$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/b86a6665-6d25-37b4-89b9-4f48e3fa133d.roa File: b86a6665-6d25-37b4-89b9-4f48e3fa133d.roa (raw, json) Hash identifier: 3CBbxXknmyQDDcBwWXMvL5+uABKw5rpm/OAJOY+tjBg= Subject key identifier: 48:27:8D:EE:BE:7B:A2:C7:A9:12:41:19:83:1D:B7:F0:FC:5E:28:71 Certificate issuer: /CN=f3281a82-6c17-4658-80f7-ee1327b4779a Certificate serial: 010D0C9F4328584DA97AB4870B2867386064B400 Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/b86a6665-6d25-37b4-89b9-4f48e3fa133d.roa Signing time: Wed 29 Apr 2026 01:00:23 +0000 ROA not before: Wed 29 Apr 2026 01:00:23 +0000 ROA not after: Tue 28 Jul 2026 01:00:23 +0000 asID: 395383 IP address blocks: 192.157.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a9:7a:b4:87:0b:28:67:38:60:64:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a Validity Not Before: Apr 29 01:00:23 2026 GMT Not After : Jul 28 01:00:23 2026 GMT Subject: CN=17acab15-8d19-4351-914c-7235225042fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e3:49:87:da:e8:88:fc:6a:82:5b:2f:2b:2e: f1:85:d0:38:7d:df:2f:fa:10:e9:5c:77:d2:0e:31: d2:c1:52:71:44:78:2a:e6:49:8d:e2:22:ef:a9:bb: 04:3f:7c:b4:fa:f0:97:68:b1:ce:51:f9:a3:b1:29: 54:c3:d9:99:79:e2:c3:69:83:27:c4:9d:54:9b:dd: 27:82:e6:c6:bd:74:27:d6:88:92:8c:9a:9e:44:61: 66:35:51:20:d9:f7:33:af:0d:62:79:24:e3:4a:c0: 8b:3a:71:3c:65:e1:00:05:96:aa:e9:c1:04:51:a2: 23:fc:b8:64:09:27:f0:1c:d0:9d:c3:08:5a:b7:4d: d9:79:48:77:c0:a1:17:a1:8a:9f:36:ae:29:fc:9e: d5:e5:5c:6d:e3:fd:b4:bf:50:9b:80:58:db:36:2c: 12:3c:bd:c5:e3:23:50:52:3f:d6:4b:2a:95:64:e7: b2:a2:d6:81:13:78:8d:72:86:e7:c1:c0:d7:06:25: dc:92:cc:51:c8:a9:3c:b1:52:a2:f3:63:c4:0d:fd: 31:5b:05:dc:2e:d5:03:34:74:5f:9a:28:f2:38:0e: 52:21:90:96:d1:1a:8f:f7:07:e4:cb:85:c1:68:ec: 0f:08:2b:1b:21:a1:97:2a:47:c8:9d:69:62:f4:01: 7e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:27:8D:EE:BE:7B:A2:C7:A9:12:41:19:83:1D:B7:F0:FC:5E:28:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/b86a6665-6d25-37b4-89b9-4f48e3fa133d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl X509v3 Authority Key Identifier: keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer sbgp-ipAddrBlock: critical IPv4: 192.157.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:c8:a7:42:e8:57:11:09:71:f8:a7:e3:04:0d:59:fd:b0:62: 6e:0b:06:f8:2d:fd:2f:a3:10:c7:46:87:4e:7d:e2:f2:f8:4e: 7a:f6:a6:a5:56:b4:23:f2:87:e4:3a:aa:61:06:f1:95:bd:a6: 73:ee:bd:42:33:52:66:67:90:c6:6d:8f:04:fa:ae:19:6b:3b: a1:e7:be:75:e2:fb:bc:93:eb:07:6f:89:af:17:49:5c:f1:8e: 08:06:01:59:5c:5c:46:3e:31:81:fa:0c:14:55:01:3f:74:71: 1e:ec:ba:8c:98:af:84:56:31:ad:0a:3a:5e:0e:6e:a4:f3:35: 11:d3:0e:94:a8:98:20:15:85:2a:54:3a:fc:e9:7f:f7:68:a9: 97:bb:71:9d:f3:1d:2d:2f:07:fd:cd:4f:a8:57:e8:7a:47:da: 4c:2e:6c:ff:1a:2c:91:92:64:b5:2e:64:da:93:73:47:19:8e: ce:e3:04:92:dd:7c:9e:b3:b6:4c:94:be:f6:27:ca:ed:c6:81: 2a:bf:c4:85:e9:ef:30:0b:5b:ba:de:3e:70:15:e3:8e:08:ad: 83:2b:cc:91:75:90:ab:0f:ed:97:f9:79:db:75:ce:2c:f5:28: ad:1d:7a:9d:71:76:2e:ca:18:57:f5:28:e0:c7:a7:4c:57:20: b7:9e:c4:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2perSHCyhnOGBktAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjMyODFhODItNmMxNy00NjU4LTgwZjctZWUxMzI3YjQ3 NzlhMB4XDTI2MDQyOTAxMDAyM1oXDTI2MDcyODAxMDAyM1owLzEtMCsGA1UEAxMk MTdhY2FiMTUtOGQxOS00MzUxLTkxNGMtNzIzNTIyNTA0MmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uNJh9roiPxqglsvKy7xhdA4fd8v+hDpXHfS DjHSwVJxRHgq5kmN4iLvqbsEP3y0+vCXaLHOUfmjsSlUw9mZeeLDaYMnxJ1Um90n gubGvXQn1oiSjJqeRGFmNVEg2fczrw1ieSTjSsCLOnE8ZeEABZaq6cEEUaIj/Lhk CSfwHNCdwwhat03ZeUh3wKEXoYqfNq4p/J7V5Vxt4/20v1CbgFjbNiwSPL3F4yNQ Uj/WSyqVZOeyotaBE3iNcobnwcDXBiXcksxRyKk8sVKi82PEDf0xWwXcLtUDNHRf mijyOA5SIZCW0RqP9wfky4XBaOwPCCsbIaGXKkfInWli9AF+6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgnje6+e6LHqRJBGYMdt/D8XihxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4 MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEzMjdiNDc3OWEvYjg2YTY2NjUtNmQyNS0z N2I0LTg5YjktNGY0OGUzZmExMzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjMyODFhODItNmMxNy00NjU4LTgw ZjctZWUxMzI3YjQ3NzlhL2YzMjgxYTgyLTZjMTctNDY1OC04MGY3LWVlMTMyN2I0 Nzc5YS5jcmwwHwYDVR0jBBgwFoAUnADJBPwikRxD9McDuOMXvvVr1YgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEz MjdiNDc3OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ1UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKrIp0LoVxEJcfin4wQNWf2wYm4LBvgt/S+jEMdGh0594vL4Tnr2pqVW tCPyh+Q6qmEG8ZW9pnPuvUIzUmZnkMZtjwT6rhlrO6HnvnXi+7yT6wdvia8XSVzx jggGAVlcXEY+MYH6DBRVAT90cR7suoyYr4RWMa0KOl4ObqTzNRHTDpSomCAVhSpU Ovzpf/doqZe7cZ3zHS0vB/3NT6hX6HpH2kwubP8aLJGSZLUuZNqTc0cZjs7jBJLd fJ6ztkyUvvYnyu3GgSq/xIXp7zALW7rePnAV444IrYMrzJF1kKsP7Zf5edt1ziz1 KK0dep1xdi7KGFf1KODHp0xXILeexNM= -----END CERTIFICATE-----Generated at Wed May 13 06:14:18 2026 by rpki-client