$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/787c0dea-fa35-351f-9bf6-45a7b33af696.roa File: 787c0dea-fa35-351f-9bf6-45a7b33af696.roa (raw, json) Hash identifier: 6krnkF8HsF5se4FUBtB37itSF9BkHlhILJTx3zKEf0s= Subject key identifier: 63:FB:BE:E2:FC:2A:CB:6B:0E:03:E8:3D:FA:B5:80:91:15:02:7B:25 Certificate issuer: /CN=47c38599-11bd-476a-9b98-d0fb43b76d60 Certificate serial: 010D0C9F4328584CF2BCE7B05C88B7282178D920 Authority key identifier: 69:46:23:EC:B6:C3:CA:38:B8:F3:C4:E6:21:A8:0A:E9:19:05:81:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/787c0dea-fa35-351f-9bf6-45a7b33af696.roa Signing time: Sun 22 Feb 2026 14:00:41 +0000 ROA not before: Sun 22 Feb 2026 14:00:41 +0000 ROA not after: Sat 23 May 2026 13:00:41 +0000 asID: 19845 IP address blocks: 192.131.151.0/24 maxlen: 24 192.131.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/47c38599-11bd-476a-9b98-d0fb43b76d60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/47c38599-11bd-476a-9b98-d0fb43b76d60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f2:bc:e7:b0:5c:88:b7:28:21:78:d9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47c38599-11bd-476a-9b98-d0fb43b76d60 Validity Not Before: Feb 22 14:00:41 2026 GMT Not After : May 23 13:00:41 2026 GMT Subject: CN=c716d70b-38d8-4278-9c8e-4f8a56e04e6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d8:01:12:b7:95:4e:c8:26:d6:37:a4:50:6e: dc:19:7c:32:ff:23:a1:36:ae:a5:19:95:ef:83:b7: f1:49:84:a8:4f:ed:3c:64:c6:c8:6c:5a:fe:05:49: b0:32:b5:40:9b:54:c6:cb:c0:70:9e:38:5e:f0:9f: a2:a2:0d:e5:9f:c6:36:41:9c:d4:87:36:61:69:0d: fd:ed:a0:74:77:82:64:e6:aa:44:c9:38:19:47:c5: c5:3d:9f:98:17:17:9e:90:57:80:99:33:c4:2b:65: 85:d7:9a:d1:42:69:85:be:ac:3d:56:98:8e:cd:99: d1:1d:71:46:ba:c6:65:67:a3:4f:4e:17:eb:95:da: 15:0b:ce:e2:d8:9b:10:28:21:24:7c:d0:a1:9e:c0: 45:a5:f8:9b:cd:41:f0:f6:28:25:be:c6:45:95:b8: 87:39:75:f3:8e:53:2a:f0:2a:1a:32:89:b7:d8:40: 57:2b:c6:08:61:81:fb:8b:9a:1e:5b:e2:b3:8f:0c: 5d:be:a6:1b:b0:f6:5f:b9:df:41:fa:e0:60:36:ba: e5:ee:41:7e:9f:7b:2e:b2:81:af:27:ef:f8:64:6c: 99:e5:1f:03:a2:07:60:87:17:1f:94:80:fa:69:59: 4c:94:d6:7f:2e:8c:c2:e4:62:14:c3:a9:b6:33:bb: cd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FB:BE:E2:FC:2A:CB:6B:0E:03:E8:3D:FA:B5:80:91:15:02:7B:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/787c0dea-fa35-351f-9bf6-45a7b33af696.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/47c38599-11bd-476a-9b98-d0fb43b76d60.crl X509v3 Authority Key Identifier: keyid:69:46:23:EC:B6:C3:CA:38:B8:F3:C4:E6:21:A8:0A:E9:19:05:81:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60.cer sbgp-ipAddrBlock: critical IPv4: 192.131.151.0/24 192.131.