$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/068cdd65-3c15-372f-b3e3-0d301d7c37f8.roa File: 068cdd65-3c15-372f-b3e3-0d301d7c37f8.roa (raw, json) Hash identifier: Kz5HvBzHyLsxy1efDXlEq6r5pTjIBJ0MPht4sJUKb3E= Subject key identifier: EA:65:86:E8:FD:32:70:CB:BF:30:49:60:AE:51:B2:E4:A4:9E:EB:A1 Certificate issuer: /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9 Certificate serial: 010D0C9F4328584D47C4E26C1BEB11C301510480 Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/068cdd65-3c15-372f-b3e3-0d301d7c37f8.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 55178 IP address blocks: 192.230.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:e2:6c:1b:eb:11:c3:01:51:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=c57ecaae-5e81-41a0-b16b-3df00ac4b881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:87:bb:90:bb:42:72:f9:5d:a7:a5:c5:de:3d: 48:4c:5b:ec:ed:c7:55:4d:bc:2a:c8:44:bb:d8:0c: e5:91:bf:32:c8:51:20:e1:5b:87:a2:80:41:62:71: 31:a6:04:77:90:20:fa:2a:da:96:48:e4:96:35:9a: 01:71:ba:f0:6d:47:5e:d4:68:9a:ad:15:ca:b3:f7: 74:0d:ce:39:54:68:fd:8a:b0:61:86:3a:81:85:b3: 1f:80:b5:b0:a1:16:c7:1a:5d:da:44:59:39:26:05: 97:30:7f:3b:ba:a6:1c:99:b8:d1:38:60:4f:ad:22: e9:a4:47:14:df:c9:40:57:9c:e2:2f:86:e6:f6:40: f5:63:ad:c5:d0:e3:27:13:e5:e9:87:84:db:c6:73: 13:06:fa:ef:4d:7b:67:e6:47:93:04:ca:77:27:08: 17:fd:50:ea:e9:83:ff:08:9e:5f:ce:f3:23:78:17: 2f:87:79:39:67:ff:00:38:84:b6:e8:26:42:c2:fb: 06:b2:8b:6e:82:21:71:01:3d:cd:04:25:eb:c0:9a: 2c:a0:bd:51:ed:0c:4d:9d:d6:d4:ad:76:d6:15:aa: d2:1c:73:20:75:17:17:0d:54:e3:e6:73:46:81:06: 25:c3:f1:61:8d:79:ff:46:06:d7:83:86:1c:99:95: 3e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:65:86:E8:FD:32:70:CB:BF:30:49:60:AE:51:B2:E4:A4:9E:EB:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/068cdd65-3c15-372f-b3e3-0d301d7c37f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl X509v3 Authority Key Identifier: keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer sbgp-ipAddrBlock: critical IPv4: 192.230.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:07:54:1b:34:f2:50:be:4e:bc:80:00:5b:c3:48:e4:c1:dd: 8d:0d:0f:c3:1a:3d:33:a5:5c:24:8f:89:17:13:ae:e4:fa:9b: 56:f6:7d:b1:a5:91:d9:7a:59:9a:1d:f0:bb:34:c6:3e:4f:4b: b0:d9:17:9a:36:68:8b:8c:6b:05:90:07:b1:6a:48:65:15:dd: bf:09:1e:5c:69:ab:17:d3:2a:ad:00:72:6c:bf:f5:fc:e8:2f: 5f:09:1c:ea:81:60:51:a4:36:d2:35:2b:77:80:c0:93:2a:44: df:57:26:9a:a6:47:50:90:5e:51:24:8d:0d:e3:e5:a9:8e:ee: 3d:9e:51:1b:0d:57:a9:4c:d7:f6:7d:87:19:8b:ab:d6:dd:77: 79:b6:62:fb:91:21:9b:5b:3a:fe:4c:35:b0:99:2e:d5:0e:b1: c9:cf:8e:70:37:2e:df:24:3a:31:1a:31:d3:f7:5c:03:15:eb: 4b:25:1b:7f:ff:20:5e:f0:b8:d4:28:f4:6c:98:63:3c:5e:8d: 31:05:8c:aa:15:7f:a7:1c:77:d1:df:bf:35:90:a2:10:13:85: 13:e4:fe:df:b9:51:a7:57:ea:7b:30:92:69:e7:4c:9e:c8:f1: 73:13:fc:a2:6d:92:88:c9:06:f8:b1:08:be:28:2b:0e:73:35: a0:b5:45:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxOJsG+sRwwFRBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg5MDNhMTQtZWY1Zi00MzEwLWI2OTQtNjBmNDliMWM2 MWE5MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk YzU3ZWNhYWUtNWU4MS00MWEwLWIxNmItM2RmMDBhYzRiODgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4e7kLtCcvldp6XF3j1ITFvs7cdVTbwqyES7 2Azlkb8yyFEg4VuHooBBYnExpgR3kCD6KtqWSOSWNZoBcbrwbUde1GiarRXKs/d0 Dc45VGj9irBhhjqBhbMfgLWwoRbHGl3aRFk5JgWXMH87uqYcmbjROGBPrSLppEcU 38lAV5ziL4bm9kD1Y63F0OMnE+Xph4TbxnMTBvrvTXtn5keTBMp3JwgX/VDq6YP/ CJ5fzvMjeBcvh3k5Z/8AOIS26CZCwvsGsotugiFxAT3NBCXrwJosoL1R7QxNndbU rXbWFarSHHMgdRcXDVTj5nNGgQYlw/FhjXn/RgbXg4YcmZU+IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOplhuj9MnDLvzBJYK5RsuSknuuhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkw M2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0OWIxYzYxYTkvMDY4Y2RkNjUtM2MxNS0z NzJmLWIzZTMtMGQzMDFkN2MzN2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTg5MDNhMTQtZWY1Zi00MzEwLWI2 OTQtNjBmNDliMWM2MWE5L2E4OTAzYTE0LWVmNWYtNDMxMC1iNjk0LTYwZjQ5YjFj NjFhOS5jcmwwHwYDVR0jBBgwFoAUcjvjDDCo3dCu/FhWC6SEaIgkq2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkwM2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0 OWIxYzYxYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOa/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEHVBs08lC+TryAAFvDSOTB3Y0ND8MaPTOlXCSPiRcTruT6m1b2fbGl kdl6WZod8Ls0xj5PS7DZF5o2aIuMawWQB7FqSGUV3b8JHlxpqxfTKq0Acmy/9fzo L18JHOqBYFGkNtI1K3eAwJMqRN9XJpqmR1CQXlEkjQ3j5amO7j2eURsNV6lM1/Z9 hxmLq9bdd3m2YvuRIZtbOv5MNbCZLtUOscnPjnA3Lt8kOjEaMdP3XAMV60slG3// IF7wuNQo9GyYYzxejTEFjKoVf6ccd9HfvzWQohAThRPk/t+5UadX6nswkmnnTJ7I 8XMT/KJtkojJBvixCL4oKw5zNaC1RSI= -----END CERTIFICATE-----Generated at Thu Mar 26 21:35:08 2026 by rpki-client