$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/2ed55df2-5261-3406-ba62-c0b9b1e1c065.roa File: 2ed55df2-5261-3406-ba62-c0b9b1e1c065.roa (raw, json) Hash identifier: FnSQn5Oa9s4uTlXnTtKxz2vZh083p2VYMcspscZChr8= Subject key identifier: 31:2B:9B:2B:44:25:AC:76:5A:13:C4:86:E8:9C:7C:3C:EE:0A:AE:88 Certificate issuer: /CN=433ef7a7-1e53-4401-9dec-0da336641458 Certificate serial: 010D0C9F4328584D5243530EEE4E453A2647C600 Authority key identifier: 15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/2ed55df2-5261-3406-ba62-c0b9b1e1c065.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 65104 IP address blocks: 192.197.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:53:0e:ee:4e:45:3a:26:47:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=433ef7a7-1e53-4401-9dec-0da336641458 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=2f4aa506-88c4-40ac-9300-3b98d97fc105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c1:d2:8b:09:76:b0:b3:24:f1:e7:32:a2:c0: 7a:72:75:08:ba:7a:4f:43:8d:5c:93:82:ee:17:8f: 87:41:3d:b7:11:bb:8d:11:3d:4a:e9:38:09:49:2b: 81:dd:e8:c3:92:9d:95:cb:4b:39:cb:5e:ed:e6:42: 58:da:3a:5a:30:ff:21:44:8c:a2:46:d1:e9:98:77: 81:f4:1c:2c:ed:5b:8d:e6:b6:3d:36:7f:00:b4:d0: f2:32:48:fc:37:d7:a4:8e:6c:6b:07:4b:6e:f0:1b: b3:6f:ea:c6:56:04:e2:df:8c:be:51:fc:66:01:65: 13:50:32:4f:90:33:98:f0:c9:a6:60:48:48:06:6a: 60:70:97:9b:29:4a:49:c3:14:c4:c5:6f:5d:9c:67: d6:73:37:80:7b:25:a0:1d:7e:62:b7:de:32:2e:1d: a9:58:b6:1b:33:2a:16:62:85:34:93:8a:9b:25:05: ac:68:61:69:39:92:03:04:32:89:bd:b7:eb:0f:2a: 39:1d:af:2a:34:71:80:89:b9:28:32:3b:2d:d6:21: b0:af:d5:9c:8e:ed:47:df:45:52:0a:e2:21:aa:00: ad:74:f9:af:84:56:cc:7a:d9:b8:f5:62:f8:c1:6b: 6c:41:35:97:b4:c4:bd:ef:6f:fd:41:a4:97:86:9c: e4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:2B:9B:2B:44:25:AC:76:5A:13:C4:86:E8:9C:7C:3C:EE:0A:AE:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/2ed55df2-5261-3406-ba62-c0b9b1e1c065.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl X509v3 Authority Key Identifier: keyid:15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer sbgp-ipAddrBlock: critical IPv4: 192.197.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:73:8c:ab:c8:e3:c5:a1:c0:d7:d3:7c:5c:51:7c:05:b0:15: 85:34:52:ab:28:45:01:2a:b0:10:81:17:49:1a:1f:11:a0:ba: 14:81:6b:28:7b:35:ec:80:8d:08:1d:57:3f:3c:08:7b:1a:41: 17:d1:99:ff:09:ae:0b:3c:ee:11:84:c5:fa:7f:dd:5b:8f:89: c5:f0:9e:38:6b:76:c2:a0:6d:04:bf:82:b0:95:37:a0:f9:c9: 3c:e1:0f:88:34:4e:eb:59:43:37:c0:d9:c6:bb:3b:ad:38:ee: 24:33:61:39:eb:cc:34:64:3b:37:b8:d4:21:53:6a:6e:84:1b: 13:6d:c5:a2:97:73:99:9d:20:cf:bb:f1:b3:3c:91:e0:3d:63: bd:d1:0a:22:44:78:30:ae:b7:cd:4e:2a:7f:70:65:ff:fa:8b: 12:cd:77:21:01:22:7c:06:6c:33:90:f4:4e:f7:4d:43:08:72: dc:d1:61:4c:97:50:4a:06:5d:a1:df:e9:69:af:d2:f4:d7:bd: c7:ec:c9:4a:c3:65:b3:d9:19:19:ee:e8:86:1a:6b:c8:7f:53: b8:b3:59:02:84:9c:51:92:c5:1a:ca:b2:90:6b:77:2c:20:f7: 93:01:33:44:33:96:8d:16:e7:38:54:bd:e5:41:40:2e:da:94: bf:27:32:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ1MO7k5FOiZHxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDMzZWY3YTctMWU1My00NDAxLTlkZWMtMGRhMzM2NjQx NDU4MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk MmY0YWE1MDYtODhjNC00MGFjLTkzMDAtM2I5OGQ5N2ZjMTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMHSiwl2sLMk8ecyosB6cnUIunpPQ41ck4Lu F4+HQT23EbuNET1K6TgJSSuB3ejDkp2Vy0s5y17t5kJY2jpaMP8hRIyiRtHpmHeB 9Bws7VuN5rY9Nn8AtNDyMkj8N9ekjmxrB0tu8Buzb+rGVgTi34y+UfxmAWUTUDJP kDOY8MmmYEhIBmpgcJebKUpJwxTExW9dnGfWczeAeyWgHX5it94yLh2pWLYbMyoW YoU0k4qbJQWsaGFpOZIDBDKJvbfrDyo5Ha8qNHGAibkoMjst1iGwr9Wcju1H30VS CuIhqgCtdPmvhFbMetm49WL4wWtsQTWXtMS972/9QaSXhpzkDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDErmytEJax2WhPEhuicfDzuCq6IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80MzNl ZjdhNy0xZTUzLTQ0MDEtOWRlYy0wZGEzMzY2NDE0NTgvMmVkNTVkZjItNTI2MS0z NDA2LWJhNjItYzBiOWIxZTFjMDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDMzZWY3YTctMWU1My00NDAxLTlk ZWMtMGRhMzM2NjQxNDU4LzQzM2VmN2E3LTFlNTMtNDQwMS05ZGVjLTBkYTMzNjY0 MTQ1OC5jcmwwHwYDVR0jBBgwFoAUFTCIyvk9B4N8aQIO08npMxuWMBgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80MzNlZjdhNy0xZTUzLTQ0MDEtOWRlYy0wZGEz MzY2NDE0NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMU8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5zjKvI48WhwNfTfFxRfAWwFYU0UqsoRQEqsBCBF0kaHxGguhSBayh7 NeyAjQgdVz88CHsaQRfRmf8Jrgs87hGExfp/3VuPicXwnjhrdsKgbQS/grCVN6D5 yTzhD4g0TutZQzfA2ca7O6047iQzYTnrzDRkOze41CFTam6EGxNtxaKXc5mdIM+7 8bM8keA9Y73RCiJEeDCut81OKn9wZf/6ixLNdyEBInwGbDOQ9E73TUMIctzRYUyX UEoGXaHf6Wmv0vTXvcfsyUrDZbPZGRnu6IYaa8h/U7izWQKEnFGSxRrKspBrdywg 95MBM0Qzlo0W5zhUveVBQC7alL8nMog= -----END CERTIFICATE-----Generated at Fri Apr 17 18:24:24 2026 by rpki-client