$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3/31de5975-70d3-38db-af47-39cb7d439a32.roa File: 31de5975-70d3-38db-af47-39cb7d439a32.roa (raw, json) Hash identifier: 9zEZKdxLm7WWYn7LTlC+0bc/bI/xbi/gh+eJ+HfiSeU= Subject key identifier: 2C:80:2A:5F:52:0F:51:70:B3:57:C3:3A:CD:01:7F:A4:0C:B4:4B:F1 Certificate issuer: /CN=f12b39cc-0108-4db1-b059-b4833b53c1a3 Certificate serial: 010D0C9F4328584D0EA7EC77BD9D1D91741E2440 Authority key identifier: 14:E1:61:53:5C:BC:2F:83:DD:08:30:20:6B:35:12:AD:DA:E6:8F:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3/31de5975-70d3-38db-af47-39cb7d439a32.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 3450 IP address blocks: 192.249.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3/f12b39cc-0108-4db1-b059-b4833b53c1a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3/f12b39cc-0108-4db1-b059-b4833b53c1a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:ec:77:bd:9d:1d:91:74:1e:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f12b39cc-0108-4db1-b059-b4833b53c1a3 Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=1096932a-033c-4e68-8220-e44b5a423eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9e:20:ee:08:ae:42:e9:50:5e:fd:c5:c8:ae: 4d:98:51:d6:71:11:28:d8:0b:61:02:ed:fd:94:86: 4b:c7:14:31:31:45:a6:f5:c8:db:06:b4:6c:3b:a9: 6a:2e:21:1f:35:da:48:f1:7d:d9:0d:aa:62:3b:71: d5:3e:80:8e:1c:80:cb:54:2b:bc:7f:df:25:d0:da: cb:e1:50:52:0f:ce:68:65:51:c1:e2:50:2c:b3:7e: c8:21:6e:7e:4e:fd:89:3a:cd:a8:8b:9a:48:54:37: aa:ea:5c:7b:dd:4f:07:c3:4a:c0:37:09:04:4e:ac: f9:f2:be:5d:4b:59:fc:e7:3f:9f:7f:74:0d:d4:5d: 53:ca:07:45:d1:4c:14:0a:dc:3d:16:cd:ea:01:74: 36:e3:46:7e:1d:d8:48:21:91:03:8b:83:da:84:3f: ae:20:6f:3a:b8:b1:f8:6c:13:22:8d:05:94:9f:05: 0e:22:0e:f9:51:15:ef:80:aa:a9:d4:01:21:ab:e6: 25:70:b6:40:3e:95:73:38:c3:49:b6:07:9b:13:7e: 38:79:c2:5a:ea:c0:65:30:d8:9d:fb:b0:17:88:ec: 35:21:00:2b:0f:bd:8f:2b:0a:4a:28:b0:ae:fe:e1: 75:22:e5:07:8c:8e:29:61:c6:08:e8:fc:23:b5:a8: a3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:80:2A:5F:52:0F:51:70:B3:57:C3:3A:CD:01:7F:A4:0C:B4:4B:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3/31de5975-70d3-38db-af47-39cb7d439a32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3/f12b39cc-0108-4db1-b059-b4833b53c1a3.crl X509v3 Authority Key Identifier: keyid:14:E1:61:53:5C:BC:2F:83:DD:08:30:20:6B:35:12:AD:DA:E6:8F:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3.cer sbgp-ipAddrBlock: critical IPv4: 192.249.