$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/1e0e6249-10bd-3e41-bed8-279cd931ee82.roa File: 1e0e6249-10bd-3e41-bed8-279cd931ee82.roa (raw, json) Hash identifier: fPlbKQIJlotPwaJAsbjOWpj+TkbtDLKkkpOz4opC9Ds= Subject key identifier: E3:F8:A8:5A:46:F5:C9:B0:22:9B:83:4F:E0:F4:DC:F4:8C:05:5D:FA Certificate issuer: /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9 Certificate serial: 010D0C9F4328584D44FA3F47492D4EA4EE3D5800 Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/1e0e6249-10bd-3e41-bed8-279cd931ee82.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 55178 IP address blocks: 192.230.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:3f:47:49:2d:4e:a4:ee:3d:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=cb0b93a0-60e5-4ff2-a86a-f2422137bc56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b1:98:2a:08:7c:88:34:02:13:d8:5e:63:0a: 2a:e8:df:9d:08:7a:e4:1a:05:56:e0:64:0d:93:c8: 1e:f8:54:4f:a9:93:48:83:04:f2:00:d7:99:9b:67: 7a:c5:e9:d4:82:ff:d5:36:34:c0:e1:eb:e6:18:63: ea:af:54:a9:eb:07:4c:5b:a1:19:a1:ad:d5:95:f9: a1:8d:95:7d:ca:60:1d:84:85:88:8b:96:15:c1:76: b7:30:08:98:b8:4e:d7:91:9c:de:2e:5c:c4:17:da: ad:7d:e1:0f:62:58:fc:b1:73:a6:f1:7c:b6:2b:50: 6f:4b:7d:48:94:41:48:b4:f8:95:7a:b8:04:99:10: c6:a4:04:bd:c6:3b:d2:66:cc:94:a7:ff:65:ec:1c: 44:3f:75:8a:73:e2:42:1e:db:d0:76:b3:f0:6b:5e: d2:cf:7f:cd:c4:05:8f:30:fe:65:6a:e6:a0:93:6e: 88:69:13:d7:1e:9b:5a:8f:1d:d3:b7:c7:d8:2a:96: 65:45:76:11:48:d8:c4:e8:d8:89:0d:3b:67:80:c1: 7f:2a:33:ea:22:95:3e:23:59:6d:71:0c:0e:ed:1d: 32:82:25:8a:d6:71:12:26:49:8e:22:a9:d2:a1:c2: e2:75:c8:f6:02:75:30:9f:5a:8e:49:71:fb:c5:e2: 71:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F8:A8:5A:46:F5:C9:B0:22:9B:83:4F:E0:F4:DC:F4:8C:05:5D:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/1e0e6249-10bd-3e41-bed8-279cd931ee82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl X509v3 Authority Key Identifier: keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer sbgp-ipAddrBlock: critical IPv4: 192.230.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:67:c7:e5:29:ad:ff:ac:33:d2:c9:df:1e:6c:c3:72:41:3e: c2:47:ae:c5:d3:2e:5e:c5:4c:46:9a:c1:12:4d:19:08:57:d4: 0d:8f:1e:57:8e:43:c7:9f:76:b3:86:04:60:67:45:ca:11:79: eb:f3:4a:36:5d:0f:29:67:fa:8b:2f:df:1d:23:24:70:21:13: c5:2f:29:8a:ef:60:72:15:fa:ea:f8:fc:ce:cf:c0:37:fe:d8: 98:e3:b0:02:2a:33:1f:7d:58:e9:de:5f:69:a1:d3:41:3c:5a: 04:4e:f3:ee:1f:12:f2:b1:15:19:7a:41:24:16:c3:3e:ab:a5: 51:a3:d7:84:8c:bb:87:68:e4:0d:10:37:27:d0:f0:55:81:21: 35:c3:ea:5b:8a:cd:69:d2:61:c8:fd:38:12:7e:84:c1:54:1e: 54:57:7c:1e:34:88:e4:0b:08:d4:00:a3:d6:02:43:fb:95:5b: ba:15:a5:d2:5c:17:a3:b5:13:e5:a2:cf:d5:ef:eb:c2:9a:68: 41:9f:25:66:1b:23:9d:a4:07:24:f1:a6:06:65:b8:55:c7:c3: 35:68:87:aa:39:25:a7:43:86:2f:84:3c:54:8c:55:88:6c:49: ea:cf:67:25:80:5e:34:43:b6:5f:8e:39:1e:fa:15:39:7f:7d: f2:d1:2f:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+j9HSS1OpO49WAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg5MDNhMTQtZWY1Zi00MzEwLWI2OTQtNjBmNDliMWM2 MWE5MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk Y2IwYjkzYTAtNjBlNS00ZmYyLWE4NmEtZjI0MjIxMzdiYzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLGYKgh8iDQCE9heYwoq6N+dCHrkGgVW4GQN k8ge+FRPqZNIgwTyANeZm2d6xenUgv/VNjTA4evmGGPqr1Sp6wdMW6EZoa3Vlfmh jZV9ymAdhIWIi5YVwXa3MAiYuE7XkZzeLlzEF9qtfeEPYlj8sXOm8Xy2K1BvS31I lEFItPiVergEmRDGpAS9xjvSZsyUp/9l7BxEP3WKc+JCHtvQdrPwa17Sz3/NxAWP MP5lauagk26IaRPXHptajx3Tt8fYKpZlRXYRSNjE6NiJDTtngMF/KjPqIpU+I1lt cQwO7R0ygiWK1nESJkmOIqnSocLidcj2AnUwn1qOSXH7xeJxcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOP4qFpG9cmwIpuDT+D03PSMBV36MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkw M2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0OWIxYzYxYTkvMWUwZTYyNDktMTBiZC0z ZTQxLWJlZDgtMjc5Y2Q5MzFlZTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTg5MDNhMTQtZWY1Zi00MzEwLWI2 OTQtNjBmNDliMWM2MWE5L2E4OTAzYTE0LWVmNWYtNDMxMC1iNjk0LTYwZjQ5YjFj NjFhOS5jcmwwHwYDVR0jBBgwFoAUcjvjDDCo3dCu/FhWC6SEaIgkq2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkwM2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0 OWIxYzYxYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOaxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJnx+Uprf+sM9LJ3x5sw3JBPsJHrsXTLl7FTEaawRJNGQhX1A2PHleO Q8efdrOGBGBnRcoReevzSjZdDyln+osv3x0jJHAhE8UvKYrvYHIV+ur4/M7PwDf+ 2JjjsAIqMx99WOneX2mh00E8WgRO8+4fEvKxFRl6QSQWwz6rpVGj14SMu4do5A0Q NyfQ8FWBITXD6luKzWnSYcj9OBJ+hMFUHlRXfB40iOQLCNQAo9YCQ/uVW7oVpdJc F6O1E+Wiz9Xv68KaaEGfJWYbI52kByTxpgZluFXHwzVoh6o5JadDhi+EPFSMVYhs SerPZyWAXjRDtl+OOR76FTl/ffLRL30= -----END CERTIFICATE-----Generated at Thu Mar 26 21:35:23 2026 by rpki-client