$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/192adac7-3c4c-3b04-99c8-b432e9874928.roa File: 192adac7-3c4c-3b04-99c8-b432e9874928.roa (raw, json) Hash identifier: Oh3CT1er/I4Sfnm1VtOGGj5CM1xsUGVsePMR1em2fkc= Subject key identifier: C2:C2:74:74:B7:4E:D3:8A:62:69:D6:8C:09:16:32:03:0B:AD:52:64 Certificate issuer: /CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b Certificate serial: 010D0C9F4328584D07ACFB3F0CD000ADC350D880 Authority key identifier: 90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/192adac7-3c4c-3b04-99c8-b432e9874928.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 14618 IP address blocks: 216.205.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:fb:3f:0c:d0:00:ad:c3:50:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=b3ddd9e0-d981-4e0d-bfb7-f783c91f1b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:92:30:26:7f:bb:10:5c:08:73:af:32:99:c6: d4:14:98:d7:6e:92:66:97:ff:1c:24:5b:b3:f2:77: 74:4b:bb:cf:70:74:97:fb:8d:de:eb:f4:89:27:f5: 88:d5:54:0d:be:60:0d:95:26:85:42:73:23:26:e7: 58:c6:88:ad:26:bd:f3:05:88:17:07:b7:2f:65:55: c6:c8:33:01:1c:70:87:dc:75:4f:3e:52:5f:af:48: 26:70:a6:08:95:18:d1:31:76:d0:96:0c:a8:0c:47: c8:4c:94:00:5d:a1:65:f9:b5:0b:1f:3d:8f:54:9a: 4f:38:a4:8c:85:f6:a1:a5:b4:71:8e:b5:84:72:38: 9a:20:3d:4a:ab:58:49:3d:e9:21:2b:cd:af:10:e3: d9:11:b3:b8:b3:4c:c5:cd:12:54:57:a9:84:66:74: 08:95:4d:2b:05:ce:72:7d:06:2d:88:6b:73:3c:bb: 20:8d:50:8d:eb:07:96:e6:3f:6e:d1:41:64:bc:dd: a1:7e:cd:a9:04:b8:3d:ae:d2:0c:aa:54:36:b8:96: 57:4c:ad:ca:c2:7e:2d:84:3f:c9:f9:e5:f0:df:31: 4c:a8:0c:12:ef:6a:96:1f:41:01:c8:a0:e3:91:da: 28:7d:31:20:bd:7e:d8:6b:be:e7:96:a0:14:91:76: 6c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C2:74:74:B7:4E:D3:8A:62:69:D6:8C:09:16:32:03:0B:AD:52:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/192adac7-3c4c-3b04-99c8-b432e9874928.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl X509v3 Authority Key Identifier: keyid:90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer sbgp-ipAddrBlock: critical IPv4: 216.205.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:96:98:f1:38:9c:4c:3e:a3:0a:63:6e:b8:40:33:3c:13:d7: be:fa:02:8c:74:c5:8f:f1:20:fa:17:e9:f0:8c:5a:86:d5:a7: 14:0c:46:b0:ae:a6:a1:4a:e3:cf:e0:96:ef:64:b5:ac:4e:6e: 0a:ac:78:59:8a:d8:2d:17:09:0d:14:c5:ec:de:38:c0:3b:4b: d0:43:f8:b2:05:cb:4d:4c:1e:66:a9:5d:88:ba:12:3d:ab:00: 8a:a6:6d:3b:39:a8:68:a8:b8:5d:4f:80:33:7c:b0:5e:ee:54: dc:2b:16:e6:0e:d9:35:78:49:47:56:ef:8b:3e:e2:2d:fe:3a: cb:fc:1f:71:14:6a:bc:75:50:4d:7f:be:ff:10:84:25:a5:93: f7:cc:76:6e:3f:ba:2e:94:6f:f8:11:90:53:36:96:38:d6:b4: 8b:8c:39:bf:ef:83:53:ac:2d:18:8e:5f:10:65:32:a2:70:09: 02:b6:3a:1d:02:73:af:32:94:d3:f6:8d:77:d3:c4:fc:ba:11: 38:77:24:49:77:6b:77:b1:cb:90:ab:43:aa:66:4d:8b:ee:a7: 91:1d:d0:d8:6a:76:59:0c:8b:0e:4b:55:06:57:90:43:d3:94: 54:ee:11:00:a2:a6:1f:6a:5e:9b:ff:47:3f:cd:ac:90:ef:b8: 80:fe:11:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrPs/DNAArcNQ2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNiNjk0OGQtM2VlMS00MTUzLTljNDAtMWNkNzQ2NWJl YTJiMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk YjNkZGQ5ZTAtZDk4MS00ZTBkLWJmYjctZjc4M2M5MWYxYjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJIwJn+7EFwIc68ymcbUFJjXbpJml/8cJFuz 8nd0S7vPcHSX+43e6/SJJ/WI1VQNvmANlSaFQnMjJudYxoitJr3zBYgXB7cvZVXG yDMBHHCH3HVPPlJfr0gmcKYIlRjRMXbQlgyoDEfITJQAXaFl+bULHz2PVJpPOKSM hfahpbRxjrWEcjiaID1Kq1hJPekhK82vEOPZEbO4s0zFzRJUV6mEZnQIlU0rBc5y fQYtiGtzPLsgjVCN6weW5j9u0UFkvN2hfs2pBLg9rtIMqlQ2uJZXTK3Kwn4thD/J +eXw3zFMqAwS72qWH0EByKDjkdoofTEgvX7Ya77nlqAUkXZsJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLCdHS3TtOKYmnWjAkWMgMLrVJkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hM2I2 OTQ4ZC0zZWUxLTQxNTMtOWM0MC0xY2Q3NDY1YmVhMmIvMTkyYWRhYzctM2M0Yy0z YjA0LTk5YzgtYjQzMmU5ODc0OTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTNiNjk0OGQtM2VlMS00MTUzLTlj NDAtMWNkNzQ2NWJlYTJiL2EzYjY5NDhkLTNlZTEtNDE1My05YzQwLTFjZDc0NjVi ZWEyYi5jcmwwHwYDVR0jBBgwFoAUkI1uPag85edr1T1okg9nW6bWPkowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hM2I2OTQ4ZC0zZWUxLTQxNTMtOWM0MC0xY2Q3 NDY1YmVhMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2M02MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKWmPE4nEw+owpjbrhAMzwT1776Aox0xY/xIPoX6fCMWobVpxQMRrCu pqFK48/glu9ktaxObgqseFmK2C0XCQ0UxezeOMA7S9BD+LIFy01MHmapXYi6Ej2r AIqmbTs5qGiouF1PgDN8sF7uVNwrFuYO2TV4SUdW74s+4i3+Osv8H3EUarx1UE1/ vv8QhCWlk/fMdm4/ui6Ub/gRkFM2ljjWtIuMOb/vg1OsLRiOXxBlMqJwCQK2Oh0C c68ylNP2jXfTxPy6ETh3JEl3a3exy5CrQ6pmTYvup5Ed0NhqdlkMiw5LVQZXkEPT lFTuEQCiph9qXpv/Rz/NrJDvuID+ESs= -----END CERTIFICATE-----Generated at Mon Mar 2 13:36:27 2026 by rpki-client