$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9/3b15a54a-201b-31f5-bf09-9c5f55b65a75.roa File: 3b15a54a-201b-31f5-bf09-9c5f55b65a75.roa (raw, json) Hash identifier: nz7x9bS5fR+dvkZL7320Bt99iNkEYT9htbebuqssh6o= Subject key identifier: FF:12:EB:EC:84:A1:CF:3C:30:77:05:6B:BA:D0:84:18:1E:B7:D2:C1 Certificate issuer: /CN=1078e419-f0dc-430f-89c0-345af0a135f9 Certificate serial: 010D0C9F4328584DDBBB0A355279D2D5E43B46C0 Authority key identifier: 8C:D1:AC:38:B2:5D:EF:AE:4A:1B:42:7B:D0:58:94:A5:F3:B2:AA:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9/3b15a54a-201b-31f5-bf09-9c5f55b65a75.roa Signing time: Sun 17 May 2026 01:00:24 +0000 ROA not before: Sun 17 May 2026 01:00:24 +0000 ROA not after: Sat 15 Aug 2026 01:00:24 +0000 asID: 17298 IP address blocks: 192.91.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9/1078e419-f0dc-430f-89c0-345af0a135f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9/1078e419-f0dc-430f-89c0-345af0a135f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:db:bb:0a:35:52:79:d2:d5:e4:3b:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1078e419-f0dc-430f-89c0-345af0a135f9 Validity Not Before: May 17 01:00:24 2026 GMT Not After : Aug 15 01:00:24 2026 GMT Subject: CN=1baa22b3-db7d-48be-98f2-356f3e57d24f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:77:53:57:91:68:e4:8b:9a:16:d8:c6:d8:7d: 21:f5:43:a4:0f:6a:8c:54:f5:ed:67:55:35:a2:93: d2:ca:99:66:3b:16:15:e3:e6:e0:54:e7:29:fb:a3: d7:b3:92:29:d1:06:01:1e:d8:2a:ea:b8:87:cb:1d: fb:88:61:98:ee:3b:01:d2:c1:2c:e4:42:d4:97:7b: bc:bf:11:30:f1:9b:2f:89:42:c6:ab:d6:23:2a:3e: f6:0b:f9:11:23:01:89:85:c7:8b:04:9c:37:7a:de: 99:10:33:e4:2a:c1:48:7b:0d:a3:80:07:04:4e:38: e7:03:ee:09:e0:7d:c9:6c:32:7d:39:f7:7d:db:cb: ca:3f:f9:4e:b8:16:e3:3e:9c:cd:29:60:73:ad:28: e6:d0:7c:f1:6e:ea:3a:56:c6:0b:a9:b9:a5:bc:ae: d4:12:a7:48:1f:0b:f5:dc:00:78:f2:c2:00:c9:37: f1:a2:60:a3:1b:46:82:46:82:d0:32:55:73:69:c0: 40:6a:1b:6b:c3:74:61:47:e2:fd:97:ed:d1:7b:03: 42:96:b1:cb:9b:1d:94:5a:92:4f:4e:94:a0:0a:5a: 90:ab:c3:13:cb:ac:f8:55:a0:f1:ef:6c:3b:62:03: 19:be:f9:51:53:7b:15:bc:62:e9:41:76:88:ff:1c: 1b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:12:EB:EC:84:A1:CF:3C:30:77:05:6B:BA:D0:84:18:1E:B7:D2:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9/3b15a54a-201b-31f5-bf09-9c5f55b65a75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9/1078e419-f0dc-430f-89c0-345af0a135f9.crl X509v3 Authority Key Identifier: keyid:8C:D1:AC:38:B2:5D:EF:AE:4A:1B:42:7B:D0:58:94:A5:F3:B2:AA:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9.cer sbgp-ipAddrBlock: critical IPv4: 192.91.