$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/ad3c9def-acc1-3e28-92b7-e3381f0db4fb.roa File: ad3c9def-acc1-3e28-92b7-e3381f0db4fb.roa (raw, json) Hash identifier: qszf3AYBPf0iMlQnt6ZSy3JWXAn0umGd1wHB9Iknjg0= Subject key identifier: A0:FC:47:DA:66:2A:79:EE:48:5C:A5:91:F0:33:3C:45:97:D4:FA:4B Certificate issuer: /CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043 Certificate serial: 010D0C9F4328584C8046CEB2D315DCB82ABA06E0 Authority key identifier: 5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/ad3c9def-acc1-3e28-92b7-e3381f0db4fb.roa Signing time: Mon 12 Jan 2026 14:00:40 +0000 ROA not before: Mon 12 Jan 2026 14:00:40 +0000 ROA not after: Sun 12 Apr 2026 13:00:40 +0000 asID: 16509 IP address blocks: 192.151.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:46:ce:b2:d3:15:dc:b8:2a:ba:06:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043 Validity Not Before: Jan 12 14:00:40 2026 GMT Not After : Apr 12 13:00:40 2026 GMT Subject: CN=935099be-0597-4f35-b902-d6bb4e5d2e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:40:52:2f:d0:34:db:0a:37:25:e2:e7:eb:c8: 0e:db:23:63:98:03:13:57:2f:eb:d0:07:7a:30:e4: a8:56:f8:94:8f:b9:17:50:bc:66:72:dc:94:66:b7: 2c:83:3b:46:57:41:8b:fc:61:76:30:4e:8e:d1:8f: c4:32:16:5c:6a:55:33:99:1d:e9:87:0d:97:3b:9f: b8:46:8f:5b:ba:c5:52:df:00:a8:67:77:6a:e2:54: 67:1f:da:e3:19:20:fd:7b:49:57:61:9f:82:8a:da: ee:85:03:88:6e:01:12:76:e4:3a:78:82:78:d4:83: 24:ec:b9:8e:78:14:b7:63:42:84:0e:1e:ba:e3:c8: f3:19:54:92:66:0f:83:49:ca:9d:0c:2a:73:99:d9: d5:c8:79:64:6d:37:84:0c:31:16:7b:7e:3e:1c:0a: 6c:12:19:69:20:e4:ac:7d:6f:93:7d:2b:68:b0:1d: 6e:be:5d:94:f1:bd:0a:a0:03:56:39:3c:4f:74:3b: 15:60:1a:95:d1:46:fb:5f:b8:21:d8:7b:bf:56:b3: da:c8:db:b1:79:dd:5d:16:74:8f:9c:0e:86:37:8c: 96:ec:49:d6:91:1b:40:d0:b0:58:c0:83:d8:80:0b: 4e:89:1b:78:13:3f:46:7b:78:99:96:da:86:11:65: 21:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:FC:47:DA:66:2A:79:EE:48:5C:A5:91:F0:33:3C:45:97:D4:FA:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/ad3c9def-acc1-3e28-92b7-e3381f0db4fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl X509v3 Authority Key Identifier: keyid:5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer sbgp-ipAddrBlock: critical IPv4: 192.151.