$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/d3a2508e-0220-3c1b-9180-e11c07412c6c.roa File: d3a2508e-0220-3c1b-9180-e11c07412c6c.roa (raw, json) Hash identifier: hIZVfxK2khKxSO5vgsL4sk7tFoCcerhGCS3JH4o12Tg= Subject key identifier: 9C:80:4E:C6:B9:0A:AD:96:F0:41:F7:71:04:85:26:03:54:4E:60:CD Certificate issuer: /CN=7c74b511-7d11-4209-84c2-f7b800242a7b Certificate serial: 010D0C9F4328584CB28727AC17BF4ABF912300C0 Authority key identifier: 76:B9:36:87:B8:4E:A3:D9:B3:51:34:02:21:D6:12:2F:82:E4:2C:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/d3a2508e-0220-3c1b-9180-e11c07412c6c.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 21976 IP address blocks: 192.231.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/7c74b511-7d11-4209-84c2-f7b800242a7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/7c74b511-7d11-4209-84c2-f7b800242a7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:27:ac:17:bf:4a:bf:91:23:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c74b511-7d11-4209-84c2-f7b800242a7b Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=c516577f-0527-4157-a509-8666b4db5a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e1:f4:9a:96:e7:07:61:91:f1:a8:01:b8:8a: 3a:6f:0b:dd:1a:97:5a:70:fb:c9:01:4e:80:78:e8: ab:10:ae:d4:d2:27:7c:c1:0a:d5:a6:8f:63:83:a6: af:6f:60:14:7f:90:63:c4:b6:ad:a9:10:80:58:95: 07:a7:99:20:a9:1d:2b:52:0b:70:0d:95:ec:c8:6e: b7:4a:9c:be:47:32:c8:da:be:af:53:99:58:ef:53: 5c:d4:77:b9:c5:77:50:7b:0d:bf:bc:96:90:f2:8d: ed:dc:f5:c0:be:fb:af:a4:05:00:73:75:2f:31:1e: 00:47:a5:6a:5d:83:cb:2a:0c:2a:dd:7d:df:99:22: d3:e0:b2:8b:a8:67:df:da:c7:f9:86:76:53:b9:85: d3:b9:4e:67:7f:ca:70:13:29:5e:66:20:6c:2a:84: 5b:7e:7a:f5:10:6a:41:f3:9e:4e:93:49:60:cb:90: 73:9c:ff:8c:1a:e1:48:8f:01:27:6d:d7:75:16:61: 2b:ce:5b:85:4c:20:89:1e:be:98:5d:f0:c5:61:86: d5:8e:1f:5c:fa:61:0a:2c:b6:3b:88:2a:3d:7c:ca: df:91:9b:9b:dc:c2:8f:ce:31:43:4b:b0:d5:79:95: 94:2a:68:51:ca:c9:a9:eb:e7:a2:53:f3:98:78:21: 60:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:80:4E:C6:B9:0A:AD:96:F0:41:F7:71:04:85:26:03:54:4E:60:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/d3a2508e-0220-3c1b-9180-e11c07412c6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/7c74b511-7d11-4209-84c2-f7b800242a7b.crl X509v3 Authority Key Identifier: keyid:76:B9:36:87:B8:4E:A3:D9:B3:51:34:02:21:D6:12:2F:82:E4:2C:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b.cer sbgp-ipAddrBlock: critical IPv4: 192.231.