$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/c5797330-e4a4-389c-a5a6-c8ca3f461081.roa File: c5797330-e4a4-389c-a5a6-c8ca3f461081.roa (raw, json) Hash identifier: 2DRbcWzniY2mxx3bqHhz8t0TJ1cGhtOnGiVlrUOnt5g= Subject key identifier: 22:CF:E2:A9:61:E7:3B:D0:55:3C:0C:D7:CC:CD:68:B9:79:F0:0F:87 Certificate issuer: /CN=8e159820-cf56-42eb-b9f0-0187b10bb721 Certificate serial: 010D0C9F4328584D422F8DD62EF56F8D43F08A40 Authority key identifier: 3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/c5797330-e4a4-389c-a5a6-c8ca3f461081.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 11032 IP address blocks: 192.139.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:8d:d6:2e:f5:6f:8d:43:f0:8a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e159820-cf56-42eb-b9f0-0187b10bb721 Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=d8d344a7-3f22-467e-84f7-b6d101db8ae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bc:29:53:96:60:76:81:6c:46:16:1c:6c:1e: 5c:e9:ac:16:ee:ee:47:20:0b:f4:4c:93:63:8e:05: a3:2a:e7:05:34:e2:b3:a2:b1:d8:84:c1:43:7b:08: cd:9b:5e:a8:7d:98:41:48:0e:0d:f0:34:ee:d1:a5: 5f:90:f1:c8:ce:85:ba:2a:59:4a:70:3a:37:a9:41: bc:c5:8e:c0:f9:9e:ce:bc:c7:b0:b0:30:3d:6e:23: 4f:87:a0:a8:34:4a:7d:73:8e:b2:66:dd:ec:1e:59: 1b:0f:41:7d:cb:ed:00:93:a4:d3:71:39:67:e2:9f: 8e:0e:e1:f2:c1:47:e5:a7:25:b0:f5:d4:96:b1:2b: 45:0b:7b:00:28:b4:8c:9e:32:17:92:f1:01:64:15: 95:40:06:d1:3c:97:29:02:09:49:14:35:ca:d3:2e: bb:21:21:a2:72:67:99:bf:b3:e0:4a:85:97:a6:b2: 9a:6b:8c:e7:9d:60:f8:6e:9d:c0:c6:7b:09:6e:b6: 68:c5:3a:f2:f3:87:f2:e9:a0:9c:71:de:29:7a:16: 78:31:83:17:64:56:d0:9e:ea:4e:15:18:1a:3f:a3: b6:c4:3c:68:3e:12:f7:61:b6:7f:d0:af:f5:77:8c: 07:6c:bb:b9:92:8e:c6:c8:b3:53:2f:be:64:34:2d: dc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:CF:E2:A9:61:E7:3B:D0:55:3C:0C:D7:CC:CD:68:B9:79:F0:0F:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/c5797330-e4a4-389c-a5a6-c8ca3f461081.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl X509v3 Authority Key Identifier: keyid:3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer sbgp-ipAddrBlock: critical IPv4: 192.139.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:32:a9:05:eb:da:67:e8:60:d8:e3:c9:5f:ff:1d:19:79:f0: b2:a7:5d:e5:dc:5a:0b:9b:48:f6:f7:0f:a5:8a:b8:c8:b4:1f: f2:a1:42:2d:4a:4b:4e:15:0d:a9:4b:6f:cd:7e:f4:40:5b:1d: ff:82:a0:45:71:0f:5c:4f:aa:2d:71:a6:83:a8:7a:4e:75:a6: 9b:cc:50:60:8a:09:7a:e8:a1:e0:54:8a:de:93:ff:1d:63:72: d5:86:9d:6d:17:1e:04:90:f4:55:bf:88:2f:e8:6e:79:d8:a1: 11:3f:9e:84:d2:4a:b0:0a:87:42:34:89:a6:e9:11:4e:d2:13: 39:59:0e:0f:ac:4b:2e:2f:6b:ad:be:97:67:e5:c3:4d:f4:61: 4b:df:ae:fa:40:51:fe:c8:26:e3:85:ad:4f:65:00:fd:77:ed: 2f:85:e8:76:d7:b6:34:6c:67:fe:06:b8:52:85:c1:00:50:7b: 9d:9f:91:ee:a5:31:ab:98:87:53:fc:a3:9a:46:4b:89:82:b0: a4:d8:c2:24:ab:68:ac:54:10:e7:92:5b:7e:b4:b6:4b:36:06: 26:47:d3:90:79:4f:a5:46:fb:dc:b3:dd:ea:b3:19:2d:53:a3: 27:31:c7:ca:40:19:e2:59:bc:69:0f:62:c7:cd:fc:6f:20:b5: 01:92:5c:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1CL43WLvVvjUPwikAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUxNTk4MjAtY2Y1Ni00MmViLWI5ZjAtMDE4N2IxMGJi NzIxMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk ZDhkMzQ0YTctM2YyMi00NjdlLTg0ZjctYjZkMTAxZGI4YWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bwpU5ZgdoFsRhYcbB5c6awW7u5HIAv0TJNj jgWjKucFNOKzorHYhMFDewjNm16ofZhBSA4N8DTu0aVfkPHIzoW6KllKcDo3qUG8 xY7A+Z7OvMewsDA9biNPh6CoNEp9c46yZt3sHlkbD0F9y+0Ak6TTcTln4p+ODuHy wUflpyWw9dSWsStFC3sAKLSMnjIXkvEBZBWVQAbRPJcpAglJFDXK0y67ISGicmeZ v7PgSoWXprKaa4znnWD4bp3AxnsJbrZoxTry84fy6aCccd4pehZ4MYMXZFbQnupO FRgaP6O2xDxoPhL3YbZ/0K/1d4wHbLu5ko7GyLNTL75kNC3cFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLP4qlh5zvQVTwM18zNaLl58A+HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZTE1 OTgyMC1jZjU2LTQyZWItYjlmMC0wMTg3YjEwYmI3MjEvYzU3OTczMzAtZTRhNC0z ODljLWE1YTYtYzhjYTNmNDYxMDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGUxNTk4MjAtY2Y1Ni00MmViLWI5 ZjAtMDE4N2IxMGJiNzIxLzhlMTU5ODIwLWNmNTYtNDJlYi1iOWYwLTAxODdiMTBi YjcyMS5jcmwwHwYDVR0jBBgwFoAUP6asP+ah5UuMrQtDbx2HECUnhEQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZTE1OTgyMC1jZjU2LTQyZWItYjlmMC0wMTg3 YjEwYmI3MjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIsNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsyqQXr2mfoYNjjyV//HRl58LKnXeXcWgubSPb3D6WKuMi0H/KhQi1K S04VDalLb81+9EBbHf+CoEVxD1xPqi1xpoOoek51ppvMUGCKCXrooeBUit6T/x1j ctWGnW0XHgSQ9FW/iC/obnnYoRE/noTSSrAKh0I0iabpEU7SEzlZDg+sSy4va62+ l2flw030YUvfrvpAUf7IJuOFrU9lAP137S+F6HbXtjRsZ/4GuFKFwQBQe52fke6l MauYh1P8o5pGS4mCsKTYwiSraKxUEOeSW360tks2BiZH05B5T6VG+9yz3eqzGS1T oycxx8pAGeJZvGkPYsfN/G8gtQGSXJM= -----END CERTIFICATE-----Generated at Thu Mar 26 08:48:15 2026 by rpki-client