$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/5b7505ae-0f34-3626-bc11-49f8ec61daa1.roa File: 5b7505ae-0f34-3626-bc11-49f8ec61daa1.roa (raw, json) Hash identifier: /LtdNnM5LKnZakNcBZCPcxQH7ll1Afj8HgYCfR1m7v8= Subject key identifier: 60:33:65:01:A3:56:C0:5E:36:83:4E:F8:7B:D2:7C:1E:64:5E:8B:44 Certificate issuer: /CN=0c82e125-4df5-4912-a714-101a1caa5b99 Certificate serial: 010D0C9F4328584D343A1651A9BA48E6103F5740 Authority key identifier: C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/5b7505ae-0f34-3626-bc11-49f8ec61daa1.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 54054 IP address blocks: 192.48.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:16:51:a9:ba:48:e6:10:3f:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c82e125-4df5-4912-a714-101a1caa5b99 Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=73f4d8c4-4ab3-4b67-baee-d6d3a7fe6370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:99:5b:41:03:cd:a5:69:9a:4c:98:b1:15:56: 34:6e:04:68:06:af:79:9e:cc:3b:b6:20:4d:ee:a7: 11:51:83:3c:9f:3a:91:0c:58:ea:80:3d:37:36:99: 4e:d8:8a:8b:1d:ad:ae:22:16:19:5a:12:41:58:86: b8:f8:3e:cf:ca:05:5f:cc:90:36:f6:f4:1d:bb:9a: 42:dc:98:44:fc:01:5d:7d:a9:48:68:78:86:77:45: 7d:46:c8:03:88:c8:99:06:c5:e3:e9:b4:5e:4d:e2: e2:ee:60:80:df:a8:85:c6:53:d9:29:fa:40:a8:5c: c0:bd:a3:33:97:87:80:52:aa:d4:1c:27:5a:47:8e: 71:68:e3:7d:6b:8a:d3:f9:55:14:8c:33:87:3c:f7: f2:68:b1:6b:84:1e:b9:69:21:7d:d5:16:f0:39:13: ed:3b:3f:c2:e1:57:92:2a:64:cc:34:3f:52:cc:aa: 81:e6:07:9f:0e:87:99:93:ea:0b:e6:92:9d:7a:5b: f3:93:ae:84:9c:f7:d6:e1:47:32:df:4b:be:99:78: 86:27:fb:89:a2:82:81:12:93:01:91:67:0b:9c:81: 83:9d:e1:96:72:41:56:a9:ef:bc:0b:83:f1:0b:b4: dc:fc:ef:c7:c0:62:7d:2a:83:b8:16:22:6d:64:52: 82:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:33:65:01:A3:56:C0:5E:36:83:4E:F8:7B:D2:7C:1E:64:5E:8B:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/5b7505ae-0f34-3626-bc11-49f8ec61daa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl X509v3 Authority Key Identifier: keyid:C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer sbgp-ipAddrBlock: critical IPv4: 192.48.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:84:d5:94:0d:0e:dd:b4:85:f2:cb:68:2f:1a:f0:30:a6:ac: 3b:c3:97:4a:c8:fb:c3:58:8d:85:2d:22:1a:6e:89:dc:3c:64: bd:8a:19:2d:d9:e2:bb:36:2b:86:6e:76:50:94:8c:28:21:46: 11:d3:10:81:d6:25:0d:38:29:48:f9:1e:05:e5:3b:50:32:ec: 7d:1e:39:bf:32:e8:3e:db:2d:b4:be:cd:b6:f4:c6:dc:ce:c9: 1d:85:3e:99:80:bc:ee:5c:56:13:5f:00:dc:45:9f:01:c3:68: fd:6f:ae:7e:7d:2d:3e:f3:54:58:26:5f:c6:b8:8f:80:ab:97: d0:05:0c:3c:72:ca:36:31:de:e8:e6:01:3f:f6:28:f4:09:3c: 5f:89:fe:37:4e:d9:93:cc:a8:5e:aa:21:29:bf:12:96:cd:29: 58:d9:cc:8c:d0:e1:dc:5a:1a:55:9a:fe:7f:fd:ec:8e:07:89: ba:17:5e:50:1e:95:7b:6b:03:83:57:70:bb:f1:47:a6:5e:91: c5:96:bc:7e:67:8e:d1:5a:39:4a:f7:b3:d7:26:d2:14:44:61: b7:de:75:2d:72:7b:14:33:e7:03:d8:2a:66:d8:b7:ae:05:64: 30:ce:79:c8:29:cf:a3:b6:39:24:1e:42:d5:73:27:29:f8:86: 17:c9:76:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE00OhZRqbpI5hA/V0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM4MmUxMjUtNGRmNS00OTEyLWE3MTQtMTAxYTFjYWE1 Yjk5MB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk NzNmNGQ4YzQtNGFiMy00YjY3LWJhZWUtZDZkM2E3ZmU2MzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJlbQQPNpWmaTJixFVY0bgRoBq95nsw7tiBN 7qcRUYM8nzqRDFjqgD03NplO2IqLHa2uIhYZWhJBWIa4+D7PygVfzJA29vQdu5pC 3JhE/AFdfalIaHiGd0V9RsgDiMiZBsXj6bReTeLi7mCA36iFxlPZKfpAqFzAvaMz l4eAUqrUHCdaR45xaON9a4rT+VUUjDOHPPfyaLFrhB65aSF91RbwORPtOz/C4VeS KmTMND9SzKqB5gefDoeZk+oL5pKdelvzk66EnPfW4Ucy30u+mXiGJ/uJooKBEpMB kWcLnIGDneGWckFWqe+8C4PxC7Tc/O/HwGJ9KoO4FiJtZFKCGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAzZQGjVsBeNoNO+HvSfB5kXotEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzgy ZTEyNS00ZGY1LTQ5MTItYTcxNC0xMDFhMWNhYTViOTkvNWI3NTA1YWUtMGYzNC0z NjI2LWJjMTEtNDlmOGVjNjFkYWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGM4MmUxMjUtNGRmNS00OTEyLWE3 MTQtMTAxYTFjYWE1Yjk5LzBjODJlMTI1LTRkZjUtNDkxMi1hNzE0LTEwMWExY2Fh NWI5OS5jcmwwHwYDVR0jBBgwFoAUyDy4ggA7MgjtxRD3UBDgaNSWRPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzgyZTEyNS00ZGY1LTQ5MTItYTcxNC0xMDFh MWNhYTViOTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDDfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqE1ZQNDt20hfLLaC8a8DCmrDvDl0rI+8NYjYUtIhpuidw8ZL2KGS3Z 4rs2K4ZudlCUjCghRhHTEIHWJQ04KUj5HgXlO1Ay7H0eOb8y6D7bLbS+zbb0xtzO yR2FPpmAvO5cVhNfANxFnwHDaP1vrn59LT7zVFgmX8a4j4Crl9AFDDxyyjYx3ujm AT/2KPQJPF+J/jdO2ZPMqF6qISm/EpbNKVjZzIzQ4dxaGlWa/n/97I4HiboXXlAe lXtrA4NXcLvxR6ZekcWWvH5njtFaOUr3s9cm0hREYbfedS1yexQz5wPYKmbYt64F ZDDOecgpz6O2OSQeQtVzJyn4hhfJdr0= -----END CERTIFICATE-----Generated at Thu Mar 26 06:30:13 2026 by rpki-client