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:32:9a:3e:38:f3:fb:e1:18:4b:95:c7:73:cb:cc:07:80:c4: 22:ae:68:72:20:0a:e3:9f:60:19:17:cc:6e:ca:c6:f1:66:59: 13:95:1c:ea:d3:fb:2d:09:9c:22:23:c0:50:29:5c:4c:a6:66: af:96:c6:c9:8b:4d:62:e7:d0:42:ab:16:67:e5:77:52:fb:80: ed:9a:9f:e3:f5:66:49:c8:bf:bf:85:8b:9e:a7:7e:7e:19:b9: de:71:c9:88:8d:0f:4f:cc:e9:5b:0b:66:05:4a:54:9c:b4:98: 8e:c4:d6:39:4e:e9:bd:d0:4a:5f:78:bb:77:36:c9:e2:67:c3: a6:66:37:e7:f0:5a:e4:91:c1:0d:d4:50:33:ff:1d:25:f9:8c: 0d:7e:e2:fb:de:c1:a7:16:f3:87:4a:63:e8:09:f0:c8:fa:41: 8c:b9:82:24:14:93:ef:de:32:99:5f:5c:09:d3:05:8c:56:2f: 06:07:fe:3c:f8:8c:bd:bf:4b:29:0e:0f:2e:de:3e:a4:7b:10: 35:c4:27:51:03:ab:2d:cf:61:99:50:a6:75:f0:d9:b0:c1:21: 72:3c:5f:38:3b:74:77:4b:1b:02:fd:2c:2b:9c:60:b9:2a:a0: 47:03:80:12:0a:1d:06:29:bf:58:1d:3f:3f:74:e4:45:05:a0: e7:f6:e7:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyhyesF79Kv5EjAMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2M3NGI1MTEtN2QxMS00MjA5LTg0YzItZjdiODAwMjQy YTdiMB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk YzUxNjU3N2YtMDUyNy00MTU3LWE1MDktODY2NmI0ZGI1YTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheH0mpbnB2GR8agBuIo6bwvdGpdacPvJAU6A eOirEK7U0id8wQrVpo9jg6avb2AUf5BjxLatqRCAWJUHp5kgqR0rUgtwDZXsyG63 Spy+RzLI2r6vU5lY71Nc1He5xXdQew2/vJaQ8o3t3PXAvvuvpAUAc3UvMR4AR6Vq XYPLKgwq3X3fmSLT4LKLqGff2sf5hnZTuYXTuU5nf8pwEyleZiBsKoRbfnr1EGpB 855Ok0lgy5BznP+MGuFIjwEnbdd1FmErzluFTCCJHr6YXfDFYYbVjh9c+mEKLLY7 iCo9fMrfkZub3MKPzjFDS7DVeZWUKmhRysmp6+eiU/OYeCFgRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyATsa5Cq2W8EH3cQSFJgNUTmDNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83Yzc0 YjUxMS03ZDExLTQyMDktODRjMi1mN2I4MDAyNDJhN2IvZDNhMjUwOGUtMDIyMC0z YzFiLTkxODAtZTExYzA3NDEyYzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2M3NGI1MTEtN2QxMS00MjA5LTg0 YzItZjdiODAwMjQyYTdiLzdjNzRiNTExLTdkMTEtNDIwOS04NGMyLWY3YjgwMDI0 MmE3Yi5jcmwwHwYDVR0jBBgwFoAUdrk2h7hOo9mzUTQCIdYSL4LkLOgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83Yzc0YjUxMS03ZDExLTQyMDktODRjMi1mN2I4 MDAyNDJhN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOfKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALgymj448/vhGEuVx3PLzAeAxCKuaHIgCuOfYBkXzG7KxvFmWROVHOrT +y0JnCIjwFApXEymZq+WxsmLTWLn0EKrFmfld1L7gO2an+P1ZknIv7+Fi56nfn4Z ud5xyYiND0/M6VsLZgVKVJy0mI7E1jlO6b3QSl94u3c2yeJnw6ZmN+fwWuSRwQ3U UDP/HSX5jA1+4vvewacW84dKY+gJ8Mj6QYy5giQUk+/eMplfXAnTBYxWLwYH/jz4 jL2/SykODy7ePqR7EDXEJ1EDqy3PYZlQpnXw2bDBIXI8Xzg7dHdLGwL9LCucYLkq oEcDgBIKHQYpv1gdPz905EUFoOf2518= -----END CERTIFICATE-----Generated at Mon Mar 2 10:44:16 2026 by rpki-client