$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/422fecca-e0c7-3b3a-ba72-c9ab09496e13.roa File: 422fecca-e0c7-3b3a-ba72-c9ab09496e13.roa (raw, json) Hash identifier: SdJS5rf0tSriIcB7UM7zyAZjTGvFPTteAcHwp0PhSy4= Subject key identifier: DC:46:22:B5:F9:A4:E3:7F:1A:CE:0B:84:86:03:17:6E:83:60:15:71 Certificate issuer: /CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1 Certificate serial: 010D0C9F4328584D6C0FB735F3D81C7DAE1CDA10 Authority key identifier: 5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/422fecca-e0c7-3b3a-ba72-c9ab09496e13.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 198949 IP address blocks: 192.5.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:b7:35:f3:d8:1c:7d:ae:1c:da:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1 Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=b1035453-cf21-4a9b-ab66-d59e8c4b71d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:17:95:ce:25:09:d0:29:9c:82:11:86:ec:e8: cc:d9:56:3c:72:dd:02:38:8d:f4:42:0d:10:60:18: 8f:9d:76:33:e8:0b:fb:89:3e:5f:bb:af:6d:da:0d: 10:1a:1c:18:ab:02:53:82:c5:8c:f3:66:1d:6a:bf: b2:ff:17:5f:8e:dc:23:30:97:88:0f:60:63:49:a2: 53:6f:80:b3:e1:20:45:fd:f3:c7:42:6f:6b:0e:c2: 1e:cd:c9:eb:d1:5f:21:14:96:5c:95:b2:42:c1:21: 92:1f:16:03:fc:6b:89:17:94:f6:1e:e9:54:9c:6b: 44:7f:ae:ec:ea:cd:45:93:36:85:8d:50:bd:b9:83: 54:cb:4d:40:90:9f:35:bc:2b:f3:87:de:f9:00:75: 02:80:01:4d:5f:87:26:d3:5b:45:08:07:bb:3e:40: 82:25:f4:92:bc:82:40:ef:eb:e2:4d:ec:33:a0:ad: 5f:57:a2:39:99:58:0a:99:d7:60:4c:2d:ce:59:03: 6f:63:84:1b:42:92:94:87:9f:47:38:da:b7:c8:d2: 1f:68:ec:72:04:33:59:fd:e2:b4:ea:e0:cd:e4:fd: 46:3c:bc:72:99:d1:f1:3a:5a:c4:b3:4c:72:bc:e9: 54:07:e8:0a:ba:6a:f9:69:d9:30:88:1d:d1:60:fc: 7d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:46:22:B5:F9:A4:E3:7F:1A:CE:0B:84:86:03:17:6E:83:60:15:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/422fecca-e0c7-3b3a-ba72-c9ab09496e13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl X509v3 Authority Key Identifier: keyid:5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer sbgp-ipAddrBlock: critical IPv4: 192.5.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:5b:41:47:85:47:83:95:1e:e4:6e:c7:f6:7d:f8:c4:31:df: 38:c2:57:ce:22:da:95:5a:5e:05:c6:4f:44:c2:b3:d1:18:6e: 68:e2:4c:e9:b0:b2:9c:dd:ff:dd:c3:55:d9:e6:bf:6b:85:9a: db:6a:11:d3:e4:1d:a3:1d:a8:7f:a4:b0:94:1f:25:51:7a:24: 9d:d4:05:70:b7:44:12:4c:bf:d0:a4:e6:4e:3f:2a:44:dd:31: 95:35:ae:77:21:1b:2b:e6:fb:a3:63:3d:b9:a4:9c:06:b5:bc: 82:db:15:68:82:4d:d3:17:90:f6:28:f1:62:ed:78:c9:fb:d5: 4a:8c:7b:33:a6:c7:d3:1e:26:c9:b5:df:ce:68:38:b6:52:28: 60:21:42:c1:f2:78:90:f2:71:e4:f9:fc:9b:e7:52:25:e8:11: ff:35:f1:be:71:f4:30:7d:da:17:cf:04:72:69:82:ab:fe:a6: a8:1b:84:9e:e7:de:b8:8b:2d:a1:74:75:f7:cf:99:2a:91:c9: bf:16:6c:4b:3c:1f:4a:1a:78:fb:e8:9e:9f:5c:51:05:ec:49: fd:d4:f0:55:6b:d1:d2:8a:6c:93:54:f4:db:f6:1d:62:c7:33: aa:df:23:68:5a:a9:1a:e5:44:80:ca:c4:94:c2:a4:9b:1e:3b: 90:b1:59:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD7c189gcfa4c2hAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDRiMzI2M2EtNGNjYy00YzBmLWEyMGMtMmY1OWJiYzdm YWMxMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk YjEwMzU0NTMtY2YyMS00YTliLWFiNjYtZDU5ZThjNGI3MWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkheVziUJ0CmcghGG7OjM2VY8ct0COI30Qg0Q YBiPnXYz6Av7iT5fu69t2g0QGhwYqwJTgsWM82Ydar+y/xdfjtwjMJeID2BjSaJT b4Cz4SBF/fPHQm9rDsIezcnr0V8hFJZclbJCwSGSHxYD/GuJF5T2HulUnGtEf67s 6s1FkzaFjVC9uYNUy01AkJ81vCvzh975AHUCgAFNX4cm01tFCAe7PkCCJfSSvIJA 7+viTewzoK1fV6I5mVgKmddgTC3OWQNvY4QbQpKUh59HONq3yNIfaOxyBDNZ/eK0 6uDN5P1GPLxymdHxOlrEs0xyvOlUB+gKumr5adkwiB3RYPx96QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxGIrX5pON/Gs4LhIYDF26DYBVxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kNGIz MjYzYS00Y2NjLTRjMGYtYTIwYy0yZjU5YmJjN2ZhYzEvNDIyZmVjY2EtZTBjNy0z YjNhLWJhNzItYzlhYjA5NDk2ZTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDRiMzI2M2EtNGNjYy00YzBmLWEy MGMtMmY1OWJiYzdmYWMxL2Q0YjMyNjNhLTRjY2MtNGMwZi1hMjBjLTJmNTliYmM3 ZmFjMS5jcmwwHwYDVR0jBBgwFoAUWhVLReOxAsXOslYtuQ/OO+XFdRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kNGIzMjYzYS00Y2NjLTRjMGYtYTIwYy0yZjU5 YmJjN2ZhYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAVVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdbQUeFR4OVHuRux/Z9+MQx3zjCV84i2pVaXgXGT0TCs9EYbmjiTOmw spzd/93DVdnmv2uFmttqEdPkHaMdqH+ksJQfJVF6JJ3UBXC3RBJMv9Ck5k4/KkTd MZU1rnchGyvm+6NjPbmknAa1vILbFWiCTdMXkPYo8WLteMn71UqMezOmx9MeJsm1 385oOLZSKGAhQsHyeJDyceT5/JvnUiXoEf818b5x9DB92hfPBHJpgqv+pqgbhJ7n 3riLLaF0dffPmSqRyb8WbEs8H0oaePvonp9cUQXsSf3U8FVr0dKKbJNU9Nv2HWLH M6rfI2haqRrlRIDKxJTCpJseO5CxWbE= -----END CERTIFICATE-----Generated at Fri Apr 17 09:47:11 2026 by rpki-client