$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e/a54f8a7c-05a0-3e72-be1d-d06dcb7838b7.roa File: a54f8a7c-05a0-3e72-be1d-d06dcb7838b7.roa (raw, json) Hash identifier: F1LTB6T99Co3TGT23sBMhwY4fnK3KG8ES3jzUBDV/pM= Subject key identifier: 3F:7B:01:08:80:12:10:2C:3A:42:20:B3:4C:5E:EC:F8:7A:2C:DE:5C Certificate issuer: /CN=61249665-c04a-42df-b2a8-e643b7fab80e Certificate serial: 010D0C9F4328584CAFBC75A4E0EC4FD4B0486C00 Authority key identifier: EA:D6:D6:64:7F:34:36:5A:F1:25:D1:20:C8:39:6A:43:C7:F6:7C:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e/a54f8a7c-05a0-3e72-be1d-d06dcb7838b7.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 40674 IP address blocks: 192.33.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e/61249665-c04a-42df-b2a8-e643b7fab80e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e/61249665-c04a-42df-b2a8-e643b7fab80e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:75:a4:e0:ec:4f:d4:b0:48:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61249665-c04a-42df-b2a8-e643b7fab80e Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=04dfa836-162f-4dc0-9a25-cf1e8a4910ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:72:d5:0a:54:a3:0f:84:f4:b9:69:f0:05:5d: e4:b5:11:1a:3f:a1:d5:6c:59:23:e5:89:e5:7b:1b: fa:0b:a4:35:89:e0:8a:0e:7b:98:65:18:03:27:5d: 11:c5:34:11:9a:3f:9f:6f:8e:37:32:83:1d:03:50: 12:2d:b1:ca:40:9e:02:5b:6a:39:a5:77:08:63:4d: a0:93:fa:f7:36:47:54:dc:62:2a:e1:f2:cf:ba:9d: 13:9b:d1:dc:fd:e4:90:dc:94:b5:98:9f:e1:19:4f: 42:8d:9c:1d:8e:64:7d:41:a3:74:a9:35:15:38:1e: 49:fd:81:12:2a:9f:57:a1:0e:3d:9b:25:3c:d1:14: 92:9a:8e:a7:bc:f3:b1:2c:b8:c3:e3:54:88:66:f3: 92:2b:29:d2:37:a8:da:71:0d:71:47:ef:f4:73:43: d4:cb:f9:54:5a:59:66:1e:3b:5b:08:96:63:f8:d7: 45:ad:f5:81:a0:97:c9:4e:2d:fb:77:a2:48:27:fb: 8a:5a:0b:7f:97:5a:8b:0d:43:fd:81:74:73:05:f9: 10:56:9f:10:c1:77:99:9b:4f:8c:ad:24:dd:ae:73: ed:2c:3f:f9:a2:02:b3:48:1f:5d:2c:6c:e6:70:f4: e9:e6:ea:ad:20:b9:9c:0a:87:5f:3d:8f:60:83:c9: 53:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7B:01:08:80:12:10:2C:3A:42:20:B3:4C:5E:EC:F8:7A:2C:DE:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e/a54f8a7c-05a0-3e72-be1d-d06dcb7838b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e/61249665-c04a-42df-b2a8-e643b7fab80e.crl X509v3 Authority Key Identifier: keyid:EA:D6:D6:64:7F:34:36:5A:F1:25:D1:20:C8:39:6A:43:C7:F6:7C:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e.cer sbgp-ipAddrBlock: critical IPv4: 192.33.