$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/b451892a-5138-3693-a8ec-542e202655c0.roa File: b451892a-5138-3693-a8ec-542e202655c0.roa (raw, json) Hash identifier: jRtVRpvItEGYWcgDuBkIvLLpeP7TmISJdr2i2kJADaQ= Subject key identifier: 40:E5:7B:10:9A:64:F9:15:C3:17:FD:19:BD:18:9C:22:D1:D3:17:A7 Certificate issuer: /CN=f3281a82-6c17-4658-80f7-ee1327b4779a Certificate serial: 010D0C9F4328584D40CA56F0A02F40B499F15100 Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/b451892a-5138-3693-a8ec-542e202655c0.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 22418 IP address blocks: 192.157.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:56:f0:a0:2f:40:b4:99:f1:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=7dc9c00a-e57c-4a48-8f69-446054f50faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:46:92:97:f7:6c:9d:6e:4f:a7:20:56:fd:e7: 4a:03:ff:7a:bf:97:d6:4e:4c:8a:3a:0a:b7:fa:45: 7d:a2:ed:ba:fb:4c:bc:21:54:49:09:6f:46:da:f1: ef:29:6f:08:37:b2:da:06:f2:40:ca:7b:98:f0:08: 61:4c:84:74:cc:1a:14:df:8d:fa:5b:53:05:98:76: 88:c6:30:b0:7d:e0:fb:ab:47:53:f0:94:f8:40:93: 60:32:6e:3a:12:2c:0f:03:80:53:84:ba:1b:13:eb: bb:9e:a5:94:26:e1:cc:33:aa:0e:54:87:a1:ed:8f: 41:53:41:14:2e:38:be:70:e3:93:8d:4c:e0:b9:23: ed:4e:41:e3:18:db:21:9a:3c:2c:c3:59:cb:0f:62: d2:f4:1b:e4:39:25:27:4f:e4:2b:75:77:bf:4f:9e: 81:a8:b0:61:55:94:c3:12:bd:0e:05:e0:4b:a3:14: f5:19:65:9f:d0:24:a6:74:5d:ec:29:32:91:6d:a8: 30:a0:2a:df:48:f4:c7:ec:0f:d0:b0:ca:b1:be:71: 49:07:56:66:8e:c3:f7:58:06:be:cc:a0:50:68:84: 85:a4:10:1e:49:1a:54:4d:57:d4:84:6c:ea:bc:f3: 30:06:02:f5:fe:96:62:a6:21:1e:23:cb:eb:12:33: 11:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E5:7B:10:9A:64:F9:15:C3:17:FD:19:BD:18:9C:22:D1:D3:17:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/b451892a-5138-3693-a8ec-542e202655c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl X509v3 Authority Key Identifier: keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer sbgp-ipAddrBlock: critical IPv4: 192.157.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:fc:b2:9d:aa:b7:9f:67:f3:2c:d6:58:d7:85:19:8b:59:74: 5b:b1:fe:56:ac:36:0b:2b:a4:d3:64:dc:ab:63:0d:ab:70:af: eb:59:46:e3:74:71:36:33:c0:22:be:64:48:ed:bd:44:fe:82: f8:6d:17:d0:98:c7:fe:bd:6b:62:66:d4:c3:c2:5e:24:8b:be: 94:f6:79:8f:84:c3:e9:6b:59:f2:0c:91:f5:4a:50:56:57:c3: 92:98:89:2f:41:20:ac:ae:50:f5:be:62:20:19:e0:f4:dd:5e: 50:68:a8:94:57:77:af:64:b4:f8:c4:22:16:17:da:a4:55:e0: 05:0b:33:9f:89:0a:2b:ab:a7:37:74:e1:c3:8f:06:f8:b8:84: 04:34:07:84:f5:79:cb:44:c8:64:53:51:7d:04:c9:ad:3e:4b: 22:80:14:75:8f:9d:7e:70:33:ba:b4:8c:c8:33:45:8b:75:8c: 13:58:0c:d6:35:a8:bd:df:15:bc:37:5a:b4:81:72:ca:fc:b2: ef:08:d3:7f:ff:3f:56:cc:1a:9e:83:0f:77:cc:f0:1f:36:d3: 37:86:c0:13:67:d7:b4:a4:b9:e2:fd:7c:f4:93:23:2f:52:50: c9:e0:6f:fd:96:ca:c1:c2:ce:07:e7:48:c5:d3:8d:d1:31:c2: cb:d6:6e:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AylbwoC9AtJnxUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjMyODFhODItNmMxNy00NjU4LTgwZjctZWUxMzI3YjQ3 NzlhMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk N2RjOWMwMGEtZTU3Yy00YTQ4LThmNjktNDQ2MDU0ZjUwZmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUaSl/dsnW5PpyBW/edKA/96v5fWTkyKOgq3 +kV9ou26+0y8IVRJCW9G2vHvKW8IN7LaBvJAynuY8AhhTIR0zBoU3436W1MFmHaI xjCwfeD7q0dT8JT4QJNgMm46EiwPA4BThLobE+u7nqWUJuHMM6oOVIeh7Y9BU0EU Lji+cOOTjUzguSPtTkHjGNshmjwsw1nLD2LS9BvkOSUnT+QrdXe/T56BqLBhVZTD Er0OBeBLoxT1GWWf0CSmdF3sKTKRbagwoCrfSPTH7A/QsMqxvnFJB1ZmjsP3WAa+ zKBQaISFpBAeSRpUTVfUhGzqvPMwBgL1/pZipiEeI8vrEjMRcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDlexCaZPkVwxf9Gb0YnCLR0xenMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4 MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEzMjdiNDc3OWEvYjQ1MTg5MmEtNTEzOC0z NjkzLWE4ZWMtNTQyZTIwMjY1NWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjMyODFhODItNmMxNy00NjU4LTgw ZjctZWUxMzI3YjQ3NzlhL2YzMjgxYTgyLTZjMTctNDY1OC04MGY3LWVlMTMyN2I0 Nzc5YS5jcmwwHwYDVR0jBBgwFoAUnADJBPwikRxD9McDuOMXvvVr1YgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEz MjdiNDc3OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ1WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALL8sp2qt59n8yzWWNeFGYtZdFux/lasNgsrpNNk3KtjDatwr+tZRuN0 cTYzwCK+ZEjtvUT+gvhtF9CYx/69a2Jm1MPCXiSLvpT2eY+Ew+lrWfIMkfVKUFZX w5KYiS9BIKyuUPW+YiAZ4PTdXlBoqJRXd69ktPjEIhYX2qRV4AULM5+JCiurpzd0 4cOPBvi4hAQ0B4T1ectEyGRTUX0Eya0+SyKAFHWPnX5wM7q0jMgzRYt1jBNYDNY1 qL3fFbw3WrSBcsr8su8I03//P1bMGp6DD3fM8B820zeGwBNn17SkueL9fPSTIy9S UMngb/2WysHCzgfnSMXTjdExwsvWboQ= -----END CERTIFICATE-----Generated at Thu Mar 26 14:18:00 2026 by rpki-client