$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/d01de867-d842-3f15-838a-d66341794f48.roa File: d01de867-d842-3f15-838a-d66341794f48.roa (raw, json) Hash identifier: afZv5ytsQP95nHBnI+U4a7Vw6lwABuYM3PiYyOLDxc4= Subject key identifier: E8:47:EA:1B:7D:CC:2A:FC:B4:56:7A:76:92:31:55:A7:40:6A:68:3E Certificate issuer: /CN=71e68809-5436-4288-ad80-0df35fa0b945 Certificate serial: 010D0C9F4328584D143D75E904CE90DFB4724880 Authority key identifier: 10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/d01de867-d842-3f15-838a-d66341794f48.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 16509 IP address blocks: 192.28.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:75:e9:04:ce:90:df:b4:72:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71e68809-5436-4288-ad80-0df35fa0b945 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=a9897ef6-b2d2-4b42-b024-15431afaadd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b6:07:02:93:91:2a:05:e7:32:bf:ec:63:e0: ee:dd:70:67:8e:a8:88:61:77:9c:50:f3:3e:e6:5d: 56:17:b7:ca:db:ba:6d:b8:f8:59:b5:0d:38:ec:3e: d4:13:9a:b9:9e:4d:be:21:7c:bb:22:50:0d:3d:b8: b7:e0:60:ad:68:00:a2:e7:97:ee:d9:56:41:86:d9: 24:87:a3:4e:ae:83:6a:4e:33:e1:63:34:b9:97:af: 34:de:a7:b6:31:6b:dc:36:45:b7:4b:1e:ca:8e:37: 7f:94:52:8a:a8:4f:f3:b6:ee:a8:2d:49:19:54:b9: 0f:d3:88:3f:9b:e5:40:a7:0c:41:05:b1:4f:21:80: 54:46:df:70:48:fd:49:e5:ee:51:6f:55:05:40:52: fc:de:cf:c2:e0:35:7e:69:12:32:2d:fc:8d:98:d5: de:60:7d:f9:3e:02:a8:31:12:c9:7c:f3:0c:84:89: fc:fd:8f:57:f1:8b:42:67:bb:bd:60:5b:fd:e4:0f: 6e:b1:92:96:2a:ad:a1:f2:0e:84:2a:8d:86:49:32: 76:05:2c:7c:0d:67:c8:e6:19:8c:60:e0:49:ce:ec: e1:ee:21:18:06:11:82:66:98:dc:46:14:f3:d8:07: 2b:22:b5:1f:3e:f8:28:55:ff:ed:99:a8:0e:1a:c4: a3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:47:EA:1B:7D:CC:2A:FC:B4:56:7A:76:92:31:55:A7:40:6A:68:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/d01de867-d842-3f15-838a-d66341794f48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl X509v3 Authority Key Identifier: keyid:10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer sbgp-ipAddrBlock: critical IPv4: 192.28.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:21:ae:d5:30:dd:5c:7e:c4:2c:51:50:93:d5:ed:78:2a:a9: ba:b7:34:4a:04:b0:df:f0:b0:55:bf:49:28:1b:ad:b3:e8:18: 6c:21:b5:ad:32:c0:f7:10:1c:51:76:b5:5f:ef:06:6f:af:21: a9:e2:06:a5:fa:a8:59:f6:c8:70:49:32:e5:9b:65:47:9e:40: a1:d0:d9:ad:82:b7:5b:9d:a8:31:90:ef:51:0e:79:eb:bd:8f: 7a:61:c4:84:c1:04:41:e1:93:33:19:37:6e:18:2e:ed:40:36: 09:55:da:bb:e0:6b:dc:da:8f:d9:33:a1:24:98:f9:a8:f3:22: d3:76:06:ce:fb:5e:a4:8f:63:f2:ae:8c:f5:80:f0:99:2b:3b: 91:21:1e:2f:c8:63:45:82:3e:52:4c:bb:90:df:02:1d:a4:e0: c0:ed:5f:47:60:f9:99:53:4b:8d:12:f0:da:fc:fd:53:05:34: fa:d9:e3:23:14:41:a2:de:cc:81:47:92:ee:25:bc:6f:f4:eb: fc:21:de:75:ff:98:46:ca:50:2f:cd:a6:d5:e7:2a:d6:3a:bd: ec:4f:4a:68:3a:ab:29:f5:a8:58:e7:01:40:fb:10:83:16:bf: f1:8e:ed:99:4b:7a:73:f9:72:f9:f2:8c:05:64:35:cd:75:b7: a2:36:8f:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPXXpBM6Q37RySIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlNjg4MDktNTQzNi00Mjg4LWFkODAtMGRmMzVmYTBi OTQ1MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk YTk4OTdlZjYtYjJkMi00YjQyLWIwMjQtMTU0MzFhZmFhZGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7YHApORKgXnMr/sY+Du3XBnjqiIYXecUPM+ 5l1WF7fK27ptuPhZtQ047D7UE5q5nk2+IXy7IlANPbi34GCtaACi55fu2VZBhtkk h6NOroNqTjPhYzS5l6803qe2MWvcNkW3Sx7Kjjd/lFKKqE/ztu6oLUkZVLkP04g/ m+VApwxBBbFPIYBURt9wSP1J5e5Rb1UFQFL83s/C4DV+aRIyLfyNmNXeYH35PgKo MRLJfPMMhIn8/Y9X8YtCZ7u9YFv95A9usZKWKq2h8g6EKo2GSTJ2BSx8DWfI5hmM YOBJzuzh7iEYBhGCZpjcRhTz2AcrIrUfPvgoVf/tmagOGsSjcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhH6ht9zCr8tFZ6dpIxVadAamg+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2 ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYzNWZhMGI5NDUvZDAxZGU4NjctZDg0Mi0z ZjE1LTgzOGEtZDY2MzQxNzk0ZjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzFlNjg4MDktNTQzNi00Mjg4LWFk ODAtMGRmMzVmYTBiOTQ1LzcxZTY4ODA5LTU0MzYtNDI4OC1hZDgwLTBkZjM1ZmEw Yjk0NS5jcmwwHwYDVR0jBBgwFoAUEFAAX4YwKrkehfZQ9nLTMqW7VE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYz NWZhMGI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUhrtUw3Vx+xCxRUJPV7Xgqqbq3NEoEsN/wsFW/SSgbrbPoGGwhta0y wPcQHFF2tV/vBm+vIaniBqX6qFn2yHBJMuWbZUeeQKHQ2a2Ct1udqDGQ71EOeeu9 j3phxITBBEHhkzMZN24YLu1ANglV2rvga9zaj9kzoSSY+ajzItN2Bs77XqSPY/Ku jPWA8JkrO5EhHi/IY0WCPlJMu5DfAh2k4MDtX0dg+ZlTS40S8Nr8/VMFNPrZ4yMU QaLezIFHku4lvG/06/wh3nX/mEbKUC/NptXnKtY6vexPSmg6qyn1qFjnAUD7EIMW v/GO7ZlLenP5cvnyjAVkNc11t6I2j+U= -----END CERTIFICATE-----Generated at Thu Mar 26 19:53:29 2026 by rpki-client