$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/9a0ffdae-3a90-3ee2-9e29-7c7ee232240a.roa File: 9a0ffdae-3a90-3ee2-9e29-7c7ee232240a.roa (raw, json) Hash identifier: yBMmBqLz95xW07ar0ZvBOhQnAn/OYZIjmnYFTBnVEGE= Subject key identifier: 41:86:4A:01:75:95:AC:50:FF:45:26:F0:1A:01:56:75:A1:3A:C7:02 Certificate issuer: /CN=c501b1e0-0018-475e-9d4b-5090237060ae Certificate serial: 010D0C9F4328584D237A6A7AA8359AD81E1ABB80 Authority key identifier: CB:88:97:9D:A7:79:1F:C4:E2:01:65:FC:6C:5D:DC:10:BB:BA:AC:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/9a0ffdae-3a90-3ee2-9e29-7c7ee232240a.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 54840 IP address blocks: 192.30.214.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:6a:7a:a8:35:9a:d8:1e:1a:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c501b1e0-0018-475e-9d4b-5090237060ae Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=a88d781e-21c8-4f95-9d23-e75b7e2f4aea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0e:9d:1d:70:48:7c:f9:8f:50:5e:f7:ed:5a: 66:ba:6a:b7:f6:fb:20:f7:d9:17:84:ce:03:61:22: e3:05:0e:35:ae:20:e9:c3:fe:d1:3d:ac:a4:e5:3c: 47:26:07:fa:4b:12:0c:70:e6:e1:7d:15:a6:11:10: f3:8f:d9:3e:94:2a:43:a9:d2:3e:33:ea:76:e7:b1: f4:2a:1f:3e:77:62:c5:5b:26:98:52:73:86:c6:b2: b9:65:76:f7:47:e6:4b:10:93:ee:80:fa:89:30:e3: 20:64:d7:98:b8:f0:31:72:02:97:76:c1:6b:b9:61: c3:45:82:54:81:07:b6:a1:58:0b:4b:8f:90:da:b3: dd:9b:06:04:1d:15:af:16:04:dd:75:81:ef:39:1c: 53:08:19:c4:53:00:f2:67:46:95:13:9b:f0:5d:49: ad:06:c4:c8:8f:a6:39:1b:99:73:cd:3f:cd:64:ae: c0:e5:32:a1:f2:7b:a4:d0:4b:0f:ab:94:06:e7:3a: fd:1b:17:f0:18:6f:9e:e2:2a:f5:1d:6a:7f:94:b6: a3:e9:8d:00:f8:62:e1:51:51:fc:9f:47:0e:0b:df: 5d:2c:48:fe:07:53:9a:17:18:2b:7d:d2:09:7f:81: 24:12:24:f9:ff:ac:21:08:53:8e:b8:12:a4:72:f1: 9c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:86:4A:01:75:95:AC:50:FF:45:26:F0:1A:01:56:75:A1:3A:C7:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/9a0ffdae-3a90-3ee2-9e29-7c7ee232240a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.crl X509v3 Authority Key Identifier: keyid:CB:88:97:9D:A7:79:1F:C4:E2:01:65:FC:6C:5D:DC:10:BB:BA:AC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer sbgp-ipAddrBlock: critical IPv4: 192.30.