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:44:5a:3b:9e:b5:0f:c2:de:bc:ea:d8:f9:8e:04:f3:f6:29: fc:05:ea:94:03:93:4c:8f:db:28:8f:cd:19:67:5b:b1:7b:6d: f6:ee:76:7c:8a:7d:e0:77:1c:d5:ea:a8:4d:ab:83:96:29:6e: 7f:9c:3a:b6:b3:3c:c9:8d:d3:be:46:d4:70:22:80:cc:03:fe: fd:b3:b3:26:bc:7b:ee:63:23:53:e0:14:ee:8e:90:25:b7:d3: 0a:51:35:35:cc:46:10:35:a9:38:c8:b4:86:2e:5f:78:02:0f: e0:d9:1d:16:9a:88:cb:97:56:6e:7c:7e:93:ec:26:93:d0:db: 3a:40:e6:71:bf:28:63:54:15:f5:59:a6:9d:51:85:df:b0:b6: 4b:20:88:42:2c:08:c3:c7:fd:fe:63:b2:b8:5a:b3:ae:d0:dc: e1:a7:2f:b9:c9:9a:e0:7f:83:10:46:50:bc:cb:25:9b:4b:37: 2e:f0:33:98:3e:8e:91:71:b6:3c:4d:80:c2:1b:f3:6d:9a:a8: 11:c1:fe:72:d7:80:e2:b7:8f:8d:b8:68:ae:c1:29:97:d7:50: 0c:4a:b4:b4:5a:19:b8:dc:da:6b:88:ae:9f:82:ac:0d:d5:8a: 43:d9:e3:08:30:df:0b:3a:21:7b:59:9b:81:27:2b:39:fe:47: 67:5d:e0:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op+x3vZ0dkXQeJEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjEyYjM5Y2MtMDEwOC00ZGIxLWIwNTktYjQ4MzNiNTNj MWEzMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk MTA5NjkzMmEtMDMzYy00ZTY4LTgyMjAtZTQ0YjVhNDIzZWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J4g7giuQulQXv3FyK5NmFHWcREo2AthAu39 lIZLxxQxMUWm9cjbBrRsO6lqLiEfNdpI8X3ZDapiO3HVPoCOHIDLVCu8f98l0NrL 4VBSD85oZVHB4lAss37IIW5+Tv2JOs2oi5pIVDeq6lx73U8Hw0rANwkETqz58r5d S1n85z+ff3QN1F1TygdF0UwUCtw9Fs3qAXQ240Z+HdhIIZEDi4PahD+uIG86uLH4 bBMijQWUnwUOIg75URXvgKqp1AEhq+YlcLZAPpVzOMNJtgebE344ecJa6sBlMNid +7AXiOw1IQArD72PKwpKKLCu/uF1IuUHjI4pYcYI6Pwjtaij8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyAKl9SD1Fws1fDOs0Bf6QMtEvxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mMTJi MzljYy0wMTA4LTRkYjEtYjA1OS1iNDgzM2I1M2MxYTMvMzFkZTU5NzUtNzBkMy0z OGRiLWFmNDctMzljYjdkNDM5YTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZjEyYjM5Y2MtMDEwOC00ZGIxLWIw NTktYjQ4MzNiNTNjMWEzL2YxMmIzOWNjLTAxMDgtNGRiMS1iMDU5LWI0ODMzYjUz YzFhMy5jcmwwHwYDVR0jBBgwFoAUFOFhU1y8L4PdCDAgazUSrdrmj9MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mMTJiMzljYy0wMTA4LTRkYjEtYjA1OS1iNDgz M2I1M2MxYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwPkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZEWjuetQ/C3rzq2PmOBPP2KfwF6pQDk0yP2yiPzRlnW7F7bfbudnyK feB3HNXqqE2rg5Ypbn+cOrazPMmN075G1HAigMwD/v2zsya8e+5jI1PgFO6OkCW3 0wpRNTXMRhA1qTjItIYuX3gCD+DZHRaaiMuXVm58fpPsJpPQ2zpA5nG/KGNUFfVZ pp1Rhd+wtksgiEIsCMPH/f5jsrhas67Q3OGnL7nJmuB/gxBGULzLJZtLNy7wM5g+ jpFxtjxNgMIb822aqBHB/nLXgOK3j424aK7BKZfXUAxKtLRaGbjc2muIrp+CrA3V ikPZ4wgw3ws6IXtZm4EnKzn+R2dd4Io= -----END CERTIFICATE-----Generated at Fri Mar 27 02:39:31 2026 by rpki-client