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:a7:be:1e:32:bd:38:1f:ff:52:18:72:d9:66:57:b8:ec:8e: c7:3c:9c:55:ce:55:25:cf:fd:d7:f2:bd:5f:7f:15:90:6f:77: a1:9b:91:58:eb:f8:db:4f:e7:07:a2:48:c0:b5:78:08:95:be: 6e:56:8d:24:37:64:ae:48:25:3e:b5:4a:89:2e:08:9a:ee:49: d1:5a:10:52:17:bd:c5:4c:6d:a5:9a:b3:6c:65:57:4e:a7:bb: 66:0d:d6:a1:fc:41:89:a5:0f:6a:f7:81:49:6c:ab:dc:78:25: 95:92:fd:f7:1a:2b:84:1a:a9:0e:2a:1b:67:ce:d6:68:8e:45: 28:17:4b:fa:7a:31:64:ab:8a:22:c0:07:6f:93:84:72:50:27: ca:9a:b9:15:0b:71:0d:02:e3:a7:8b:0b:69:9b:19:03:d1:bb: 5d:9d:85:93:a6:72:0d:d6:95:10:43:af:8c:7d:f7:c1:e0:20: f2:fc:43:fc:af:40:da:39:24:ad:d0:2c:b6:61:f2:ed:03:b4: 28:c4:ed:7a:78:26:e6:66:90:bb:dc:ee:d2:00:be:36:a4:ba: fa:f8:be:6d:60:6f:2f:17:e6:1e:5f:8c:d7:73:c5:da:cc:81: ee:d9:2b:6b:65:b6:48:33:d9:07:22:7f:11:42:d2:9d:d8:fb: c6:cc:0d:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvHWk4OxP1LBIbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjEyNDk2NjUtYzA0YS00MmRmLWIyYTgtZTY0M2I3ZmFi ODBlMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk MDRkZmE4MzYtMTYyZi00ZGMwLTlhMjUtY2YxZThhNDkxMGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3LVClSjD4T0uWnwBV3ktREaP6HVbFkj5Ynl exv6C6Q1ieCKDnuYZRgDJ10RxTQRmj+fb443MoMdA1ASLbHKQJ4CW2o5pXcIY02g k/r3NkdU3GIq4fLPup0Tm9Hc/eSQ3JS1mJ/hGU9CjZwdjmR9QaN0qTUVOB5J/YES Kp9XoQ49myU80RSSmo6nvPOxLLjD41SIZvOSKynSN6jacQ1xR+/0c0PUy/lUWllm HjtbCJZj+NdFrfWBoJfJTi37d6JIJ/uKWgt/l1qLDUP9gXRzBfkQVp8QwXeZm0+M rSTdrnPtLD/5ogKzSB9dLGzmcPTp5uqtILmcCodfPY9gg8lTCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD97AQiAEhAsOkIgs0xe7Ph6LN5cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82MTI0 OTY2NS1jMDRhLTQyZGYtYjJhOC1lNjQzYjdmYWI4MGUvYTU0ZjhhN2MtMDVhMC0z ZTcyLWJlMWQtZDA2ZGNiNzgzOGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjEyNDk2NjUtYzA0YS00MmRmLWIy YTgtZTY0M2I3ZmFiODBlLzYxMjQ5NjY1LWMwNGEtNDJkZi1iMmE4LWU2NDNiN2Zh YjgwZS5jcmwwHwYDVR0jBBgwFoAU6tbWZH80NlrxJdEgyDlqQ8f2fOMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi82MTI0OTY2NS1jMDRhLTQyZGYtYjJhOC1lNjQz YjdmYWI4MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCGIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHunvh4yvTgf/1IYctlmV7jsjsc8nFXOVSXP/dfyvV9/FZBvd6GbkVjr +NtP5weiSMC1eAiVvm5WjSQ3ZK5IJT61SokuCJruSdFaEFIXvcVMbaWas2xlV06n u2YN1qH8QYmlD2r3gUlsq9x4JZWS/fcaK4QaqQ4qG2fO1miORSgXS/p6MWSriiLA B2+ThHJQJ8qauRULcQ0C46eLC2mbGQPRu12dhZOmcg3WlRBDr4x998HgIPL8Q/yv QNo5JK3QLLZh8u0DtCjE7Xp4JuZmkLvc7tIAvjakuvr4vm1gby8X5h5fjNdzxdrM ge7ZK2tltkgz2QcifxFC0p3Y+8bMDUU= -----END CERTIFICATE-----Generated at Mon Mar 2 12:15:39 2026 by rpki-client