$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/0f86af8f-3122-34df-ae7e-04811d8c8ab9.roa File: 0f86af8f-3122-34df-ae7e-04811d8c8ab9.roa (raw, json) Hash identifier: XguLcagZqRLRgmKnYJfgCCzveDXCGWytqawkh09fnqE= Subject key identifier: 80:61:80:B1:23:FE:D0:96:7F:CB:04:12:40:16:9C:73:75:76:E7:36 Certificate issuer: /CN=cfa0ce23-32cb-46ff-8af9-825de64f20a1 Certificate serial: 010D0C9F4328584D3DFFAE0470978D82CC9E5F40 Authority key identifier: 99:5C:A1:6E:3B:E6:C5:E6:89:20:A2:01:92:2A:45:E5:1D:B5:0A:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/0f86af8f-3122-34df-ae7e-04811d8c8ab9.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 26677 IP address blocks: 192.139.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:ae:04:70:97:8d:82:cc:9e:5f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfa0ce23-32cb-46ff-8af9-825de64f20a1 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=d2ab3dd8-5e09-4258-9bad-77ad783d0cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4f:88:36:e3:2a:22:10:4f:d5:36:b4:5c:e3: 99:88:a3:95:f2:bb:6c:ad:86:1c:41:fa:b5:e3:bd: 74:3b:2b:ad:f5:93:59:79:d5:ee:97:37:df:7b:a0: 0b:d8:00:f2:0f:9c:ec:7f:00:4d:a7:3a:d9:fc:de: 89:00:90:ac:66:15:0d:84:f6:5d:cd:ac:d9:79:a6: cd:54:b1:5d:f7:fc:3d:f1:75:94:51:82:97:5b:13: d8:f8:d5:d0:fd:c2:06:a4:69:82:0c:ea:8a:c3:63: 4a:8b:0a:61:21:9f:e6:94:50:3c:8c:0f:36:c4:f9: a9:04:50:60:f9:13:ab:7f:31:02:0f:ce:ca:7b:65: fe:59:c7:75:c4:24:53:94:8a:22:62:a7:4e:b5:60: 31:53:e1:a6:9d:b5:33:da:f0:1a:55:5d:98:68:0a: a9:aa:52:71:71:0f:7c:87:75:ac:53:b6:cf:2c:6c: 8a:c6:d5:9d:a8:ed:21:39:95:18:ff:ae:4a:dc:42: 8e:96:bd:72:f5:72:9d:1f:9a:a9:0e:af:63:73:f7: ca:83:8f:3c:42:83:62:31:e4:d4:fb:8e:de:99:75: 1c:5a:e4:3b:20:e9:3d:5f:73:09:d2:25:d6:2a:40: 79:d6:f4:fc:b9:46:f2:2b:6d:66:b5:ac:c2:9d:3b: ac:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:61:80:B1:23:FE:D0:96:7F:CB:04:12:40:16:9C:73:75:76:E7:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/0f86af8f-3122-34df-ae7e-04811d8c8ab9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.crl X509v3 Authority Key Identifier: keyid:99:5C:A1:6E:3B:E6:C5:E6:89:20:A2:01:92:2A:45:E5:1D:B5:0A:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1.cer sbgp-ipAddrBlock: critical IPv4: 192.139.