$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/4e46c8dd-d06a-3d58-8a07-e0b519fd1e8b.roa File: 4e46c8dd-d06a-3d58-8a07-e0b519fd1e8b.roa (raw, json) Hash identifier: RMVZqh7WN0ceJ4XDx4XfTGDOOTI+4NXvmryNoSA8Xdw= Subject key identifier: 65:4B:F0:58:95:43:0C:37:A2:8E:83:0D:EE:81:20:72:30:DD:21:41 Certificate issuer: /CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e Certificate serial: 010D0C9F4328584D4A8F9D49019FD2EBC8183700 Authority key identifier: 59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/4e46c8dd-d06a-3d58-8a07-e0b519fd1e8b.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 14618 IP address blocks: 192.152.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:9d:49:01:9f:d2:eb:c8:18:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=0289334c-7739-47a3-9cbd-6960a8bd2da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:30:45:6c:ce:91:92:b4:96:ca:46:1b:e7:d0: d0:52:3b:99:d7:dc:f3:c1:21:42:35:35:df:08:28: 9a:bb:99:29:15:4a:66:48:4d:e6:a7:b8:11:b7:5d: 7b:44:ac:9d:20:26:a5:0b:02:15:b5:c8:bb:92:94: 02:f1:80:72:6c:84:25:da:5c:d9:07:47:cf:1b:6f: b3:35:77:3c:e1:53:ec:17:c7:df:44:9e:2c:e9:51: 8d:a1:0e:b1:c1:06:2c:97:ad:54:ee:39:8c:66:4f: ab:b8:b1:04:ce:02:a9:fe:90:ff:6d:f3:37:15:d7: d8:fe:4c:de:a9:64:70:db:94:bb:eb:d8:0d:22:2e: aa:6d:0f:da:02:70:4e:c1:16:56:1e:e6:c6:68:d4: 32:f5:2e:5e:1e:8a:24:30:f2:53:fd:cf:e1:36:44: 6d:7d:2c:b3:2d:c2:07:97:9c:2b:c3:73:34:25:2e: e3:96:f6:79:b4:4e:6c:05:d2:30:f7:af:a8:3b:81: 10:81:08:3b:55:e3:e0:39:96:18:44:b5:76:61:88: 96:fb:5d:67:76:a9:75:ea:a3:09:c5:ad:57:44:40: 69:a6:02:85:f5:51:1c:1d:cc:71:eb:8c:61:d4:ca: 50:db:b0:db:9b:0a:f0:16:4d:de:77:aa:ff:26:83: 47:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4B:F0:58:95:43:0C:37:A2:8E:83:0D:EE:81:20:72:30:DD:21:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/4e46c8dd-d06a-3d58-8a07-e0b519fd1e8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl X509v3 Authority Key Identifier: keyid:59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer sbgp-ipAddrBlock: critical IPv4: 192.152.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ea:6d:59:a3:de:56:40:e6:71:1f:6e:aa:91:9f:2b:3a:33: e9:15:8d:bc:3e:8c:4a:3e:9d:19:6e:16:00:45:7f:67:87:a1: 7d:d8:fa:56:34:14:10:0d:7a:2a:e5:bc:f8:91:77:5b:79:db: de:50:3d:3e:3d:62:47:c8:b4:b8:8f:51:a0:f4:a7:f3:97:8f: 40:2a:5e:fb:43:82:66:f8:b7:ea:d7:4f:11:91:8c:d8:67:53: 9b:8c:b2:af:61:56:35:2b:ff:b3:cf:6a:f5:b8:33:e4:6e:8d: f2:81:f2:b7:af:88:ca:b0:66:2a:51:eb:99:a6:70:d0:58:b0: 14:ef:50:b0:69:6d:a7:92:26:cd:db:bb:06:d7:61:07:1d:1b: 7b:fe:c7:f0:48:70:ed:36:bf:b0:8a:59:b4:08:9e:f2:4d:81: 24:76:ad:f4:0e:ac:eb:35:c9:f5:90:24:8b:76:4d:52:b5:e8: 8d:ed:51:7d:da:36:16:63:8d:63:83:72:dc:99:e2:2e:24:88: 36:39:59:a2:26:85:51:16:8d:2d:17:54:6d:17:47:28:d5:eb: 03:e9:6d:df:59:ec:cc:cf:ef:0f:20:67:53:c7:cc:0a:01:cc: b5:a3:d1:ae:6f:b7:e9:0e:32:28:ec:00:e1:55:b8:1b:3c:7e: fc:74:1f:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj51JAZ/S68gYNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDk4YzNmMDctOWI4ZS00NGEwLTkyZjQtNTM4YzBkNzJl YTRlMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk MDI4OTMzNGMtNzczOS00N2EzLTljYmQtNjk2MGE4YmQyZGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojBFbM6RkrSWykYb59DQUjuZ19zzwSFCNTXf CCiau5kpFUpmSE3mp7gRt117RKydICalCwIVtci7kpQC8YBybIQl2lzZB0fPG2+z NXc84VPsF8ffRJ4s6VGNoQ6xwQYsl61U7jmMZk+ruLEEzgKp/pD/bfM3FdfY/kze qWRw25S769gNIi6qbQ/aAnBOwRZWHubGaNQy9S5eHookMPJT/c/hNkRtfSyzLcIH l5wrw3M0JS7jlvZ5tE5sBdIw96+oO4EQgQg7VePgOZYYRLV2YYiW+11ndql16qMJ xa1XREBppgKF9VEcHcxx64xh1MpQ27DbmwrwFk3ed6r/JoNHsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVL8FiVQww3oo6DDe6BIHIw3SFBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80OThj M2YwNy05YjhlLTQ0YTAtOTJmNC01MzhjMGQ3MmVhNGUvNGU0NmM4ZGQtZDA2YS0z ZDU4LThhMDctZTBiNTE5ZmQxZThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDk4YzNmMDctOWI4ZS00NGEwLTky ZjQtNTM4YzBkNzJlYTRlLzQ5OGMzZjA3LTliOGUtNDRhMC05MmY0LTUzOGMwZDcy ZWE0ZS5jcmwwHwYDVR0jBBgwFoAUWXNyFwevwe7BwLEwqSgH7DmcFFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80OThjM2YwNy05YjhlLTQ0YTAtOTJmNC01Mzhj MGQ3MmVhNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJiEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHqbVmj3lZA5nEfbqqRnys6M+kVjbw+jEo+nRluFgBFf2eHoX3Y+lY0 FBANeirlvPiRd1t5295QPT49YkfItLiPUaD0p/OXj0AqXvtDgmb4t+rXTxGRjNhn U5uMsq9hVjUr/7PPavW4M+RujfKB8reviMqwZipR65mmcNBYsBTvULBpbaeSJs3b uwbXYQcdG3v+x/BIcO02v7CKWbQInvJNgSR2rfQOrOs1yfWQJIt2TVK16I3tUX3a NhZjjWODctyZ4i4kiDY5WaImhVEWjS0XVG0XRyjV6wPpbd9Z7MzP7w8gZ1PHzAoB zLWj0a5vt+kOMijsAOFVuBs8fvx0H0A= -----END CERTIFICATE-----Generated at Thu Mar 26 03:31:40 2026 by rpki-client