$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/d6a9afa9-9645-3a6e-a248-d5a101df55e7.roa File: d6a9afa9-9645-3a6e-a248-d5a101df55e7.roa (raw, json) Hash identifier: VrQ2c/7SntDLR0EGPjmWex6iP4Chz15H9ZuU5sh/PfM= Subject key identifier: E4:23:B6:D9:71:E5:39:71:A2:CC:B9:D3:6B:65:9A:FA:33:5F:CA:6E Certificate issuer: /CN=f3281a82-6c17-4658-80f7-ee1327b4779a Certificate serial: 010D0C9F4328584DA97ABC9871BF50CDCA5AB880 Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/d6a9afa9-9645-3a6e-a248-d5a101df55e7.roa Signing time: Wed 29 Apr 2026 01:00:23 +0000 ROA not before: Wed 29 Apr 2026 01:00:23 +0000 ROA not after: Tue 28 Jul 2026 01:00:23 +0000 asID: 395383 IP address blocks: 192.157.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a9:7a:bc:98:71:bf:50:cd:ca:5a:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a Validity Not Before: Apr 29 01:00:23 2026 GMT Not After : Jul 28 01:00:23 2026 GMT Subject: CN=485f61d5-67cc-4ff1-8c2a-d82ba9ebd428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d2:f6:a1:d0:89:e6:57:2f:56:d7:ad:05:c3: 9e:80:68:0e:7c:00:c0:dd:b5:f3:ac:14:17:b9:3b: dc:74:96:1b:f0:ec:b4:90:d5:b3:18:b7:c8:80:ba: 67:43:2d:9d:8a:7c:b1:f3:1c:47:a9:ae:5e:a1:e2: 15:04:8e:a1:96:2d:8d:40:15:a0:7d:b5:40:f1:ea: bf:dd:fe:9a:0d:de:29:fe:ab:06:33:7f:1d:3d:dc: 94:57:9b:cf:7e:64:5f:3d:a0:9e:92:0a:c6:15:2a: ce:bd:89:2d:cc:6f:a6:d3:50:5b:23:79:a5:27:dc: ec:1b:76:0e:eb:2c:e7:c6:13:e8:93:f5:11:25:b7: 2e:94:76:94:4b:22:f6:b6:a9:13:f6:d5:08:99:30: 25:2e:50:d4:6e:77:62:b7:8d:35:b0:0c:34:88:6c: 1c:2e:24:18:24:f5:29:22:b6:eb:c9:aa:ec:58:5c: d0:f7:16:c3:56:cd:a3:73:98:0f:0c:fe:9a:b1:6a: f2:d8:9b:e9:d6:16:b2:25:b2:c3:4e:ad:ac:ae:8b: 8a:a2:26:0e:d2:98:1b:e3:4b:68:4e:5f:07:1b:ba: 01:9e:7d:12:54:0a:1d:1f:3f:a0:00:d7:82:fa:23: 5d:02:c7:48:bc:8e:30:f4:c0:33:1d:be:d0:61:47: 9e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:23:B6:D9:71:E5:39:71:A2:CC:B9:D3:6B:65:9A:FA:33:5F:CA:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/d6a9afa9-9645-3a6e-a248-d5a101df55e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl X509v3 Authority Key Identifier: keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer sbgp-ipAddrBlock: critical IPv4: 192.157.