$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a3bb7575-3f60-45fd-85ee-371d0bbae24f/af436c1a-c29d-3bad-ac22-47ac43de0980.roa File: af436c1a-c29d-3bad-ac22-47ac43de0980.roa (raw, json) Hash identifier: diIYataFvVSbYRpUxqxyMMMHSqGhIar39nBv6skmXIk= Subject key identifier: 4B:41:F1:89:AD:F3:41:C9:82:77:97:CC:89:99:AB:E7:7F:D2:71:3F Certificate issuer: /CN=a3bb7575-3f60-45fd-85ee-371d0bbae24f Certificate serial: 010D0C9F4328584D7E99F379A7C4E50649DB5800 Authority key identifier: 4F:87:DA:17:DB:49:01:AD:8B:E5:F9:AF:A4:47:0D:0C:2F:D5:12:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a3bb7575-3f60-45fd-85ee-371d0bbae24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a3bb7575-3f60-45fd-85ee-371d0bbae24f/af436c1a-c29d-3bad-ac22-47ac43de0980.roa Signing time: Mon 13 Apr 2026 16:23:37 +0000 ROA not before: Mon 13 Apr 2026 16:23:37 +0000 ROA not after: Sun 12 Jul 2026 16:23:37 +0000 asID: 402352 IP address blocks: 192.159.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a3bb7575-3f60-45fd-85ee-371d0bbae24f/a3bb7575-3f60-45fd-85ee-371d0bbae24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a3bb7575-3f60-45fd-85ee-371d0bbae24f/a3bb7575-3f60-45fd-85ee-371d0bbae24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a3bb7575-3f60-45fd-85ee-371d0bbae24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7e:99:f3:79:a7:c4:e5:06:49:db:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3bb7575-3f60-45fd-85ee-371d0bbae24f Validity Not Before: Apr 13 16:23:37 2026 GMT Not After : Jul 12 16:23:37 2026 GMT Subject: CN=23530b68-5f13-42e7-a6b0-69ffea2bf313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ca:99:c4:cf:66:1b:8f:8d:e6:f0:15:2a:59: bb:23:af:84:eb:f0:1d:73:3a:67:f5:34:a1:55:7d: b7:dc:5d:35:1c:ae:91:75:98:55:9c:37:13:3b:78: f2:4a:f2:3a:a5:a6:a6:9b:e2:de:a6:d1:03:57:00: e3:57:6f:74:4a:ae:b0:d9:48:a7:bf:bd:46:1b:be: 0d:03:28:00:4f:37:c7:db:29:17:69:ce:b3:f4:a0: f9:ce:6d:16:b3:13:c9:21:08:f6:36:f1:23:51:7e: f7:36:c7:cd:76:f2:13:64:2c:2c:4d:52:a8:c0:1c: f0:5d:31:b8:ae:95:9b:30:3c:b5:8d:51:b4:c4:c7: fb:b2:5c:08:79:c8:98:ca:1d:5e:c8:d4:62:eb:a3: cb:f8:37:18:75:71:da:09:57:7a:2b:b0:ae:55:0d: b0:94:c7:d4:eb:19:36:c0:35:90:b9:43:20:c0:35: fd:2c:16:b9:53:e3:46:3f:95:4d:8a:92:2b:e0:15: da:bc:b3:48:7f:ad:a7:c8:72:de:02:fb:26:68:73: 28:d8:8d:2c:50:f3:8f:2e:db:75:1f:cd:43:cd:13: 03:eb:90:27:16:ef:ee:7e:64:ff:29:df:c5:e4:5b: a0:c1:25:c2:5e:e1:15:a5:52:8b:2a:da:a9:a1:d8: 7c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:41:F1:89:AD:F3:41:C9:82:77:97:CC:89:99:AB:E7:7F:D2:71:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a3bb7575-3f60-45fd-85ee-371d0bbae24f/af436c1a-c29d-3bad-ac22-47ac43de0980.