$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f/3b3fde5f-e5b2-3dd2-a947-464fb7ee398a.roa File: 3b3fde5f-e5b2-3dd2-a947-464fb7ee398a.roa (raw, json) Hash identifier: bUcnhZWvRfxSiNAHs4b9Qp00x+OxrL8WWkIvCtni5f0= Subject key identifier: 34:A6:E5:50:F3:A9:11:0C:58:FB:E4:5F:A8:99:03:BB:7B:76:01:17 Certificate issuer: /CN=1a6caf55-a53e-446e-9958-ee41f172c88f Certificate serial: 010D0C9F4328584D6C0FDBA80E49AF1E16779820 Authority key identifier: 10:DF:30:B3:02:46:F3:B0:F2:8A:50:08:46:67:1D:3E:5A:E8:44:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f/3b3fde5f-e5b2-3dd2-a947-464fb7ee398a.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 401181 IP address blocks: 192.112.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f/1a6caf55-a53e-446e-9958-ee41f172c88f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f/1a6caf55-a53e-446e-9958-ee41f172c88f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:db:a8:0e:49:af:1e:16:77:98:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a6caf55-a53e-446e-9958-ee41f172c88f Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=5c7288cf-c296-48bc-aa71-6fbe46d57aa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:34:bb:aa:1c:88:62:df:b7:7a:98:43:7a:b7: 68:3c:13:bf:03:03:e5:9e:4e:fb:34:7c:a4:21:1c: a4:d5:d4:11:a1:ff:bf:bb:78:66:2d:ab:bf:56:ab: 74:ce:45:b9:79:d4:93:33:4c:31:ac:27:2c:f4:d0: 0d:a5:a3:9a:24:f6:f5:a4:11:71:e0:a6:03:e5:25: ad:12:50:3a:8d:e5:9c:98:ee:26:1b:45:6b:20:7b: e3:0c:74:8b:b8:31:cf:60:9e:9d:0d:af:dc:8d:c3: 82:c7:6f:5c:b5:88:b8:1e:ed:b7:35:ca:4e:b6:2c: de:c7:34:a3:e7:89:17:e1:fb:d0:14:23:65:81:31: 53:b5:4b:73:43:70:77:b0:e6:42:b7:5b:1c:8a:9d: a2:c9:b4:63:52:18:e1:6a:ac:03:e5:b6:ae:7a:5d: 83:00:bc:08:0b:77:95:7d:20:bf:39:18:08:b0:0a: c0:70:41:25:fa:78:a7:2d:20:6a:4a:fe:48:ba:9e: 32:7d:21:d9:cf:91:00:d6:2b:44:07:0f:46:0a:ea: fc:72:6b:40:f3:80:90:9d:2b:79:e6:fd:28:8a:05: c4:80:14:a8:4b:aa:ee:22:c7:bb:61:02:61:02:2e: 77:f4:1a:f0:26:12:78:2e:dd:2a:44:bb:4f:14:cd: 21:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A6:E5:50:F3:A9:11:0C:58:FB:E4:5F:A8:99:03:BB:7B:76:01:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f/3b3fde5f-e5b2-3dd2-a947-464fb7ee398a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f/1a6caf55-a53e-446e-9958-ee41f172c88f.crl X509v3 Authority Key Identifier: keyid:10:DF:30:B3:02:46:F3:B0:F2:8A:50:08:46:67:1D:3E:5A:E8:44:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f.cer sbgp-ipAddrBlock: critical IPv4: 192.112.