$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9017595-719d-4059-bffd-7812d56605ee/d2f54c91-a3ee-3a86-a73f-076db4c69fb5.roa File: d2f54c91-a3ee-3a86-a73f-076db4c69fb5.roa (raw, json) Hash identifier: /tQxrC/CBGJ2n/0ByRN+zEvogmu6XrlESBX/lZMqZuU= Subject key identifier: D0:0F:F0:22:8E:1E:65:31:A3:A0:7E:97:91:4B:EC:9C:89:81:46:72 Certificate issuer: /CN=e9017595-719d-4059-bffd-7812d56605ee Certificate serial: 010D0C9F4328584D4A8FACB37E42FD43F090C380 Authority key identifier: 02:58:8C:05:75:A4:E3:85:F3:CB:58:5F:4C:39:B2:70:AE:8F:DF:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9017595-719d-4059-bffd-7812d56605ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9017595-719d-4059-bffd-7812d56605ee/d2f54c91-a3ee-3a86-a73f-076db4c69fb5.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 14618 IP address blocks: 192.157.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9017595-719d-4059-bffd-7812d56605ee/e9017595-719d-4059-bffd-7812d56605ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9017595-719d-4059-bffd-7812d56605ee/e9017595-719d-4059-bffd-7812d56605ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9017595-719d-4059-bffd-7812d56605ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:ac:b3:7e:42:fd:43:f0:90:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9017595-719d-4059-bffd-7812d56605ee Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=d650a873-57f2-4693-bad3-76c2a813cb9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2a:b7:b0:fc:db:f2:b6:b1:86:20:fb:3c:6b: 1b:a2:0d:1e:a1:57:8e:ac:9c:2c:96:79:a4:c7:99: 82:e8:5a:37:6a:42:ad:15:7d:9e:42:19:b6:bc:2b: 7d:6a:10:db:61:86:5b:90:29:46:3d:5a:da:eb:8d: c1:c3:4c:3d:b6:f5:91:b2:e9:e9:cd:f2:a0:c6:54: 98:4b:1e:fb:f3:74:6d:6b:55:7d:c1:2e:4c:20:78: 8e:26:fe:e8:53:c9:e4:90:11:42:5c:86:2f:82:10: 63:49:61:80:1c:a0:4a:5b:6f:c0:25:af:76:1d:78: 89:68:54:a9:68:e6:fa:a1:a3:7d:fc:39:8b:97:75: 53:2f:0c:42:67:cc:84:0e:37:2a:7a:70:29:cd:1c: 1c:14:be:75:b2:a6:df:56:56:78:24:34:9a:af:4b: 41:45:ea:0b:8f:79:71:b9:2a:f0:c3:85:84:62:ee: 27:b3:26:f8:f4:ba:bd:ff:79:ee:13:0e:6d:f7:30: 21:27:87:f1:66:46:b8:ef:df:d7:8f:53:45:b3:fd: 4a:36:5f:10:ac:a2:9a:3d:87:8c:55:d7:83:7d:a7: 17:25:80:54:af:9b:97:0f:d6:e9:74:b6:10:40:32: 8c:90:10:d0:83:c5:54:98:66:45:80:e5:38:55:18: 56:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:0F:F0:22:8E:1E:65:31:A3:A0:7E:97:91:4B:EC:9C:89:81:46:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9017595-719d-4059-bffd-7812d56605ee/d2f54c91-a3ee-3a86-a73f-076db4c69fb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9017595-719d-4059-bffd-7812d56605ee/e9017595-719d-4059-bffd-7812d56605ee.crl X509v3 Authority Key Identifier: keyid:02:58:8C:05:75:A4:E3:85:F3:CB:58:5F:4C:39:B2:70:AE:8F:DF:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9017595-719d-4059-bffd-7812d56605ee.cer sbgp-ipAddrBlock: critical IPv4: 192.157.