$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/5965b031-ef34-3104-aae4-6e476d645778.roa File: 5965b031-ef34-3104-aae4-6e476d645778.roa (raw, json) Hash identifier: 1FIx2c00bNTZ+N8aIrqIBSLGKL5S7s3pcuXnjSAFiyg= Subject key identifier: 61:FC:8D:7B:C3:14:A0:F7:08:96:DB:3B:20:76:11:87:98:61:A4:2F Certificate issuer: /CN=8bb8bd36-b264-4279-a16e-360f4a33eb80 Certificate serial: 010D0C9F4328584D6C0FB8B7F47150DD1C19F380 Authority key identifier: 9A:14:65:DF:F1:9B:5E:23:25:AB:9B:30:D0:F1:24:8C:6C:27:AD:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/5965b031-ef34-3104-aae4-6e476d645778.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 701 IP address blocks: 192.48.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:b8:b7:f4:71:50:dd:1c:19:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bb8bd36-b264-4279-a16e-360f4a33eb80 Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=a40c6478-8a3b-402d-be23-303d9c9d876d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b5:25:ba:35:40:35:0a:ff:e4:78:d8:3f:94: 3a:97:2e:0a:b5:02:94:57:e8:e1:62:c8:74:5d:79: 11:37:89:63:ab:b5:dd:b2:26:05:11:bb:08:ff:5d: bd:70:72:67:3e:51:5f:40:7c:89:4d:73:93:8b:e6: 09:5c:d3:2c:42:b8:35:d9:b0:1c:cc:78:bb:00:e6: db:fa:33:b4:15:54:15:1a:21:a1:11:ad:17:06:35: 19:df:f1:2e:1d:16:72:35:59:ac:c4:3d:89:98:4a: dc:14:73:86:a4:82:52:ac:f1:5c:bf:99:71:a3:da: 24:b7:4d:a2:ba:a7:5a:37:05:96:06:7c:f2:94:6d: 72:96:91:76:76:c2:4c:2e:60:8e:97:7f:b0:2d:a4: 0b:29:4c:df:7c:6e:d9:ab:da:ed:10:a5:64:a6:88: be:55:68:c4:35:95:4f:bf:9f:f5:08:d7:65:12:33: c1:97:c4:c1:7c:e2:ec:32:3a:58:f9:bb:6f:d1:2b: 6a:c8:22:0c:d2:4d:94:80:04:e2:6f:db:14:25:a9: 72:17:cd:d2:2b:21:54:28:ca:f7:06:2a:a1:78:ff: a0:f3:0c:95:20:3f:d2:0e:dc:eb:50:92:55:37:12: 2d:d4:93:77:ea:87:36:92:6b:fe:c5:d5:0f:88:77: 5e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:FC:8D:7B:C3:14:A0:F7:08:96:DB:3B:20:76:11:87:98:61:A4:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/5965b031-ef34-3104-aae4-6e476d645778.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.crl X509v3 Authority Key Identifier: keyid:9A:14:65:DF:F1:9B:5E:23:25:AB:9B:30:D0:F1:24:8C:6C:27:AD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer sbgp-ipAddrBlock: critical IPv4: 192.48.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:08:3e:be:20:09:7a:16:0e:6f:36:24:15:68:26:1f:6e:51: 96:8b:c0:b1:71:02:05:1e:f5:ed:0e:c6:ba:ba:0b:a8:ad:93: 9c:b8:85:1b:25:b7:33:76:04:6d:c3:e0:34:d1:3e:ed:ea:51: 82:50:29:f9:cf:57:ff:a2:95:3a:a3:0d:f2:04:6e:83:1e:f6: 47:01:39:8f:6b:d0:11:86:5f:92:4a:6a:b4:f2:6d:36:3d:91: 67:bd:09:49:61:90:c6:f9:85:70:78:a3:26:6b:9a:80:56:5c: 56:22:97:10:bd:6b:da:dc:87:2e:6c:0d:da:88:01:26:05:ed: b5:de:f5:c8:cd:f9:7c:e5:5c:83:a5:d8:b1:2e:c1:3b:5c:52: 28:6e:cd:ab:2e:5e:57:06:ee:62:d0:4a:c9:37:82:f5:34:6b: 4e:b5:82:d0:f8:22:4a:9b:5d:2f:6f:7c:a9:4f:e6:90:10:e9: f2:46:06:63:89:31:37:3b:7e:19:55:22:8d:cd:7d:64:ef:e7: 36:e6:5a:40:19:60:93:23:f8:dc:17:c3:5c:10:b3:6f:e7:e0: 01:17:ab:54:dd:80:8b:64:13:85:d2:41:3c:4a:65:b9:7d:8c: 4b:80:3a:ed:ba:39:05:79:73:56:29:79:ce:fb:f1:a7:e2:82: 44:d1:91:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD7i39HFQ3RwZ84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJiOGJkMzYtYjI2NC00Mjc5LWExNmUtMzYwZjRhMzNl YjgwMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk YTQwYzY0NzgtOGEzYi00MDJkLWJlMjMtMzAzZDljOWQ4NzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbUlujVANQr/5HjYP5Q6ly4KtQKUV+jhYsh0 XXkRN4ljq7XdsiYFEbsI/129cHJnPlFfQHyJTXOTi+YJXNMsQrg12bAczHi7AObb +jO0FVQVGiGhEa0XBjUZ3/EuHRZyNVmsxD2JmErcFHOGpIJSrPFcv5lxo9okt02i uqdaNwWWBnzylG1ylpF2dsJMLmCOl3+wLaQLKUzffG7Zq9rtEKVkpoi+VWjENZVP v5/1CNdlEjPBl8TBfOLsMjpY+btv0StqyCIM0k2UgATib9sUJalyF83SKyFUKMr3 BiqheP+g8wyVID/SDtzrUJJVNxIt1JN36oc2kmv+xdUPiHde5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGH8jXvDFKD3CJbbOyB2EYeYYaQvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84YmI4 YmQzNi1iMjY0LTQyNzktYTE2ZS0zNjBmNGEzM2ViODAvNTk2NWIwMzEtZWYzNC0z MTA0LWFhZTQtNmU0NzZkNjQ1Nzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGJiOGJkMzYtYjI2NC00Mjc5LWEx NmUtMzYwZjRhMzNlYjgwLzhiYjhiZDM2LWIyNjQtNDI3OS1hMTZlLTM2MGY0YTMz ZWI4MC5jcmwwHwYDVR0jBBgwFoAUmhRl3/GbXiMlq5sw0PEkjGwnrbowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84YmI4YmQzNi1iMjY0LTQyNzktYTE2ZS0zNjBm NGEzM2ViODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDDpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQIPr4gCXoWDm82JBVoJh9uUZaLwLFxAgUe9e0Oxrq6C6itk5y4hRsl tzN2BG3D4DTRPu3qUYJQKfnPV/+ilTqjDfIEboMe9kcBOY9r0BGGX5JKarTybTY9 kWe9CUlhkMb5hXB4oyZrmoBWXFYilxC9a9rchy5sDdqIASYF7bXe9cjN+XzlXIOl 2LEuwTtcUihuzasuXlcG7mLQSsk3gvU0a061gtD4IkqbXS9vfKlP5pAQ6fJGBmOJ MTc7fhlVIo3NfWTv5zbmWkAZYJMj+NwXw1wQs2/n4AEXq1TdgItkE4XSQTxKZbl9 jEuAOu26OQV5c1Ypec778afigkTRkeU= -----END CERTIFICATE-----Generated at Fri Apr 17 15:36:18 2026 by rpki-client