$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3628f031-d746-4562-973e-3312db1465a2/4aceb28e-2058-3b15-a0b6-b4509a4fdd94.roa File: 4aceb28e-2058-3b15-a0b6-b4509a4fdd94.roa (raw, json) Hash identifier: qtjlZUPuQtDnGZOtTl1VfuRNKETeBKnN+hn6oucyaJ4= Subject key identifier: 29:7D:4B:A2:AF:33:0A:D7:AE:C3:7C:3B:B9:72:95:7D:05:77:AB:25 Certificate issuer: /CN=3628f031-d746-4562-973e-3312db1465a2 Certificate serial: 010D0C9F4328584D0A779374FD1820A3AF8AD980 Authority key identifier: 92:46:91:5F:8D:D2:B6:25:A9:D2:56:8B:4B:2E:E9:E0:BF:09:B3:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3628f031-d746-4562-973e-3312db1465a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3628f031-d746-4562-973e-3312db1465a2/4aceb28e-2058-3b15-a0b6-b4509a4fdd94.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 32603 IP address blocks: 192.83.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3628f031-d746-4562-973e-3312db1465a2/3628f031-d746-4562-973e-3312db1465a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3628f031-d746-4562-973e-3312db1465a2/3628f031-d746-4562-973e-3312db1465a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3628f031-d746-4562-973e-3312db1465a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:93:74:fd:18:20:a3:af:8a:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3628f031-d746-4562-973e-3312db1465a2 Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=a9aa5e00-587e-44a4-8ab4-384f18d767aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e5:bc:ba:05:c9:e6:e2:4e:50:da:fe:b5:76: 56:8f:07:fb:b4:38:30:78:b2:e2:63:f8:e3:bf:30: d5:bf:53:e5:7c:af:2b:9e:ed:4a:20:16:fe:92:2b: 33:e4:e4:58:6a:c6:0c:af:7d:51:74:f2:0a:f1:c2: 97:8c:5f:a8:be:01:82:53:67:2c:ae:b3:8d:33:07: 97:7c:1e:51:e1:f3:5d:8f:11:58:cf:60:8c:5b:6f: 7a:6f:b3:03:f9:be:86:9c:b5:02:11:b1:db:9f:a4: ab:5f:12:78:c8:9b:17:db:e4:89:a8:e3:36:ef:5e: 83:18:15:dd:b9:3b:91:5a:df:69:59:e4:21:97:17: 52:76:42:92:9f:d0:e0:0b:70:f7:8e:4c:57:7c:5d: 6d:65:31:70:a4:3f:09:a8:3b:dd:d7:0e:5e:04:1e: 60:eb:7b:fe:cb:64:4e:ca:9f:1f:09:21:59:f0:63: dc:8a:e0:0a:9c:fa:5d:07:e6:4f:fc:d2:aa:f0:ff: da:cf:be:74:b2:95:ae:04:32:9f:13:ad:54:73:8f: d1:69:52:b7:73:33:48:18:07:6f:70:5c:b2:5b:14: 47:e5:d8:cf:2e:fd:56:cf:fb:47:78:ff:e8:40:88: c9:42:77:e9:1a:8b:c5:7f:fb:71:cf:4f:f9:56:14: 57:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:7D:4B:A2:AF:33:0A:D7:AE:C3:7C:3B:B9:72:95:7D:05:77:AB:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3628f031-d746-4562-973e-3312db1465a2/4aceb28e-2058-3b15-a0b6-b4509a4fdd94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3628f031-d746-4562-973e-3312db1465a2/3628f031-d746-4562-973e-3312db1465a2.crl X509v3 Authority Key Identifier: keyid:92:46:91:5F:8D:D2:B6:25:A9:D2:56:8B:4B:2E:E9:E0:BF:09:B3:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3628f031-d746-4562-973e-3312db1465a2.cer sbgp-ipAddrBlock: critical IPv4: 192.83.