$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/db977bdb-7775-35b2-83b4-688332a81542.roa File: db977bdb-7775-35b2-83b4-688332a81542.roa (raw, json) Hash identifier: b1CXSzB770+DB10DiLPtOw0/F2VlXLyh36iD9tGfMAE= Subject key identifier: E6:36:12:AC:03:BD:6F:82:A5:D5:16:48:43:13:12:E9:EB:97:B7:1F Certificate issuer: /CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Certificate serial: 010D0C9F4328584D5B4F8D961FB136751D8AA020 Authority key identifier: 95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/db977bdb-7775-35b2-83b4-688332a81542.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 29 IP address blocks: 192.31.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:8d:96:1f:b1:36:75:1d:8a:a0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=1b958ea7-6aaf-447c-9c81-d22cb4d0150d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f6:7b:c5:62:bf:aa:a7:bb:34:2b:fb:26:5c: 0b:a0:0d:d8:8e:db:ce:a8:d9:dd:40:30:3a:b4:ff: 64:ed:cc:12:1e:86:9e:10:0f:11:3e:67:6a:4f:fc: 8d:2d:3d:98:6d:ee:98:76:89:66:fa:f6:81:a2:24: ba:24:3d:fb:9d:99:cc:d2:42:5d:ac:9d:37:12:78: 54:ca:a2:13:fb:d8:d0:1f:5a:c7:75:7e:da:3a:6f: bf:45:91:ae:a0:17:5c:22:aa:4e:13:5e:53:ca:1a: 29:5e:08:fa:6b:e0:cb:0d:86:62:97:60:a5:f0:71: fd:94:b1:20:5d:0f:65:8f:2b:62:e9:31:90:90:68: f2:6a:d1:a1:90:70:d6:7a:b6:17:f2:e9:ec:b1:55: eb:98:d2:63:3e:34:b0:73:81:28:74:ff:6f:3c:09: c4:c2:75:af:dd:59:18:48:6b:1f:cd:63:63:8d:86: 58:8b:c6:ac:eb:57:8e:3b:79:1f:dc:dd:39:77:3b: e3:00:1a:08:19:29:f7:43:bb:64:42:44:07:e0:dc: 98:ab:27:1c:d4:08:c3:72:77:6e:cb:66:7b:8e:9b: ed:44:d8:13:e4:a1:e1:f1:f3:44:d4:4b:89:c2:c6: d0:cc:5e:a6:52:88:ef:c6:29:44:49:f9:2f:c5:71: 74:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:36:12:AC:03:BD:6F:82:A5:D5:16:48:43:13:12:E9:EB:97:B7:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/db977bdb-7775-35b2-83b4-688332a81542.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl X509v3 Authority Key Identifier: keyid:95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer sbgp-ipAddrBlock: critical IPv4: 192.31.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:21:82:25:ec:87:83:2d:3c:98:96:46:48:19:89:ef:40:26: 67:07:1d:1b:8c:53:f7:0c:c2:ed:de:99:71:06:c4:68:b1:67: cd:92:46:4f:2e:0e:cc:71:55:78:29:11:87:ad:f2:bf:78:69: fa:4e:b9:44:28:81:e9:85:e3:79:1b:5c:f9:15:24:4d:91:2b: 82:f0:c1:ed:6e:70:5d:d9:a7:05:11:7a:a1:e0:21:1a:5b:0c: 61:92:52:06:ba:41:fd:fd:46:3f:36:a5:ef:a1:52:c4:24:95: 03:31:15:d1:f9:d9:78:fa:bb:c8:57:c0:78:7b:36:51:76:b1: 0b:be:75:0b:01:b0:8e:d2:0f:71:70:71:e1:2d:02:fa:27:98: cc:c9:b7:53:fc:df:de:57:4f:6e:6f:cb:87:1f:f6:ac:3e:e9: c6:84:56:bb:7f:64:04:ba:ce:e5:e2:84:52:3f:a4:31:32:2b: 8f:01:2b:3b:d9:04:f8:ca:64:c0:f8:96:6b:1f:9b:5d:c8:77: 7b:2e:a4:e8:ce:7a:d4:8c:f3:fa:4d:46:36:27:f0:9c:d6:a2: bc:8a:da:ba:f0:d6:07:fa:10:e2:11:f1:35:5c:e8:ed:e1:32: 09:a0:1e:75:08:c4:c7:09:cd:70:77:4c:8c:bb:4c:55:00:e7: db:18:f6:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT42WH7E2dR2KoCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZmMjZkNzUtMGQzYS00YmVmLThkNmEtMzZkMTY2NjQz MDdlMB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk MWI5NThlYTctNmFhZi00NDdjLTljODEtZDIyY2I0ZDAxNTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvZ7xWK/qqe7NCv7JlwLoA3YjtvOqNndQDA6 tP9k7cwSHoaeEA8RPmdqT/yNLT2Ybe6Ydolm+vaBoiS6JD37nZnM0kJdrJ03EnhU yqIT+9jQH1rHdX7aOm+/RZGuoBdcIqpOE15TyhopXgj6a+DLDYZil2Cl8HH9lLEg XQ9ljyti6TGQkGjyatGhkHDWerYX8unssVXrmNJjPjSwc4EodP9vPAnEwnWv3VkY SGsfzWNjjYZYi8as61eOO3kf3N05dzvjABoIGSn3Q7tkQkQH4NyYqycc1AjDcndu y2Z7jpvtRNgT5KHh8fNE1EuJwsbQzF6mUojvxilESfkvxXF0wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOY2EqwDvW+CpdUWSEMTEunrl7cfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYy NmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQxNjY2NDMwN2UvZGI5NzdiZGItNzc3NS0z NWIyLTgzYjQtNjg4MzMyYTgxNTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTZmMjZkNzUtMGQzYS00YmVmLThk NmEtMzZkMTY2NjQzMDdlL2E2ZjI2ZDc1LTBkM2EtNGJlZi04ZDZhLTM2ZDE2NjY0 MzA3ZS5jcmwwHwYDVR0jBBgwFoAUlWM1M0cFXVlxOtpn6eu7WvXcfSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYyNmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQx NjY2NDMwN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB/sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMohgiXsh4MtPJiWRkgZie9AJmcHHRuMU/cMwu3emXEGxGixZ82SRk8u DsxxVXgpEYet8r94afpOuUQogemF43kbXPkVJE2RK4Lwwe1ucF3ZpwUReqHgIRpb DGGSUga6Qf39Rj82pe+hUsQklQMxFdH52Xj6u8hXwHh7NlF2sQu+dQsBsI7SD3Fw ceEtAvonmMzJt1P8395XT25vy4cf9qw+6caEVrt/ZAS6zuXihFI/pDEyK48BKzvZ BPjKZMD4lmsfm13Id3supOjOetSM8/pNRjYn8JzWoryK2rrw1gf6EOIR8TVc6O3h MgmgHnUIxMcJzXB3TIy7TFUA59sY9uw= -----END CERTIFICATE-----Generated at Sat Apr 18 05:49:52 2026 by rpki-client