$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/31c2b97c-bc9d-393e-83e0-fd03ffa31623.roa File: 31c2b97c-bc9d-393e-83e0-fd03ffa31623.roa (raw, json) Hash identifier: 7J2npmuckyt1BvZnM/+AHRxts8CHMxCQbRvsbNljNoc= Subject key identifier: 7B:1F:5C:61:A8:B8:46:10:E9:52:BC:4B:8D:6F:33:7B:53:A3:5D:09 Certificate issuer: /CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e Certificate serial: 010D0C9F4328584D4A8F9DC37CEC09B5817F9C80 Authority key identifier: 59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/31c2b97c-bc9d-393e-83e0-fd03ffa31623.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 14618 IP address blocks: 192.152.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:9d:c3:7c:ec:09:b5:81:7f:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=70ef5aff-85b4-4352-abd3-cf4eb124ebdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cf:6c:1a:3f:78:52:5f:8a:8f:09:6c:f3:2b: 46:53:df:0b:30:01:d8:e0:10:b4:65:1d:9b:ac:7f: 0c:73:c4:af:b0:a7:ed:ab:34:83:f0:14:35:df:ba: 0a:b0:b0:9f:4b:1c:ac:2d:fd:bf:6a:60:5c:d7:39: 9e:8a:e6:ce:a9:52:36:9c:70:fc:2b:64:23:c0:b9: 4f:57:ff:1d:a6:fd:61:38:f0:47:86:2d:fe:39:a7: 70:94:0a:f2:4e:13:82:11:b3:f7:e4:b2:c2:c8:35: ea:46:32:ec:40:e2:0c:93:97:4d:a7:c6:91:8b:aa: 94:c3:e7:f5:ec:16:7b:29:e3:6e:74:bc:34:e0:9d: 0e:ab:95:94:cc:49:fd:cb:97:e7:d0:8b:48:e6:30: 3a:dc:15:f2:5d:c8:7b:ae:a6:1c:55:7d:ad:89:72: 41:31:8b:8f:ee:fc:7d:0f:97:60:aa:8f:8e:be:f6: 58:bf:cf:ee:6c:20:62:c8:cd:b0:90:26:a6:cc:85: 94:83:fa:5d:7e:1b:d0:43:eb:dd:6b:c6:0c:e8:42: 03:68:f6:60:d5:da:3c:0f:ce:11:92:9e:d1:f5:35: f8:de:97:67:2e:82:bf:82:76:81:f5:a4:20:05:4a: 40:91:6e:41:2a:3f:b9:12:ce:d0:b6:46:56:9d:27: e3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:1F:5C:61:A8:B8:46:10:E9:52:BC:4B:8D:6F:33:7B:53:A3:5D:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/31c2b97c-bc9d-393e-83e0-fd03ffa31623.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl X509v3 Authority Key Identifier: keyid:59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer sbgp-ipAddrBlock: critical IPv4: 192.152.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:14:fa:e6:82:4c:71:8d:08:ec:46:7d:37:40:97:f1:2b:85: 39:09:9e:68:c1:bf:7a:85:72:b5:61:1c:44:bc:77:cc:eb:22: 8c:57:06:57:e0:59:91:88:80:6f:ad:2b:92:a9:7a:c4:c3:aa: ea:fc:f2:7b:69:76:80:d1:18:5a:89:11:02:49:5e:98:96:7b: 9b:78:25:21:c9:e5:5e:5f:c5:55:34:80:a2:cb:82:ac:cd:97: 59:59:a3:0c:11:dc:a7:4d:19:12:a8:13:e8:13:5f:f4:5d:9a: a5:78:a2:ec:a3:6e:2e:4c:95:50:6a:b7:7a:de:a7:0d:61:3b: d8:cd:7c:67:c5:12:38:0f:78:b3:c2:f6:dc:20:27:f5:67:0d: 69:30:1f:fe:a4:8b:b2:33:91:49:e1:b4:79:52:96:3c:64:9f: c6:98:a6:3e:bb:10:2e:1f:ac:65:27:2e:2a:44:54:c9:28:b4: e0:bb:ec:ba:d7:94:2e:a6:25:4f:ce:d4:ed:d4:3a:07:74:1c: 66:10:e3:6d:ed:46:a2:95:dd:79:1f:eb:40:18:5d:3c:a1:0b: 4d:88:2d:a6:61:fa:8e:ac:1c:4c:f8:1c:cd:64:81:59:77:f8: 26:62:4b:39:d8:55:25:73:8a:34:a9:46:6c:14:75:96:74:1d: 5f:32:e2:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj53DfOwJtYF/nIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDk4YzNmMDctOWI4ZS00NGEwLTkyZjQtNTM4YzBkNzJl YTRlMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk NzBlZjVhZmYtODViNC00MzUyLWFiZDMtY2Y0ZWIxMjRlYmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArc9sGj94Ul+Kjwls8ytGU98LMAHY4BC0ZR2b rH8Mc8SvsKftqzSD8BQ137oKsLCfSxysLf2/amBc1zmeiubOqVI2nHD8K2QjwLlP V/8dpv1hOPBHhi3+OadwlAryThOCEbP35LLCyDXqRjLsQOIMk5dNp8aRi6qUw+f1 7BZ7KeNudLw04J0Oq5WUzEn9y5fn0ItI5jA63BXyXch7rqYcVX2tiXJBMYuP7vx9 D5dgqo+OvvZYv8/ubCBiyM2wkCamzIWUg/pdfhvQQ+vda8YM6EIDaPZg1do8D84R kp7R9TX43pdnLoK/gnaB9aQgBUpAkW5BKj+5Es7QtkZWnSfj5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHsfXGGouEYQ6VK8S41vM3tTo10JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80OThj M2YwNy05YjhlLTQ0YTAtOTJmNC01MzhjMGQ3MmVhNGUvMzFjMmI5N2MtYmM5ZC0z OTNlLTgzZTAtZmQwM2ZmYTMxNjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDk4YzNmMDctOWI4ZS00NGEwLTky ZjQtNTM4YzBkNzJlYTRlLzQ5OGMzZjA3LTliOGUtNDRhMC05MmY0LTUzOGMwZDcy ZWE0ZS5jcmwwHwYDVR0jBBgwFoAUWXNyFwevwe7BwLEwqSgH7DmcFFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80OThjM2YwNy05YjhlLTQ0YTAtOTJmNC01Mzhj MGQ3MmVhNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJiFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMwU+uaCTHGNCOxGfTdAl/ErhTkJnmjBv3qFcrVhHES8d8zrIoxXBlfg WZGIgG+tK5KpesTDqur88ntpdoDRGFqJEQJJXpiWe5t4JSHJ5V5fxVU0gKLLgqzN l1lZowwR3KdNGRKoE+gTX/RdmqV4ouyjbi5MlVBqt3repw1hO9jNfGfFEjgPeLPC 9twgJ/VnDWkwH/6ki7IzkUnhtHlSljxkn8aYpj67EC4frGUnLipEVMkotOC77LrX lC6mJU/O1O3UOgd0HGYQ423tRqKV3Xkf60AYXTyhC02ILaZh+o6sHEz4HM1kgVl3 +CZiSznYVSVzijSpRmwUdZZ0HV8y4ow= -----END CERTIFICATE-----Generated at Thu Mar 26 07:01:18 2026 by rpki-client