$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5a8aa138-b40a-3f8d-8630-d273b7a86699.roa File: 5a8aa138-b40a-3f8d-8630-d273b7a86699.roa (raw, json) Hash identifier: uxvR4fjuZuqifDUHhspPm9Znlz9wT4RxmMs2Sy4ABVQ= Subject key identifier: 83:76:00:1D:00:20:5E:9C:CC:21:4E:E9:10:71:16:5A:BC:33:63:08 Certificate issuer: /CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f Certificate serial: 010D0C9F4328584CCBA75841F66657E590BA5640 Authority key identifier: 54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5a8aa138-b40a-3f8d-8630-d273b7a86699.roa Signing time: Sun 08 Feb 2026 14:00:41 +0000 ROA not before: Sun 08 Feb 2026 14:00:41 +0000 ROA not after: Sat 09 May 2026 13:00:41 +0000 asID: 19782 IP address blocks: 192.200.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cb:a7:58:41:f6:66:57:e5:90:ba:56:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f Validity Not Before: Feb 8 14:00:41 2026 GMT Not After : May 9 13:00:41 2026 GMT Subject: CN=3a7febcc-772a-4511-a37c-b1eaa0b80dae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d3:e1:15:36:34:fc:0c:1f:e0:19:f2:5b:45: 0a:bc:a5:bf:b6:67:64:93:1c:de:d8:52:5d:15:06: 09:3c:af:9b:9b:1d:d7:23:d7:b4:da:30:a2:e1:ec: 55:d1:0c:25:4d:b6:e8:47:3f:33:0b:11:b6:90:a3: eb:27:18:a7:e9:9f:47:f8:68:46:0c:92:4f:d6:c9: 38:33:b9:16:6f:a9:57:b1:96:94:85:b6:96:98:63: 25:36:d6:94:f8:17:ae:4b:9f:f6:bb:24:a9:d7:dc: 1c:7f:92:ed:94:ed:5e:3d:b1:7d:93:ab:81:a2:6b: 45:ca:56:76:66:29:40:a5:14:09:bd:e6:59:8b:bd: 36:19:44:4d:a7:62:6b:51:a8:55:7c:e8:d8:84:67: f9:19:07:84:d7:f1:14:05:f6:52:5d:78:e2:c7:45: 07:e6:a7:ae:f8:68:07:91:d6:de:b5:04:d9:24:a8: 25:d9:ae:3f:a7:05:fd:5e:02:31:90:8f:53:d1:9f: 41:85:b3:f9:3f:11:41:2a:e1:da:d1:d7:c9:a2:5a: 34:57:fe:bb:e2:a8:89:3e:33:9b:30:44:70:62:31: 1a:6d:e2:01:58:e8:52:e5:f7:1c:76:60:df:d3:76: 28:ce:7a:8a:7f:e7:ea:f3:f6:04:2f:aa:eb:56:53: 95:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:76:00:1D:00:20:5E:9C:CC:21:4E:E9:10:71:16:5A:BC:33:63:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5a8aa138-b40a-3f8d-8630-d273b7a86699.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl X509v3 Authority Key Identifier: keyid:54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer sbgp-ipAddrBlock: critical IPv4: 192.200.