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:09:ee:af:25:f4:5d:dd:1c:15:a7:84:da:f2:a2:78:58:1e: b5:14:0c:37:b7:bf:67:de:39:65:89:0b:e6:b1:34:18:46:79: 6b:9f:57:38:f3:df:1a:32:65:f7:e6:2d:d9:da:fe:cb:db:b6: df:01:c3:d3:f4:45:fb:f1:5e:61:ed:ab:f3:30:72:50:4d:a0: 06:e1:ac:0e:3f:b8:b3:2b:56:98:b0:b5:a3:cd:87:92:fc:0a: ba:d1:20:d6:07:37:fa:91:8e:4a:bd:bd:64:62:de:57:1c:83: 34:19:4b:60:2f:e1:30:ef:ab:91:32:3a:de:41:fe:93:a3:45: 6b:60:80:ae:bd:32:49:49:80:d3:36:23:b5:bf:73:1d:c8:f8: b0:cc:83:3a:fb:5b:0f:99:77:90:d5:15:40:05:13:6c:43:39: bf:7b:fe:f4:eb:56:5f:5c:ee:cf:df:a5:2c:ff:eb:1e:27:03: b0:dc:e8:5f:96:64:cf:2f:c7:39:c1:90:24:9f:f5:79:b9:b6: a4:36:b0:4d:9c:a3:95:cf:2b:50:ce:e5:35:f7:b1:8f:80:50: e7:47:1a:43:ba:3d:ea:61:b8:31:35:dd:12:b5:00:d4:75:40: b5:fd:5d:ec:d6:91:3e:f3:2c:d2:22:05:65:b4:88:04:cb:11: 41:85:cf:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2peryYcb9QzcpauIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjMyODFhODItNmMxNy00NjU4LTgwZjctZWUxMzI3YjQ3 NzlhMB4XDTI2MDQyOTAxMDAyM1oXDTI2MDcyODAxMDAyM1owLzEtMCsGA1UEAxMk NDg1ZjYxZDUtNjdjYy00ZmYxLThjMmEtZDgyYmE5ZWJkNDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9L2odCJ5lcvVtetBcOegGgOfADA3bXzrBQX uTvcdJYb8Oy0kNWzGLfIgLpnQy2dinyx8xxHqa5eoeIVBI6hli2NQBWgfbVA8eq/ 3f6aDd4p/qsGM38dPdyUV5vPfmRfPaCekgrGFSrOvYktzG+m01BbI3mlJ9zsG3YO 6yznxhPok/URJbculHaUSyL2tqkT9tUImTAlLlDUbndit401sAw0iGwcLiQYJPUp IrbryarsWFzQ9xbDVs2jc5gPDP6asWry2Jvp1hayJbLDTq2srouKoiYO0pgb40to Tl8HG7oBnn0SVAodHz+gANeC+iNdAsdIvI4w9MAzHb7QYUeeaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQjttlx5Tlxosy502tlmvozX8puMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4 MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEzMjdiNDc3OWEvZDZhOWFmYTktOTY0NS0z YTZlLWEyNDgtZDVhMTAxZGY1NWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjMyODFhODItNmMxNy00NjU4LTgw ZjctZWUxMzI3YjQ3NzlhL2YzMjgxYTgyLTZjMTctNDY1OC04MGY3LWVlMTMyN2I0 Nzc5YS5jcmwwHwYDVR0jBBgwFoAUnADJBPwikRxD9McDuOMXvvVr1YgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEz MjdiNDc3OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ1RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4J7q8l9F3dHBWnhNryonhYHrUUDDe3v2feOWWJC+axNBhGeWufVzjz 3xoyZffmLdna/svbtt8Bw9P0RfvxXmHtq/MwclBNoAbhrA4/uLMrVpiwtaPNh5L8 CrrRINYHN/qRjkq9vWRi3lccgzQZS2Av4TDvq5EyOt5B/pOjRWtggK69MklJgNM2 I7W/cx3I+LDMgzr7Ww+Zd5DVFUAFE2xDOb97/vTrVl9c7s/fpSz/6x4nA7Dc6F+W ZM8vxznBkCSf9Xm5tqQ2sE2co5XPK1DO5TX3sY+AUOdHGkO6PephuDE13RK1ANR1 QLX9XezWkT7zLNIiBWW0iATLEUGFz5M= -----END CERTIFICATE-----Generated at Wed May 13 05:18:52 2026 by rpki-client