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:2d:f2:83:8a:50:c8:27:12:e8:67:4a:6b:2a:07:bc:15:60: 18:45:78:ee:81:25:0f:13:43:ed:dc:bf:90:86:8f:4b:7a:9d: 43:eb:5a:08:b0:2a:54:c5:71:87:b5:fb:f3:2e:f1:bd:f1:c6: ed:90:54:d6:8d:ac:8e:2c:5b:48:8d:c2:49:79:39:16:89:ed: e8:9e:b0:97:3f:77:2b:d0:3b:6e:34:9a:42:10:a2:41:c9:4b: 9a:3d:22:f2:cb:96:70:ee:ad:6d:ac:e6:dc:a4:58:9e:ec:43: 71:8a:93:23:8a:83:71:a7:12:7c:94:ad:fd:5c:39:a9:f6:b6: ec:51:9d:d8:34:8f:f7:c8:03:6d:f7:7b:af:27:e7:17:55:60: 96:2a:4a:74:c6:c5:f0:d5:fb:18:95:25:27:b9:69:dc:d9:8f: c6:90:9d:fb:f6:54:15:fd:0d:c3:dc:95:70:60:05:26:3e:0c: 92:9b:9e:46:79:96:09:a4:19:55:41:f5:f9:49:89:78:33:8d: 41:ee:3a:dd:eb:d0:3a:ce:bd:de:d6:1c:35:52:9d:6d:6c:4e: df:f3:33:cf:5e:e6:10:06:36:e4:c3:6e:e9:d3:87:3b:f6:51: 10:55:f7:39:24:af:00:bf:af:f7:10:50:cf:09:89:d2:a0:ab: 8f:6b:b9:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3buwo1UnnS1eQ7RsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTA3OGU0MTktZjBkYy00MzBmLTg5YzAtMzQ1YWYwYTEz NWY5MB4XDTI2MDUxNzAxMDAyNFoXDTI2MDgxNTAxMDAyNFowLzEtMCsGA1UEAxMk MWJhYTIyYjMtZGI3ZC00OGJlLTk4ZjItMzU2ZjNlNTdkMjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3dTV5Fo5IuaFtjG2H0h9UOkD2qMVPXtZ1U1 opPSyplmOxYV4+bgVOcp+6PXs5Ip0QYBHtgq6riHyx37iGGY7jsB0sEs5ELUl3u8 vxEw8ZsviULGq9YjKj72C/kRIwGJhceLBJw3et6ZEDPkKsFIew2jgAcETjjnA+4J 4H3JbDJ9Ofd928vKP/lOuBbjPpzNKWBzrSjm0Hzxbuo6VsYLqbmlvK7UEqdIHwv1 3AB48sIAyTfxomCjG0aCRoLQMlVzacBAahtrw3RhR+L9l+3RewNClrHLmx2UWpJP TpSgClqQq8MTy6z4VaDx72w7YgMZvvlRU3sVvGLpQXaI/xwbSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8S6+yEoc88MHcFa7rQhBget9LBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMDc4 ZTQxOS1mMGRjLTQzMGYtODljMC0zNDVhZjBhMTM1ZjkvM2IxNWE1NGEtMjAxYi0z MWY1LWJmMDktOWM1ZjU1YjY1YTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTA3OGU0MTktZjBkYy00MzBmLTg5 YzAtMzQ1YWYwYTEzNWY5LzEwNzhlNDE5LWYwZGMtNDMwZi04OWMwLTM0NWFmMGEx MzVmOS5jcmwwHwYDVR0jBBgwFoAUjNGsOLJd765KG0J70FiUpfOyqiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xMDc4ZTQxOS1mMGRjLTQzMGYtODljMC0zNDVh ZjBhMTM1ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFv5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4t8oOKUMgnEuhnSmsqB7wVYBhFeO6BJQ8TQ+3cv5CGj0t6nUPrWgiw KlTFcYe1+/Mu8b3xxu2QVNaNrI4sW0iNwkl5ORaJ7eiesJc/dyvQO240mkIQokHJ S5o9IvLLlnDurW2s5tykWJ7sQ3GKkyOKg3GnEnyUrf1cOan2tuxRndg0j/fIA233 e68n5xdVYJYqSnTGxfDV+xiVJSe5adzZj8aQnfv2VBX9DcPclXBgBSY+DJKbnkZ5 lgmkGVVB9flJiXgzjUHuOt3r0DrOvd7WHDVSnW1sTt/zM89e5hAGNuTDbunThzv2 URBV9zkkrwC/r/cQUM8JidKgq49ruWY= -----END CERTIFICATE-----Generated at Sun Jun 14 05:24:22 2026 by rpki-client