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:b3:10:7e:20:0e:9b:41:6c:dd:9b:5b:67:cf:75:99:dc:3f: e3:25:83:20:3b:c2:6c:e2:2d:25:98:69:60:72:21:3a:fb:74: 47:35:0f:80:db:62:c5:af:03:1e:58:c5:9c:8a:70:b5:39:b1: 1d:0a:0b:54:98:85:e7:97:cc:1e:7b:db:4a:28:8b:69:d9:bc: 10:6d:16:0b:ff:2e:9e:23:55:cf:c3:13:93:fb:34:da:f2:46: c1:97:1e:70:38:c3:0c:94:12:27:40:8e:1a:0f:f3:a1:39:89: f7:63:8c:85:cd:dd:b5:b0:ee:68:a4:08:1b:ce:37:01:9e:43: 5b:55:d7:c7:70:49:b0:f8:2b:df:d6:f3:59:5f:0e:ff:5d:bf: 7b:94:5a:c7:0d:7d:67:f7:92:07:c7:7a:31:52:e3:0e:54:7d: d9:c4:4a:1c:b1:a3:83:b8:7a:22:8c:b3:e4:27:d6:49:3e:c5: 44:8c:b6:f0:09:2b:3d:f7:0f:50:e4:b5:4f:c7:30:36:18:20: 3c:77:bf:d6:9d:85:b0:eb:c6:cd:78:34:4b:cf:31:df:5e:70: bd:74:3e:5f:f0:50:e8:53:2f:4e:1d:93:85:84:cc:ca:e5:c9: f5:a1:b2:bd:f0:81:21:c9:eb:bc:c3:7a:19:66:54:6f:c9:a8: 79:7b:30:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/64EcJeNgsyeX0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZhMGNlMjMtMzJjYi00NmZmLThhZjktODI1ZGU2NGYy MGExMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZDJhYjNkZDgtNWUwOS00MjU4LTliYWQtNzdhZDc4M2QwY2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE+INuMqIhBP1Ta0XOOZiKOV8rtsrYYcQfq1 4710Oyut9ZNZedXulzffe6AL2ADyD5zsfwBNpzrZ/N6JAJCsZhUNhPZdzazZeabN VLFd9/w98XWUUYKXWxPY+NXQ/cIGpGmCDOqKw2NKiwphIZ/mlFA8jA82xPmpBFBg +ROrfzECD87Ke2X+Wcd1xCRTlIoiYqdOtWAxU+GmnbUz2vAaVV2YaAqpqlJxcQ98 h3WsU7bPLGyKxtWdqO0hOZUY/65K3EKOlr1y9XKdH5qpDq9jc/fKg488QoNiMeTU +47emXUcWuQ7IOk9X3MJ0iXWKkB51vT8uUbyK21mtazCnTuszwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBhgLEj/tCWf8sEEkAWnHN1duc2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jZmEw Y2UyMy0zMmNiLTQ2ZmYtOGFmOS04MjVkZTY0ZjIwYTEvMGY4NmFmOGYtMzEyMi0z NGRmLWFlN2UtMDQ4MTFkOGM4YWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2ZhMGNlMjMtMzJjYi00NmZmLThh ZjktODI1ZGU2NGYyMGExL2NmYTBjZTIzLTMyY2ItNDZmZi04YWY5LTgyNWRlNjRm MjBhMS5jcmwwHwYDVR0jBBgwFoAUmVyhbjvmxeaJIKIBkipF5R21CrowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jZmEwY2UyMy0zMmNiLTQ2ZmYtOGFmOS04MjVk ZTY0ZjIwYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIvtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEizEH4gDptBbN2bW2fPdZncP+MlgyA7wmziLSWYaWByITr7dEc1D4Db YsWvAx5YxZyKcLU5sR0KC1SYheeXzB5720ooi2nZvBBtFgv/Lp4jVc/DE5P7NNry RsGXHnA4wwyUEidAjhoP86E5ifdjjIXN3bWw7mikCBvONwGeQ1tV18dwSbD4K9/W 81lfDv9dv3uUWscNfWf3kgfHejFS4w5UfdnEShyxo4O4eiKMs+Qn1kk+xUSMtvAJ Kz33D1DktU/HMDYYIDx3v9adhbDrxs14NEvPMd9ecL10Pl/wUOhTL04dk4WEzMrl yfWhsr3wgSHJ67zDehlmVG/JqHl7MKo= -----END CERTIFICATE-----Generated at Thu Mar 26 19:14:22 2026 by rpki-client