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a3bb7575-3f60-45fd-85ee-371d0bbae24f/a3bb7575-3f60-45fd-85ee-371d0bbae24f.crl X509v3 Authority Key Identifier: keyid:4F:87:DA:17:DB:49:01:AD:8B:E5:F9:AF:A4:47:0D:0C:2F:D5:12:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a3bb7575-3f60-45fd-85ee-371d0bbae24f.cer sbgp-ipAddrBlock: critical IPv4: 192.159.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:ba:99:19:12:af:9e:e9:39:53:68:0c:d9:d4:d0:72:98:b5: 11:9b:8f:35:cc:7d:c2:4d:31:df:f6:3a:a3:0d:cb:be:0d:b8: 1f:11:7b:fc:5b:4e:be:81:2b:c9:b5:01:e4:33:48:3f:35:18: f6:b9:b5:6c:84:8e:4a:44:27:3c:a9:d2:98:09:7b:ee:67:6c: ca:c9:1c:65:46:3d:d5:d9:fd:f5:65:f6:ea:e6:96:2b:bf:35: 75:b6:df:70:32:42:d8:1d:6e:43:cf:3e:66:36:ff:9e:39:84: 4b:9d:dd:b3:eb:89:10:57:7c:2a:d3:f4:fd:5b:34:2b:96:28: 45:15:58:25:37:f0:b6:76:15:7e:bb:f1:b9:f1:c7:1f:83:a2: 74:4c:02:e0:8a:54:7b:81:ff:2d:d6:d2:cb:97:9f:6a:b5:34: 39:a9:d5:e1:13:4e:bd:cc:4b:21:24:6c:14:71:bb:97:46:3a: bb:a1:e1:65:18:61:d0:81:50:00:e2:c2:5c:27:d8:e1:4d:f9: f5:f0:ec:7e:f3:5b:77:a1:68:84:a8:00:ed:64:b6:a8:2a:a7: cf:0d:f8:dd:ea:26:59:e0:39:7c:70:f8:16:8d:05:ce:44:90: 9a:a6:69:3a:6c:73:de:60:88:d9:10:f8:45:71:39:eb:67:fc: e2:40:47:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1+mfN5p8TlBknbWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNiYjc1NzUtM2Y2MC00NWZkLTg1ZWUtMzcxZDBiYmFl MjRmMB4XDTI2MDQxMzE2MjMzN1oXDTI2MDcxMjE2MjMzN1owLzEtMCsGA1UEAxMk MjM1MzBiNjgtNWYxMy00MmU3LWE2YjAtNjlmZmVhMmJmMzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8qZxM9mG4+N5vAVKlm7I6+E6/Adczpn9TSh VX233F01HK6RdZhVnDcTO3jySvI6paamm+LeptEDVwDjV290Sq6w2Uinv71GG74N AygATzfH2ykXac6z9KD5zm0WsxPJIQj2NvEjUX73NsfNdvITZCwsTVKowBzwXTG4 rpWbMDy1jVG0xMf7slwIeciYyh1eyNRi66PL+DcYdXHaCVd6K7CuVQ2wlMfU6xk2 wDWQuUMgwDX9LBa5U+NGP5VNipIr4BXavLNIf62nyHLeAvsmaHMo2I0sUPOPLtt1 H81DzRMD65AnFu/ufmT/Kd/F5FugwSXCXuEVpVKLKtqpodh8SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtB8Ymt80HJgneXzImZq+d/0nE/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9hM2Ji NzU3NS0zZjYwLTQ1ZmQtODVlZS0zNzFkMGJiYWUyNGYvYWY0MzZjMWEtYzI5ZC0z YmFkLWFjMjItNDdhYzQzZGUwOTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYTNiYjc1NzUtM2Y2MC00NWZkLTg1 ZWUtMzcxZDBiYmFlMjRmL2EzYmI3NTc1LTNmNjAtNDVmZC04NWVlLTM3MWQwYmJh ZTI0Zi5jcmwwHwYDVR0jBBgwFoAUT4faF9tJAa2L5fmvpEcNDC/VEk0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9hM2JiNzU3NS0zZjYwLTQ1ZmQtODVlZS0zNzFk MGJiYWUyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ9TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACy6mRkSr57pOVNoDNnU0HKYtRGbjzXMfcJNMd/2OqMNy74NuB8Re/xb Tr6BK8m1AeQzSD81GPa5tWyEjkpEJzyp0pgJe+5nbMrJHGVGPdXZ/fVl9urmliu/ NXW233AyQtgdbkPPPmY2/545hEud3bPriRBXfCrT9P1bNCuWKEUVWCU38LZ2FX67 8bnxxx+DonRMAuCKVHuB/y3W0suXn2q1NDmp1eETTr3MSyEkbBRxu5dGOruh4WUY YdCBUADiwlwn2OFN+fXw7H7zW3ehaISoAO1ktqgqp88N+N3qJlngOXxw+BaNBc5E kJqmaTpsc95giNkQ+EVxOetn/OJARy8= -----END CERTIFICATE-----Generated at Fri Apr 17 07:36:05 2026 by rpki-client