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:f5:b6:d1:e0:34:9a:63:23:43:6a:81:92:8f:d4:ed:d6:f2: 8a:58:e3:70:bd:d0:96:04:44:7e:d3:10:a2:04:bd:8a:a6:6c: df:7c:04:55:e4:b1:92:c5:e7:34:ec:c7:5e:8e:5a:76:19:3e: bf:84:22:91:32:ce:a0:31:a1:2a:5f:03:0f:ef:a6:b8:71:12: a5:ed:1c:fd:fd:ec:0f:34:69:fb:e9:0b:d5:67:ca:b3:dc:f9: 33:63:03:f9:85:a3:02:14:1d:10:cb:31:61:11:52:db:9b:07: 1f:6a:b5:d3:50:58:3b:d3:f4:2f:95:46:cb:83:0a:2f:e2:e2: 3a:1f:6b:8f:83:bb:bf:f0:fa:72:e8:b3:f2:78:3f:41:00:2d: 91:dc:24:93:0c:96:d8:74:4c:d8:88:0a:fc:5b:96:6a:03:8b: ce:f2:52:0b:6a:d0:de:57:d3:c8:98:1f:5b:0d:dd:1e:65:38: 0a:74:6f:7f:a9:5e:96:25:98:f0:3f:a4:e4:75:53:68:a4:34: 47:6a:8f:56:52:56:53:93:df:71:7b:a5:d7:89:9d:c7:7f:b3: 96:64:f7:a8:60:3d:3a:4d:77:f5:fa:c5:5e:0e:5b:6d:68:86: ec:65:f2:7f:5d:70:03:8a:18:32:82:cd:d9:33:ce:a0:20:5c: f2:04:02:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD9uoDkmvHhZ3mCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE2Y2FmNTUtYTUzZS00NDZlLTk5NTgtZWU0MWYxNzJj ODhmMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk NWM3Mjg4Y2YtYzI5Ni00OGJjLWFhNzEtNmZiZTQ2ZDU3YWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozS7qhyIYt+3ephDerdoPBO/AwPlnk77NHyk IRyk1dQRof+/u3hmLau/Vqt0zkW5edSTM0wxrCcs9NANpaOaJPb1pBFx4KYD5SWt ElA6jeWcmO4mG0VrIHvjDHSLuDHPYJ6dDa/cjcOCx29ctYi4Hu23NcpOtizexzSj 54kX4fvQFCNlgTFTtUtzQ3B3sOZCt1scip2iybRjUhjhaqwD5bauel2DALwIC3eV fSC/ORgIsArAcEEl+ninLSBqSv5Iup4yfSHZz5EA1itEBw9GCur8cmtA84CQnSt5 5v0oigXEgBSoS6ruIse7YQJhAi539BrwJhJ4Lt0qRLtPFM0hfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSm5VDzqREMWPvkX6iZA7t7dgEXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xYTZj YWY1NS1hNTNlLTQ0NmUtOTk1OC1lZTQxZjE3MmM4OGYvM2IzZmRlNWYtZTViMi0z ZGQyLWE5NDctNDY0ZmI3ZWUzOThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWE2Y2FmNTUtYTUzZS00NDZlLTk5 NTgtZWU0MWYxNzJjODhmLzFhNmNhZjU1LWE1M2UtNDQ2ZS05OTU4LWVlNDFmMTcy Yzg4Zi5jcmwwHwYDVR0jBBgwFoAUEN8wswJG87DyilAIRmcdPlroRE0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xYTZjYWY1NS1hNTNlLTQ0NmUtOTk1OC1lZTQx ZjE3MmM4OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwHCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMb1ttHgNJpjI0NqgZKP1O3W8opY43C90JYERH7TEKIEvYqmbN98BFXk sZLF5zTsx16OWnYZPr+EIpEyzqAxoSpfAw/vprhxEqXtHP397A80afvpC9VnyrPc +TNjA/mFowIUHRDLMWERUtubBx9qtdNQWDvT9C+VRsuDCi/i4jofa4+Du7/w+nLo s/J4P0EALZHcJJMMlth0TNiICvxblmoDi87yUgtq0N5X08iYH1sN3R5lOAp0b3+p XpYlmPA/pOR1U2ikNEdqj1ZSVlOT33F7pdeJncd/s5Zk96hgPTpNd/X6xV4OW21o huxl8n9dcAOKGDKCzdkzzqAgXPIEAgo= -----END CERTIFICATE-----Generated at Fri Apr 17 22:43:23 2026 by rpki-client