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:6d:e2:cd:fd:c5:fa:be:68:8d:ce:1f:d9:fb:99:2e:62:46: 59:7d:2d:c6:cb:9a:bf:4d:36:d0:1b:21:c9:08:0f:bd:7e:14: b7:19:32:91:b3:06:94:15:44:d0:74:e8:80:c8:d3:25:26:0d: 3c:a9:2f:93:df:f8:d6:6c:16:75:f4:bc:fe:1a:b0:9e:aa:89: b5:9d:c3:67:3f:b7:07:b2:78:69:db:e4:47:e9:82:3a:bc:57: 16:ed:ff:be:43:c9:e9:99:dd:0c:1a:37:06:61:42:ac:81:e3: 8e:0f:40:ea:ce:b0:87:bb:c9:6e:c5:59:d2:0b:34:b8:41:5e: 2e:0b:82:1b:73:4f:0c:df:0f:c1:22:0f:64:80:84:15:c0:16: 6c:04:b1:20:14:34:27:87:c2:85:32:18:58:7d:fb:0e:35:0d: e8:4f:28:89:e1:1f:ff:b3:66:77:60:d4:1d:eb:42:2b:3e:f7: 6e:9e:e0:8d:b2:ee:96:a0:46:8d:40:e6:68:ae:fb:16:19:94: 3a:12:91:30:40:5a:21:48:b3:b2:d4:4c:69:c4:b7:f9:7d:4e: 24:0a:32:6c:ae:a6:06:b9:57:5b:10:03:81:2f:f1:99:aa:0e: 6d:2b:ae:2f:84:a4:4c:a0:16:89:40:bf:6f:3b:10:72:f2:a4: 9d:02:53:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyARs6y0xXcuCq6BuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFlMDg3M2ItODU0MS00ZDZlLWI5MWMtMzZkYmJiZTUx MDQzMB4XDTI2MDExMjE0MDA0MFoXDTI2MDQxMjEzMDA0MFowLzEtMCsGA1UEAxMk OTM1MDk5YmUtMDU5Ny00ZjM1LWI5MDItZDZiYjRlNWQyZTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUBSL9A02wo3JeLn68gO2yNjmAMTVy/r0Ad6 MOSoVviUj7kXULxmctyUZrcsgztGV0GL/GF2ME6O0Y/EMhZcalUzmR3phw2XO5+4 Ro9busVS3wCoZ3dq4lRnH9rjGSD9e0lXYZ+CitruhQOIbgESduQ6eIJ41IMk7LmO eBS3Y0KEDh6648jzGVSSZg+DScqdDCpzmdnVyHlkbTeEDDEWe34+HApsEhlpIOSs fW+TfStosB1uvl2U8b0KoANWOTxPdDsVYBqV0Ub7X7gh2Hu/VrPayNuxed1dFnSP nA6GN4yW7EnWkRtA0LBYwIPYgAtOiRt4Ez9Ge3iZltqGEWUhfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKD8R9pmKnnuSFylkfAzPEWX1PpLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YWUw ODczYi04NTQxLTRkNmUtYjkxYy0zNmRiYmJlNTEwNDMvYWQzYzlkZWYtYWNjMS0z ZTI4LTkyYjctZTMzODFmMGRiNGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWFlMDg3M2ItODU0MS00ZDZlLWI5 MWMtMzZkYmJiZTUxMDQzLzlhZTA4NzNiLTg1NDEtNGQ2ZS1iOTFjLTM2ZGJiYmU1 MTA0My5jcmwwHwYDVR0jBBgwFoAUWwqyXF4s4cEXnbXgEwh62rvNi20wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YWUwODczYi04NTQxLTRkNmUtYjkxYy0zNmRi YmJlNTEwNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJccMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZt4s39xfq+aI3OH9n7mS5iRll9LcbLmr9NNtAbIckID71+FLcZMpGz BpQVRNB06IDI0yUmDTypL5Pf+NZsFnX0vP4asJ6qibWdw2c/tweyeGnb5Efpgjq8 Vxbt/75DyemZ3QwaNwZhQqyB444PQOrOsIe7yW7FWdILNLhBXi4LghtzTwzfD8Ei D2SAhBXAFmwEsSAUNCeHwoUyGFh9+w41DehPKInhH/+zZndg1B3rQis+926e4I2y 7pagRo1A5miu+xYZlDoSkTBAWiFIs7LUTGnEt/l9TiQKMmyupga5V1sQA4Ev8Zmq Dm0rri+EpEygFolAv287EHLypJ0CU6I= -----END CERTIFICATE-----Generated at Sun Mar 1 22:51:48 2026 by rpki-client