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:c0:27:12:a0:3f:7a:d1:82:8a:f7:ed:d2:40:8e:7f:a8:b7: 9b:0b:5f:37:8b:7b:0f:2d:22:49:f1:06:a4:f2:b0:ad:fc:0e: ba:bb:a7:32:5c:b6:55:db:42:a7:d4:61:6b:86:a2:ef:ff:2b: 8f:b1:21:ae:38:8b:89:bf:04:a3:e2:21:73:7b:43:6f:b2:f4: dd:bb:f7:6b:e8:1a:9f:dd:1f:91:be:ab:b2:a9:9b:85:1d:47: da:10:1d:3e:a0:cb:6a:07:d5:c1:95:37:0d:fd:86:3c:79:3d: c8:8e:3e:b6:4e:b0:4f:11:62:94:00:91:a6:e8:32:58:9c:1a: 52:97:fe:94:43:27:8d:64:f1:17:a2:d0:83:83:91:07:1b:14: e7:25:bd:e2:64:46:bd:60:a9:79:1f:a4:e2:44:81:9b:68:3f: 2d:ef:eb:56:a0:d9:fa:2f:d7:2c:24:b1:dc:22:2d:1a:5a:26: 6a:44:6a:26:92:20:49:3e:cb:0c:c7:dc:84:8c:fe:11:67:70: c7:1d:37:c7:83:6e:01:21:ca:3f:f1:8d:60:44:3d:c1:39:10: 8b:4c:5b:c4:f0:e5:04:c0:9b:63:db:74:6e:67:b0:91:2b:72: 64:3c:59:19:64:3c:6f:16:86:45:bc:62:eb:6f:c0:e3:0b:44: bb:17:2c:37 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEzyvOewXIi3KCF42SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdjMzg1OTktMTFiZC00NzZhLTliOTgtZDBmYjQzYjc2 ZDYwMB4XDTI2MDIyMjE0MDA0MVoXDTI2MDUyMzEzMDA0MVowLzEtMCsGA1UEAxMk YzcxNmQ3MGItMzhkOC00Mjc4LTljOGUtNGY4YTU2ZTA0ZTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9gBEreVTsgm1jekUG7cGXwy/yOhNq6lGZXv g7fxSYSoT+08ZMbIbFr+BUmwMrVAm1TGy8Bwnjhe8J+iog3ln8Y2QZzUhzZhaQ39 7aB0d4Jk5qpEyTgZR8XFPZ+YFxeekFeAmTPEK2WF15rRQmmFvqw9VpiOzZnRHXFG usZlZ6NPThfrldoVC87i2JsQKCEkfNChnsBFpfibzUHw9iglvsZFlbiHOXXzjlMq 8CoaMom32EBXK8YIYYH7i5oeW+KzjwxdvqYbsPZfud9B+uBgNrrl7kF+n3susoGv J+/4ZGyZ5R8DogdghxcflID6aVlMlNZ/LozC5GIUw6m2M7vNGQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGP7vuL8KstrDgPoPfq1gJEVAnslMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80N2Mz ODU5OS0xMWJkLTQ3NmEtOWI5OC1kMGZiNDNiNzZkNjAvNzg3YzBkZWEtZmEzNS0z NTFmLTliZjYtNDVhN2IzM2FmNjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDdjMzg1OTktMTFiZC00NzZhLTli OTgtZDBmYjQzYjc2ZDYwLzQ3YzM4NTk5LTExYmQtNDc2YS05Yjk4LWQwZmI0M2I3 NmQ2MC5jcmwwHwYDVR0jBBgwFoAUaUYj7LbDyji488TmIagK6RkFgVIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80N2MzODU5OS0xMWJkLTQ3NmEtOWI5OC1kMGZi NDNiNzZkNjAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwIOXAwQA wIOZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAG/AJxKgP3rRgor37dJAjn+ot5sLXzeLew8tIknxBqTysK38 Drq7pzJctlXbQqfUYWuGou//K4+xIa44i4m/BKPiIXN7Q2+y9N2792voGp/dH5G+ q7Kpm4UdR9oQHT6gy2oH1cGVNw39hjx5PciOPrZOsE8RYpQAkaboMlicGlKX/pRD J41k8Rei0IODkQcbFOclveJkRr1gqXkfpOJEgZtoPy3v61ag2fov1ywksdwiLRpa JmpEaiaSIEk+ywzH3ISM/hFncMcdN8eDbgEhyj/xjWBEPcE5EItMW8Tw5QTAm2Pb dG5nsJErcmQ8WRlkPG8WhkW8YutvwOMLRLsXLDc= -----END CERTIFICATE-----Generated at Sun Mar 1 23:30:50 2026 by rpki-client