:44:77:dc:38: 94:47:8e:f0:bb:c8:d2:27:23:e4:f6:26:1c:36:34: cd:31:42:98:15:4e:61:da:2d:8e:b5:2b:5c:51:93: 3b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D8:79:54:C2:DC:38:16:12:EC:5A:89:3D:D8:A2:FE:E5:60:8F:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/8a40744a-ecf1-3610-b9d6-9da7da8707a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.crl X509v3 Authority Key Identifier: keyid:CB:88:97:9D:A7:79:1F:C4:E2:01:65:FC:6C:5D:DC:10:BB:BA:AC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer sbgp-ipAddrBlock: critical IPv4: 192.30.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:28:f6:32:fb:a6:1f:a6:8f:02:cc:40:d2:a7:71:e9:f2:36: c2:d2:eb:73:94:c9:2f:77:5d:e2:66:62:f2:4c:d2:f9:a9:06: 22:fe:7b:f8:5c:99:ae:a3:fd:15:1d:79:d9:56:ff:2d:54:3b: 25:89:f6:5a:f3:8a:64:83:36:a1:51:a0:db:e5:27:5c:12:16: 44:3f:cd:1c:8e:25:79:b2:ea:d1:90:cd:0c:b3:82:d5:0d:5a: bc:b6:55:58:aa:55:c7:69:6e:e2:39:26:a3:d0:4f:e5:88:c3: 40:56:ff:32:24:22:73:3a:ba:f6:b4:ba:83:42:41:80:f0:23: 28:c9:11:94:ff:06:7e:b5:f8:75:ae:17:3f:e6:c5:2f:6a:59: 9d:1f:16:6f:5c:3c:1c:52:6a:eb:31:d9:02:8c:da:d6:0c:6b: c1:c6:d2:e4:fe:03:8b:8b:d0:2b:20:8a:60:48:be:57:69:8f: 92:76:f6:ed:9b:bb:31:eb:29:a6:18:b2:dc:62:68:17:14:b4: b7:55:a3:9a:20:a2:82:10:c3:a3:d6:bb:e7:46:4d:2a:92:48: bf:6e:d0:30:be:02:b1:b4:1f:21:40:bd:a3:d6:02:39:f3:9f: 0d:9f:99:50:32:e4:ab:7c:c0:73:32:cd:56:bc:7b:15:66:fc: 23:e9:61:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jemppzSV+VPqy4kwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzUwMWIxZTAtMDAxOC00NzVlLTlkNGItNTA5MDIzNzA2 MGFlMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YTBjZmM1MjUtZDI3ZS00MmUxLWJiZDUtM2M4OGM5MDdhM2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YlZ1YlkZ2bVp5cavdYFDOwqbNPM5gFV2l3t S8GDE4wza1YroQ614jDuTX4qGj2IYm6s140SQc+MZaZ7dDvzccq7B2F8LnqaXHhK oXqBMS6v/zCNsot0pCvZLjZsnuXD2t/s+SsTHF1oFWVheHRwzLUNgWCdxUbjv4UV 8S8VJIzhzO91dfqOgqn8KEaykYPPdP7ZQ3SWQaa1havmtIgEfE35l8zm1otZtVNz GG4GVIA4XnWczLufYLnsGPrDZZ/DfKO1eeTl1XgNuX6iqAXuS3kbPL/igpCnTgK1 dkR33DiUR47wu8jSJyPk9iYcNjTNMUKYFU5h2i2OtStcUZM7SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfYeVTC3DgWEuxaiT3Yov7lYI+XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNTAx YjFlMC0wMDE4LTQ3NWUtOWQ0Yi01MDkwMjM3MDYwYWUvOGE0MDc0NGEtZWNmMS0z NjEwLWI5ZDYtOWRhN2RhODcwN2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzUwMWIxZTAtMDAxOC00NzVlLTlk NGItNTA5MDIzNzA2MGFlL2M1MDFiMWUwLTAwMTgtNDc1ZS05ZDRiLTUwOTAyMzcw NjBhZS5jcmwwHwYDVR0jBBgwFoAUy4iXnad5H8TiAWX8bF3cELu6rMUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNTAxYjFlMC0wMDE4LTQ3NWUtOWQ0Yi01MDkw MjM3MDYwYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwB7UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHso9jL7ph+mjwLMQNKncenyNsLS63OUyS93XeJmYvJM0vmpBiL+e/hc ma6j/RUdedlW/y1UOyWJ9lrzimSDNqFRoNvlJ1wSFkQ/zRyOJXmy6tGQzQyzgtUN Wry2VViqVcdpbuI5JqPQT+WIw0BW/zIkInM6uva0uoNCQYDwIyjJEZT/Bn61+HWu Fz/mxS9qWZ0fFm9cPBxSausx2QKM2tYMa8HG0uT+A4uL0CsgimBIvldpj5J29u2b uzHrKaYYstxiaBcUtLdVo5ogooIQw6PWu+dGTSqSSL9u0DC+ArG0HyFAvaPWAjnz nw2fmVAy5Kt8wHMyzVa8exVm/CPpYYI= -----END CERTIFICATE-----Generated at Thu Mar 26 20:15:35 2026 by rpki-client