$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/3d492e08-a473-35f6-83a9-8895fc07259c.roa File: 3d492e08-a473-35f6-83a9-8895fc07259c.roa (raw, json) Hash identifier: BMxPIuNYnNP9qBNj9HdFaKhYt795cEAu5qTTU9PwVXM= Subject key identifier: F0:57:2C:EE:BF:2A:D3:67:5C:14:4D:BA:1D:5F:69:18:4A:15:20:0C Certificate issuer: /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9 Certificate serial: 010D0C9F4328584D47C4E2473D9C8E3E0D4D1380 Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/3d492e08-a473-35f6-83a9-8895fc07259c.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 55178 IP address blocks: 192.230.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:e2:47:3d:9c:8e:3e:0d:4d:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=729a9259-b1f5-4aa9-ab4a-cb91380e4749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fd:0d:96:b2:53:c8:ab:2a:9f:2a:33:e2:48: bc:f6:00:d4:7e:d8:b1:e1:95:ff:83:7a:a9:70:ab: eb:81:b8:10:be:77:97:04:35:b7:6c:4b:4d:b5:7d: 17:36:a1:84:48:cb:0d:43:83:20:97:12:a5:78:51: 58:e3:51:3e:ef:ff:ac:f2:e3:0d:84:36:b5:ab:e2: 2f:42:69:e7:e4:5a:03:7f:4f:d1:cd:1b:75:8a:6a: ab:93:11:db:0d:af:8e:53:59:18:88:a0:0e:8c:dd: 8a:79:b4:1d:70:4f:a4:e8:95:9a:44:47:3e:f0:99: d3:94:98:6f:33:30:46:ba:1b:80:43:dc:6e:d4:be: d6:b5:5e:d5:02:5c:c8:2f:ae:32:4d:a0:f7:94:d3: 40:e3:4f:60:64:72:81:4f:35:3b:d9:59:2e:58:e1: 3c:1a:af:34:0b:07:92:39:6a:58:91:5d:6e:4e:7d: 49:66:61:eb:a3:2b:c9:e0:26:a1:ae:bc:eb:71:5a: e4:19:e4:81:83:d9:c5:9a:04:7f:e0:91:34:a4:ea: fa:73:ff:0b:8b:95:1b:92:3c:2e:6c:a8:04:c6:ea: 79:c6:2a:62:3f:a9:4c:9e:99:df:c2:c7:8a:bb:8e: 84:91:fd:6e:86:7f:c6:1f:61:9f:c8:2b:48:af:b2: 0f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:57:2C:EE:BF:2A:D3:67:5C:14:4D:BA:1D:5F:69:18:4A:15:20:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/3d492e08-a473-35f6-83a9-8895fc07259c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl X509v3 Authority Key Identifier: keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer sbgp-ipAddrBlock: critical IPv4: 192.230.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:60:3a:48:33:18:48:76:08:71:75:86:66:c5:f8:48:a0:52: bc:91:37:7b:cb:aa:ae:be:b5:3e:85:6c:6c:b0:5f:ff:d4:e8: 59:bf:ed:23:b4:ec:66:8f:28:2f:42:6d:b0:1c:b1:d7:19:44: 3f:d7:09:e2:6c:f6:c0:80:ee:9b:3c:23:08:68:ef:f9:5b:4c: 55:e0:6c:c9:3c:eb:72:d0:77:12:36:41:a5:6b:ed:53:7e:4c: 47:83:33:93:e6:b3:7e:9f:60:25:fb:b0:da:e8:55:36:58:37: 59:b3:72:d9:1a:7d:5c:63:2b:7a:d7:46:d1:84:94:5a:f8:ce: 27:71:ad:6f:8f:34:ce:11:7f:02:40:5b:ba:ba:00:b5:0f:03: a1:d2:1b:69:88:0d:ea:31:f3:85:e0:f8:a3:c4:e5:3c:c9:33: c0:5c:3b:b4:da:53:2a:a2:2c:09:5f:42:19:ad:db:4c:fd:a7: 28:35:e6:74:79:2d:61:93:1c:ae:9b:fc:56:3b:e1:db:fe:2c: 9c:9b:4e:fb:bd:17:f8:b9:87:cb:48:b6:aa:4f:68:90:2f:00: 80:77:d9:68:3a:89:90:9c:3d:4a:35:82:a3:86:54:0f:a4:5c: 79:55:f1:f6:c0:39:29:ec:7c:c7:8c:d8:26:d5:56:42:28:0a: 85:31:63:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxOJHPZyOPg1NE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg5MDNhMTQtZWY1Zi00MzEwLWI2OTQtNjBmNDliMWM2 MWE5MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk NzI5YTkyNTktYjFmNS00YWE5LWFiNGEtY2I5MTM4MGU0NzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnv0NlrJTyKsqnyoz4ki89gDUftix4ZX/g3qp cKvrgbgQvneXBDW3bEtNtX0XNqGESMsNQ4MglxKleFFY41E+7/+s8uMNhDa1q+Iv Qmnn5FoDf0/RzRt1imqrkxHbDa+OU1kYiKAOjN2KebQdcE+k6JWaREc+8JnTlJhv MzBGuhuAQ9xu1L7WtV7VAlzIL64yTaD3lNNA409gZHKBTzU72VkuWOE8Gq80CweS OWpYkV1uTn1JZmHroyvJ4CahrrzrcVrkGeSBg9nFmgR/4JE0pOr6c/8Li5Ubkjwu bKgExup5xipiP6lMnpnfwseKu46Ekf1uhn/GH2GfyCtIr7IPeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBXLO6/KtNnXBRNuh1faRhKFSAMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkw M2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0OWIxYzYxYTkvM2Q0OTJlMDgtYTQ3My0z NWY2LTgzYTktODg5NWZjMDcyNTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTg5MDNhMTQtZWY1Zi00MzEwLWI2 OTQtNjBmNDliMWM2MWE5L2E4OTAzYTE0LWVmNWYtNDMxMC1iNjk0LTYwZjQ5YjFj NjFhOS5jcmwwHwYDVR0jBBgwFoAUcjvjDDCo3dCu/FhWC6SEaIgkq2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkwM2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0 OWIxYzYxYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOa9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhgOkgzGEh2CHF1hmbF+EigUryRN3vLqq6+tT6FbGywX//U6Fm/7SO0 7GaPKC9CbbAcsdcZRD/XCeJs9sCA7ps8Iwho7/lbTFXgbMk863LQdxI2QaVr7VN+ TEeDM5Pms36fYCX7sNroVTZYN1mzctkafVxjK3rXRtGElFr4zidxrW+PNM4RfwJA W7q6ALUPA6HSG2mIDeox84Xg+KPE5TzJM8BcO7TaUyqiLAlfQhmt20z9pyg15nR5 LWGTHK6b/FY74dv+LJybTvu9F/i5h8tItqpPaJAvAIB32Wg6iZCcPUo1gqOGVA+k XHlV8fbAOSnsfMeM2CbVVkIoCoUxY9Q= -----END CERTIFICATE-----Generated at Fri Mar 27 02:03:58 2026 by rpki-client