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:67:c5:87:79:cb:77:8f:ce:0a:03:48:e7:46:3d:d9:5d:ce: 03:44:08:b8:04:77:a0:33:2d:9e:d5:55:60:7e:5a:cc:cd:7a: c2:d5:fa:0a:73:62:4a:b7:8d:de:af:3f:b1:92:81:af:1c:5d: 10:2b:02:cf:5b:57:ff:03:59:5c:50:4e:a4:63:94:c2:53:c5: e8:72:9d:54:62:b3:aa:ce:97:93:ff:f2:7b:b9:11:f6:35:7d: 0b:24:ae:53:0f:8c:d6:2d:68:2a:8a:50:48:e8:d8:65:85:9a: 7d:7f:0d:c3:2a:7d:1d:c1:0c:80:62:96:4d:54:c3:71:92:76: 87:35:14:d9:ce:e9:77:dc:d3:8e:5d:4c:25:b9:f0:30:dd:c8: 43:9b:35:85:f9:c9:17:8a:cc:8a:a5:3e:db:cd:59:a9:04:bd: 8f:43:a8:af:9c:44:4c:0e:aa:1a:fc:f9:8e:1a:b9:06:5b:bb: f2:83:69:8f:78:ed:3d:3d:ab:db:21:5b:50:85:bf:74:19:bd: 3e:b8:ef:bf:63:15:d0:eb:fc:3d:a6:09:1b:16:e0:12:56:df: 20:43:9a:03:ac:1c:1f:64:f6:94:06:9a:e5:03:45:bb:1b:f3: 3a:79:8d:5e:6a:bc:b0:c1:3b:29:08:46:05:9f:34:10:2f:64: c8:ca:e6:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj6yzfkL9Q/CQw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTkwMTc1OTUtNzE5ZC00MDU5LWJmZmQtNzgxMmQ1NjYw NWVlMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk ZDY1MGE4NzMtNTdmMi00NjkzLWJhZDMtNzZjMmE4MTNjYjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyq3sPzb8raxhiD7PGsbog0eoVeOrJwslnmk x5mC6Fo3akKtFX2eQhm2vCt9ahDbYYZbkClGPVra643Bw0w9tvWRsunpzfKgxlSY Sx7783Rta1V9wS5MIHiOJv7oU8nkkBFCXIYvghBjSWGAHKBKW2/AJa92HXiJaFSp aOb6oaN9/DmLl3VTLwxCZ8yEDjcqenApzRwcFL51sqbfVlZ4JDSar0tBReoLj3lx uSrww4WEYu4nsyb49Lq9/3nuEw5t9zAhJ4fxZka479/Xj1NFs/1KNl8QrKKaPYeM VdeDfacXJYBUr5uXD9bpdLYQQDKMkBDQg8VUmGZFgOU4VRhWwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNAP8CKOHmUxo6B+l5FL7JyJgUZyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lOTAx NzU5NS03MTlkLTQwNTktYmZmZC03ODEyZDU2NjA1ZWUvZDJmNTRjOTEtYTNlZS0z YTg2LWE3M2YtMDc2ZGI0YzY5ZmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZTkwMTc1OTUtNzE5ZC00MDU5LWJm ZmQtNzgxMmQ1NjYwNWVlL2U5MDE3NTk1LTcxOWQtNDA1OS1iZmZkLTc4MTJkNTY2 MDVlZS5jcmwwHwYDVR0jBBgwFoAUAliMBXWk44Xzy1hfTDmycK6P34gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9lOTAxNzU5NS03MTlkLTQwNTktYmZmZC03ODEy ZDU2NjA1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ0eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhnxYd5y3ePzgoDSOdGPdldzgNECLgEd6AzLZ7VVWB+WszNesLV+gpz Ykq3jd6vP7GSga8cXRArAs9bV/8DWVxQTqRjlMJTxehynVRis6rOl5P/8nu5EfY1 fQskrlMPjNYtaCqKUEjo2GWFmn1/DcMqfR3BDIBilk1Uw3GSdoc1FNnO6Xfc045d TCW58DDdyEObNYX5yReKzIqlPtvNWakEvY9DqK+cREwOqhr8+Y4auQZbu/KDaY94 7T09q9shW1CFv3QZvT64779jFdDr/D2mCRsW4BJW3yBDmgOsHB9k9pQGmuUDRbsb 8zp5jV5qvLDBOykIRgWfNBAvZMjK5sE= -----END CERTIFICATE-----Generated at Thu Mar 26 16:10:39 2026 by rpki-client