$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/a1b7b8d1-44b5-3966-b053-c661a6fa3494.roa File: a1b7b8d1-44b5-3966-b053-c661a6fa3494.roa (raw, json) Hash identifier: wctc7l1EkwYtJg7e8+DaLed9jfmsAVXzUdemtOAVKq0= Subject key identifier: B1:5E:A4:EE:44:CA:D0:42:ED:BB:F5:87:18:67:12:A5:DB:60:07:E9 Certificate issuer: /CN=8bb8bd36-b264-4279-a16e-360f4a33eb80 Certificate serial: 010D0C9F4328584D6C0FB895441C96E33ECAEB80 Authority key identifier: 9A:14:65:DF:F1:9B:5E:23:25:AB:9B:30:D0:F1:24:8C:6C:27:AD:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/a1b7b8d1-44b5-3966-b053-c661a6fa3494.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 29764 IP address blocks: 192.48.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:b8:95:44:1c:96:e3:3e:ca:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bb8bd36-b264-4279-a16e-360f4a33eb80 Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=1ef8018d-2523-473f-b89f-a956753b27d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:94:00:8e:72:a9:fb:cc:4a:74:3a:af:10:6e: 86:9d:f1:44:f8:bb:7d:94:2e:48:e3:63:bb:c9:f6: 93:66:69:a0:0b:73:a5:ce:18:00:22:3b:b9:86:55: d5:4c:18:95:51:d9:8e:ab:2c:ac:8b:9e:e4:67:91: 52:4d:6f:cc:4a:e9:99:7c:17:b4:98:c1:02:6a:b1: 4c:77:13:60:97:a7:6b:75:41:67:b8:45:a9:cf:64: 4f:e1:f3:15:1b:50:34:f3:cc:ed:e3:8c:96:9a:8d: e5:08:1e:f0:03:e1:9b:16:29:d7:9e:66:44:48:58: 68:e2:8f:a3:9e:a2:66:17:31:df:91:9b:4f:97:7c: 3b:8e:32:8c:c7:2f:8a:e6:ac:57:a0:75:82:2f:9b: dd:d8:2d:3c:26:8f:ef:ba:90:71:8d:65:cf:1d:f6: 21:7e:a6:44:79:49:a5:04:18:7b:72:ae:0b:34:23: 8e:19:a7:f2:fa:f2:fc:aa:7a:7a:b3:c7:f2:c1:f8: d8:c2:d1:2b:51:a0:72:f8:78:40:cc:76:1c:b2:05: a7:9a:8f:56:d8:95:7e:af:16:03:9e:ba:bb:d4:7a: ee:80:3b:c5:bb:06:56:8f:bb:fc:4a:86:b2:c6:fc: 02:9c:ea:c2:37:27:e5:d2:2e:bb:64:32:7b:42:f7: e7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:5E:A4:EE:44:CA:D0:42:ED:BB:F5:87:18:67:12:A5:DB:60:07:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/a1b7b8d1-44b5-3966-b053-c661a6fa3494.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.crl X509v3 Authority Key Identifier: keyid:9A:14:65:DF:F1:9B:5E:23:25:AB:9B:30:D0:F1:24:8C:6C:27:AD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer sbgp-ipAddrBlock: critical IPv4: 192.48.