$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa/6cfd4cc1-a1b1-38de-8fd2-cd211b3b2686.roa File: 6cfd4cc1-a1b1-38de-8fd2-cd211b3b2686.roa (raw, json) Hash identifier: ZrjNKN3CBn3Sr4DzyVzZtuFtGlkoaFi94kykU1/95fM= Subject key identifier: 93:85:DE:49:C8:D0:4E:F6:F5:AD:7A:A2:94:A7:E6:15:8A:B1:59:3B Certificate issuer: /CN=c428d8f6-c296-4695-bec2-37368886f4fa Certificate serial: 010D0C9F4328584CAE5EAC18D2E3F92945433840 Authority key identifier: 0B:95:A5:41:B2:58:7E:61:BD:4B:EF:6E:31:2E:A9:37:26:D6:DB:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa/6cfd4cc1-a1b1-38de-8fd2-cd211b3b2686.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 399654 IP address blocks: 192.64.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa/c428d8f6-c296-4695-bec2-37368886f4fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa/c428d8f6-c296-4695-bec2-37368886f4fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:ac:18:d2:e3:f9:29:45:43:38:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c428d8f6-c296-4695-bec2-37368886f4fa Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=f223b171-223b-4304-8816-25a097b4a4f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:36:0d:a5:ea:bd:9a:1c:ec:26:f9:aa:38:a1: 4a:c3:54:6d:ba:b5:22:3c:7f:2d:b9:d6:b1:b9:2e: ac:0f:91:a4:5b:43:21:c5:fe:29:b0:57:b6:d4:4b: b4:62:c8:55:4a:6b:bc:d4:23:57:10:a2:80:d2:a3: 5d:7f:10:f5:ea:ce:ae:0e:30:9f:7b:2f:71:17:7b: 4e:90:77:98:dc:eb:6c:c1:c5:e2:28:91:e4:25:fb: 6c:52:0b:6a:67:fd:9f:c8:8b:ab:bc:fd:80:81:b3: 53:26:34:46:5b:91:d9:9f:55:8c:81:9d:70:7f:f6: 51:c4:e3:a4:f4:f1:c6:c6:16:b4:a2:21:6d:21:eb: 60:3f:df:56:26:76:25:77:58:c6:fc:62:2d:ae:d5: f2:60:14:01:29:e5:af:d1:a3:f5:8b:17:50:f1:39: 6a:bb:4b:63:ae:9f:b5:80:78:97:cc:cc:02:c9:07: 07:b7:73:91:31:5b:1f:7a:48:63:75:9f:e9:89:6f: 71:06:74:59:ff:e3:bd:cd:d3:ed:11:28:77:c0:74: 57:ac:02:b3:67:30:fe:93:98:f5:9b:dd:00:f9:77: 1b:41:d3:e9:2f:e0:d4:a0:f8:47:d5:69:ec:75:1e: f9:a9:f6:2a:4d:2f:57:34:96:64:fe:ca:65:77:31: 45:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:85:DE:49:C8:D0:4E:F6:F5:AD:7A:A2:94:A7:E6:15:8A:B1:59:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa/6cfd4cc1-a1b1-38de-8fd2-cd211b3b2686.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa/c428d8f6-c296-4695-bec2-37368886f4fa.crl X509v3 Authority Key Identifier: keyid:0B:95:A5:41:B2:58:7E:61:BD:4B:EF:6E:31:2E:A9:37:26:D6:DB:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa.cer sbgp-ipAddrBlock: critical IPv4: 192.64.