$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/1a8e232f-f83b-3de7-8816-63d5567cf47b.roa File: 1a8e232f-f83b-3de7-8816-63d5567cf47b.roa (raw, json) Hash identifier: 1k6wdP/yUpGUyLPgGkNDyukNW5LSZT2pgk4VYzIsJMo= Subject key identifier: 4F:9D:94:31:C0:A7:7E:E4:76:10:19:CD:67:2D:F1:74:61:90:AA:A5 Certificate issuer: /CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b Certificate serial: 010D0C9F4328584CB81C8AB06A6DAF20F7CB5680 Authority key identifier: 83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/1a8e232f-f83b-3de7-8816-63d5567cf47b.roa Signing time: Sun 01 Feb 2026 14:00:40 +0000 ROA not before: Sun 01 Feb 2026 14:00:40 +0000 ROA not after: Sat 02 May 2026 13:00:40 +0000 asID: 30045 IP address blocks: 192.75.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:1c:8a:b0:6a:6d:af:20:f7:cb:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b Validity Not Before: Feb 1 14:00:40 2026 GMT Not After : May 2 13:00:40 2026 GMT Subject: CN=db3596bf-53bd-45c4-9f13-f3764be23bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:91:0c:a8:bc:03:83:a1:8a:fd:29:8a:10:48: 00:03:0b:12:cd:fb:63:0d:ac:3a:82:3c:f8:aa:e7: 82:be:4c:d5:64:37:6d:7e:55:ea:83:90:12:21:1d: aa:1c:e2:08:bf:8f:c0:b2:a5:06:39:80:02:56:24: db:e1:90:34:cc:11:b8:ea:e9:6c:ee:14:24:f6:b1: 56:c4:9e:76:f3:a3:28:9b:4a:10:ed:cd:c8:7a:78: 55:ed:8e:ee:db:68:63:8d:3a:2a:e3:78:69:6c:52: 23:44:9f:0a:f9:49:18:ee:66:23:6c:d6:16:ee:e5: 65:e0:90:7a:60:44:f9:e2:ce:62:ad:26:29:d5:d6: de:6b:48:73:d9:a9:02:6b:d8:f0:5b:61:7d:87:5b: 3c:40:6b:1c:da:d5:97:3b:84:b2:e8:76:6c:3e:93: b8:2c:af:15:4b:c6:dd:d9:7a:ae:48:44:fa:30:20: f6:07:d2:b6:44:b9:19:a1:2e:77:d6:60:4d:71:60: 76:33:c6:5b:85:27:24:94:32:70:14:55:cd:e5:06: 8e:04:5a:59:94:cd:35:01:97:d0:58:ae:0b:26:1f: fe:80:48:a6:7a:82:b2:aa:23:2a:87:6b:dc:f8:30: b3:26:12:d5:05:d8:08:3a:d8:77:fe:fd:4e:7d:fc: 26:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:9D:94:31:C0:A7:7E:E4:76:10:19:CD:67:2D:F1:74:61:90:AA:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/1a8e232f-f83b-3de7-8816-63d5567cf47b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl X509v3 Authority Key Identifier: keyid:83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer sbgp-ipAddrBlock: critical IPv4: 192.75.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:03:7d:2c:a2:a3:82:0f:1a:d2:8b:78:65:ab:1c:9c:f2:40: b5:54:25:45:b5:7b:0d:3a:ce:52:98:9c:ce:07:2f:a3:e3:72: ff:5f:40:2a:1d:a0:06:0b:b4:e4:e3:b2:df:41:11:a3:1b:91: 3a:74:48:de:d9:e9:21:74:13:99:d7:d6:44:df:7e:f8:db:c4: 4f:fb:ba:b4:3f:d3:6d:93:86:01:b1:53:9d:45:d2:0d:e5:10: 05:c2:25:37:51:98:f6:10:ac:05:22:28:1d:b3:f1:61:a0:3b: 8d:0f:b5:95:33:57:3e:0f:28:5c:10:e4:fb:ec:5d:0c:f8:fd: 9c:3f:9f:6c:cf:1b:6d:49:8f:61:cb:f1:15:f3:e1:ad:63:7f: c3:c3:a8:8a:25:03:b8:28:c2:01:2b:8d:fe:68:0e:cf:af:06: a6:50:50:b1:b7:d5:53:e1:37:43:ab:74:77:9a:f7:46:18:6c: 5a:2e:c1:7e:d4:0b:c7:aa:87:92:40:8c:da:41:79:7e:00:43: 91:d9:d8:64:34:85:6b:ed:b0:bd:ec:a8:27:65:ba:2c:fd:de: d8:44:4e:cb:9e:e7:7b:17:3d:01:7c:3e:e4:43:0b:39:15:fb: c2:7c:55:79:ec:0e:57:04:97:27:06:27:04:a3:c6:a2:d7:e1: f8:7d:5c:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HIqwam2vIPfLVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFjMWE1NmItZWEzMy00YmQ2LTlkM2UtMDA4OTZhOTFk YjZiMB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk ZGIzNTk2YmYtNTNiZC00NWM0LTlmMTMtZjM3NjRiZTIzYmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5EMqLwDg6GK/SmKEEgAAwsSzftjDaw6gjz4 queCvkzVZDdtflXqg5ASIR2qHOIIv4/AsqUGOYACViTb4ZA0zBG46uls7hQk9rFW xJ5286Mom0oQ7c3IenhV7Y7u22hjjToq43hpbFIjRJ8K+UkY7mYjbNYW7uVl4JB6 YET54s5irSYp1dbea0hz2akCa9jwW2F9h1s8QGsc2tWXO4Sy6HZsPpO4LK8VS8bd 2XquSET6MCD2B9K2RLkZoS531mBNcWB2M8ZbhScklDJwFFXN5QaOBFpZlM01AZfQ WK4LJh/+gEimeoKyqiMqh2vc+DCzJhLVBdgIOth3/v1OffwmZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+dlDHAp37kdhAZzWct8XRhkKqlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YWMx YTU2Yi1lYTMzLTRiZDYtOWQzZS0wMDg5NmE5MWRiNmIvMWE4ZTIzMmYtZjgzYi0z ZGU3LTg4MTYtNjNkNTU2N2NmNDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGFjMWE1NmItZWEzMy00YmQ2LTlk M2UtMDA4OTZhOTFkYjZiLzhhYzFhNTZiLWVhMzMtNGJkNi05ZDNlLTAwODk2YTkx ZGI2Yi5jcmwwHwYDVR0jBBgwFoAUg3U6Yyir4o99wKc7TDozymMHEyUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YWMxYTU2Yi1lYTMzLTRiZDYtOWQzZS0wMDg5 NmE5MWRiNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEulMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMUDfSyio4IPGtKLeGWrHJzyQLVUJUW1ew06zlKYnM4HL6Pjcv9fQCod oAYLtOTjst9BEaMbkTp0SN7Z6SF0E5nX1kTffvjbxE/7urQ/022ThgGxU51F0g3l EAXCJTdRmPYQrAUiKB2z8WGgO40PtZUzVz4PKFwQ5PvsXQz4/Zw/n2zPG21Jj2HL 8RXz4a1jf8PDqIolA7gowgErjf5oDs+vBqZQULG31VPhN0OrdHea90YYbFouwX7U C8eqh5JAjNpBeX4AQ5HZ2GQ0hWvtsL3sqCdluiz93thETsue53sXPQF8PuRDCzkV +8J8VXnsDlcElycGJwSjxqLX4fh9XAA= -----END CERTIFICATE-----Generated at Mon Mar 2 12:48:53 2026 by rpki-client