$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/3d876040-615b-3fd5-b6c7-b63f8cc00fcf.roa File: 3d876040-615b-3fd5-b6c7-b63f8cc00fcf.roa (raw, json) Hash identifier: JeSpePdzHzHZVGEpTwkqtiEIJS9J9L1i8YGfAWqolJ0= Subject key identifier: 9E:CB:D2:92:F4:08:EA:91:D3:C1:69:91:9B:2E:FA:E8:B6:4E:E9:28 Certificate issuer: /CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e Certificate serial: 010D0C9F4328584D4A8F9DDB5AE886F04A917B80 Authority key identifier: 59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/3d876040-615b-3fd5-b6c7-b63f8cc00fcf.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 16509 IP address blocks: 192.152.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:9d:db:5a:e8:86:f0:4a:91:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=45877d65-31f4-4c28-b066-9deca808683b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7f:fc:0f:72:15:99:f7:95:76:fb:bc:07:bd: 1e:b5:d3:61:55:a6:4d:2e:34:e2:97:21:69:ee:3a: be:fd:45:c2:20:49:5b:5b:f9:6a:e7:be:66:bc:9e: b7:e0:26:fe:49:a8:a7:48:42:81:97:8c:f7:71:a5: 9e:98:81:f9:8b:bc:d4:f4:35:23:01:43:06:1b:f6: 7b:5f:fb:db:83:ca:f9:86:b0:29:fa:3f:ad:3d:0c: ed:1e:2b:41:29:0b:26:58:5f:71:0f:bd:15:bd:96: 31:99:2f:75:c1:06:59:7c:da:5a:f1:75:82:0b:bf: a9:59:5c:19:27:b2:12:a6:9d:de:aa:71:6d:d6:52: f1:9d:f6:5a:79:4b:81:05:a6:d4:3d:f3:e1:d6:ba: 5b:60:d6:ef:f2:9d:ba:45:28:69:c0:a6:fc:46:47: 70:bb:08:e2:5c:6c:91:d1:b9:cf:e9:50:cd:5f:b8: 91:eb:4e:dd:c8:86:bb:2a:f8:cc:7e:32:41:84:fc: e6:92:57:4e:a3:78:02:97:68:73:92:0c:92:19:3e: ef:cf:c5:11:79:27:3d:8c:9c:46:5a:c8:a6:74:5c: 1c:30:64:cf:f5:f5:da:81:f3:af:d4:cd:f3:19:73: 8e:c9:ee:87:35:d6:e0:d7:c1:34:74:29:21:81:59: 0f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:CB:D2:92:F4:08:EA:91:D3:C1:69:91:9B:2E:FA:E8:B6:4E:E9:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/3d876040-615b-3fd5-b6c7-b63f8cc00fcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl X509v3 Authority Key Identifier: keyid:59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer sbgp-ipAddrBlock: critical IPv4: 192.152.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:0e:0c:19:45:d6:8d:e8:58:eb:30:14:7d:65:aa:7c:f8:cf: 9d:b7:35:71:f1:bc:4b:dc:eb:42:ab:7a:9f:62:23:e6:bc:89: e6:68:3e:dd:7e:f7:c9:b2:bd:ec:8b:ed:00:54:6e:ca:13:de: 52:94:f8:89:c3:10:f2:bf:b2:5b:1c:58:88:f2:31:9a:93:20: e8:1e:6a:d5:fd:00:5a:92:7d:c8:56:d9:7d:18:6d:18:53:92: 28:f9:bc:d2:7c:7b:cc:b1:29:3e:0a:6b:11:f5:d8:70:77:9e: f8:51:27:dc:65:f1:90:ad:b0:01:2d:eb:06:cd:12:78:6a:dc: 91:83:b1:27:66:17:d5:85:b9:3d:a2:89:23:b8:ac:0a:85:d4: b3:e8:3b:24:66:62:bc:5d:c5:34:9f:9e:68:9c:7c:a3:d2:c2: 09:be:4d:93:d5:e5:b1:bd:d7:3d:9b:36:09:32:28:a1:fd:13: 1d:a9:10:b7:13:1e:d9:48:79:ff:78:52:b1:77:bd:cf:8c:01: 69:0c:76:29:c2:03:ef:d2:48:57:ec:28:ab:4b:e8:78:39:8b: 5f:10:7d:76:78:9d:86:ed:11:57:71:ef:c1:50:c2:d3:67:2c: 46:b1:e4:f5:bd:65:7f:96:08:98:87:d1:ee:3c:f0:f3:bb:ec: df:43:b4:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj53bWuiG8EqRe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDk4YzNmMDctOWI4ZS00NGEwLTkyZjQtNTM4YzBkNzJl YTRlMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk NDU4NzdkNjUtMzFmNC00YzI4LWIwNjYtOWRlY2E4MDg2ODNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn/8D3IVmfeVdvu8B70etdNhVaZNLjTilyFp 7jq+/UXCIElbW/lq575mvJ634Cb+SainSEKBl4z3caWemIH5i7zU9DUjAUMGG/Z7 X/vbg8r5hrAp+j+tPQztHitBKQsmWF9xD70VvZYxmS91wQZZfNpa8XWCC7+pWVwZ J7ISpp3eqnFt1lLxnfZaeUuBBabUPfPh1rpbYNbv8p26RShpwKb8RkdwuwjiXGyR 0bnP6VDNX7iR607dyIa7KvjMfjJBhPzmkldOo3gCl2hzkgySGT7vz8UReSc9jJxG WsimdFwcMGTP9fXagfOv1M3zGXOOye6HNdbg18E0dCkhgVkPzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7L0pL0COqR08FpkZsu+ui2TukoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80OThj M2YwNy05YjhlLTQ0YTAtOTJmNC01MzhjMGQ3MmVhNGUvM2Q4NzYwNDAtNjE1Yi0z ZmQ1LWI2YzctYjYzZjhjYzAwZmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDk4YzNmMDctOWI4ZS00NGEwLTky ZjQtNTM4YzBkNzJlYTRlLzQ5OGMzZjA3LTliOGUtNDRhMC05MmY0LTUzOGMwZDcy ZWE0ZS5jcmwwHwYDVR0jBBgwFoAUWXNyFwevwe7BwLEwqSgH7DmcFFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80OThjM2YwNy05YjhlLTQ0YTAtOTJmNC01Mzhj MGQ3MmVhNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJiFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEODBlF1o3oWOswFH1lqnz4z523NXHxvEvc60Krep9iI+a8ieZoPt1+ 98myveyL7QBUbsoT3lKU+InDEPK/slscWIjyMZqTIOgeatX9AFqSfchW2X0YbRhT kij5vNJ8e8yxKT4KaxH12HB3nvhRJ9xl8ZCtsAEt6wbNEnhq3JGDsSdmF9WFuT2i iSO4rAqF1LPoOyRmYrxdxTSfnmicfKPSwgm+TZPV5bG91z2bNgkyKKH9Ex2pELcT HtlIef94UrF3vc+MAWkMdinCA+/SSFfsKKtL6Hg5i18QfXZ4nYbtEVdx78FQwtNn LEax5PW9ZX+WCJiH0e488PO77N9DtBU= -----END CERTIFICATE-----Generated at Thu Mar 26 08:26:59 2026 by rpki-client