$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/a1861383-a682-39b2-ada2-cc112009abf5.roa File: a1861383-a682-39b2-ada2-cc112009abf5.roa (raw, json) Hash identifier: 11+Ju9H3FDTyAPsthWG1m2O4ATTr1YW+hDuJBTrTA1I= Subject key identifier: 41:17:A5:A8:6A:5E:29:51:61:15:CA:24:B1:7D:39:05:E0:96:9A:BF Certificate issuer: /CN=9e1491d6-2ab7-4c14-bee6-122ee4531127 Certificate serial: 010D0C9F4328584D67DFFBC6106D12A0642FD700 Authority key identifier: C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/a1861383-a682-39b2-ada2-cc112009abf5.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 396417 IP address blocks: 192.195.4.0/24 maxlen: 24 192.195.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:fb:c6:10:6d:12:a0:64:2f:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e1491d6-2ab7-4c14-bee6-122ee4531127 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=10031456-8bfd-4af5-a730-6797daf3ae8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b1:bf:df:86:3e:e4:d6:01:d1:48:18:5e:a2: 12:47:95:a9:0e:a8:7a:e6:46:f8:21:25:20:87:9b: 7c:4a:2d:98:c4:20:0a:2f:ff:47:24:25:0d:b9:3a: 3d:c0:1e:ce:73:b6:f0:45:00:18:26:8d:20:1c:75: 84:3b:a7:f0:f0:24:6f:64:50:5a:1d:ef:31:21:ee: 10:0d:89:64:a4:fa:96:37:e2:ff:6f:41:20:8f:71: 9b:79:3c:dd:e4:1d:4b:5c:4f:b3:fe:4b:9d:fd:5a: d5:8c:36:a6:02:54:b8:e9:ca:6a:ed:92:0d:0c:91: 53:54:d2:aa:f7:aa:73:ad:a9:74:cc:90:d3:11:c2: 8b:7b:75:d3:be:70:e9:7f:ec:4c:c7:6e:64:3a:e6: b6:d4:c5:4b:89:c8:ca:dc:52:6f:34:dc:f1:42:a7: fa:15:0b:11:53:61:80:ae:81:30:1b:13:48:6d:f8: 98:ff:fb:46:9b:58:03:90:6d:8f:9b:c1:c3:d9:31: 7e:0a:8b:96:60:c2:38:1c:93:37:b0:22:05:64:29: 36:cf:d8:40:3b:de:71:a3:91:d0:c3:90:ff:4e:6e: 09:be:31:bb:a9:5a:6e:b7:6a:61:fa:3e:30:18:57: e9:a4:f2:2c:e9:34:eb:65:20:6d:cb:ac:5b:fa:ed: 8a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:17:A5:A8:6A:5E:29:51:61:15:CA:24:B1:7D:39:05:E0:96:9A:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/a1861383-a682-39b2-ada2-cc112009abf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl X509v3 Authority Key Identifier: keyid:C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer sbgp-ipAddrBlock: critical IPv4: 192.195.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:93:7a:d3:98:8f:26:47:cf:35:c9:e6:05:50:cf:e7:56:63: 73:82:5c:a0:81:d3:b0:9e:59:21:1b:d1:c7:c1:f1:af:90:e0: b2:c3:1b:d5:5f:b9:33:f1:61:2f:3c:ae:30:8f:ac:31:46:7f: 9a:e8:67:3d:7b:84:e3:61:bc:77:60:c6:23:73:37:73:5e:22: 1e:3a:15:a7:66:de:d3:0d:98:77:a1:f9:a0:52:66:5a:f1:22: 06:85:ca:7e:6b:03:97:85:e8:82:83:94:48:fe:1e:a6:1e:1b: 97:b4:5c:cd:13:49:7f:d3:a6:75:8f:46:3f:5d:f1:82:72:72: 28:d9:d9:dd:6a:c2:91:8f:c2:34:5a:bc:b4:bd:f2:66:7b:7e: 3d:3d:6c:8d:9a:bc:29:52:29:0b:17:9e:ed:c6:71:88:97:3e: 06:d3:11:ab:91:f4:47:f5:ba:1e:5a:07:da:f5:ab:76:54:34: 20:c0:c0:6d:f2:eb:51:73:c9:20:ab:2c:98:9b:b8:1f:4e:b0: 7e:23:b5:72:48:ba:fc:26:4f:9a:98:81:ea:fe:16:18:af:10: 8a:59:f2:2f:9e:1c:8e:db:e5:8d:d7:34:bc:a4:05:27:62:49: d8:ea:73:57:5c:45:32:ff:c0:78:09:da:d5:86:9e:6e:f0:9b: 37:71:83:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n3/vGEG0SoGQv1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWUxNDkxZDYtMmFiNy00YzE0LWJlZTYtMTIyZWU0NTMx MTI3MB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk MTAwMzE0NTYtOGJmZC00YWY1LWE3MzAtNjc5N2RhZjNhZThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47G/34Y+5NYB0UgYXqISR5WpDqh65kb4ISUg h5t8Si2YxCAKL/9HJCUNuTo9wB7Oc7bwRQAYJo0gHHWEO6fw8CRvZFBaHe8xIe4Q DYlkpPqWN+L/b0Egj3GbeTzd5B1LXE+z/kud/VrVjDamAlS46cpq7ZINDJFTVNKq 96pzral0zJDTEcKLe3XTvnDpf+xMx25kOua21MVLicjK3FJvNNzxQqf6FQsRU2GA roEwGxNIbfiY//tGm1gDkG2Pm8HD2TF+CouWYMI4HJM3sCIFZCk2z9hAO95xo5HQ w5D/Tm4JvjG7qVput2ph+j4wGFfppPIs6TTrZSBty6xb+u2KKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEXpahqXilRYRXKJLF9OQXglpq/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ZTE0 OTFkNi0yYWI3LTRjMTQtYmVlNi0xMjJlZTQ1MzExMjcvYTE4NjEzODMtYTY4Mi0z OWIyLWFkYTItY2MxMTIwMDlhYmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWUxNDkxZDYtMmFiNy00YzE0LWJl ZTYtMTIyZWU0NTMxMTI3LzllMTQ5MWQ2LTJhYjctNGMxNC1iZWU2LTEyMmVlNDUz MTEyNy5jcmwwHwYDVR0jBBgwFoAUwrX75YVX4vAqQcTI2tTXBsMOm2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ZTE0OTFkNi0yYWI3LTRjMTQtYmVlNi0xMjJl ZTQ1MzExMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwMMEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiTetOYjyZHzzXJ5gVQz+dWY3OCXKCB07CeWSEb0cfB8a+Q4LLDG9Vf uTPxYS88rjCPrDFGf5roZz17hONhvHdgxiNzN3NeIh46Fadm3tMNmHeh+aBSZlrx IgaFyn5rA5eF6IKDlEj+HqYeG5e0XM0TSX/TpnWPRj9d8YJycijZ2d1qwpGPwjRa vLS98mZ7fj09bI2avClSKQsXnu3GcYiXPgbTEauR9Ef1uh5aB9r1q3ZUNCDAwG3y 61FzySCrLJibuB9OsH4jtXJIuvwmT5qYger+FhivEIpZ8i+eHI7b5Y3XNLykBSdi Sdjqc1dcRTL/wHgJ2tWGnm7wmzdxg9I= -----END CERTIFICATE-----Generated at Sat Apr 18 00:02:39 2026 by rpki-client