$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/17645b95-d8ae-3646-a580-363e66796a4d.roa File: 17645b95-d8ae-3646-a580-363e66796a4d.roa (raw, json) Hash identifier: RnoWbPYYU2jNam/edotTLVgdw5Ye1wldLab1uXNFOj0= Subject key identifier: 49:C3:0A:6B:A5:60:19:9C:28:C5:D1:95:1E:E3:1B:56:95:6C:29:AC Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584D15A2544075C55EEE40EC4E80 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/17645b95-d8ae-3646-a580-363e66796a4d.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 397325 IP address blocks: 192.31.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:54:40:75:c5:5e:ee:40:ec:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=33683a3f-37ce-4701-ad35-ee58ab9c8463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b6:6d:b7:7d:8a:8f:b1:f2:5e:37:ae:eb:35: 04:b8:9d:a2:1b:17:c8:05:18:d2:b6:a4:c1:d7:06: 1c:ec:e2:4a:98:84:68:b5:f5:d2:14:ae:42:d3:63: da:1a:26:d8:a3:91:6d:22:c1:d9:15:c3:cf:b5:50: 11:11:7a:55:3c:b7:05:00:46:2b:a6:17:27:2b:69: d3:3c:d2:03:e0:86:a4:41:ee:fc:00:8f:f8:6e:15: 5e:40:d4:4e:b3:07:c1:59:ab:f3:36:18:57:14:8a: 18:1b:da:db:0a:75:af:e3:4a:d3:9a:4a:04:e6:37: a9:8e:f2:31:ed:57:0b:44:f7:1b:43:3e:fc:1d:f4: ac:de:89:56:f3:4f:d4:3a:57:0b:25:52:a0:74:83: c1:40:2b:28:9d:7b:24:17:9d:48:2b:17:a6:0a:8e: 1b:79:f4:e3:96:65:c0:11:ce:94:27:d7:f4:91:78: 46:4e:ec:8b:a2:b0:e4:1e:85:1e:83:59:b5:33:06: 00:97:ea:cc:1e:56:c5:56:7c:b9:07:68:e6:0f:9b: a6:e3:0c:48:c4:0a:f6:ae:b0:9f:d8:65:f7:b5:c1: 84:8a:4f:ee:e3:39:60:b6:4f:97:b2:15:11:0d:78: e0:55:97:ae:e6:51:78:7d:ee:e3:2b:22:44:bb:75: c8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C3:0A:6B:A5:60:19:9C:28:C5:D1:95:1E:E3:1B:56:95:6C:29:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/17645b95-d8ae-3646-a580-363e66796a4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 192.31.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:7c:c2:63:07:0d:68:21:37:3f:64:f7:a8:97:50:70:a2:7c: 1e:e4:54:ea:57:47:9f:a4:09:de:03:71:8d:92:3a:07:98:85: 45:45:58:a9:c6:e1:bd:75:58:22:b6:9a:aa:fa:13:33:46:3a: 5f:e4:a9:bf:14:4c:9c:51:0a:f2:da:bf:24:b0:6e:0d:b7:bb: bc:72:79:62:9f:95:98:ef:a2:ae:a2:60:37:a5:70:26:4b:a0: ff:1a:4e:c8:eb:09:5e:e5:25:40:eb:86:fa:ca:8b:8e:2d:3f: f8:72:96:c8:c5:aa:ce:b9:15:2b:58:33:94:a6:84:28:ea:7f: 82:c6:04:e3:cb:53:a1:49:f4:47:01:9e:51:87:91:6b:ba:97: ab:e3:44:90:72:e6:7e:b4:31:0b:8f:da:a3:43:fc:e2:50:62: f1:23:82:51:f6:ce:e7:08:0a:9c:60:75:bf:e1:b2:ff:37:fb: 68:8c:e2:92:14:82:0a:fb:f1:6f:86:be:5e:56:6d:10:e5:08: d4:bc:08:5a:e2:11:38:f4:15:7b:48:90:01:86:91:32:27:ce: c4:cd:9e:8f:e7:e5:80:b4:56:49:52:2c:63:45:6e:4d:c1:d0: 6f:f6:d7:fd:fa:ee:ac:53:47:0a:98:dd:fb:45:e8:66:b1:f2: b7:6b:97:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0VolRAdcVe7kDsToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk MzM2ODNhM2YtMzdjZS00NzAxLWFkMzUtZWU1OGFiOWM4NDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrZtt32Kj7HyXjeu6zUEuJ2iGxfIBRjStqTB 1wYc7OJKmIRotfXSFK5C02PaGibYo5FtIsHZFcPPtVAREXpVPLcFAEYrphcnK2nT PNID4IakQe78AI/4bhVeQNROswfBWavzNhhXFIoYG9rbCnWv40rTmkoE5jepjvIx 7VcLRPcbQz78HfSs3olW80/UOlcLJVKgdIPBQCsonXskF51IKxemCo4befTjlmXA Ec6UJ9f0kXhGTuyLorDkHoUeg1m1MwYAl+rMHlbFVny5B2jmD5um4wxIxAr2rrCf 2GX3tcGEik/u4zlgtk+XshURDXjgVZeu5lF4fe7jKyJEu3XItwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnDCmulYBmcKMXRlR7jG1aVbCmsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvMTc2NDViOTUtZDhhZS0z NjQ2LWE1ODAtMzYzZTY2Nzk2YTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB+LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIR8wmMHDWghNz9k96iXUHCifB7kVOpXR5+kCd4DcY2SOgeYhUVFWKnG 4b11WCK2mqr6EzNGOl/kqb8UTJxRCvLavySwbg23u7xyeWKflZjvoq6iYDelcCZL oP8aTsjrCV7lJUDrhvrKi44tP/hylsjFqs65FStYM5SmhCjqf4LGBOPLU6FJ9EcB nlGHkWu6l6vjRJBy5n60MQuP2qND/OJQYvEjglH2zucICpxgdb/hsv83+2iM4pIU ggr78W+Gvl5WbRDlCNS8CFriETj0FXtIkAGGkTInzsTNno/n5YC0VklSLGNFbk3B 0G/21/367qxTRwqY3ftF6Gax8rdrly8= -----END CERTIFICATE-----Generated at Thu Mar 26 14:14:39 2026 by rpki-client