$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b/a4bf0231-e9e6-3cb6-a642-a1d9a3d1e1d0.roa File: a4bf0231-e9e6-3cb6-a642-a1d9a3d1e1d0.roa (raw, json) Hash identifier: x49wq4MDbcS5IF7AFGBM0tFXDd0mV1ekA9wWOUEsNDw= Subject key identifier: 85:6E:48:76:5D:2F:AA:FB:57:0E:F7:9C:E7:0E:C2:A5:80:06:14:CB Certificate issuer: /CN=b89bdcb9-22f0-4629-8ed8-bb4a33f9102b Certificate serial: 010D0C9F4328584D60E4F1BD8FDC85519001A600 Authority key identifier: 5E:8F:D3:88:EC:13:87:CA:F5:B3:CC:E8:D3:CC:DF:BB:12:91:BB:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b/a4bf0231-e9e6-3cb6-a642-a1d9a3d1e1d0.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 394193 IP address blocks: 192.84.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e4:f1:bd:8f:dc:85:51:90:01:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b89bdcb9-22f0-4629-8ed8-bb4a33f9102b Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=7cf92083-640d-41a3-af9a-0269788f050c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:68:93:6c:38:75:5d:3a:fb:84:91:73:e4:9f: 4e:97:b9:b2:18:84:95:52:c7:2f:43:d2:48:a5:26: c4:3c:ae:54:7a:e7:77:ee:43:cb:0c:c4:bb:1c:7c: 50:be:de:45:1b:dc:ab:c1:98:73:58:81:3b:f6:b3: c4:01:a0:89:62:83:06:30:4c:03:a0:7d:26:2e:ee: 31:15:e0:4e:82:70:85:75:22:16:1f:3a:da:af:50: eb:32:e6:c6:25:f5:2d:9b:cf:6d:5b:53:3e:2f:12: 30:f9:5f:4c:42:c9:47:cd:77:b3:0a:71:4d:6e:2b: 79:5b:42:c2:19:99:b4:51:1a:ac:10:08:9e:fe:b4: 37:2c:03:f5:06:0c:20:3d:d5:e1:64:ee:4c:75:59: f7:d1:f6:d2:c5:e7:42:4b:79:0a:ce:25:79:4d:f2: 7e:53:27:9f:0b:c5:8e:16:55:a0:3a:e2:02:f7:a2: 9c:40:08:b8:2b:41:39:50:c2:45:3e:72:7b:46:07: 6d:04:3e:a4:58:32:d7:6d:3a:88:98:de:06:e8:a6: a9:36:98:c6:d1:e5:1c:09:35:ff:88:71:39:ed:16: 45:89:fc:cc:77:6b:68:95:bc:ef:34:2a:c4:c9:aa: 6f:55:5a:b3:17:83:67:65:14:44:d9:f0:18:b4:bf: e3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6E:48:76:5D:2F:AA:FB:57:0E:F7:9C:E7:0E:C2:A5:80:06:14:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b/a4bf0231-e9e6-3cb6-a642-a1d9a3d1e1d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.crl X509v3 Authority Key Identifier: keyid:5E:8F:D3:88:EC:13:87:CA:F5:B3:CC:E8:D3:CC:DF:BB:12:91:BB:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.cer sbgp-ipAddrBlock: critical IPv4: 192.84.