$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/c0dd8b83-5957-3765-9bda-887da09e9000.roa File: c0dd8b83-5957-3765-9bda-887da09e9000.roa (raw, json) Hash identifier: t4jzhUurrG8Ny5tyXKLHaPidiYPIJeTlgdMXlJuZaZk= Subject key identifier: A0:48:B0:04:18:CC:B4:34:AD:56:70:BC:CA:C7:6B:39:D2:DB:9C:38 Certificate issuer: /CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333 Certificate serial: 010D0C9F4328584D3DFFB52B16DE81E47058F4D0 Authority key identifier: E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/c0dd8b83-5957-3765-9bda-887da09e9000.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 160 IP address blocks: 192.170.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:b5:2b:16:de:81:e4:70:58:f4:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=3b16c638-b943-4be4-9897-fe703ca6e2fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f8:2c:05:69:44:ce:6a:17:d4:21:d9:c6:f4: a0:34:1e:df:d0:93:5f:84:06:57:a0:80:31:b9:02: 57:37:71:1c:09:95:4c:42:b2:c7:b4:88:f5:04:08: c6:79:12:ed:61:56:c3:d4:62:c3:77:bd:65:be:af: 51:6f:43:f5:44:08:cc:11:8f:95:b9:b3:51:fe:7b: 80:bf:87:a1:48:52:1f:9e:63:77:2d:d2:94:d4:a5: 03:af:81:fa:62:81:78:e4:cb:4b:04:d3:ed:27:4a: 0f:28:76:df:c3:75:68:0b:ca:e2:6b:c1:0b:08:5f: 76:64:29:67:66:ea:b8:28:04:b6:9c:81:2c:d4:cf: 1e:6a:0d:07:cc:b6:a2:2a:29:cd:92:41:d8:c2:3c: 28:be:00:73:8e:61:b3:e1:74:ed:3e:69:ca:75:38: b7:0b:37:0e:6e:65:60:1b:97:6d:84:2c:9e:8e:4f: 6b:62:50:b8:78:70:96:aa:d4:7e:4d:54:15:c5:6f: ce:b0:29:6e:cc:bc:04:d6:a7:e1:07:66:26:7c:52: 8f:f5:fc:99:6e:c8:9e:d7:03:8c:99:83:2c:c6:e9: 82:c1:06:6f:23:90:57:0c:8b:95:cf:51:63:77:7d: 46:ad:6b:54:9d:d0:6d:e4:3b:20:8d:44:5d:1c:9b: da:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:48:B0:04:18:CC:B4:34:AD:56:70:BC:CA:C7:6B:39:D2:DB:9C:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/c0dd8b83-5957-3765-9bda-887da09e9000.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl X509v3 Authority Key Identifier: keyid:E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer sbgp-ipAddrBlock: critical IPv4: 192.170.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:79:73:b6:ae:65:e7:6b:f7:12:54:54:b4:8b:0f:85:08:61: 6e:bf:4e:2b:f8:42:11:72:a6:6f:b3:7d:54:de:88:a1:d0:88: b5:9a:50:8a:91:72:30:6a:1e:cb:e0:d0:b9:6f:38:86:76:aa: 96:80:48:a4:55:38:b6:2c:a7:1c:4d:0e:fa:69:0c:cd:3b:49: 97:1b:30:3b:e8:da:c5:5f:09:ce:f2:a1:bd:3a:14:42:ba:1c: f6:53:79:c4:ea:87:7c:7a:ac:26:f0:a4:f5:ab:7a:34:1a:10: 9a:0e:c8:8e:5c:85:40:c5:7a:17:0f:80:f5:ac:52:10:f0:b1: a9:d4:db:32:f7:7c:7c:94:90:57:9c:d2:ce:b6:7d:32:12:f5: f9:16:7b:9f:8b:6c:53:e0:79:f5:86:95:90:11:35:92:72:ac: 2e:13:39:d3:08:10:62:a2:18:3c:f8:31:a6:ea:05:55:9b:24: a1:86:31:d5:38:cf:2a:ff:7e:11:dd:0e:e5:96:c7:76:c1:2d: ed:25:e5:b9:e9:f4:3a:cf:30:7b:b2:67:a3:4d:67:27:1f:00: d6:f3:b2:e3:c3:0c:79:d5:dd:9a:7d:21:b5:29:04:bc:dc:10: 0f:a3:ce:5a:0a:29:63:3e:2a:d8:6a:3b:cf:3e:6d:7f:d3:e6: 07:3a:52:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/7UrFt6B5HBY9NAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgyMjE1MGYtMmU2Zi00ZmM5LWIwZDMtNWE4ZTA5MDNi MzMzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk M2IxNmM2MzgtYjk0My00YmU0LTk4OTctZmU3MDNjYTZlMmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/gsBWlEzmoX1CHZxvSgNB7f0JNfhAZXoIAx uQJXN3EcCZVMQrLHtIj1BAjGeRLtYVbD1GLDd71lvq9Rb0P1RAjMEY+VubNR/nuA v4ehSFIfnmN3LdKU1KUDr4H6YoF45MtLBNPtJ0oPKHbfw3VoC8ria8ELCF92ZCln Zuq4KAS2nIEs1M8eag0HzLaiKinNkkHYwjwovgBzjmGz4XTtPmnKdTi3CzcObmVg G5dthCyejk9rYlC4eHCWqtR+TVQVxW/OsCluzLwE1qfhB2YmfFKP9fyZbsie1wOM mYMsxumCwQZvI5BXDIuVz1Fjd31GrWtUndBt5DsgjURdHJva4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBIsAQYzLQ0rVZwvMrHaznS25w4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ODIy MTUwZi0yZTZmLTRmYzktYjBkMy01YThlMDkwM2IzMzMvYzBkZDhiODMtNTk1Ny0z NzY1LTliZGEtODg3ZGEwOWU5MDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTgyMjE1MGYtMmU2Zi00ZmM5LWIw ZDMtNWE4ZTA5MDNiMzMzLzk4MjIxNTBmLTJlNmYtNGZjOS1iMGQzLTVhOGUwOTAz YjMzMy5jcmwwHwYDVR0jBBgwFoAU6PtTQ2MJkFBb6KTESgm8RptQc+MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85ODIyMTUwZi0yZTZmLTRmYzktYjBkMy01YThl MDkwM2IzMzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwKrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAF5c7auZedr9xJUVLSLD4UIYW6/Tiv4QhFypm+zfVTeiKHQiLWaUIqR cjBqHsvg0LlvOIZ2qpaASKRVOLYspxxNDvppDM07SZcbMDvo2sVfCc7yob06FEK6 HPZTecTqh3x6rCbwpPWrejQaEJoOyI5chUDFehcPgPWsUhDwsanU2zL3fHyUkFec 0s62fTIS9fkWe5+LbFPgefWGlZARNZJyrC4TOdMIEGKiGDz4MabqBVWbJKGGMdU4 zyr/fhHdDuWWx3bBLe0l5bnp9DrPMHuyZ6NNZycfANbzsuPDDHnV3Zp9IbUpBLzc EA+jzloKKWM+KthqO88+bX/T5gc6UoU= -----END CERTIFICATE-----Generated at Sat Mar 28 12:17:43 2026 by rpki-client