$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9db68cc5-a9fd-3d70-b98d-8da96e18e380.roa File: 9db68cc5-a9fd-3d70-b98d-8da96e18e380.roa (raw, json) Hash identifier: xJ892vKUiOI8mdfwEnZft1oFrXfVn5Y2+FoXcTQo01M= Subject key identifier: A2:A8:29:40:35:02:D9:E6:A7:D9:04:F9:09:A6:71:1A:EF:B1:25:BF Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584D15A2552D59CCCFB77915E9C0 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9db68cc5-a9fd-3d70-b98d-8da96e18e380.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 397325 IP address blocks: 192.31.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:55:2d:59:cc:cf:b7:79:15:e9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=125ba116-5f6d-4264-8798-012bb86eda88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:48:a6:9a:28:57:49:7d:02:e3:e9:6e:c1:11: 07:22:56:09:e1:66:3c:c8:be:50:83:83:5b:c3:d0: f8:38:d1:70:e1:29:ab:eb:54:30:5c:35:a8:9a:60: 5c:e4:b0:d3:d4:21:1f:59:a8:74:e2:f1:1a:14:91: 3c:81:dc:f9:2e:4e:e4:ef:12:e3:d0:10:2e:05:5f: 67:0b:bc:5a:51:11:e8:64:bd:33:b4:b7:d6:18:ba: eb:27:64:4c:9d:13:e5:45:9a:ec:bb:ce:e4:b6:d7: 91:3f:a1:2f:e3:f0:24:f4:f7:c5:c8:cd:16:c2:d0: 18:86:6a:16:d4:a2:d8:95:ef:41:11:cf:ae:f0:3a: 77:60:b0:d3:67:e9:e0:5f:e3:57:d4:83:f1:96:1b: 75:e3:fc:e1:1b:1b:91:e5:ba:15:2d:8c:c4:89:2a: 71:c0:95:f3:bb:d8:6e:7f:10:73:b8:3d:43:eb:cb: 38:c5:94:c6:f4:78:a6:3c:53:a2:f6:be:14:55:ac: b5:bb:55:37:49:18:bd:01:10:fd:8b:76:f7:2a:f4: f3:46:cb:6a:6b:bf:72:de:3f:19:34:54:96:c8:44: 84:9e:e4:95:09:34:9b:7b:b9:bc:ce:da:0a:79:e0: dc:a9:7e:88:20:6a:6e:59:58:b2:e9:b1:ef:dc:09: d4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A8:29:40:35:02:D9:E6:A7:D9:04:F9:09:A6:71:1A:EF:B1:25:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9db68cc5-a9fd-3d70-b98d-8da96e18e380.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 192.31.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:88:89:da:2b:c8:c4:18:09:2c:e0:a1:2d:59:75:21:4d:9e: 2f:63:6b:94:64:e9:22:47:31:57:4d:23:e9:48:fe:ff:5d:46: 9f:6e:10:14:08:87:95:bf:fc:86:e8:a3:82:b2:93:84:09:e5: 78:be:d0:de:55:1f:0e:b1:61:62:59:8f:d4:cf:eb:c1:89:dc: 04:31:3d:61:27:a7:04:7e:ba:55:8f:46:1a:69:be:d5:60:9f: f4:bf:cb:80:bd:cc:5d:15:9c:00:3d:e2:a6:4a:c7:bb:c2:2c: 8f:e9:c5:9a:b9:c7:1e:0d:93:90:db:ba:f0:9d:ec:f0:ab:6e: a9:ab:a2:57:e4:35:50:7d:a5:6c:c5:57:08:7a:26:99:09:41: cf:2f:25:09:3f:de:23:0d:50:90:02:ad:de:c9:e9:d6:df:79: 74:fb:54:dd:73:e4:b9:c7:ee:2f:e9:04:78:19:ba:d5:e4:97: 1d:a6:11:db:82:ee:6a:93:2f:ac:9e:cb:ac:7b:3a:d7:01:7e: d9:9f:83:1a:24:3c:e7:a7:ee:37:84:98:ae:ee:5b:bf:4b:dd: 56:b9:6d:68:10:d0:61:93:7f:82:b2:94:5d:95:fc:95:57:fb: c1:b8:ad:32:f8:a2:74:8a:c2:e8:b5:84:8e:5c:39:e8:cc:01: d9:fd:68:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0VolUtWczPt3kV6cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk MTI1YmExMTYtNWY2ZC00MjY0LTg3OTgtMDEyYmI4NmVkYTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkimmihXSX0C4+luwREHIlYJ4WY8yL5Qg4Nb w9D4ONFw4Smr61QwXDWommBc5LDT1CEfWah04vEaFJE8gdz5Lk7k7xLj0BAuBV9n C7xaURHoZL0ztLfWGLrrJ2RMnRPlRZrsu87ktteRP6Ev4/Ak9PfFyM0WwtAYhmoW 1KLYle9BEc+u8Dp3YLDTZ+ngX+NX1IPxlht14/zhGxuR5boVLYzEiSpxwJXzu9hu fxBzuD1D68s4xZTG9HimPFOi9r4UVay1u1U3SRi9ARD9i3b3KvTzRstqa79y3j8Z NFSWyESEnuSVCTSbe7m8ztoKeeDcqX6IIGpuWViy6bHv3AnUvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKoKUA1Atnmp9kE+QmmcRrvsSW/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvOWRiNjhjYzUtYTlmZC0z ZDcwLWI5OGQtOGRhOTZlMThlMzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB+JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6IidoryMQYCSzgoS1ZdSFNni9ja5Rk6SJHMVdNI+lI/v9dRp9uEBQI h5W//Iboo4Kyk4QJ5Xi+0N5VHw6xYWJZj9TP68GJ3AQxPWEnpwR+ulWPRhppvtVg n/S/y4C9zF0VnAA94qZKx7vCLI/pxZq5xx4Nk5DbuvCd7PCrbqmrolfkNVB9pWzF Vwh6JpkJQc8vJQk/3iMNUJACrd7J6dbfeXT7VN1z5LnH7i/pBHgZutXklx2mEduC 7mqTL6yey6x7OtcBftmfgxokPOen7jeEmK7uW79L3Va5bWgQ0GGTf4KylF2V/JVX +8G4rTL4onSKwui1hI5cOejMAdn9aC8= -----END CERTIFICATE-----Generated at Thu Mar 26 09:04:40 2026 by rpki-client