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:4d:95:52:cb:7d:1b:bf:2a:be:32:ba:a3:9d:68:a7:f5:ff: d8:f9:cf:05:3c:a2:d8:f7:de:d5:ff:c8:01:01:48:af:e3:d1: 09:5e:54:89:16:8a:ce:9b:4c:c3:86:29:9c:a2:36:1f:89:dd: 2e:9d:38:88:58:85:ac:ea:49:e0:7f:f4:26:5f:c5:58:34:77: 3e:eb:58:26:3e:f4:d9:37:c7:e5:5b:51:5e:fe:11:7f:b3:09: 55:e8:91:88:4e:60:2c:6c:3f:81:69:d8:08:b0:71:4a:5f:9c: c2:60:e8:39:cf:94:1b:44:eb:e3:05:bc:ff:d4:6b:bb:f5:ae: 7d:e2:2b:28:6d:31:f2:b0:14:fc:65:69:40:e6:39:ba:18:85: ec:d4:04:23:43:a3:eb:85:9d:41:09:ed:df:2a:a8:3d:57:c0: 24:f6:64:8a:f9:03:29:4e:c1:32:a9:8a:83:5a:62:07:cb:36: 77:79:cf:96:f5:97:be:c8:49:a3:c2:51:c3:e6:8b:8a:b6:04: 8c:8f:24:a6:95:8f:77:93:bf:7e:af:29:21:35:3e:7f:97:cb: 58:3d:97:38:a5:26:85:c4:bc:e9:bb:51:fa:f7:59:95:2a:ca: 0d:2f:d6:4a:33:66:8f:b0:e0:28:79:9e:0c:84:5b:22:e4:4f: 08:9d:75:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5PG9j9yFUZABpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg5YmRjYjktMjJmMC00NjI5LThlZDgtYmI0YTMzZjkx MDJiMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk N2NmOTIwODMtNjQwZC00MWEzLWFmOWEtMDI2OTc4OGYwNTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4miTbDh1XTr7hJFz5J9Ol7myGISVUscvQ9JI pSbEPK5Ueud37kPLDMS7HHxQvt5FG9yrwZhzWIE79rPEAaCJYoMGMEwDoH0mLu4x FeBOgnCFdSIWHzrar1DrMubGJfUtm89tW1M+LxIw+V9MQslHzXezCnFNbit5W0LC GZm0URqsEAie/rQ3LAP1BgwgPdXhZO5MdVn30fbSxedCS3kKziV5TfJ+UyefC8WO FlWgOuIC96KcQAi4K0E5UMJFPnJ7RgdtBD6kWDLXbTqImN4G6KapNpjG0eUcCTX/ iHE57RZFifzMd2tolbzvNCrEyapvVVqzF4NnZRRE2fAYtL/jhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVuSHZdL6r7Vw73nOcOwqWABhTLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iODli ZGNiOS0yMmYwLTQ2MjktOGVkOC1iYjRhMzNmOTEwMmIvYTRiZjAyMzEtZTllNi0z Y2I2LWE2NDItYTFkOWEzZDFlMWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjg5YmRjYjktMjJmMC00NjI5LThl ZDgtYmI0YTMzZjkxMDJiL2I4OWJkY2I5LTIyZjAtNDYyOS04ZWQ4LWJiNGEzM2Y5 MTAyYi5jcmwwHwYDVR0jBBgwFoAUXo/TiOwTh8r1s8zo08zfuxKRu+MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iODliZGNiOS0yMmYwLTQ2MjktOGVkOC1iYjRh MzNmOTEwMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFThMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVNlVLLfRu/Kr4yuqOdaKf1/9j5zwU8otj33tX/yAEBSK/j0QleVIkW is6bTMOGKZyiNh+J3S6dOIhYhazqSeB/9CZfxVg0dz7rWCY+9Nk3x+VbUV7+EX+z CVXokYhOYCxsP4Fp2AiwcUpfnMJg6DnPlBtE6+MFvP/Ua7v1rn3iKyhtMfKwFPxl aUDmOboYhezUBCNDo+uFnUEJ7d8qqD1XwCT2ZIr5AylOwTKpioNaYgfLNnd5z5b1 l77ISaPCUcPmi4q2BIyPJKaVj3eTv36vKSE1Pn+Xy1g9lzilJoXEvOm7Ufr3WZUq yg0v1kozZo+w4Ch5ngyEWyLkTwiddTA= -----END CERTIFICATE-----Generated at Fri Apr 17 12:19:05 2026 by rpki-client