$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/fc734abe-84cb-31fb-9091-572995e67bbc.roa File: fc734abe-84cb-31fb-9091-572995e67bbc.roa (raw, json) Hash identifier: jK8qcv3t5CiBqq83XOssUkhZPaoRRyW9jbbSDU7MZco= Subject key identifier: 3E:CC:AA:36:EE:8D:DE:AB:2D:8B:3B:E7:2D:13:B4:1D:E0:D5:58:3C Certificate issuer: /CN=08a6d347-5170-4470-abb6-1b99491a1406 Certificate serial: 010D0C9F4328584D143D447782EEA918C6611E00 Authority key identifier: 34:E9:93:A8:56:86:39:15:85:BA:37:93:95:1E:90:CA:D0:9C:13:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/fc734abe-84cb-31fb-9091-572995e67bbc.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 199959 IP address blocks: 192.189.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/08a6d347-5170-4470-abb6-1b99491a1406.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/08a6d347-5170-4470-abb6-1b99491a1406.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:44:77:82:ee:a9:18:c6:61:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08a6d347-5170-4470-abb6-1b99491a1406 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=41ba7a76-86ee-4c44-9de8-352b87159a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:90:5a:a0:6c:be:f1:1c:c4:db:8f:79:65:e4: 0d:04:f0:3a:79:04:2f:15:18:ad:60:21:dd:5f:37: 17:75:d2:db:60:e4:8d:b2:56:db:a0:60:31:dc:ef: 2b:e4:72:96:5c:96:e6:e1:fe:f9:98:64:9d:52:53: 68:55:10:98:97:a4:b4:7c:f4:ca:63:b2:d3:d5:81: a6:81:b9:7e:16:f2:98:48:4b:7b:bc:cc:8f:3c:2c: 47:ff:8b:ef:d2:ec:45:a7:50:70:8c:bf:8e:75:96: 55:fc:f1:c2:a8:0f:cf:7c:71:82:7a:b2:c2:66:0d: 06:3f:86:48:12:47:70:10:17:aa:7f:f8:9e:82:23: 5f:9d:33:14:eb:7c:8d:08:32:14:36:a5:d3:b1:f0: fd:ac:75:0a:26:82:4e:78:d3:dd:d2:a0:5a:74:e2: e8:a8:17:fe:45:a6:a8:8d:54:6c:9e:e6:95:16:5c: cc:00:35:69:56:0d:41:32:59:e5:04:4e:3b:5c:26: a4:45:8a:8f:f3:37:df:ec:5a:02:a6:77:b5:f8:f0: 86:28:b9:b1:03:c2:5b:59:96:fc:f6:bf:f9:12:89: 87:12:40:53:b0:bd:6c:de:3c:af:f1:9a:3d:9e:da: 0f:cd:71:3c:3f:f1:93:5c:4e:e4:49:44:b9:ab:2d: d9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CC:AA:36:EE:8D:DE:AB:2D:8B:3B:E7:2D:13:B4:1D:E0:D5:58:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/fc734abe-84cb-31fb-9091-572995e67bbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/08a6d347-5170-4470-abb6-1b99491a1406.crl X509v3 Authority Key Identifier: keyid:34:E9:93:A8:56:86:39:15:85:BA:37:93:95:1E:90:CA:D0:9C:13:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406.cer sbgp-ipAddrBlock: critical IPv4: 192.189.