$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/a3e5781b-c448-3328-afe8-ee297ead9140.roa File: a3e5781b-c448-3328-afe8-ee297ead9140.roa (raw, json) Hash identifier: vpOznASRP+Tn3FcICGQFukdH/qzPy4iBnzjZQ6liSHE= Subject key identifier: 35:4B:D7:27:26:F1:77:9F:CB:85:F5:36:E8:79:B6:4B:60:C7:B3:45 Certificate issuer: /CN=557a586a-7e35-45b6-bb87-b7631d4dda84 Certificate serial: 010D0C9F4328584D38D5BC117E7CAD7BF5C28700 Authority key identifier: A7:5D:FC:FE:7C:81:12:DF:CC:F4:87:0A:7C:4B:46:D5:48:44:45:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/a3e5781b-c448-3328-afe8-ee297ead9140.roa Signing time: Thu 19 Mar 2026 16:37:29 +0000 ROA not before: Thu 19 Mar 2026 16:37:29 +0000 ROA not after: Wed 17 Jun 2026 16:37:29 +0000 asID: 16509 IP address blocks: 192.231.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/557a586a-7e35-45b6-bb87-b7631d4dda84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/557a586a-7e35-45b6-bb87-b7631d4dda84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:d5:bc:11:7e:7c:ad:7b:f5:c2:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=557a586a-7e35-45b6-bb87-b7631d4dda84 Validity Not Before: Mar 19 16:37:29 2026 GMT Not After : Jun 17 16:37:29 2026 GMT Subject: CN=8c4b0add-8ed5-4a1a-88c2-0bc44daf5ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1f:1c:24:36:7d:54:e6:71:0a:ff:2c:c2:29: da:a1:03:d7:82:b6:21:1a:00:c5:5d:54:5d:f3:5d: 51:76:7f:fe:ee:7b:7a:42:3f:29:14:26:77:4f:dc: 04:90:f2:bc:a1:6b:bf:71:8c:33:01:f4:60:28:9a: de:e0:74:22:35:20:86:16:f8:cc:48:2b:78:99:11: 99:c4:34:cc:4a:79:37:b3:58:d4:61:f0:f5:92:6b: c7:ae:2a:1c:5a:59:04:bd:7f:ea:d8:72:1d:40:84: c3:07:cb:ca:ce:cc:57:42:b8:df:bb:8f:43:e0:0a: 55:2e:a7:67:e4:e3:9c:8a:46:58:f5:57:21:8b:0a: 31:5a:e3:1c:aa:fc:ba:a3:b3:70:82:ec:5a:73:b9: cc:32:96:62:0a:ce:8d:d0:f2:1c:91:a2:f1:63:d8: 8f:6c:71:e2:b7:4c:97:76:ee:a3:0b:69:7b:8f:50: 6b:64:66:77:14:ad:cb:4a:a2:6b:25:dc:81:9a:51: cf:38:1a:af:b5:85:66:70:cb:b2:e7:35:ee:e4:6f: e9:c9:2b:3a:39:ce:58:7c:80:72:de:6b:b3:43:69: 8a:e9:ed:a5:e4:83:06:a1:2d:8f:7b:4f:11:56:ba: f6:f8:ac:55:ee:e8:b0:95:a6:ff:12:f1:d9:36:2b: 7f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:4B:D7:27:26:F1:77:9F:CB:85:F5:36:E8:79:B6:4B:60:C7:B3:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/a3e5781b-c448-3328-afe8-ee297ead9140.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/557a586a-7e35-45b6-bb87-b7631d4dda84.crl X509v3 Authority Key Identifier: keyid:A7:5D:FC:FE:7C:81:12:DF:CC:F4:87:0A:7C:4B:46:D5:48:44:45:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84.cer sbgp-ipAddrBlock: critical IPv4: 192.231.