$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/4065f43f-ee36-3824-890b-4696c8253f7f.roa File: 4065f43f-ee36-3824-890b-4696c8253f7f.roa (raw, json) Hash identifier: GQyHsu9YbDaHZ6Kf9xBjp08V9nLxqPKo4DKXZTLmUF8= Subject key identifier: FE:32:82:B2:84:BC:8E:D1:FA:25:D9:59:15:C3:7D:6C:29:05:9E:0E Certificate issuer: /CN=a68ef886-c437-4b77-8d56-b917b6150d9a Certificate serial: 010D0C9F4328584CF2BCED5373E8C7CEB0FA6200 Authority key identifier: 7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/4065f43f-ee36-3824-890b-4696c8253f7f.roa Signing time: Sun 22 Feb 2026 14:00:41 +0000 ROA not before: Sun 22 Feb 2026 14:00:41 +0000 ROA not after: Sat 23 May 2026 13:00:41 +0000 asID: 91 IP address blocks: 192.12.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f2:bc:ed:53:73:e8:c7:ce:b0:fa:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a68ef886-c437-4b77-8d56-b917b6150d9a Validity Not Before: Feb 22 14:00:41 2026 GMT Not After : May 23 13:00:41 2026 GMT Subject: CN=84287730-4f1e-46cb-9fac-61e4e8cf5a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:10:6b:a7:ba:91:eb:60:9c:04:39:58:28:3f: 33:65:5c:34:76:ce:6c:47:78:bb:c5:fa:2f:ef:a4: b6:5f:e9:fc:35:d5:54:d2:01:16:35:04:13:50:05: f1:59:04:0a:40:5b:d0:f3:ad:f5:20:d0:d9:99:e7: 0c:7d:42:fe:33:27:bb:dd:9d:1c:cb:45:7b:2c:5d: 14:24:31:9f:8a:50:b1:08:60:7b:11:94:6e:96:7b: 20:9b:70:54:2a:0f:83:52:ce:07:d8:25:9c:58:42: 5b:13:ce:e3:34:38:8f:14:14:6b:fc:39:16:cc:66: bf:80:7a:c2:63:d5:35:e2:c5:e0:a9:a0:7b:23:38: 0d:18:c7:43:b6:76:c6:f6:e0:4c:7a:2f:92:22:9d: 4f:4e:5c:89:08:af:92:c5:1c:5a:33:e9:06:a3:26: 33:66:c3:e7:42:8c:aa:af:b3:f2:a2:fd:ca:74:7a: 09:78:52:82:9c:8e:09:1d:b1:19:dc:b7:0c:53:1c: dc:a7:43:f8:ce:4e:92:d7:93:7b:e7:b4:c7:a6:b2: 04:95:56:bc:a8:57:d9:ec:be:77:02:9a:39:c8:23: 23:e5:5f:89:61:31:8d:02:3d:8e:ec:bd:24:89:38: 48:d0:ed:b5:4d:f5:1c:c1:a7:a3:0e:c7:ae:14:c6: 94:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:32:82:B2:84:BC:8E:D1:FA:25:D9:59:15:C3:7D:6C:29:05:9E:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/4065f43f-ee36-3824-890b-4696c8253f7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl X509v3 Authority Key Identifier: keyid:7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer sbgp-ipAddrBlock: critical IPv4: 192.12.