$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/6be1c68c-61a5-3e1f-abb6-aa9f6434f054.roa File: 6be1c68c-61a5-3e1f-abb6-aa9f6434f054.roa (raw, json) Hash identifier: rnO1fVF6b5DgEuudTZuh0W+Nsps4gx7I5TZ/W+iiVII= Subject key identifier: FF:43:5D:61:74:98:4E:F7:98:E6:AB:10:9B:4F:F4:BB:CF:76:FA:48 Certificate issuer: /CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Certificate serial: 010D0C9F4328584D5B4FACD5ED6780CF6E029580 Authority key identifier: 95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/6be1c68c-61a5-3e1f-abb6-aa9f6434f054.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 29 IP address blocks: 192.31.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:ac:d5:ed:67:80:cf:6e:02:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=2d3498b8-e3fc-41d1-ae95-a6f95bf97057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:41:c6:db:f0:7b:b7:c9:87:a1:e7:d0:12:a9: 79:f1:e2:4a:08:8d:d1:77:d8:5f:10:54:0a:5c:6e: 4f:4b:70:7a:f1:c5:c0:6d:02:57:04:35:bd:cd:c6: 1d:d3:2e:f5:3d:f7:4e:af:c5:30:aa:0b:d8:c7:c2: f8:7b:83:a4:7d:64:cb:9b:67:62:bd:8f:d7:99:75: b1:7e:f5:12:ca:43:ff:34:1a:2e:e7:32:6f:73:6c: ae:1d:e8:f0:11:49:44:cb:a9:78:1b:f8:d1:ca:5d: 41:0c:8b:56:55:51:c3:f0:ea:fd:44:93:0d:21:eb: 6b:53:eb:de:60:e7:02:8b:5d:0d:ad:75:37:89:d8: 1d:ae:00:5e:27:63:e3:b9:85:57:20:ae:5e:a4:0e: 6b:2e:d9:13:54:bd:ef:c7:31:36:13:32:23:78:d8: 7d:30:8c:9f:03:59:6a:ca:0c:7a:ea:07:a1:a5:dc: 87:8c:b3:a1:b0:ce:15:63:ff:e9:4d:37:cc:27:49: c1:af:29:a2:cd:49:4b:1c:68:eb:77:45:58:5c:f5: d3:97:97:30:56:45:e9:f1:60:1a:5a:07:52:07:fc: 5d:e7:00:90:5c:4a:68:64:83:a3:25:60:48:3a:35: f8:7a:8d:9d:53:06:d0:0f:11:fc:3e:fb:f3:49:8f: 89:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:43:5D:61:74:98:4E:F7:98:E6:AB:10:9B:4F:F4:BB:CF:76:FA:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/6be1c68c-61a5-3e1f-abb6-aa9f6434f054.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl X509v3 Authority Key Identifier: keyid:95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer sbgp-ipAddrBlock: critical IPv4: 192.31.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:2f:f2:3d:32:fc:99:b2:b7:14:c5:19:21:e6:0a:fa:e0:b3: fb:73:a5:85:62:17:3d:83:2a:69:1e:74:90:dc:6a:8e:7f:3d: 19:5b:6c:42:51:09:6c:0a:99:07:be:c0:41:79:b3:98:9b:03: 69:d8:c3:b9:27:6b:c6:7d:09:a9:77:c1:4b:cb:4b:78:83:6e: d1:4b:3f:24:0c:cf:f5:c8:6d:90:86:75:a7:1f:3e:f5:44:74: e2:ff:1e:98:e4:fa:68:19:bf:b9:9a:3a:dc:3d:64:6e:85:b0: 98:1a:3e:ea:0c:2b:38:20:82:51:c0:7e:a2:5e:19:ac:c0:6c: 95:16:6d:28:16:03:43:05:50:f7:1e:e0:bd:bf:a9:ad:3b:53: 8c:f4:be:35:08:2a:11:fd:f3:e2:8f:09:5b:3b:6e:00:a0:cf: c7:a8:04:07:51:1d:28:f8:b0:32:39:57:31:2c:63:94:ad:ef: d7:dd:b6:6b:07:dc:33:2c:15:03:72:01:c1:91:0c:bb:19:ff: 61:ca:14:14:54:59:49:ff:1f:3a:74:17:70:3f:23:29:89:07: 53:01:28:ce:2d:4f:5d:d9:ef:1c:d7:d6:97:0c:a6:ea:ff:56: 59:7a:18:7a:7d:b5:ce:42:cb:77:2c:59:40:52:55:bf:35:f9: d2:ca:fd:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT6zV7WeAz24ClYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZmMjZkNzUtMGQzYS00YmVmLThkNmEtMzZkMTY2NjQz MDdlMB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk MmQzNDk4YjgtZTNmYy00MWQxLWFlOTUtYTZmOTViZjk3MDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kHG2/B7t8mHoefQEql58eJKCI3Rd9hfEFQK XG5PS3B68cXAbQJXBDW9zcYd0y71PfdOr8UwqgvYx8L4e4OkfWTLm2divY/XmXWx fvUSykP/NBou5zJvc2yuHejwEUlEy6l4G/jRyl1BDItWVVHD8Or9RJMNIetrU+ve YOcCi10NrXU3idgdrgBeJ2PjuYVXIK5epA5rLtkTVL3vxzE2EzIjeNh9MIyfA1lq ygx66gehpdyHjLOhsM4VY//pTTfMJ0nBrymizUlLHGjrd0VYXPXTl5cwVkXp8WAa WgdSB/xd5wCQXEpoZIOjJWBIOjX4eo2dUwbQDxH8PvvzSY+J/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9DXWF0mE73mOarEJtP9LvPdvpIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYy NmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQxNjY2NDMwN2UvNmJlMWM2OGMtNjFhNS0z ZTFmLWFiYjYtYWE5ZjY0MzRmMDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTZmMjZkNzUtMGQzYS00YmVmLThk NmEtMzZkMTY2NjQzMDdlL2E2ZjI2ZDc1LTBkM2EtNGJlZi04ZDZhLTM2ZDE2NjY0 MzA3ZS5jcmwwHwYDVR0jBBgwFoAUlWM1M0cFXVlxOtpn6eu7WvXcfSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYyNmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQx NjY2NDMwN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB8CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkv8j0y/JmytxTFGSHmCvrgs/tzpYViFz2DKmkedJDcao5/PRlbbEJR CWwKmQe+wEF5s5ibA2nYw7kna8Z9Cal3wUvLS3iDbtFLPyQMz/XIbZCGdacfPvVE dOL/Hpjk+mgZv7maOtw9ZG6FsJgaPuoMKzggglHAfqJeGazAbJUWbSgWA0MFUPce 4L2/qa07U4z0vjUIKhH98+KPCVs7bgCgz8eoBAdRHSj4sDI5VzEsY5St79fdtmsH 3DMsFQNyAcGRDLsZ/2HKFBRUWUn/Hzp0F3A/IymJB1MBKM4tT13Z7xzX1pcMpur/ Vll6GHp9tc5Cy3csWUBSVb81+dLK/Yo= -----END CERTIFICATE-----Generated at Sat Apr 18 05:49:56 2026 by rpki-client