$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/0342b8f3-057f-3bf8-9394-1f273c1b1e3b.roa File: 0342b8f3-057f-3bf8-9394-1f273c1b1e3b.roa (raw, json) Hash identifier: 6rS79y1bWCI2MVIFl5d4hOJlrHLK9laJ/Kz7TxXok7s= Subject key identifier: B0:75:58:86:8C:C4:9D:E5:C9:66:C6:AF:E1:11:10:0E:11:7C:67:E2 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584D3F64C81A2567AF9D2A074810 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/0342b8f3-057f-3bf8-9394-1f273c1b1e3b.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 55081 IP address blocks: 192.119.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:c8:1a:25:67:af:9d:2a:07:48:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=c4e49e86-e264-42ad-9cc8-ac025ae3ccfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fd:45:43:53:3f:b1:d1:66:2c:df:fa:d4:52: fe:8d:b5:25:43:78:46:c3:ff:fa:eb:35:28:8f:ed: 61:f1:24:d8:99:cc:3f:cc:59:f0:b5:39:cb:9a:56: bf:5e:a2:13:6d:88:0e:44:99:b5:cf:f8:23:db:e0: c2:9a:42:56:ed:3d:32:c2:1c:77:7c:5f:14:77:fe: 8a:be:95:36:2c:03:c4:18:95:6f:62:e2:4f:bb:81: f3:80:f8:c4:97:7b:25:c2:17:76:72:b2:f9:a3:53: 2a:1b:1d:77:bd:80:0b:63:fe:29:f1:f1:57:5e:52: 48:aa:6f:8d:59:63:3b:3d:99:86:eb:9e:71:25:a5: ae:77:be:eb:b2:0e:91:3d:6d:f7:0d:ca:5a:07:2f: 3c:e4:15:3b:de:c3:29:1e:82:09:ef:f3:18:d5:87: 20:30:c7:27:c4:02:22:b1:97:a6:01:96:5f:d5:a7: 3d:2e:41:21:d4:00:fc:ec:ff:ca:e3:98:8f:d6:ae: 62:42:c8:cd:a9:d6:93:c9:97:16:fa:2c:48:5e:0a: a0:cf:b3:89:6e:98:6f:53:cc:ae:3c:ae:b7:88:5d: 0e:0b:30:b3:e5:c2:29:fc:24:62:89:e3:0a:19:bd: 1b:9e:57:e8:f2:41:20:56:45:6d:e0:09:1f:43:3f: 54:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:75:58:86:8C:C4:9D:E5:C9:66:C6:AF:E1:11:10:0E:11:7C:67:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/0342b8f3-057f-3bf8-9394-1f273c1b1e3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 192.119.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:8f:26:77:8b:28:07:ea:c8:c9:2e:1c:ef:86:2a:91:4e:eb: 30:56:b7:83:70:88:15:4a:6f:94:40:89:2d:89:21:7a:a9:ed: 23:73:5e:a7:48:c8:d2:5b:d1:03:b3:2a:e5:73:f8:24:1b:b3: d6:ea:da:82:76:ad:5a:51:85:d1:a0:fd:94:08:83:55:fa:4a: 3e:49:b0:52:ed:a2:e8:b2:c9:b4:51:ba:1c:6a:fd:34:43:4e: b7:81:7a:b5:2c:b0:2d:c7:71:cc:32:16:6b:03:f4:9d:fc:ce: dd:6b:33:57:00:cb:bd:5a:39:2e:c5:a5:22:27:44:05:41:99: aa:b7:8d:6d:e4:c6:8d:89:35:bc:9a:ac:41:bc:9d:d9:05:d5: 27:a5:42:3a:37:6c:8f:85:ae:00:12:b5:49:d8:87:8f:57:87: 14:21:7f:eb:5f:20:69:9b:96:2e:0a:16:05:27:9e:0c:43:3a: 93:a7:35:50:79:22:5f:2b:f6:05:06:e7:69:7f:47:2c:3b:74: 9e:df:64:6e:08:ec:7c:64:d1:51:cd:39:32:b9:4a:39:c3:61: 0f:2d:58:7e:31:6f:fd:7f:5a:b1:e2:00:32:9d:5d:12:cd:f0: 86:4a:0d:10:0e:37:17:b3:71:0d:8b:4e:0b:90:5d:25:c5:7c: 66:02:ff:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZMgaJWevnSoHSBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk YzRlNDllODYtZTI2NC00MmFkLTljYzgtYWMwMjVhZTNjY2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/1FQ1M/sdFmLN/61FL+jbUlQ3hGw//66zUo j+1h8STYmcw/zFnwtTnLmla/XqITbYgORJm1z/gj2+DCmkJW7T0ywhx3fF8Ud/6K vpU2LAPEGJVvYuJPu4HzgPjEl3slwhd2crL5o1MqGx13vYALY/4p8fFXXlJIqm+N WWM7PZmG655xJaWud77rsg6RPW33DcpaBy885BU73sMpHoIJ7/MY1YcgMMcnxAIi sZemAZZf1ac9LkEh1AD87P/K45iP1q5iQsjNqdaTyZcW+ixIXgqgz7OJbphvU8yu PK63iF0OCzCz5cIp/CRiieMKGb0bnlfo8kEgVkVt4AkfQz9UQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLB1WIaMxJ3lyWbGr+EREA4RfGfiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvMDM0MmI4ZjMtMDU3Zi0z YmY4LTkzOTQtMWYyNzNjMWIxZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwHcIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASPJneLKAfqyMkuHO+GKpFO6zBWt4NwiBVKb5RAiS2JIXqp7SNzXqdI yNJb0QOzKuVz+CQbs9bq2oJ2rVpRhdGg/ZQIg1X6Sj5JsFLtouiyybRRuhxq/TRD TreBerUssC3HccwyFmsD9J38zt1rM1cAy71aOS7FpSInRAVBmaq3jW3kxo2JNbya rEG8ndkF1SelQjo3bI+FrgAStUnYh49XhxQhf+tfIGmbli4KFgUnngxDOpOnNVB5 Il8r9gUG52l/Ryw7dJ7fZG4I7Hxk0VHNOTK5SjnDYQ8tWH4xb/1/WrHiADKdXRLN 8IZKDRAONxezcQ2LTguQXSXFfGYC/5o= -----END CERTIFICATE-----Generated at Thu Mar 26 15:29:30 2026 by rpki-client