$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/04da0af8-7c12-3869-a040-797710feccc2.roa File: 04da0af8-7c12-3869-a040-797710feccc2.roa (raw, json) Hash identifier: TgeWxWXaKH40erFe1Z0h7PL57zotDy6P30awtRfgECg= Subject key identifier: 9A:28:D2:F3:2E:F6:38:76:80:AC:9C:E4:A1:30:DD:90:7A:32:0E:01 Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F4328584D492A6951265CAD3EE04FC100 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/04da0af8-7c12-3869-a040-797710feccc2.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 1206 IP address blocks: 192.101.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:69:51:26:5c:ad:3e:e0:4f:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=856c9585-1b5a-4594-b4af-a27574a7b966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0a:51:2e:55:5d:e7:cb:20:e1:56:a8:dd:ad: 85:37:48:70:f7:d4:b0:f9:02:2e:92:dd:cc:a5:e8: 3b:5a:06:92:ab:e1:39:95:d5:46:dd:8f:3d:18:72: ec:c3:13:3b:1b:67:13:b5:33:6e:68:be:0e:5e:9a: 16:9f:c2:e0:7b:e3:9e:69:01:a6:35:2a:8c:f4:3e: 61:ae:7f:72:32:a8:3a:83:a9:bd:d1:3d:28:7c:6e: 0c:32:f6:21:8b:8a:b1:a3:8b:e0:85:a5:ed:ae:cf: 4a:bb:34:78:b2:fd:24:a3:b5:1f:ff:ed:7f:c8:b3: 5b:2b:4f:1b:b8:9c:bf:a6:b3:5d:0b:7d:68:82:31: 15:17:8f:b5:c6:ee:04:0c:ec:12:30:e6:d9:05:12: 0b:18:11:eb:34:c3:6e:85:2f:1d:49:41:8b:65:0e: 0d:ba:ca:46:0c:19:43:b9:32:50:5f:ee:ef:9b:2d: a9:c5:34:c6:80:50:e9:fe:6d:f8:d7:8d:12:98:b9: 4c:7e:fe:a3:72:36:af:c4:ec:4a:b5:d7:22:ab:0b: cb:79:f6:75:76:7c:1f:19:77:60:aa:d9:d0:37:b7: c1:00:8b:f2:b6:c2:8a:0e:9d:9f:b6:3e:b4:4d:f1: e5:88:7e:9f:7a:58:ae:f0:58:ca:74:32:fd:63:74: b6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:28:D2:F3:2E:F6:38:76:80:AC:9C:E4:A1:30:DD:90:7A:32:0E:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/04da0af8-7c12-3869-a040-797710feccc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 192.101.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:15:ce:31:66:9a:e2:1e:85:9d:86:d3:7d:0d:31:05:58:a2: 74:1d:e1:fb:bb:ee:5a:c5:b3:1c:ba:13:05:cc:41:8d:1e:5d: d6:2f:91:94:5a:69:43:f5:23:b2:88:f8:a9:19:5f:d6:ed:b4: d6:09:b7:ff:dd:67:b5:20:3c:56:d8:82:f4:3f:63:71:53:d0: 34:9f:d6:1b:35:2e:2a:14:f0:6c:f0:3c:2c:19:66:0b:c8:95: 8f:0f:ea:ed:1e:9a:63:b4:da:26:37:7b:8b:58:47:50:66:77: a6:8f:14:48:de:6a:08:f8:33:ac:db:64:87:78:c2:da:2b:7c: 30:91:30:5e:aa:34:e2:24:84:fe:99:55:78:69:ec:5d:3a:4d: 0f:f4:ac:8f:04:7f:a1:d3:ba:e2:4f:ea:fd:67:0d:80:41:d6: 02:8d:6a:6e:5d:aa:9b:a7:b7:0d:e4:f5:1d:73:51:cb:4a:b7: ce:14:a9:c0:e4:9a:8b:b5:16:0e:e0:cd:06:80:e7:e0:6a:08: ad:aa:0a:c6:ee:4a:0a:f4:8a:b8:22:68:a1:e5:6e:c7:0e:16: 39:e0:7c:4c:58:38:3f:fe:bc:6c:cd:0d:58:f5:9f:55:c7:97: 0b:4f:7f:a6:ae:7d:67:b1:a6:c7:3c:a1:10:67:2c:5d:39:31: f2:92:1e:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKmlRJlytPuBPwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk ODU2Yzk1ODUtMWI1YS00NTk0LWI0YWYtYTI3NTc0YTdiOTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggpRLlVd58sg4Vao3a2FN0hw99Sw+QIukt3M peg7WgaSq+E5ldVG3Y89GHLswxM7G2cTtTNuaL4OXpoWn8Lge+OeaQGmNSqM9D5h rn9yMqg6g6m90T0ofG4MMvYhi4qxo4vghaXtrs9KuzR4sv0ko7Uf/+1/yLNbK08b uJy/prNdC31ogjEVF4+1xu4EDOwSMObZBRILGBHrNMNuhS8dSUGLZQ4NuspGDBlD uTJQX+7vmy2pxTTGgFDp/m34140SmLlMfv6jcjavxOxKtdciqwvLefZ1dnwfGXdg qtnQN7fBAIvytsKKDp2ftj60TfHliH6feliu8FjKdDL9Y3S2uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoo0vMu9jh2gKyc5KEw3ZB6Mg4BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvMDRkYTBhZjgtN2MxMi0z ODY5LWEwNDAtNzk3NzEwZmVjY2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGWLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALUVzjFmmuIehZ2G030NMQVYonQd4fu77lrFsxy6EwXMQY0eXdYvkZRa aUP1I7KI+KkZX9bttNYJt//dZ7UgPFbYgvQ/Y3FT0DSf1hs1LioU8GzwPCwZZgvI lY8P6u0emmO02iY3e4tYR1Bmd6aPFEjeagj4M6zbZId4wtorfDCRMF6qNOIkhP6Z VXhp7F06TQ/0rI8Ef6HTuuJP6v1nDYBB1gKNam5dqpuntw3k9R1zUctKt84UqcDk mou1Fg7gzQaA5+BqCK2qCsbuSgr0irgiaKHlbscOFjngfExYOD/+vGzNDVj1n1XH lwtPf6aufWexpsc8oRBnLF05MfKSHj4= -----END CERTIFICATE-----Generated at Thu Mar 26 03:44:21 2026 by rpki-client