$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/441ba8c3-51b4-353d-b914-e586c621a0f9.roa File: 441ba8c3-51b4-353d-b914-e586c621a0f9.roa (raw, json) Hash identifier: TRktJz/f2ajzd+4Sw06TS3ZDI2ZolKA1aSOpMGrDPjg= Subject key identifier: 31:52:D8:7E:45:90:FA:F7:5D:DB:F4:7D:6C:77:25:65:03:8D:4C:B8 Certificate issuer: /CN=c85989e4-dae0-4a06-83a1-0ce7104427a0 Certificate serial: 010D0C9F4328584D4D5A59E03B4808FB7164B000 Authority key identifier: 99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/441ba8c3-51b4-353d-b914-e586c621a0f9.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 30148 IP address blocks: 192.161.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:59:e0:3b:48:08:fb:71:64:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85989e4-dae0-4a06-83a1-0ce7104427a0 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=051617b9-cbf2-46e3-88a1-c0a38a9e022f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c6:a4:4c:90:2a:0c:a6:1e:98:d7:21:fa:1c: d3:a4:85:fa:f7:f2:69:e5:31:10:52:77:77:df:a9: 0e:ac:63:4e:4d:01:c5:48:97:f1:b5:5c:cd:7c:73: ba:61:68:ee:77:16:3c:ae:2b:dd:20:56:cf:33:7a: 9a:93:4f:bc:2b:05:2c:9d:65:94:9a:80:bd:f9:9a: 8e:c8:ad:d0:8d:41:8f:6f:61:f8:03:43:d4:da:a0: de:a5:c5:4e:92:6b:b4:e5:77:71:4a:9a:1c:ea:a8: 8f:05:2c:e8:86:da:76:50:ad:c3:26:f5:bf:03:34: 66:00:bf:99:8e:20:1d:27:4f:73:f6:cb:2f:af:b7: 98:fa:56:ad:90:09:78:3f:f3:2b:02:6a:4a:cc:be: df:4c:ba:84:43:69:3a:1c:6a:f6:4e:32:06:26:b9: be:42:d5:74:67:f8:ad:8c:72:b8:e3:8f:bd:b3:7b: 16:dd:9e:c9:9a:85:31:ff:f4:65:b5:7c:7f:ad:82: 34:73:e2:e2:f3:fa:3c:55:7c:ff:be:6f:e1:1c:de: c7:67:26:b6:fb:61:ff:b8:43:43:4d:12:02:0a:07: 30:68:45:b1:a3:f6:ad:eb:76:97:5c:37:d2:71:57: 25:d5:94:42:55:9e:86:8b:0c:67:3c:da:5f:4a:27: 78:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:52:D8:7E:45:90:FA:F7:5D:DB:F4:7D:6C:77:25:65:03:8D:4C:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/441ba8c3-51b4-353d-b914-e586c621a0f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl X509v3 Authority Key Identifier: keyid:99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer sbgp-ipAddrBlock: critical IPv4: 192.161.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:0a:0e:12:67:91:f3:88:71:b0:16:2c:6a:fc:87:d2:97:da: 4c:75:11:d1:41:06:03:8c:e6:a9:aa:eb:c6:af:de:38:b0:24: 94:bb:ad:d5:58:a5:ad:ef:6f:19:12:a3:42:e8:5f:b9:6c:4b: 95:06:2f:ec:9f:f0:55:17:6e:c3:ae:37:0a:a9:43:28:c8:f7: 60:4a:cc:db:84:f1:99:21:e3:97:09:2f:80:5d:c4:d9:f2:47: 1e:90:82:91:6c:fc:9d:47:3e:ee:e0:00:32:c2:67:00:71:08: 7e:80:ac:82:7c:53:ac:00:16:9e:68:b7:fe:e9:c6:0e:2e:b0: 3a:de:7b:a3:28:e0:ab:e7:fe:00:94:06:3a:7d:27:29:e8:b0: 17:0f:34:76:5e:e8:19:4f:c0:05:ef:b3:06:c7:14:f1:e0:83: bd:86:af:16:5a:ff:db:4d:10:04:69:fb:54:ec:5a:67:10:95: 8f:50:84:1b:a1:3f:72:76:7e:c1:7b:b7:2d:70:d3:23:0b:c4: a3:07:8e:45:3e:93:ec:26:cd:51:87:02:66:a8:ad:70:e8:a0: f8:76:6b:f7:a0:9f:22:07:55:d9:fd:73:e6:bf:cf:93:05:85: e6:1f:0a:d4:f8:cc:a3:b4:36:a7:91:8e:b8:ca:85:8c:71:f3: a2:79:20:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWlngO0gI+3FksAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1OTg5ZTQtZGFlMC00YTA2LTgzYTEtMGNlNzEwNDQy N2EwMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk MDUxNjE3YjktY2JmMi00NmUzLTg4YTEtYzBhMzhhOWUwMjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8akTJAqDKYemNch+hzTpIX69/Jp5TEQUnd3 36kOrGNOTQHFSJfxtVzNfHO6YWjudxY8rivdIFbPM3qak0+8KwUsnWWUmoC9+ZqO yK3QjUGPb2H4A0PU2qDepcVOkmu05XdxSpoc6qiPBSzohtp2UK3DJvW/AzRmAL+Z jiAdJ09z9ssvr7eY+latkAl4P/MrAmpKzL7fTLqEQ2k6HGr2TjIGJrm+QtV0Z/it jHK444+9s3sW3Z7JmoUx//RltXx/rYI0c+Li8/o8VXz/vm/hHN7HZya2+2H/uEND TRICCgcwaEWxo/at63aXXDfScVcl1ZRCVZ6GiwxnPNpfSid4zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFS2H5FkPr3Xdv0fWx3JWUDjUy4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jODU5 ODllNC1kYWUwLTRhMDYtODNhMS0wY2U3MTA0NDI3YTAvNDQxYmE4YzMtNTFiNC0z NTNkLWI5MTQtZTU4NmM2MjFhMGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzg1OTg5ZTQtZGFlMC00YTA2LTgz YTEtMGNlNzEwNDQyN2EwL2M4NTk4OWU0LWRhZTAtNGEwNi04M2ExLTBjZTcxMDQ0 MjdhMC5jcmwwHwYDVR0jBBgwFoAUmTHFPg8NlLOYQPQPd1wZThW+8iEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jODU5ODllNC1kYWUwLTRhMDYtODNhMS0wY2U3 MTA0NDI3YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAKDhJnkfOIcbAWLGr8h9KX2kx1EdFBBgOM5qmq68av3jiwJJS7rdVY pa3vbxkSo0LoX7lsS5UGL+yf8FUXbsOuNwqpQyjI92BKzNuE8Zkh45cJL4BdxNny Rx6QgpFs/J1HPu7gADLCZwBxCH6ArIJ8U6wAFp5ot/7pxg4usDree6Mo4Kvn/gCU Bjp9JynosBcPNHZe6BlPwAXvswbHFPHgg72GrxZa/9tNEARp+1TsWmcQlY9QhBuh P3J2fsF7ty1w0yMLxKMHjkU+k+wmzVGHAmaorXDooPh2a/egnyIHVdn9c+a/z5MF heYfCtT4zKO0NqeRjrjKhYxx86J5IGg= -----END CERTIFICATE-----Generated at Sat Apr 18 00:05:47 2026 by rpki-client