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:10:d8:9b:de:26:75:3d:62:f2:c0:99:88:6b:75:25:af:bc: 32:73:6b:d1:cd:8d:ad:70:b6:48:86:ca:3e:18:4c:34:f7:3f: 37:ba:c2:10:c7:16:6e:c5:56:6d:81:87:2a:a9:7e:dd:af:bd: 3a:14:59:4b:5f:4b:a8:09:0f:fa:2c:e3:2c:a0:97:32:8f:28: ab:8b:f7:41:ec:8d:d7:79:3c:25:2d:b5:1b:82:94:a0:03:1f: 72:77:5a:bb:d8:95:a6:48:d4:83:11:31:01:c3:f9:03:c9:62: fa:7b:c7:59:9c:4f:13:e9:e4:1b:a6:72:e3:2b:6d:c0:34:b5: 09:be:c1:3f:df:05:d9:f5:41:92:db:aa:e7:24:2d:3f:a3:e2: 87:e6:82:14:df:d0:f9:b3:c5:7e:a6:e7:bc:ce:c5:4c:58:65: cc:c2:73:aa:6d:b7:fd:7f:19:2f:21:df:54:af:80:de:d4:21: 35:97:4f:54:12:20:ea:e5:bb:6f:00:3f:17:31:3f:66:12:c3: 60:17:99:87:f0:7c:a2:c5:fc:ef:eb:53:4b:9d:8c:77:97:3c: de:6e:cb:ab:09:77:2f:ea:3d:84:d2:20:ec:94:2c:9d:83:33: 74:2f:3a:aa:4f:5c:7d:ee:66:ab:83:f7:96:33:fa:9c:b0:cc: b5:56:33:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPUR3gu6pGMZhHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDhhNmQzNDctNTE3MC00NDcwLWFiYjYtMWI5OTQ5MWEx NDA2MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk NDFiYTdhNzYtODZlZS00YzQ0LTlkZTgtMzUyYjg3MTU5YTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5BaoGy+8RzE2495ZeQNBPA6eQQvFRitYCHd XzcXddLbYOSNslbboGAx3O8r5HKWXJbm4f75mGSdUlNoVRCYl6S0fPTKY7LT1YGm gbl+FvKYSEt7vMyPPCxH/4vv0uxFp1BwjL+OdZZV/PHCqA/PfHGCerLCZg0GP4ZI EkdwEBeqf/iegiNfnTMU63yNCDIUNqXTsfD9rHUKJoJOeNPd0qBadOLoqBf+Raao jVRsnuaVFlzMADVpVg1BMlnlBE47XCakRYqP8zff7FoCpne1+PCGKLmxA8JbWZb8 9r/5EomHEkBTsL1s3jyv8Zo9ntoPzXE8P/GTXE7kSUS5qy3ZCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7Mqjbujd6rLYs75y0TtB3g1Vg8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8wOGE2 ZDM0Ny01MTcwLTQ0NzAtYWJiNi0xYjk5NDkxYTE0MDYvZmM3MzRhYmUtODRjYi0z MWZiLTkwOTEtNTcyOTk1ZTY3YmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMDhhNmQzNDctNTE3MC00NDcwLWFi YjYtMWI5OTQ5MWExNDA2LzA4YTZkMzQ3LTUxNzAtNDQ3MC1hYmI2LTFiOTk0OTFh MTQwNi5jcmwwHwYDVR0jBBgwFoAUNOmTqFaGORWFujeTlR6QytCcE48wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8wOGE2ZDM0Ny01MTcwLTQ0NzAtYWJiNi0xYjk5 NDkxYTE0MDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL0CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEQ2JveJnU9YvLAmYhrdSWvvDJza9HNja1wtkiGyj4YTDT3Pze6whDH Fm7FVm2Bhyqpft2vvToUWUtfS6gJD/os4yyglzKPKKuL90Hsjdd5PCUttRuClKAD H3J3WrvYlaZI1IMRMQHD+QPJYvp7x1mcTxPp5BumcuMrbcA0tQm+wT/fBdn1QZLb quckLT+j4ofmghTf0PmzxX6m57zOxUxYZczCc6ptt/1/GS8h31SvgN7UITWXT1QS IOrlu28APxcxP2YSw2AXmYfwfKLF/O/rU0udjHeXPN5uy6sJdy/qPYTSIOyULJ2D M3QvOqpPXH3uZquD95Yz+pywzLVWM1Y= -----END CERTIFICATE-----Generated at Thu Mar 26 08:57:19 2026 by rpki-client