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:a3:ca:7a:f2:b7:c7:9d:5e:3e:46:ed:f2:ac:15:79:d0:d9: 41:13:a0:b9:4d:3c:6c:36:43:8f:87:83:8c:81:8d:23:ec:ef: 2d:4f:ae:61:ec:66:41:f1:46:6d:ab:9d:1c:84:79:e8:37:ff: f3:d0:0a:ea:b1:a6:ea:88:c7:b8:17:66:74:03:cc:f7:49:85: 0d:de:75:a0:8e:2f:62:83:e2:eb:1e:11:7a:fc:35:c1:7a:c8: b3:7a:44:12:49:34:18:28:99:96:f0:43:fa:0d:f8:ea:d5:76: 5b:81:a2:fd:85:31:11:83:24:9e:0a:f5:62:4c:76:ee:29:54: eb:77:6c:d4:b9:4b:42:7b:3a:2c:9e:69:a2:a0:17:21:13:b8: ad:28:6b:85:dc:3a:ea:ad:cb:c6:30:04:85:8b:26:c0:d0:cc: 53:1e:1e:d7:4b:4a:03:da:f9:da:66:7a:55:d6:c6:66:17:d4: d0:d3:d7:a9:09:57:5e:05:0f:b5:e6:1f:69:e5:fe:53:14:6a: 81:5c:97:ec:8f:51:9d:fb:21:6d:8e:5f:4e:fb:ae:d8:fb:ea: 63:6c:c7:c9:66:56:d4:20:3f:da:23:48:38:99:a9:af:bf:c2: e8:48:82:e6:db:6d:09:32:5e:34:70:b9:39:87:16:fa:4e:4c: e8:59:a0:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jemp6qDWa2B4au4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzUwMWIxZTAtMDAxOC00NzVlLTlkNGItNTA5MDIzNzA2 MGFlMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YTg4ZDc4MWUtMjFjOC00Zjk1LTlkMjMtZTc1YjdlMmY0YWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2A6dHXBIfPmPUF737Vpmumq39vsg99kXhM4D YSLjBQ41riDpw/7RPayk5TxHJgf6SxIMcObhfRWmERDzj9k+lCpDqdI+M+p257H0 Kh8+d2LFWyaYUnOGxrK5ZXb3R+ZLEJPugPqJMOMgZNeYuPAxcgKXdsFruWHDRYJU gQe2oVgLS4+Q2rPdmwYEHRWvFgTddYHvORxTCBnEUwDyZ0aVE5vwXUmtBsTIj6Y5 G5lzzT/NZK7A5TKh8nuk0EsPq5QG5zr9GxfwGG+e4ir1HWp/lLaj6Y0A+GLhUVH8 n0cOC99dLEj+B1OaFxgrfdIJf4EkEiT5/6whCFOOuBKkcvGcwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGGSgF1laxQ/0Um8BoBVnWhOscCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNTAx YjFlMC0wMDE4LTQ3NWUtOWQ0Yi01MDkwMjM3MDYwYWUvOWEwZmZkYWUtM2E5MC0z ZWUyLTllMjktN2M3ZWUyMzIyNDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzUwMWIxZTAtMDAxOC00NzVlLTlk NGItNTA5MDIzNzA2MGFlL2M1MDFiMWUwLTAwMTgtNDc1ZS05ZDRiLTUwOTAyMzcw NjBhZS5jcmwwHwYDVR0jBBgwFoAUy4iXnad5H8TiAWX8bF3cELu6rMUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNTAxYjFlMC0wMDE4LTQ3NWUtOWQ0Yi01MDkw MjM3MDYwYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwB7WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJujynryt8edXj5G7fKsFXnQ2UEToLlNPGw2Q4+Hg4yBjSPs7y1PrmHs ZkHxRm2rnRyEeeg3//PQCuqxpuqIx7gXZnQDzPdJhQ3edaCOL2KD4useEXr8NcF6 yLN6RBJJNBgomZbwQ/oN+OrVdluBov2FMRGDJJ4K9WJMdu4pVOt3bNS5S0J7Oiye aaKgFyETuK0oa4XcOuqty8YwBIWLJsDQzFMeHtdLSgPa+dpmelXWxmYX1NDT16kJ V14FD7XmH2nl/lMUaoFcl+yPUZ37IW2OX077rtj76mNsx8lmVtQgP9ojSDiZqa+/ wuhIgubbbQkyXjRwuTmHFvpOTOhZoL8= -----END CERTIFICATE-----Generated at Thu Mar 26 20:15:38 2026 by rpki-client