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:cd:1d:79:f7:7d:64:67:1a:c2:ea:61:9f:9b:f0:d8:ae:2b: 81:e6:ae:c4:9a:a4:b6:e4:d8:8b:6e:25:49:47:4c:38:67:40: 09:00:70:12:09:34:a3:0f:18:48:9f:a9:eb:14:bd:6e:fd:7e: 49:b3:c3:8b:77:f1:22:9f:82:28:6e:74:4b:02:c9:3c:8b:6e: 3e:ce:51:13:ea:88:7b:86:76:61:cf:8e:0a:cb:77:6d:32:9d: 5a:12:59:a5:1e:82:91:23:81:e0:ff:67:4b:b2:79:5d:11:77: 28:bb:f6:5b:ba:7c:d3:6c:e6:75:a9:12:a3:36:67:fd:c5:bd: 40:d6:d1:1e:f4:8b:18:cd:5b:f0:f3:b2:06:3c:37:7a:aa:3f: c3:6c:58:d2:8e:82:b2:b6:30:f9:e3:43:ad:12:fd:27:35:d1: 4f:dd:aa:15:29:b8:eb:fa:5f:94:e1:ed:c9:07:3e:ec:93:c6: d9:70:00:7f:68:d6:cc:31:1f:4d:56:43:2a:0e:52:9f:aa:a1: ee:85:e0:17:f6:6e:73:16:be:5d:1b:ef:27:78:6f:b4:04:85: 67:70:e5:fd:59:2f:3e:fe:55:3c:c2:f7:2d:c8:9b:7d:91:d0: 63:65:7a:ee:7a:d9:32:fd:ae:d8:5d:01:e9:2c:15:dc:c6:82: 3d:6f:f3:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzLp1hB9mZX5ZC6VkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQyMWZmZDgtMzZlNi00YTZiLTkwMzQtNDY3MTU5MmM1 YTRmMB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk M2E3ZmViY2MtNzcyYS00NTExLWEzN2MtYjFlYWEwYjgwZGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNPhFTY0/Awf4BnyW0UKvKW/tmdkkxze2FJd FQYJPK+bmx3XI9e02jCi4exV0QwlTbboRz8zCxG2kKPrJxin6Z9H+GhGDJJP1sk4 M7kWb6lXsZaUhbaWmGMlNtaU+BeuS5/2uySp19wcf5LtlO1ePbF9k6uBomtFylZ2 ZilApRQJveZZi702GURNp2JrUahVfOjYhGf5GQeE1/EUBfZSXXjix0UH5qeu+GgH kdbetQTZJKgl2a4/pwX9XgIxkI9T0Z9BhbP5PxFBKuHa0dfJolo0V/674qiJPjOb MERwYjEabeIBWOhS5fccdmDf03YoznqKf+fq8/YEL6rrVlOVywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIN2AB0AIF6czCFO6RBxFlq8M2MIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81NDIx ZmZkOC0zNmU2LTRhNmItOTAzNC00NjcxNTkyYzVhNGYvNWE4YWExMzgtYjQwYS0z ZjhkLTg2MzAtZDI3M2I3YTg2Njk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNTQyMWZmZDgtMzZlNi00YTZiLTkw MzQtNDY3MTU5MmM1YTRmLzU0MjFmZmQ4LTM2ZTYtNGE2Yi05MDM0LTQ2NzE1OTJj NWE0Zi5jcmwwHwYDVR0jBBgwFoAUVBKTOoHmICO96AuZwkVU3VkRZm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81NDIxZmZkOC0zNmU2LTRhNmItOTAzNC00Njcx NTkyYzVhNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwMiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7NHXn3fWRnGsLqYZ+b8NiuK4HmrsSapLbk2ItuJUlHTDhnQAkAcBIJ NKMPGEifqesUvW79fkmzw4t38SKfgihudEsCyTyLbj7OURPqiHuGdmHPjgrLd20y nVoSWaUegpEjgeD/Z0uyeV0Rdyi79lu6fNNs5nWpEqM2Z/3FvUDW0R70ixjNW/Dz sgY8N3qqP8NsWNKOgrK2MPnjQ60S/Sc10U/dqhUpuOv6X5Th7ckHPuyTxtlwAH9o 1swxH01WQyoOUp+qoe6F4Bf2bnMWvl0b7yd4b7QEhWdw5f1ZLz7+VTzC9y3Im32R 0GNleu562TL9rthdAeksFdzGgj1v8wQ= -----END CERTIFICATE-----Generated at Mon Mar 2 12:02:07 2026 by rpki-client