$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/da6cd17e-5023-3d12-8b99-a5d4f98dad1b.roa File: da6cd17e-5023-3d12-8b99-a5d4f98dad1b.roa (raw, json) Hash identifier: rm6L76tqKfip/8HCgB7f0vAS7JFjxyrX5bgvl4W/Y98= Subject key identifier: 8A:C4:97:B3:5B:EC:BF:E2:D6:B0:BF:E8:AF:D9:21:A0:94:43:94:F5 Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Certificate serial: 010D0C9F4328584D571F9E8D6154989613BE4C00 Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/da6cd17e-5023-3d12-8b99-a5d4f98dad1b.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 30133 IP address blocks: 192.228.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:9e:8d:61:54:98:96:13:be:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=5dd4c8cf-6122-43bf-85ec-819d0c344be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:97:14:16:de:59:ef:f8:34:d2:b9:6e:50:8f: 22:53:2e:57:45:2a:f9:12:63:71:1d:84:5e:12:46: c6:f8:00:66:1b:70:36:e9:1d:b4:80:ba:59:b9:61: 18:95:02:89:c6:04:4f:4e:a9:ad:7f:26:ad:a9:63: c8:4f:bb:d6:f5:c8:ec:a4:88:df:2a:cb:80:46:81: c8:0a:df:20:90:0f:8a:74:87:6f:70:ef:60:87:2a: 8b:a9:1b:f9:d1:28:b5:78:19:2e:91:cf:09:37:f4: 85:79:db:bf:11:ef:07:ce:9e:27:10:7e:57:54:1f: 30:b1:5a:c6:c8:4c:b2:90:51:33:c4:10:f1:64:4a: 9e:2f:a5:60:74:10:ba:82:65:39:2e:4b:f0:55:e2: 34:37:58:7a:f2:a4:59:93:c6:2d:c4:4d:0e:f9:45: 68:9a:82:19:69:54:4f:cb:b6:11:36:92:88:42:22: 93:49:53:fe:07:c4:0c:df:19:3d:e4:62:b2:bd:da: 45:f4:4a:f2:c4:5d:44:cf:8d:aa:9e:41:61:2b:76: 46:19:37:bb:c6:67:0b:be:d6:15:73:14:11:51:95: 6f:96:a9:eb:bd:0e:69:28:dd:34:14:d2:50:57:b5: 30:7e:19:33:32:60:6c:36:26:2c:90:5e:53:ca:27: f8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C4:97:B3:5B:EC:BF:E2:D6:B0:BF:E8:AF:D9:21:A0:94:43:94:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/da6cd17e-5023-3d12-8b99-a5d4f98dad1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl X509v3 Authority Key Identifier: keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer sbgp-ipAddrBlock: critical IPv4: 192.228.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:9a:c5:d3:28:62:0b:1d:97:7c:84:a1:b4:a5:1e:d2:2e:55: fd:3a:69:7e:ea:0e:14:dd:75:76:b6:5c:9a:b8:0f:96:d2:8b: e3:46:50:a9:b7:3b:13:49:bc:9f:3b:fe:6f:f0:f3:38:9d:c6: ed:96:ac:b2:27:24:a3:04:4c:c1:49:3a:08:ab:35:59:6a:d9: ce:af:2d:ed:77:3e:5d:44:cb:5d:58:cd:3d:0d:44:a3:54:af: d2:aa:a5:05:ff:61:86:4b:ee:6b:1b:4a:51:7c:7c:b7:18:99: e7:b7:22:53:08:76:c5:43:b0:e4:30:af:f7:7b:29:a8:4e:b2: 73:00:09:e2:bd:1b:98:da:96:57:6c:86:9d:4b:1c:58:36:a0: 29:72:c8:1c:a3:92:a4:45:df:fd:e0:70:34:e2:39:2d:52:2d: ba:c6:12:b1:95:d1:e8:5b:55:b5:83:01:8a:55:5e:2f:21:17: 00:05:1d:18:e4:02:ca:d2:0c:90:98:b7:f0:03:cf:4c:0d:eb: ed:f7:ae:b7:87:66:d5:26:cf:83:98:fa:89:87:cf:7f:6c:fb: b0:60:f5:0a:ec:bf:42:a0:6a:02:91:cb:fa:ba:6d:8e:ca:0a: 1a:d0:7c:c2:e5:20:e4:f5:25:9d:0c:8a:5a:86:15:d2:3a:2b: 29:9a:d0:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH56NYVSYlhO+TAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk MTc3MB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk NWRkNGM4Y2YtNjEyMi00M2JmLTg1ZWMtODE5ZDBjMzQ0YmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZcUFt5Z7/g00rluUI8iUy5XRSr5EmNxHYRe EkbG+ABmG3A26R20gLpZuWEYlQKJxgRPTqmtfyatqWPIT7vW9cjspIjfKsuARoHI Ct8gkA+KdIdvcO9ghyqLqRv50Si1eBkukc8JN/SFedu/Ee8Hzp4nEH5XVB8wsVrG yEyykFEzxBDxZEqeL6VgdBC6gmU5LkvwVeI0N1h68qRZk8YtxE0O+UVomoIZaVRP y7YRNpKIQiKTSVP+B8QM3xk95GKyvdpF9EryxF1Ez42qnkFhK3ZGGTe7xmcLvtYV cxQRUZVvlqnrvQ5pKN00FNJQV7UwfhkzMmBsNiYskF5Tyif4vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIrEl7Nb7L/i1rC/6K/ZIaCUQ5T1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1 NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvZGE2Y2QxN2UtNTAyMy0z ZDEyLThiOTktYTVkNGY5OGRhZDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4 ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5 MDQ4MGQxNzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwORVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeaxdMoYgsdl3yEobSlHtIuVf06aX7qDhTddXa2XJq4D5bSi+NGUKm3 OxNJvJ87/m/w8zidxu2WrLInJKMETMFJOgirNVlq2c6vLe13Pl1Ey11YzT0NRKNU r9KqpQX/YYZL7msbSlF8fLcYmee3IlMIdsVDsOQwr/d7KahOsnMACeK9G5jallds hp1LHFg2oClyyByjkqRF3/3gcDTiOS1SLbrGErGV0ehbVbWDAYpVXi8hFwAFHRjk AsrSDJCYt/ADz0wN6+33rreHZtUmz4OY+omHz39s+7Bg9Qrsv0KgagKRy/q6bY7K ChrQfMLlIOT1JZ0MilqGFdI6Kyma0KU= -----END CERTIFICATE-----Generated at Fri Apr 17 10:35:56 2026 by rpki-client