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:b3:ae:b4:4e:6e:0c:8e:7e:a5:59:85:5c:ac:13:7f:7b:b8: c8:2f:fe:b7:25:4c:d7:5e:4f:7c:84:53:f4:14:c2:e4:4e:fb: 8a:41:47:ad:5f:90:d5:57:d5:85:8b:3b:de:bd:a4:e1:db:b5: 67:b7:fb:cc:73:76:fc:e1:b7:bb:52:ed:10:66:94:82:2f:2e: ec:6b:5e:0a:83:db:c8:e4:89:41:07:3a:be:de:00:25:9c:44: 57:2c:67:50:46:2c:26:06:cf:68:dc:75:71:cc:6f:52:ba:23: 74:71:fe:91:25:fb:8a:5b:be:91:0c:04:ea:99:b4:b9:c5:03: b2:fb:57:da:70:03:73:73:91:89:99:86:1a:5f:f7:46:48:0f: 9c:af:b0:01:37:97:c6:0a:36:c7:d9:99:53:59:a0:98:f4:bf: f7:a2:a7:9a:1a:9f:20:5a:b3:2d:31:f0:d8:a2:67:c3:6b:0f: 79:0f:dc:71:e3:93:16:dc:ff:8c:4c:b6:07:89:5d:49:de:70: 53:86:6a:27:bc:99:55:b0:9f:93:3e:ef:04:be:f7:96:c6:38: 27:42:5d:12:db:32:92:ab:c9:72:3f:37:33:7f:98:b9:35:3c: 3d:04:0e:60:ad:7b:2e:b7:dd:51:91:e4:c4:58:be:b1:0c:8f: 90:79:47:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzyvO1Tc+jHzrD6YgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY4ZWY4ODYtYzQzNy00Yjc3LThkNTYtYjkxN2I2MTUw ZDlhMB4XDTI2MDIyMjE0MDA0MVoXDTI2MDUyMzEzMDA0MVowLzEtMCsGA1UEAxMk ODQyODc3MzAtNGYxZS00NmNiLTlmYWMtNjFlNGU4Y2Y1YTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhBrp7qR62CcBDlYKD8zZVw0ds5sR3i7xfov 76S2X+n8NdVU0gEWNQQTUAXxWQQKQFvQ8631INDZmecMfUL+Mye73Z0cy0V7LF0U JDGfilCxCGB7EZRulnsgm3BUKg+DUs4H2CWcWEJbE87jNDiPFBRr/DkWzGa/gHrC Y9U14sXgqaB7IzgNGMdDtnbG9uBMei+SIp1PTlyJCK+SxRxaM+kGoyYzZsPnQoyq r7Pyov3KdHoJeFKCnI4JHbEZ3LcMUxzcp0P4zk6S15N757THprIElVa8qFfZ7L53 Apo5yCMj5V+JYTGNAj2O7L0kiThI0O21TfUcwaejDseuFMaUawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4ygrKEvI7R+iXZWRXDfWwpBZ4OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjhl Zjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3YjYxNTBkOWEvNDA2NWY0M2YtZWUzNi0z ODI0LTg5MGItNDY5NmM4MjUzZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTY4ZWY4ODYtYzQzNy00Yjc3LThk NTYtYjkxN2I2MTUwZDlhL2E2OGVmODg2LWM0MzctNGI3Ny04ZDU2LWI5MTdiNjE1 MGQ5YS5jcmwwHwYDVR0jBBgwFoAUfAnor+6RefUILLfICjw4Y9TiHA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNjhlZjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3 YjYxNTBkOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6zrrRObgyOfqVZhVysE397uMgv/rclTNdeT3yEU/QUwuRO+4pBR61f kNVX1YWLO969pOHbtWe3+8xzdvzht7tS7RBmlIIvLuxrXgqD28jkiUEHOr7eACWc RFcsZ1BGLCYGz2jcdXHMb1K6I3Rx/pEl+4pbvpEMBOqZtLnFA7L7V9pwA3NzkYmZ hhpf90ZID5yvsAE3l8YKNsfZmVNZoJj0v/eip5oanyBasy0x8NiiZ8NrD3kP3HHj kxbc/4xMtgeJXUnecFOGaie8mVWwn5M+7wS+95bGOCdCXRLbMpKryXI/NzN/mLk1 PD0EDmCtey633VGR5MRYvrEMj5B5R94= -----END CERTIFICATE-----Generated at Mon Mar 2 06:39:58 2026 by rpki-client