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:62:a6:11:2f:ec:93:c9:fc:f1:fd:e0:e4:0a:ba:e5:2b:18: 94:34:e6:a4:ce:27:26:ae:1c:8b:77:32:b3:02:35:15:44:44: ae:e2:16:d6:bf:bb:d7:1a:2b:31:11:b2:a7:95:10:af:39:9a: 40:fb:d5:1b:d0:2b:c9:88:c0:4e:35:66:bc:1c:44:31:b0:df: 9f:78:0f:72:67:66:e1:72:5a:bb:4a:88:9b:7b:d7:b7:10:bf: 2c:73:5a:28:ba:25:de:a5:6c:53:55:93:49:4d:b2:6f:28:31: 29:9f:1e:59:3a:2b:22:af:ae:78:a3:5f:88:cc:a6:82:e1:75: dd:9c:ce:f5:e9:f2:b5:23:4c:f8:04:03:2d:d3:9b:da:49:d7: 74:7b:30:78:7c:3f:fa:c1:9a:3b:4b:60:72:8d:bc:b4:52:8c: 19:4e:8f:32:95:81:4d:5f:5d:01:12:a6:95:82:9f:ec:50:6c: 68:82:a5:a5:04:ce:77:bb:86:28:b6:d0:45:c6:70:f8:8b:53: e9:1c:92:71:8d:ca:52:28:13:85:61:e9:b6:b0:49:02:b9:05: c1:fd:12:cb:30:39:58:0a:0f:9a:fd:27:58:c6:97:da:c3:ef: fe:6a:b8:9c:d5:22:b3:72:a3:8e:0b:50:b0:e4:53:2c:45:20: a4:e9:78:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE041bwRfnyte/XChwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU3YTU4NmEtN2UzNS00NWI2LWJiODctYjc2MzFkNGRk YTg0MB4XDTI2MDMxOTE2MzcyOVoXDTI2MDYxNzE2MzcyOVowLzEtMCsGA1UEAxMk OGM0YjBhZGQtOGVkNS00YTFhLTg4YzItMGJjNDRkYWY1YWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB8cJDZ9VOZxCv8swinaoQPXgrYhGgDFXVRd 811Rdn/+7nt6Qj8pFCZ3T9wEkPK8oWu/cYwzAfRgKJre4HQiNSCGFvjMSCt4mRGZ xDTMSnk3s1jUYfD1kmvHriocWlkEvX/q2HIdQITDB8vKzsxXQrjfu49D4ApVLqdn 5OOcikZY9VchiwoxWuMcqvy6o7Nwguxac7nMMpZiCs6N0PIckaLxY9iPbHHit0yX du6jC2l7j1BrZGZ3FK3LSqJrJdyBmlHPOBqvtYVmcMuy5zXu5G/pySs6Oc5YfIBy 3muzQ2mK6e2l5IMGoS2Pe08RVrr2+KxV7uiwlab/EvHZNit/CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVL1ycm8Xefy4X1Nuh5tktgx7NFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81NTdh NTg2YS03ZTM1LTQ1YjYtYmI4Ny1iNzYzMWQ0ZGRhODQvYTNlNTc4MWItYzQ0OC0z MzI4LWFmZTgtZWUyOTdlYWQ5MTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNTU3YTU4NmEtN2UzNS00NWI2LWJi ODctYjc2MzFkNGRkYTg0LzU1N2E1ODZhLTdlMzUtNDViNi1iYjg3LWI3NjMxZDRk ZGE4NC5jcmwwHwYDVR0jBBgwFoAUp138/nyBEt/M9IcKfEtG1UhERSQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS81NTdhNTg2YS03ZTM1LTQ1YjYtYmI4Ny1iNzYz MWQ0ZGRhODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOcVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZiphEv7JPJ/PH94OQKuuUrGJQ05qTOJyauHIt3MrMCNRVERK7iFta/ u9caKzERsqeVEK85mkD71RvQK8mIwE41ZrwcRDGw3594D3JnZuFyWrtKiJt717cQ vyxzWii6Jd6lbFNVk0lNsm8oMSmfHlk6KyKvrnijX4jMpoLhdd2czvXp8rUjTPgE Ay3Tm9pJ13R7MHh8P/rBmjtLYHKNvLRSjBlOjzKVgU1fXQESppWCn+xQbGiCpaUE zne7hii20EXGcPiLU+kcknGNylIoE4Vh6bawSQK5BcH9EsswOVgKD5r9J1jGl9rD 7/5quJzVIrNyo44LULDkUyxFIKTpeKc= -----END CERTIFICATE-----Generated at Thu Mar 26 08:40:23 2026 by rpki-client