$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/8a9cbae8-b649-3428-a65a-dee741bbf2ff.roa File: 8a9cbae8-b649-3428-a65a-dee741bbf2ff.roa (raw, json) Hash identifier: 0znVlbPa8C7LAgvE0tZHMRGQXqKax4wtuNgaBg0crBQ= Subject key identifier: E3:3B:FD:AC:45:55:C1:4A:22:B4:DA:6F:67:DB:04:7C:33:B0:07:85 Certificate issuer: /CN=c42e23f5-032b-4670-8e05-b4b0477e4388 Certificate serial: 010D0C9F4328584DAAE03717852688BDA90F2A00 Authority key identifier: 2E:6C:39:E3:71:14:18:83:29:2C:46:0D:E9:EC:38:AA:87:EA:7D:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/8a9cbae8-b649-3428-a65a-dee741bbf2ff.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 13692 IP address blocks: 192.133.23.0/24 maxlen: 24 199.195.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/c42e23f5-032b-4670-8e05-b4b0477e4388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/c42e23f5-032b-4670-8e05-b4b0477e4388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:37:17:85:26:88:bd:a9:0f:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42e23f5-032b-4670-8e05-b4b0477e4388 Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=bb251682-c930-490a-b2a4-002ce7c418f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c1:d3:ab:06:d0:82:bd:4a:9e:14:98:14:a8: c4:1c:cf:ba:89:ed:fd:72:f4:78:9a:8a:21:41:f3: 04:f1:ce:a1:08:48:dd:58:ed:a2:aa:2b:b3:b7:70: 67:7a:40:0d:12:f2:e7:0b:82:c8:2e:2d:02:68:20: ac:67:8e:b2:15:19:63:b6:18:8f:63:7e:45:91:c2: b6:57:4f:70:db:94:de:6f:e3:c7:98:19:6a:c2:38: 74:88:79:16:52:f4:65:a5:ac:44:df:92:2c:b1:b4: be:36:b7:ac:09:88:5f:c6:c8:45:21:70:0a:b5:21: b1:86:96:68:a1:30:0d:8a:13:4d:8c:a7:b4:e4:4c: 65:d7:97:9a:46:6c:51:84:d8:1e:7e:04:a1:ad:67: 35:b8:00:31:0e:52:50:c4:74:e3:5b:a2:a9:bd:a7: 78:73:b1:cc:ff:b7:bd:94:f9:da:8f:3c:f7:c3:46: e6:18:0d:08:6f:fe:7f:8e:f6:14:56:89:bd:8a:f5: ec:31:30:5b:e3:81:91:87:9d:39:55:8e:ec:53:e5: 23:da:d5:fe:36:f7:3e:9a:14:c6:8d:f0:e6:36:0e: 7b:ca:13:8d:62:35:d0:e5:e4:5b:03:8f:24:de:26: 00:b0:8c:a0:97:8b:fb:42:b9:81:52:82:78:80:fb: b2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:3B:FD:AC:45:55:C1:4A:22:B4:DA:6F:67:DB:04:7C:33:B0:07:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/8a9cbae8-b649-3428-a65a-dee741bbf2ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/c42e23f5-032b-4670-8e05-b4b0477e4388.crl X509v3 Authority Key Identifier: keyid:2E:6C:39:E3:71:14:18:83:29:2C:46:0D:E9:EC:38:AA:87:EA:7D:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388.cer sbgp-ipAddrBlock: critical IPv4: 192.133.23.0/24 199.195.