$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/d3834ffa-cce3-3357-aab0-1d60dc3a359c.roa File: d3834ffa-cce3-3357-aab0-1d60dc3a359c.roa (raw, json) Hash identifier: VnWDS+JSPmVtuWrUgtUlf62kdEdZsZn+JAum0kYxh+Y= Subject key identifier: 92:64:3C:22:70:0A:22:29:81:0F:2E:7A:A8:51:4E:9F:70:AE:56:C8 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D9E500EF444125CD43681F530 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/d3834ffa-cce3-3357-aab0-1d60dc3a359c.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 192.86.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:0e:f4:44:12:5c:d4:36:81:f5:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=0121cdf0-4158-4213-8bb5-dbd014899f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:68:bb:c5:29:1d:3c:78:3e:5f:0b:03:45:e9: 65:88:e1:0e:ff:c6:f2:af:a4:58:25:72:6b:80:8b: 62:cb:87:b4:9c:44:ab:c3:b9:c3:e8:8b:f5:ad:35: 62:b6:82:f5:7d:8c:96:92:90:be:57:b7:df:73:46: 73:60:a1:4f:af:8d:bc:67:96:30:3b:32:d9:d2:fe: 32:5d:97:02:89:41:49:a6:60:83:de:24:d5:7b:bc: bf:36:f7:99:63:1a:ad:5d:e0:e5:96:8a:46:27:3d: a2:08:0b:17:f7:32:52:61:44:db:f8:76:f2:8c:6e: 5d:d3:f2:1c:e6:81:88:39:ef:c3:ca:8f:e6:29:17: ed:c8:38:62:21:78:3e:b6:4a:d9:d2:fe:d9:ea:b6: c3:dc:c2:21:17:32:57:11:db:50:17:2f:85:c0:17: 0a:9d:18:b7:f8:5d:cd:e4:3f:6d:f0:35:ad:60:9d: f4:6b:6c:07:ca:a2:51:8f:63:3c:1c:ec:16:7a:d3: 1d:c7:4a:a3:3b:c1:7c:e1:d8:60:21:e2:21:bb:00: 77:a1:a4:f8:12:e9:ca:95:ed:cf:8a:dc:1e:41:10: 34:f9:ce:4b:c9:75:c0:84:ce:24:54:7f:65:4f:28: 5a:fd:b7:3e:89:2f:fb:e6:b2:bf:05:53:ad:ba:22: 46:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:64:3C:22:70:0A:22:29:81:0F:2E:7A:A8:51:4E:9F:70:AE:56:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/d3834ffa-cce3-3357-aab0-1d60dc3a359c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 192.86.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:56:b5:18:b8:48:a0:cc:1e:8c:5f:51:48:bb:ef:d3:19:36: 0d:f8:05:4c:4c:2c:9b:7c:8b:81:89:ef:38:32:d9:e8:a6:3b: c5:30:f1:1a:84:89:fd:f0:28:33:b6:6a:75:49:c4:66:5e:6d: 27:ab:aa:31:71:40:98:66:2d:e2:87:22:23:eb:0c:a3:18:ae: f7:33:1c:72:17:cd:4d:ca:dc:4f:ff:d0:28:d9:b4:81:11:a2: a7:6b:52:0d:c8:32:f8:99:f6:f0:c1:75:65:c9:b7:ff:e7:e6: 3a:d8:d7:1d:45:f8:1e:72:60:be:81:31:bc:ac:f6:00:0b:f2: ce:20:46:0b:df:12:d5:ca:33:9e:59:0a:ab:7d:ee:19:b4:8c: 97:4c:bb:c2:24:54:25:3d:b0:20:94:77:3b:ea:af:0d:64:3a: 44:00:38:fa:b8:cd:c0:5b:bd:66:a9:d7:47:07:85:74:f1:76: dd:e9:37:19:a8:c3:75:b9:74:33:9c:55:12:f4:c0:7b:52:dc: 5e:7a:73:ca:0a:0f:34:c9:ac:f6:12:33:38:ec:7c:f4:95:b2: 8e:09:41:99:dd:f9:1d:02:b8:8a:ce:aa:a7:be:22:b6:43:dc: fa:55:ec:47:b6:c0:19:ec:3e:aa:42:b4:70:19:b2:32:60:6d: c9:d2:2f:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUA70RBJc1DaB9TAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk MDEyMWNkZjAtNDE1OC00MjEzLThiYjUtZGJkMDE0ODk5ZjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWi7xSkdPHg+XwsDRelliOEO/8byr6RYJXJr gItiy4e0nESrw7nD6Iv1rTVitoL1fYyWkpC+V7ffc0ZzYKFPr428Z5YwOzLZ0v4y XZcCiUFJpmCD3iTVe7y/NveZYxqtXeDllopGJz2iCAsX9zJSYUTb+HbyjG5d0/Ic 5oGIOe/Dyo/mKRftyDhiIXg+tkrZ0v7Z6rbD3MIhFzJXEdtQFy+FwBcKnRi3+F3N 5D9t8DWtYJ30a2wHyqJRj2M8HOwWetMdx0qjO8F84dhgIeIhuwB3oaT4EunKle3P itweQRA0+c5LyXXAhM4kVH9lTyha/bc+iS/75rK/BVOtuiJGWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJkPCJwCiIpgQ8ueqhRTp9wrlbIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZDM4MzRmZmEtY2NlMy0z MzU3LWFhYjAtMWQ2MGRjM2EzNTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFaeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNWtRi4SKDMHoxfUUi779MZNg34BUxMLJt8i4GJ7zgy2eimO8Uw8RqE if3wKDO2anVJxGZebSerqjFxQJhmLeKHIiPrDKMYrvczHHIXzU3K3E//0CjZtIER oqdrUg3IMviZ9vDBdWXJt//n5jrY1x1F+B5yYL6BMbys9gAL8s4gRgvfEtXKM55Z Cqt97hm0jJdMu8IkVCU9sCCUdzvqrw1kOkQAOPq4zcBbvWap10cHhXTxdt3pNxmo w3W5dDOcVRL0wHtS3F56c8oKDzTJrPYSMzjsfPSVso4JQZnd+R0CuIrOqqe+IrZD 3PpV7Ee2wBnsPqpCtHAZsjJgbcnSL18= -----END CERTIFICATE-----Generated at Wed May 13 09:06:23 2026 by rpki-client