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:2a:35:32:02:44:98:64:b3:ee:86:16:53:99:1c:e4:79:bf: 73:69:3f:65:49:f1:ef:6b:9d:37:2b:4c:91:b1:57:51:75:53: 7a:5c:19:18:af:7d:f0:65:2f:48:86:0f:65:32:bc:88:b7:53: 13:65:63:b7:8b:91:94:f0:92:b1:20:e9:2c:51:89:e5:d3:d0: a6:85:59:c5:d9:c3:51:55:bb:61:d3:c1:a1:cc:7b:bb:ad:86: 23:49:9f:13:d8:c5:9d:e5:85:48:56:ce:83:cb:41:84:5c:8e: a5:98:2e:f4:77:1f:5a:60:11:00:5c:5b:18:90:ba:18:83:c4: d6:a8:88:41:34:c4:a9:2d:fc:dc:f3:c1:39:81:06:ed:c8:1a: 77:27:88:de:c1:61:8a:6a:9b:c7:d4:f5:fd:66:bb:56:3f:c8: 61:f5:fe:10:b7:9c:8c:1d:c5:8d:82:6d:44:0b:99:69:78:b2: d8:89:6c:e5:2f:06:6a:e6:61:d9:ac:b2:81:24:d6:7e:f2:ee: 83:ee:f4:e2:25:bb:9a:81:e2:2f:e3:6e:37:c7:92:49:57:c2: f7:4f:9e:88:9f:cf:d8:9a:ea:b0:3c:1e:e4:09:42:09:db:50: da:13:50:eb:58:75:32:00:45:e8:98:99:ad:cb:b2:f9:ad:43: 90:59:d7:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd5N0/Rggo6+K2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzYyOGYwMzEtZDc0Ni00NTYyLTk3M2UtMzMxMmRiMTQ2 NWEyMB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk YTlhYTVlMDAtNTg3ZS00NGE0LThhYjQtMzg0ZjE4ZDc2N2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeW8ugXJ5uJOUNr+tXZWjwf7tDgweLLiY/jj vzDVv1PlfK8rnu1KIBb+kisz5ORYasYMr31RdPIK8cKXjF+ovgGCU2csrrONMweX fB5R4fNdjxFYz2CMW296b7MD+b6GnLUCEbHbn6SrXxJ4yJsX2+SJqOM2716DGBXd uTuRWt9pWeQhlxdSdkKSn9DgC3D3jkxXfF1tZTFwpD8JqDvd1w5eBB5g63v+y2RO yp8fCSFZ8GPciuAKnPpdB+ZP/NKq8P/az750spWuBDKfE61Uc4/RaVK3czNIGAdv cFyyWxRH5djPLv1Wz/tHeP/oQIjJQnfpGovFf/txz0/5VhRXkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCl9S6KvMwrXrsN8O7lylX0Fd6slMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8zNjI4 ZjAzMS1kNzQ2LTQ1NjItOTczZS0zMzEyZGIxNDY1YTIvNGFjZWIyOGUtMjA1OC0z YjE1LWEwYjYtYjQ1MDlhNGZkZDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMzYyOGYwMzEtZDc0Ni00NTYyLTk3 M2UtMzMxMmRiMTQ2NWEyLzM2MjhmMDMxLWQ3NDYtNDU2Mi05NzNlLTMzMTJkYjE0 NjVhMi5jcmwwHwYDVR0jBBgwFoAUkkaRX43StiWp0laLSy7p4L8Js8EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8zNjI4ZjAzMS1kNzQ2LTQ1NjItOTczZS0zMzEy ZGIxNDY1YTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFOhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgqNTICRJhks+6GFlOZHOR5v3NpP2VJ8e9rnTcrTJGxV1F1U3pcGRiv ffBlL0iGD2UyvIi3UxNlY7eLkZTwkrEg6SxRieXT0KaFWcXZw1FVu2HTwaHMe7ut hiNJnxPYxZ3lhUhWzoPLQYRcjqWYLvR3H1pgEQBcWxiQuhiDxNaoiEE0xKkt/Nzz wTmBBu3IGncniN7BYYpqm8fU9f1mu1Y/yGH1/hC3nIwdxY2CbUQLmWl4stiJbOUv BmrmYdmssoEk1n7y7oPu9OIlu5qB4i/jbjfHkklXwvdPnoifz9ia6rA8HuQJQgnb UNoTUOtYdTIAReiYma3LsvmtQ5BZ1+E= -----END CERTIFICATE-----Generated at Sat Mar 28 17:35:06 2026 by rpki-client