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:a8:e6:fa:ac:62:69:ac:09:d9:51:98:0f:34:7b:2f:6b:de: b9:78:83:2d:4f:8d:e0:2c:10:d2:9a:18:cd:6c:dc:27:d3:70: e8:c7:f1:c2:87:1f:da:f3:b2:7e:52:a9:50:42:ac:74:5a:45: 02:10:8a:89:5e:bf:f6:8a:96:f5:d2:96:00:1c:6a:42:ff:e6: fb:48:e7:b1:b2:a4:dd:0d:e2:d6:93:2f:96:56:ba:10:f1:0d: 1e:60:b6:8d:1f:b7:2c:c9:6a:8e:d3:b3:01:f2:c2:30:8b:67: 26:45:38:c2:ec:e3:1b:e6:f5:cf:93:9e:14:b2:e5:5e:c0:a4: 8b:da:ae:47:aa:ec:4f:39:85:e1:c7:ec:26:04:cb:66:9f:13: b8:ed:9b:13:4a:06:52:36:a1:27:99:0f:79:c1:dc:20:c2:22: 9f:99:2a:98:bc:d2:b1:87:fd:80:b1:4a:30:ff:3c:81:0b:5d: 85:1f:f6:55:79:ad:34:4b:bd:22:0b:24:11:fc:a6:45:7d:61: 0f:eb:33:9c:77:a7:b3:6e:3a:21:86:e0:92:1c:26:ca:6a:83: 8f:75:a7:5d:82:d1:ab:d4:66:a4:e2:73:45:fa:51:52:78:19: 3c:7c:db:01:c1:12:be:c9:cb:d4:21:14:8f:4b:4e:fc:c2:2c: 42:c5:db:ce -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2q4DcXhSaIvakPKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyZTIzZjUtMDMyYi00NjcwLThlMDUtYjRiMDQ3N2U0 Mzg4MB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk YmIyNTE2ODItYzkzMC00OTBhLWIyYTQtMDAyY2U3YzQxOGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMHTqwbQgr1KnhSYFKjEHM+6ie39cvR4mooh QfME8c6hCEjdWO2iqiuzt3BnekANEvLnC4LILi0CaCCsZ46yFRljthiPY35FkcK2 V09w25Teb+PHmBlqwjh0iHkWUvRlpaxE35IssbS+NresCYhfxshFIXAKtSGxhpZo oTANihNNjKe05Exl15eaRmxRhNgefgShrWc1uAAxDlJQxHTjW6Kpvad4c7HM/7e9 lPnajzz3w0bmGA0Ib/5/jvYUVom9ivXsMTBb44GRh505VY7sU+Uj2tX+Nvc+mhTG jfDmNg57yhONYjXQ5eRbA48k3iYAsIygl4v7QrmBUoJ4gPuyFQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOM7/axFVcFKIrTab2fbBHwzsAeFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jNDJl MjNmNS0wMzJiLTQ2NzAtOGUwNS1iNGIwNDc3ZTQzODgvOGE5Y2JhZTgtYjY0OS0z NDI4LWE2NWEtZGVlNzQxYmJmMmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzQyZTIzZjUtMDMyYi00NjcwLThl MDUtYjRiMDQ3N2U0Mzg4L2M0MmUyM2Y1LTAzMmItNDY3MC04ZTA1LWI0YjA0Nzdl NDM4OC5jcmwwHwYDVR0jBBgwFoAULmw543EUGIMpLEYN6ew4qofqfW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jNDJlMjNmNS0wMzJiLTQ2NzAtOGUwNS1iNGIw NDc3ZTQzODguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwIUXAwQE x8MQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGao5vqsYmmsCdlRmA80ey9r3rl4gy1PjeAsENKaGM1s3CfT cOjH8cKHH9rzsn5SqVBCrHRaRQIQiolev/aKlvXSlgAcakL/5vtI57GypN0N4taT L5ZWuhDxDR5gto0ftyzJao7TswHywjCLZyZFOMLs4xvm9c+TnhSy5V7ApIvarkeq 7E85heHH7CYEy2afE7jtmxNKBlI2oSeZD3nB3CDCIp+ZKpi80rGH/YCxSjD/PIEL XYUf9lV5rTRLvSILJBH8pkV9YQ/rM5x3p7NuOiGG4JIcJspqg491p12C0avUZqTi c0X6UVJ4GTx82wHBEr7Jy9QhFI9LTvzCLELF284= -----END CERTIFICATE-----Generated at Wed May 13 04:12:29 2026 by rpki-client