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:6e:d9:f5:76:d3:79:69:6e:2d:3c:08:81:8b:99:d4:38:3d: 4f:25:d1:23:cc:aa:ab:5d:7b:2f:9a:cd:55:f4:7a:f4:03:9e: bf:af:7f:a9:8c:7a:91:59:dd:66:7d:a2:69:fb:91:a1:df:57: 3b:ee:f1:b9:94:5b:ad:08:0a:7e:3d:7a:64:7c:a9:6e:a7:16: 83:59:b1:4b:32:5e:21:b3:bb:12:9e:88:ad:36:3d:df:e8:3c: 4d:f6:d1:7b:1b:3c:1f:ed:ea:60:cc:64:fd:4a:ea:2d:81:34: e4:64:19:39:94:72:8f:90:92:9d:53:79:3a:c4:89:42:dc:cd: ab:0d:95:2c:3d:f0:84:14:09:87:d4:be:57:eb:37:16:a1:18: a8:54:d3:15:ef:73:b4:b2:0c:5f:75:2b:c4:bd:47:64:76:58: ac:4b:49:be:6f:51:1d:33:a3:c2:61:f4:94:7e:b7:c5:b7:8a: be:67:ad:b4:6f:f2:8f:10:64:69:70:1d:1f:4b:2c:2b:d8:e7: 00:8c:e2:ed:d8:05:fb:83:94:a5:55:52:8d:ab:10:8c:fc:6a: 1f:8f:f9:d5:12:e8:40:ac:a7:8d:23:fe:25:ab:e1:58:f5:87: f0:af:fe:b7:8b:96:42:10:b4:73:96:3f:ef:9c:94:1c:97:da: 28:d8:4d:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD7iVRByW4z7K64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJiOGJkMzYtYjI2NC00Mjc5LWExNmUtMzYwZjRhMzNl YjgwMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk MWVmODAxOGQtMjUyMy00NzNmLWI4OWYtYTk1Njc1M2IyN2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5QAjnKp+8xKdDqvEG6GnfFE+Lt9lC5I42O7 yfaTZmmgC3OlzhgAIju5hlXVTBiVUdmOqyysi57kZ5FSTW/MSumZfBe0mMECarFM dxNgl6drdUFnuEWpz2RP4fMVG1A088zt44yWmo3lCB7wA+GbFinXnmZESFho4o+j nqJmFzHfkZtPl3w7jjKMxy+K5qxXoHWCL5vd2C08Jo/vupBxjWXPHfYhfqZEeUml BBh7cq4LNCOOGafy+vL8qnp6s8fywfjYwtErUaBy+HhAzHYcsgWnmo9W2JV+rxYD nrq71HrugDvFuwZWj7v8SoayxvwCnOrCNyfl0i67ZDJ7QvfnlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFepO5EytBC7bv1hxhnEqXbYAfpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84YmI4 YmQzNi1iMjY0LTQyNzktYTE2ZS0zNjBmNGEzM2ViODAvYTFiN2I4ZDEtNDRiNS0z OTY2LWIwNTMtYzY2MWE2ZmEzNDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGJiOGJkMzYtYjI2NC00Mjc5LWEx NmUtMzYwZjRhMzNlYjgwLzhiYjhiZDM2LWIyNjQtNDI3OS1hMTZlLTM2MGY0YTMz ZWI4MC5jcmwwHwYDVR0jBBgwFoAUmhRl3/GbXiMlq5sw0PEkjGwnrbowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84YmI4YmQzNi1iMjY0LTQyNzktYTE2ZS0zNjBm NGEzM2ViODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDDpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK9u2fV203lpbi08CIGLmdQ4PU8l0SPMqqtdey+azVX0evQDnr+vf6mM epFZ3WZ9omn7kaHfVzvu8bmUW60ICn49emR8qW6nFoNZsUsyXiGzuxKeiK02Pd/o PE320XsbPB/t6mDMZP1K6i2BNORkGTmUco+Qkp1TeTrEiULczasNlSw98IQUCYfU vlfrNxahGKhU0xXvc7SyDF91K8S9R2R2WKxLSb5vUR0zo8Jh9JR+t8W3ir5nrbRv 8o8QZGlwHR9LLCvY5wCM4u3YBfuDlKVVUo2rEIz8ah+P+dUS6ECsp40j/iWr4Vj1 h/Cv/reLlkIQtHOWP++clByX2ijYTZs= -----END CERTIFICATE-----Generated at Fri Apr 17 14:10:58 2026 by rpki-client