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:b8:04:65:d9:f2:64:41:46:98:2c:68:70:9d:24:1d:ad:8d: 64:26:e0:c5:86:6d:54:20:f3:3c:64:02:74:90:6d:1d:b7:58: 68:0e:fb:e4:57:6c:05:72:85:ec:e1:80:eb:08:b1:39:29:18: e1:55:95:20:25:c5:77:fc:a0:0f:e8:98:e6:2e:22:11:5d:d9: 53:bc:89:71:a9:46:71:fa:79:bd:fa:84:b0:77:22:4e:9c:19: f9:5f:f2:a2:37:4d:f3:e4:d3:1a:7a:6c:6e:56:42:58:1b:76: 22:54:28:b0:57:4e:da:ae:a8:57:18:5a:70:7e:a2:9a:4e:28: 6c:e3:ca:8d:76:5f:59:27:ad:5b:5b:6f:03:13:16:0d:5d:32: 6a:30:74:7e:10:0d:b3:0f:c6:36:aa:7a:3d:5f:3a:3f:a5:73: 23:c2:f9:40:46:1a:0f:da:6b:17:87:0d:ed:ab:bc:11:8d:89: 81:9f:f5:f7:c1:a4:f9:6c:a7:f2:b3:b9:0c:43:06:fe:ea:a1: a1:28:72:75:9c:98:b7:a2:c1:fd:25:62:c2:21:7a:3f:ac:9d: 1f:9c:16:b5:8f:93:91:56:05:cc:f2:33:b7:a3:ab:0b:f1:d9: 32:b6:e3:21:35:8e:00:ef:fa:06:44:1b:6a:89:7b:db:25:ab: 71:c0:ae:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXqwY0uP5KUVDOEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyOGQ4ZjYtYzI5Ni00Njk1LWJlYzItMzczNjg4ODZm NGZhMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZjIyM2IxNzEtMjIzYi00MzA0LTg4MTYtMjVhMDk3YjRhNGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTYNpeq9mhzsJvmqOKFKw1RturUiPH8tudax uS6sD5GkW0Mhxf4psFe21Eu0YshVSmu81CNXEKKA0qNdfxD16s6uDjCfey9xF3tO kHeY3OtswcXiKJHkJftsUgtqZ/2fyIurvP2AgbNTJjRGW5HZn1WMgZ1wf/ZRxOOk 9PHGxha0oiFtIetgP99WJnYld1jG/GItrtXyYBQBKeWv0aP1ixdQ8Tlqu0tjrp+1 gHiXzMwCyQcHt3ORMVsfekhjdZ/piW9xBnRZ/+O9zdPtESh3wHRXrAKzZzD+k5j1 m90A+XcbQdPpL+DUoPhH1WnsdR75qfYqTS9XNJZk/spldzFFLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOF3knI0E729a16opSn5hWKsVk7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNDI4 ZDhmNi1jMjk2LTQ2OTUtYmVjMi0zNzM2ODg4NmY0ZmEvNmNmZDRjYzEtYTFiMS0z OGRlLThmZDItY2QyMTFiM2IyNjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzQyOGQ4ZjYtYzI5Ni00Njk1LWJl YzItMzczNjg4ODZmNGZhL2M0MjhkOGY2LWMyOTYtNDY5NS1iZWMyLTM3MzY4ODg2 ZjRmYS5jcmwwHwYDVR0jBBgwFoAUC5WlQbJYfmG9S+9uMS6pNybW25AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNDI4ZDhmNi1jMjk2LTQ2OTUtYmVjMi0zNzM2 ODg4NmY0ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEANMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABm4BGXZ8mRBRpgsaHCdJB2tjWQm4MWGbVQg8zxkAnSQbR23WGgO++RX bAVyhezhgOsIsTkpGOFVlSAlxXf8oA/omOYuIhFd2VO8iXGpRnH6eb36hLB3Ik6c Gflf8qI3TfPk0xp6bG5WQlgbdiJUKLBXTtquqFcYWnB+oppOKGzjyo12X1knrVtb bwMTFg1dMmowdH4QDbMPxjaqej1fOj+lcyPC+UBGGg/aaxeHDe2rvBGNiYGf9ffB pPlsp/KzuQxDBv7qoaEocnWcmLeiwf0lYsIhej+snR+cFrWPk5FWBczyM7ejqwvx 2TK24yE1jgDv+gZEG2qJe9slq3HArhE= -----END CERTIFICATE-----Generated at Mon Mar 2 20:02:32 2026 by rpki-client