$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8/0921fd38-7f09-3761-bb31-ec250eef6f0d.roa File: 0921fd38-7f09-3761-bb31-ec250eef6f0d.roa (raw, json) Hash identifier: rCnyjZmqOFenkzIb7CdVvkVP4VGGLCg7c1Q+rmdsniw= Subject key identifier: 6C:58:F7:C9:45:EA:41:B0:4D:94:A6:66:C9:77:95:28:1B:87:80:8E Certificate issuer: /CN=2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8 Certificate serial: 010D0C9F4328584CB287500C5514EF9513373400 Authority key identifier: 1A:DB:5B:87:D8:5E:F0:10:8D:94:FC:D7:A4:32:DB:2A:41:88:05:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8/0921fd38-7f09-3761-bb31-ec250eef6f0d.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 393873 IP address blocks: 192.138.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:50:0c:55:14:ef:95:13:37:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8 Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=19df8143-d55a-47f4-aad7-9d22e6c2711e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bc:ea:60:37:11:98:25:0a:ee:5e:fc:8f:a5: 1b:d1:68:e7:fe:c7:bc:3b:0e:3b:be:40:87:4f:8e: 4e:18:fc:29:66:b3:f1:b8:90:bc:21:4c:60:d2:b9: 5d:3e:24:9a:46:8b:45:29:7b:a6:b2:63:16:aa:f3: d5:54:48:74:3f:3d:a9:a8:50:b0:81:35:88:ed:2a: 16:7e:be:5e:8a:21:0d:fa:92:6c:9b:2c:9c:dd:ab: 5b:aa:08:9a:cb:08:e4:e4:b6:b0:03:78:1e:20:8f: 81:6e:b2:47:dd:20:14:4f:e8:20:90:d7:9e:8b:45: bb:a5:14:71:37:20:2b:88:bd:d1:21:7c:14:97:26: 7e:19:18:92:6f:66:ce:d2:56:af:b0:9b:c5:75:03: 71:12:e8:de:09:ab:29:bf:1e:8c:19:22:5f:cc:36: 5d:69:f8:b6:82:a1:cb:9f:6d:cd:66:be:f7:a6:58: ed:7d:50:50:de:74:08:35:01:9d:25:18:98:46:2a: e8:b5:82:7f:70:0e:35:2f:61:6d:12:64:d8:98:84: 2b:1d:08:ad:6d:82:f8:b0:0a:a2:54:ee:79:57:df: 02:6c:0e:9b:f2:4e:e6:a3:eb:6c:b6:c2:5a:9e:2b: 0f:b2:43:b3:68:a0:2c:0c:a4:7e:8b:8e:8c:8d:e9: a7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:58:F7:C9:45:EA:41:B0:4D:94:A6:66:C9:77:95:28:1B:87:80:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8/0921fd38-7f09-3761-bb31-ec250eef6f0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8.crl X509v3 Authority Key Identifier: keyid:1A:DB:5B:87:D8:5E:F0:10:8D:94:FC:D7:A4:32:DB:2A:41:88:05:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8.cer sbgp-ipAddrBlock: critical IPv4: 192.138.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:a2:a3:f5:27:5e:1e:df:7b:b3:98:46:80:43:76:b2:46:f8: 44:97:23:1a:03:e8:d6:0e:24:20:ce:47:bf:81:f9:35:04:e0: ef:37:fb:44:92:73:d9:93:1f:8f:fd:0f:d6:2e:85:6d:ec:4f: 47:90:af:18:cc:54:96:8e:2a:7b:85:b9:4a:42:26:3f:88:95: bf:3c:c8:1d:74:ef:27:5f:bb:0a:de:99:9a:71:73:34:b9:d4: c7:9b:d5:a2:72:f3:cf:52:ab:eb:ce:5d:3b:8c:f1:cd:f4:94: 79:1a:79:be:ba:32:64:88:d8:75:c1:07:ca:a6:35:cb:b5:b5: d3:6b:bb:1a:13:8b:0b:a1:e3:6e:39:9e:24:44:6a:55:b3:58: 68:aa:94:97:37:47:bc:a1:49:2e:11:d4:26:f3:79:53:fe:52: 37:c3:93:2d:06:ca:b3:a0:00:a1:6a:ed:e9:2b:c6:67:ca:8f: b9:2f:27:65:ba:b5:d7:70:c4:30:32:e0:d2:95:b0:8e:7e:41: 36:b0:72:af:86:d3:65:d3:73:b0:bc:d9:a2:40:f6:b8:a0:06: 10:c4:ce:63:2b:47:0e:c1:84:3c:64:31:88:d3:35:fa:dd:1c: 90:38:9a:c2:75:10:67:7e:24:63:60:b5:c0:51:f1:e8:01:f7: 9b:5d:96:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyh1AMVRTvlRM3NAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmM2ZWZhMzMtNWNhMi00YjM1LThmNjMtMjllZjJmZjNh YmY4MB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk MTlkZjgxNDMtZDU1YS00N2Y0LWFhZDctOWQyMmU2YzI3MTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbzqYDcRmCUK7l78j6Ub0Wjn/se8Ow47vkCH T45OGPwpZrPxuJC8IUxg0rldPiSaRotFKXumsmMWqvPVVEh0Pz2pqFCwgTWI7SoW fr5eiiEN+pJsmyyc3atbqgiaywjk5LawA3geII+BbrJH3SAUT+ggkNeei0W7pRRx NyAriL3RIXwUlyZ+GRiSb2bO0lavsJvFdQNxEujeCaspvx6MGSJfzDZdafi2gqHL n23NZr73pljtfVBQ3nQINQGdJRiYRirotYJ/cA41L2FtEmTYmIQrHQitbYL4sAqi VO55V98CbA6b8k7mo+tstsJanisPskOzaKAsDKR+i46MjemnOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxY98lF6kGwTZSmZsl3lSgbh4COMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yYzZl ZmEzMy01Y2EyLTRiMzUtOGY2My0yOWVmMmZmM2FiZjgvMDkyMWZkMzgtN2YwOS0z NzYxLWJiMzEtZWMyNTBlZWY2ZjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmM2ZWZhMzMtNWNhMi00YjM1LThm NjMtMjllZjJmZjNhYmY4LzJjNmVmYTMzLTVjYTItNGIzNS04ZjYzLTI5ZWYyZmYz YWJmOC5jcmwwHwYDVR0jBBgwFoAUGttbh9he8BCNlPzXpDLbKkGIBSQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yYzZlZmEzMy01Y2EyLTRiMzUtOGY2My0yOWVm MmZmM2FiZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIqFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGio/UnXh7fe7OYRoBDdrJG+ESXIxoD6NYOJCDOR7+B+TUE4O83+0SS c9mTH4/9D9YuhW3sT0eQrxjMVJaOKnuFuUpCJj+Ilb88yB107ydfuwremZpxczS5 1Meb1aJy889Sq+vOXTuM8c30lHkaeb66MmSI2HXBB8qmNcu1tdNruxoTiwuh4245 niREalWzWGiqlJc3R7yhSS4R1CbzeVP+UjfDky0GyrOgAKFq7ekrxmfKj7kvJ2W6 tddwxDAy4NKVsI5+QTawcq+G02XTc7C82aJA9rigBhDEzmMrRw7BhDxkMYjTNfrd HJA4msJ1EGd+JGNgtcBR8egB95tdluk= -----END CERTIFICATE-----Generated at Mon Mar 2 10:14:48 2026 by rpki-client