$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/a98d5494-4572-385b-afc9-1ffafc221b11.roa File: a98d5494-4572-385b-afc9-1ffafc221b11.roa (raw, json) Hash identifier: bfV38YOktF+pYc7BBBpoWIjalu74+uK2vhKqUHJQ9rY= Subject key identifier: 67:AB:51:2F:E9:22:F0:E0:C0:2A:D5:F8:E5:AD:5A:24:53:73:57:F8 Certificate issuer: /CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Certificate serial: 010D0C9F4328584CAE5E717DA36C23C9D6DE0E00 Authority key identifier: 1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/a98d5494-4572-385b-afc9-1ffafc221b11.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 396954 IP address blocks: 192.88.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:71:7d:a3:6c:23:c9:d6:de:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=c521e065-f988-4e9c-b760-53ea5cd3977e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:83:29:c7:af:30:ca:1a:82:6f:44:ca:82:eb: 2a:ce:82:f2:18:ad:e5:c3:77:1c:51:1b:f6:6e:f2: f3:ff:f4:c6:37:1b:5b:77:d7:b0:90:c3:1f:80:3f: ff:30:3c:a2:30:b9:0f:93:5c:ed:4a:04:fb:73:96: 01:1f:e8:89:14:7e:dd:5c:a7:87:7d:c3:c2:a8:b7: 39:3f:60:dd:ce:ad:ab:76:b3:10:51:4e:e9:b1:9f: 5a:c4:e1:4c:41:ad:68:c7:1a:67:dc:38:c1:8e:2c: f2:9a:4b:43:bb:57:9b:39:ac:f4:db:ae:2f:9f:72: 84:00:d0:60:83:db:e9:e3:b6:31:8c:5c:88:70:9a: 14:90:64:96:1c:39:7b:00:5d:35:ba:81:6e:72:4a: f2:00:7c:7b:9e:da:3f:53:79:1d:08:4d:f9:60:9f: 04:ae:40:da:65:82:4b:bd:9d:10:f8:6a:5c:05:67: 89:0a:8e:69:8c:84:3f:2e:ab:c2:81:0c:ea:87:12: df:75:58:11:80:7c:8e:33:13:77:8f:70:d0:99:02: 36:59:0f:62:09:a0:e9:97:52:df:20:2e:e2:61:6e: 89:60:20:a9:86:67:d1:e2:2d:0d:20:98:7b:7e:96: 38:4d:97:f5:42:06:e4:68:db:3e:03:41:ad:78:ed: c6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:AB:51:2F:E9:22:F0:E0:C0:2A:D5:F8:E5:AD:5A:24:53:73:57:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/a98d5494-4572-385b-afc9-1ffafc221b11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl X509v3 Authority Key Identifier: keyid:1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer sbgp-ipAddrBlock: critical IPv4: 192.88.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:97:05:27:e6:ed:0c:b0:84:61:d8:45:d6:a8:9f:63:08:7f: d2:8f:d8:17:19:05:e6:f0:02:b6:2a:a0:af:b8:e6:48:cb:ea: 47:b8:39:b3:3f:a0:54:d4:d7:e8:0b:8a:9a:ce:9f:e2:ee:b2: 39:7f:c4:e1:d0:63:71:2f:3e:80:ca:41:6d:36:21:92:d5:dd: 11:86:74:46:4a:99:2a:c9:7b:be:49:66:30:2e:36:df:91:e5: ce:49:ca:13:a6:6b:c1:be:58:f1:60:a2:9a:25:9b:2b:0c:6d: ea:9e:3b:f4:fb:4c:01:18:10:b7:6c:4d:82:da:d6:0a:a6:8d: 0d:76:15:28:47:64:01:1b:60:7b:66:2b:2a:b6:0b:23:fc:f5: e1:72:6d:52:ad:bd:6e:e0:cd:78:ff:31:10:f1:7d:c4:a3:e2: 37:9b:3b:b6:74:39:d5:53:62:a8:0c:32:38:c0:c0:b1:76:51: 5d:35:bc:b1:20:9c:25:3a:e1:b8:4f:0b:44:8e:98:bb:eb:c5: 9c:54:da:10:99:1e:5c:fe:99:00:ee:33:1e:7d:86:72:74:92: 6e:c4:3e:b7:ee:73:4d:ec:29:ee:ea:77:f7:c2:ac:d8:dc:26: 96:b9:20:55:ac:bf:54:fc:a3:ce:f8:cc:40:f9:29:b1:37:22: 18:cc:c1:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXnF9o2wjydbeDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY4OWI5Y2UtMDg5ZC00MTM3LWIxNGQtN2U0Y2QxNWU1 M2E1MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YzUyMWUwNjUtZjk4OC00ZTljLWI3NjAtNTNlYTVjZDM5NzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYMpx68wyhqCb0TKgusqzoLyGK3lw3ccURv2 bvLz//TGNxtbd9ewkMMfgD//MDyiMLkPk1ztSgT7c5YBH+iJFH7dXKeHfcPCqLc5 P2Ddzq2rdrMQUU7psZ9axOFMQa1oxxpn3DjBjizymktDu1ebOaz0264vn3KEANBg g9vp47YxjFyIcJoUkGSWHDl7AF01uoFuckryAHx7nto/U3kdCE35YJ8ErkDaZYJL vZ0Q+GpcBWeJCo5pjIQ/LqvCgQzqhxLfdVgRgHyOMxN3j3DQmQI2WQ9iCaDpl1Lf IC7iYW6JYCCphmfR4i0NIJh7fpY4TZf1QgbkaNs+A0GteO3GVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGerUS/pIvDgwCrV+OWtWiRTc1f4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5 YjljZS0wODlkLTQxMzctYjE0ZC03ZTRjZDE1ZTUzYTUvYTk4ZDU0OTQtNDU3Mi0z ODViLWFmYzktMWZmYWZjMjIxYjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzY4OWI5Y2UtMDg5ZC00MTM3LWIx NGQtN2U0Y2QxNWU1M2E1LzM2ODliOWNlLTA4OWQtNDEzNy1iMTRkLTdlNGNkMTVl NTNhNS5jcmwwHwYDVR0jBBgwFoAUHR43+nkmbRN2TbkJvadLsyH6igMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5YjljZS0wODlkLTQxMzctYjE0ZC03ZTRj ZDE1ZTUzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFjNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeXBSfm7QywhGHYRdaon2MIf9KP2BcZBebwArYqoK+45kjL6ke4ObM/ oFTU1+gLiprOn+Lusjl/xOHQY3EvPoDKQW02IZLV3RGGdEZKmSrJe75JZjAuNt+R 5c5JyhOma8G+WPFgopolmysMbeqeO/T7TAEYELdsTYLa1gqmjQ12FShHZAEbYHtm Kyq2CyP89eFybVKtvW7gzXj/MRDxfcSj4jebO7Z0OdVTYqgMMjjAwLF2UV01vLEg nCU64bhPC0SOmLvrxZxU2hCZHlz+mQDuMx59hnJ0km7EPrfuc03sKe7qd/fCrNjc Jpa5IFWsv1T8o874zED5KbE3IhjMwUA= -----END CERTIFICATE-----Generated at Mon Mar 2 10:55:45 2026 by rpki-client