$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476/958996f6-abea-3a9b-b1ae-4a3f1a0dbe47.roa File: 958996f6-abea-3a9b-b1ae-4a3f1a0dbe47.roa (raw, json) Hash identifier: KNCYVoQdOjlyRQ1tRH6n+bfyMdrcHncS0c/M0Rv7UNs= Subject key identifier: 9E:B8:BD:07:E1:63:19:06:53:9E:09:2C:DF:0C:19:90:B1:14:FB:35 Certificate issuer: /CN=e5a67b98-1c41-438b-b404-8142d67c6476 Certificate serial: 010D0C9F4328584D492A6820828E2DD832F9B600 Authority key identifier: 81:9F:D1:6B:26:3D:DA:D3:70:D4:D5:AF:2D:CA:CC:8B:B0:B3:CC:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476/958996f6-abea-3a9b-b1ae-4a3f1a0dbe47.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 16509 IP address blocks: 192.69.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476/e5a67b98-1c41-438b-b404-8142d67c6476.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476/e5a67b98-1c41-438b-b404-8142d67c6476.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:68:20:82:8e:2d:d8:32:f9:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5a67b98-1c41-438b-b404-8142d67c6476 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=bfd93e58-0194-4fff-ab3b-b6c26f681f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e2:38:30:42:72:61:9b:62:75:53:cb:66:f6: 55:e5:2b:28:42:d5:0d:b6:4e:ef:3e:52:1e:ac:43: 1f:dc:86:da:f5:8b:89:fc:21:b5:ab:36:62:7f:fc: fa:9b:68:fc:71:df:03:c3:ef:1e:40:c4:3d:30:24: 35:8c:49:0b:8e:95:75:ef:2c:38:8a:bc:2d:5f:89: cb:8c:d8:c8:cd:83:14:12:d3:da:4f:1c:1c:11:89: 8f:0d:0a:47:c8:42:12:c3:1f:90:a8:f9:5e:8c:d1: 06:38:64:f4:de:cb:f5:53:c7:cc:8b:56:42:18:7f: e2:74:3d:05:96:99:23:90:51:1f:a1:49:bd:f7:a9: 8c:c3:7f:8d:b3:b8:70:a0:72:59:1f:17:63:33:a3: 37:a7:11:35:d5:6c:33:87:78:b7:c2:0c:38:ea:e3: 1b:c2:8c:90:8e:5d:37:43:58:26:3d:45:70:89:b3: 88:b9:85:9f:84:2d:88:af:c2:1f:01:40:a9:01:2e: e2:14:5b:f5:6f:24:7d:2d:47:d3:ff:a6:d2:2d:09: 71:34:7f:a0:8c:c7:44:1d:de:d3:01:30:38:75:c7: d0:a2:49:e7:31:1f:15:46:d7:ea:e3:d5:26:c0:81: 93:5e:e7:c1:b5:57:2c:27:af:01:85:bd:3e:20:f3: 67:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B8:BD:07:E1:63:19:06:53:9E:09:2C:DF:0C:19:90:B1:14:FB:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476/958996f6-abea-3a9b-b1ae-4a3f1a0dbe47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476/e5a67b98-1c41-438b-b404-8142d67c6476.crl X509v3 Authority Key Identifier: keyid:81:9F:D1:6B:26:3D:DA:D3:70:D4:D5:AF:2D:CA:CC:8B:B0:B3:CC:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476.cer sbgp-ipAddrBlock: critical IPv4: 192.69.