$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/d3ae9c10-37e1-368c-b7f9-aee3a7564247.roa File: d3ae9c10-37e1-368c-b7f9-aee3a7564247.roa (raw, json) Hash identifier: 3iXqmYDxCuaNgyt7LP/BgbqZWBAyttZTMYwApy7g1Zc= Subject key identifier: DB:9C:ED:8F:F2:77:7C:2E:27:36:07:FF:83:19:F1:B3:1A:B7:BA:8F Certificate issuer: /CN=d1a2d4b1-dd63-4ea3-8762-70d628347ca6 Certificate serial: 010D0C9F4328584CCA41F506FA1A2E6BE156DD60 Authority key identifier: B3:AC:FE:4F:D4:AB:F0:4E:D1:07:A2:5F:2C:2F:D2:D0:43:17:FE:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/d3ae9c10-37e1-368c-b7f9-aee3a7564247.roa Signing time: Sun 08 Feb 2026 02:00:32 +0000 ROA not before: Sun 08 Feb 2026 02:00:32 +0000 ROA not after: Sat 09 May 2026 01:00:32 +0000 asID: 398774 IP address blocks: 192.152.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ca:41:f5:06:fa:1a:2e:6b:e1:56:dd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1a2d4b1-dd63-4ea3-8762-70d628347ca6 Validity Not Before: Feb 8 02:00:32 2026 GMT Not After : May 9 01:00:32 2026 GMT Subject: CN=4aea9075-3651-47be-bdec-b0316ba32805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c5:25:f8:9c:bf:c9:6b:e1:d8:5a:87:8f:53: 1b:2c:b2:c1:93:32:50:ec:ac:4d:3a:bc:a8:83:cf: b2:47:99:45:c3:76:d1:74:99:ee:82:91:81:34:30: f1:b7:25:24:fd:2c:e2:5e:d6:1a:ce:43:65:a0:a4: af:9f:ee:a6:1f:a1:30:5d:d6:f4:f3:74:54:b2:0f: a5:56:5f:ae:5e:08:f6:4e:83:e2:15:cc:d7:a4:d7: f4:01:8f:64:82:30:9e:7d:ed:ff:57:a0:92:ff:97: 6a:79:34:64:5b:21:57:c3:17:c2:34:51:52:eb:fd: e4:4e:83:5d:cb:75:60:da:fb:53:38:f1:0e:b8:9b: da:8c:5b:a1:1e:69:f5:92:6f:bc:02:63:08:c3:e6: 20:98:80:f3:b1:27:47:56:ae:1d:e6:d0:f7:98:dd: 20:b8:76:c1:9a:36:ee:00:82:2a:7d:98:a4:75:bd: 0b:4b:98:e5:0e:08:f8:af:01:87:87:c8:3a:2f:15: 76:5b:47:7d:25:ef:a0:1c:7a:ad:96:ec:5d:24:31: 9e:2c:c2:a1:f6:a2:47:57:31:51:6d:8e:69:26:ed: 8d:ad:d8:ef:24:ef:d3:46:33:5e:d6:2e:ac:2d:ce: 23:5c:77:20:1e:b2:73:4e:4d:56:48:b3:08:fe:c3: f4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:9C:ED:8F:F2:77:7C:2E:27:36:07:FF:83:19:F1:B3:1A:B7:BA:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/d3ae9c10-37e1-368c-b7f9-aee3a7564247.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.crl X509v3 Authority Key Identifier: keyid:B3:AC:FE:4F:D4:AB:F0:4E:D1:07:A2:5F:2C:2F:D2:D0:43:17:FE:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.cer sbgp-ipAddrBlock: critical IPv4: 192.152.