$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/25438931-47eb-3745-8de8-a5736ce96be0.roa File: 25438931-47eb-3745-8de8-a5736ce96be0.roa (raw, json) Hash identifier: ZW9+91bcZ6ndwFAIL0NvwUP3aA3Fxb5jAx0cBB0K+uI= Subject key identifier: 4C:0B:88:BF:D8:1F:6F:86:E5:57:0F:39:CC:00:E6:FF:F0:B7:2C:59 Certificate issuer: /CN=c85989e4-dae0-4a06-83a1-0ce7104427a0 Certificate serial: 010D0C9F4328584D4D5A654915545FEBE7697700 Authority key identifier: 99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/25438931-47eb-3745-8de8-a5736ce96be0.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 30148 IP address blocks: 192.88.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:65:49:15:54:5f:eb:e7:69:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85989e4-dae0-4a06-83a1-0ce7104427a0 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=f16c28c1-af85-4702-b22c-827330d6c2e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:14:2f:0e:21:1e:50:43:b0:ca:1f:29:13:a7: 5b:ad:47:7d:ae:d0:01:2f:e2:77:ac:e4:e4:86:f4: 4b:83:d8:93:12:b4:f4:cd:e2:80:b6:2a:a9:8f:d0: 09:56:3b:ba:a2:b8:9a:89:1e:bc:a6:e9:50:23:30: 06:7b:dd:ed:15:5d:cf:41:87:c2:86:7d:7d:a0:5f: 59:87:a8:e8:c6:1e:52:aa:6a:03:55:7e:8b:8f:ae: dd:c8:02:67:51:bf:fa:8b:b7:92:41:8a:cd:b1:47: bf:28:b0:e6:97:2d:91:0a:e5:97:e7:01:e1:55:98: a4:33:f2:54:5d:ec:51:07:f2:87:b3:b9:38:fa:7c: 60:08:ad:f5:ab:16:08:64:36:55:f3:c4:5b:e8:67: 1a:4f:33:ca:df:63:aa:53:c6:f2:49:e5:92:b2:d8: 63:bb:47:49:ba:15:16:7d:78:bc:68:d2:f1:40:b6: 9b:ff:c2:db:bc:7a:22:4f:2e:3a:26:56:f9:a1:b7: d9:53:3a:fd:1d:fc:ac:64:9e:eb:03:b9:67:6a:18: cb:fa:48:d3:47:78:65:40:98:95:ad:8f:02:f5:14: 09:1e:42:ff:45:0c:24:02:9e:2b:a6:f9:6d:2f:ce: 5e:64:c3:dc:c5:a5:d3:3f:92:f7:73:07:96:7d:41: aa:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0B:88:BF:D8:1F:6F:86:E5:57:0F:39:CC:00:E6:FF:F0:B7:2C:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/25438931-47eb-3745-8de8-a5736ce96be0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl X509v3 Authority Key Identifier: keyid:99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer sbgp-ipAddrBlock: critical IPv4: 192.88.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:e2:41:b0:8e:85:a5:c7:64:12:3d:ee:86:31:68:e1:98:4e: 53:52:c3:22:75:1e:cc:98:ee:64:24:a9:53:90:67:31:3f:14: 47:7c:ab:8e:53:f2:f9:79:0b:84:05:3f:27:1d:26:81:ec:c5: f8:0e:58:fe:d1:93:57:8e:35:05:32:b5:8b:3f:51:77:a0:d5: 59:36:bb:cb:3a:39:c3:6f:34:f0:f9:64:11:5d:d4:1b:1b:b6: 9b:1c:49:35:a2:f2:38:19:b8:4d:2f:ed:c5:87:7a:25:76:c0: 27:c1:a5:19:64:1f:5f:fc:1e:de:64:ee:ca:28:f6:2d:b8:ea: 5f:28:4d:fc:98:0e:e2:a1:a8:58:fe:c2:64:5f:76:ed:0c:fe: 65:f7:4d:cf:d1:5d:36:91:bc:3c:04:cb:55:2c:58:14:3d:dc: 1f:e2:81:0b:43:94:28:f2:2f:9f:9a:69:a7:5a:97:c5:df:97: 61:69:c3:2f:f4:84:27:c4:68:4a:d9:2b:1a:4d:62:7f:5b:e3: ed:53:eb:f1:93:42:75:64:d3:66:70:ab:5b:db:19:37:7c:ff: 14:42:bb:7e:bf:0b:bd:21:52:bc:44:a2:24:de:b3:de:2b:38: 59:9b:96:81:29:a9:fb:31:20:de:a6:fd:02:d4:dd:3d:ba:f5: 0d:ea:3b:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWmVJFVRf6+dpdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1OTg5ZTQtZGFlMC00YTA2LTgzYTEtMGNlNzEwNDQy N2EwMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk ZjE2YzI4YzEtYWY4NS00NzAyLWIyMmMtODI3MzMwZDZjMmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xQvDiEeUEOwyh8pE6dbrUd9rtABL+J3rOTk hvRLg9iTErT0zeKAtiqpj9AJVju6oriaiR68pulQIzAGe93tFV3PQYfChn19oF9Z h6joxh5SqmoDVX6Lj67dyAJnUb/6i7eSQYrNsUe/KLDmly2RCuWX5wHhVZikM/JU XexRB/KHs7k4+nxgCK31qxYIZDZV88Rb6GcaTzPK32OqU8bySeWSsthju0dJuhUW fXi8aNLxQLab/8LbvHoiTy46Jlb5obfZUzr9HfysZJ7rA7lnahjL+kjTR3hlQJiV rY8C9RQJHkL/RQwkAp4rpvltL85eZMPcxaXTP5L3cweWfUGqWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwLiL/YH2+G5VcPOcwA5v/wtyxZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jODU5 ODllNC1kYWUwLTRhMDYtODNhMS0wY2U3MTA0NDI3YTAvMjU0Mzg5MzEtNDdlYi0z NzQ1LThkZTgtYTU3MzZjZTk2YmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzg1OTg5ZTQtZGFlMC00YTA2LTgz YTEtMGNlNzEwNDQyN2EwL2M4NTk4OWU0LWRhZTAtNGEwNi04M2ExLTBjZTcxMDQ0 MjdhMC5jcmwwHwYDVR0jBBgwFoAUmTHFPg8NlLOYQPQPd1wZThW+8iEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jODU5ODllNC1kYWUwLTRhMDYtODNhMS0wY2U3 MTA0NDI3YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwFiGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHiQbCOhaXHZBI97oYxaOGYTlNSwyJ1HsyY7mQkqVOQZzE/FEd8q45T 8vl5C4QFPycdJoHsxfgOWP7Rk1eONQUytYs/UXeg1Vk2u8s6OcNvNPD5ZBFd1Bsb tpscSTWi8jgZuE0v7cWHeiV2wCfBpRlkH1/8Ht5k7soo9i246l8oTfyYDuKhqFj+ wmRfdu0M/mX3Tc/RXTaRvDwEy1UsWBQ93B/igQtDlCjyL5+aaadal8Xfl2Fpwy/0 hCfEaErZKxpNYn9b4+1T6/GTQnVk02Zwq1vbGTd8/xRCu36/C70hUrxEoiTes94r OFmbloEpqfsxIN6m/QLU3T269Q3qOyM= -----END CERTIFICATE-----Generated at Fri Apr 17 21:36:07 2026 by rpki-client