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:6f:8a:1f:f7:a4:ec:e3:35:76:28:12:4f:81:8e:b9:a5:66: 75:6c:0d:18:15:b6:a3:88:5f:02:67:5b:4b:b7:2d:b5:e5:92: 8b:ed:11:96:6f:8c:27:21:7e:d0:4a:4c:d3:3a:0f:85:e8:74: 3e:45:80:7e:33:14:15:e5:e2:73:e2:09:6a:f0:ef:43:4b:43: cd:fb:d1:c2:56:73:22:99:17:dd:75:15:1b:a1:7e:9a:96:5b: 39:f7:b2:05:dd:93:a9:c6:bf:87:fb:04:63:37:9d:20:9f:3e: ea:70:0d:fc:21:2c:f8:82:35:c1:ac:c8:11:29:eb:bb:7f:16: 12:3e:a8:34:6a:5e:07:c2:81:27:d7:fa:85:f9:d9:84:82:09: 99:3a:54:a2:29:69:c0:0e:03:e8:41:b2:54:3a:8c:b9:ba:75: 4c:da:03:dd:c3:64:42:e8:6f:b4:94:3f:aa:da:73:8e:8c:8b: 4b:91:3f:1a:8d:5e:a7:f5:28:5b:e5:0e:a2:21:2b:3a:53:d6: 2c:4f:89:b2:cc:0e:6a:7e:15:29:75:95:c7:99:b4:ba:93:23: c6:81:2a:d7:0b:0b:c9:36:15:f4:44:d3:fa:63:6c:a4:f0:38: bb:df:1f:08:89:b5:86:cd:cf:d5:2f:57:56:af:e2:39:6b:b2: 89:15:df:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKmgggo4t2DL5tgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTVhNjdiOTgtMWM0MS00MzhiLWI0MDQtODE0MmQ2N2M2 NDc2MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk YmZkOTNlNTgtMDE5NC00ZmZmLWFiM2ItYjZjMjZmNjgxZjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOI4MEJyYZtidVPLZvZV5SsoQtUNtk7vPlIe rEMf3Iba9YuJ/CG1qzZif/z6m2j8cd8Dw+8eQMQ9MCQ1jEkLjpV17yw4irwtX4nL jNjIzYMUEtPaTxwcEYmPDQpHyEISwx+QqPlejNEGOGT03sv1U8fMi1ZCGH/idD0F lpkjkFEfoUm996mMw3+Ns7hwoHJZHxdjM6M3pxE11Wwzh3i3wgw46uMbwoyQjl03 Q1gmPUVwibOIuYWfhC2Ir8IfAUCpAS7iFFv1byR9LUfT/6bSLQlxNH+gjMdEHd7T ATA4dcfQoknnMR8VRtfq49UmwIGTXufBtVcsJ68Bhb0+IPNnLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ64vQfhYxkGU54JLN8MGZCxFPs1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNWE2 N2I5OC0xYzQxLTQzOGItYjQwNC04MTQyZDY3YzY0NzYvOTU4OTk2ZjYtYWJlYS0z YTliLWIxYWUtNGEzZjFhMGRiZTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTVhNjdiOTgtMWM0MS00MzhiLWI0 MDQtODE0MmQ2N2M2NDc2L2U1YTY3Yjk4LTFjNDEtNDM4Yi1iNDA0LTgxNDJkNjdj NjQ3Ni5jcmwwHwYDVR0jBBgwFoAUgZ/RayY92tNw1NWvLcrMi7CzzOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lNWE2N2I5OC0xYzQxLTQzOGItYjQwNC04MTQy ZDY3YzY0NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEWfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5vih/3pOzjNXYoEk+BjrmlZnVsDRgVtqOIXwJnW0u3LbXlkovtEZZv jCchftBKTNM6D4XodD5FgH4zFBXl4nPiCWrw70NLQ8370cJWcyKZF911FRuhfpqW Wzn3sgXdk6nGv4f7BGM3nSCfPupwDfwhLPiCNcGsyBEp67t/FhI+qDRqXgfCgSfX +oX52YSCCZk6VKIpacAOA+hBslQ6jLm6dUzaA93DZELob7SUP6rac46Mi0uRPxqN Xqf1KFvlDqIhKzpT1ixPibLMDmp+FSl1lceZtLqTI8aBKtcLC8k2FfRE0/pjbKTw OLvfHwiJtYbNz9UvV1av4jlrsokV37s= -----END CERTIFICATE-----Generated at Thu Mar 26 07:40:23 2026 by rpki-client