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:3a:34:ca:aa:3d:f0:bc:8a:5f:67:73:cf:2c:fa:28:58:43: 6e:5a:43:6b:00:e6:20:30:89:e0:e9:52:65:d3:8a:06:dd:9e: d9:90:0a:c5:53:69:09:3a:d8:ee:71:4b:8d:ec:1a:b1:bc:e5: f2:b9:5b:70:0e:cd:b8:f8:32:9a:6d:e0:91:72:eb:c0:23:81: c9:ae:02:87:33:ff:74:c1:1d:f2:67:f2:34:32:98:78:9e:2c: 29:76:ca:3e:a7:07:c7:e4:60:9e:77:02:ae:e0:e6:1d:e1:4c: c9:6d:19:8b:6d:6a:1a:cb:db:da:73:d3:2b:17:48:53:2c:a9: 02:83:91:4a:6b:d8:42:57:ab:c5:dc:ed:17:b7:51:63:5c:a7: 07:ec:0e:43:d9:ba:a3:44:fb:d9:e4:5f:85:08:2a:e0:ed:24: 51:a1:1e:f6:b3:8d:e2:ed:6e:f4:5b:f6:99:48:ee:0b:93:4e: d1:a0:e0:44:7d:d6:fd:be:3b:ab:f2:7c:b3:4e:ef:ef:2c:a3: 4c:82:3d:57:0d:97:a4:38:ec:0c:c6:6b:27:51:2d:06:53:87: d3:11:b2:3a:1c:f1:af:eb:69:79:c7:b4:a8:f2:5b:9b:6f:25: 51:37:03:4e:9f:9b:4d:cd:57:17:a2:39:9c:ef:98:d8:a0:9d: b2:cb:79:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzKQfUG+houa+FW3WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFhMmQ0YjEtZGQ2My00ZWEzLTg3NjItNzBkNjI4MzQ3 Y2E2MB4XDTI2MDIwODAyMDAzMloXDTI2MDUwOTAxMDAzMlowLzEtMCsGA1UEAxMk NGFlYTkwNzUtMzY1MS00N2JlLWJkZWMtYjAzMTZiYTMyODA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMUl+Jy/yWvh2FqHj1MbLLLBkzJQ7KxNOryo g8+yR5lFw3bRdJnugpGBNDDxtyUk/SziXtYazkNloKSvn+6mH6EwXdb083RUsg+l Vl+uXgj2ToPiFczXpNf0AY9kgjCefe3/V6CS/5dqeTRkWyFXwxfCNFFS6/3kToNd y3Vg2vtTOPEOuJvajFuhHmn1km+8AmMIw+YgmIDzsSdHVq4d5tD3mN0guHbBmjbu AIIqfZikdb0LS5jlDgj4rwGHh8g6LxV2W0d9Je+gHHqtluxdJDGeLMKh9qJHVzFR bY5pJu2NrdjvJO/TRjNe1i6sLc4jXHcgHrJzTk1WSLMI/sP0+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNuc7Y/yd3wuJzYH/4MZ8bMat7qPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMWEy ZDRiMS1kZDYzLTRlYTMtODc2Mi03MGQ2MjgzNDdjYTYvZDNhZTljMTAtMzdlMS0z NjhjLWI3ZjktYWVlM2E3NTY0MjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDFhMmQ0YjEtZGQ2My00ZWEzLTg3 NjItNzBkNjI4MzQ3Y2E2L2QxYTJkNGIxLWRkNjMtNGVhMy04NzYyLTcwZDYyODM0 N2NhNi5jcmwwHwYDVR0jBBgwFoAUs6z+T9Sr8E7RB6JfLC/S0EMX/vswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kMWEyZDRiMS1kZDYzLTRlYTMtODc2Mi03MGQ2 MjgzNDdjYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJg8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABM6NMqqPfC8il9nc88s+ihYQ25aQ2sA5iAwieDpUmXTigbdntmQCsVT aQk62O5xS43sGrG85fK5W3AOzbj4Mppt4JFy68AjgcmuAocz/3TBHfJn8jQymHie LCl2yj6nB8fkYJ53Aq7g5h3hTMltGYttahrL29pz0ysXSFMsqQKDkUpr2EJXq8Xc 7Re3UWNcpwfsDkPZuqNE+9nkX4UIKuDtJFGhHvazjeLtbvRb9plI7guTTtGg4ER9 1v2+O6vyfLNO7+8so0yCPVcNl6Q47AzGaydRLQZTh9MRsjoc8a/raXnHtKjyW5tv JVE3A06fm03NVxeiOZzvmNignbLLeVY= -----END CERTIFICATE-----Generated at Mon Mar 2 07:50:07 2026 by rpki-client