$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf27eb5f-aa65-30a8-b71e-1889f50be1d5.roa File: cf27eb5f-aa65-30a8-b71e-1889f50be1d5.roa (raw, json) Hash identifier: 0SNz1hVLA/8sz7ti2zbgUpbbZ+iME3mHdm3lSWPs+xw= Subject key identifier: 8E:50:93:20:25:4C:DA:BC:D8:B3:BC:45:28:BA:14:E2:ED:60:B0:A3 Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584C6B56AC61274346C150D428B8 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf27eb5f-aa65-30a8-b71e-1889f50be1d5.roa Signing time: Mon 05 Jan 2026 02:00:31 +0000 ROA not before: Mon 05 Jan 2026 02:00:31 +0000 ROA not after: Sun 05 Apr 2026 01:00:31 +0000 asID: 40948 IP address blocks: 192.232.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:6b:56:ac:61:27:43:46:c1:50:d4:28:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Jan 5 02:00:31 2026 GMT Not After : Apr 5 01:00:31 2026 GMT Subject: CN=413b4dce-0033-478d-bf1a-7447ebb390e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ef:b3:0c:c1:bb:e1:88:bc:4a:70:15:e4:30: 59:af:bb:5f:6d:60:65:a5:b0:79:7d:62:b9:ea:f0: 09:f1:82:52:72:ed:84:5a:30:d7:8a:90:80:b5:20: 26:3d:4c:ab:f3:ce:e7:3f:98:93:b8:93:d3:36:e2: b8:97:2a:6e:95:15:ed:b2:05:a4:bc:c6:de:80:e0: d7:8c:8a:ee:93:4e:1e:46:2e:2f:2f:7a:d7:54:56: 6a:75:3c:29:09:ad:9f:e2:bd:23:cf:9f:55:b0:ac: 17:34:dc:2b:36:3d:b1:00:aa:2d:4e:bc:2e:42:23: c1:b9:c0:b0:1a:89:5b:3e:d7:ff:0d:46:13:72:4f: 5e:54:53:36:73:fb:f0:eb:a4:0a:1f:42:e2:c7:7f: aa:2e:d7:71:40:b6:e4:21:cc:71:48:67:6a:c9:3f: 07:4d:fd:7d:eb:6b:4c:94:48:e2:f8:b2:8c:92:bc: b7:42:8f:c4:b5:1d:9c:7a:13:b6:78:ef:ab:f5:b2: 94:d1:32:92:6e:cc:6f:4c:94:2f:a7:36:a6:c0:3d: 34:65:d7:14:bf:3e:af:99:0f:b8:31:32:19:6d:fb: 7d:4f:fa:ff:8b:15:7b:23:7e:07:a3:c1:42:8c:e0: 2e:bd:54:88:e4:e4:e0:ea:19:02:bc:71:ff:87:e6: 26:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:50:93:20:25:4C:DA:BC:D8:B3:BC:45:28:BA:14:E2:ED:60:B0:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf27eb5f-aa65-30a8-b71e-1889f50be1d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 192.232.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:d5:84:8d:98:56:16:4c:cc:c5:84:a0:8a:72:dd:17:a1:b7: 28:f4:e7:d9:a6:4e:5b:2f:61:32:e2:e6:51:65:e6:59:ea:22: 73:c9:90:47:77:24:ec:cd:49:58:d4:9f:e9:98:09:95:9a:53: 93:ab:c5:e0:d6:31:cc:9e:59:de:30:0b:a8:4a:64:b8:f1:18: f8:1a:ee:2e:fa:2b:9c:7f:a6:ed:8d:48:ae:47:be:9d:c5:3c: 93:33:6e:f6:1f:37:9d:24:55:58:e2:b8:9c:e8:8c:c5:ce:67: 3d:18:b1:43:bf:09:33:a2:d7:a8:d9:23:43:b2:5f:1e:a9:79: 63:52:ba:91:25:7a:6d:db:41:af:ec:38:5f:fd:b7:a9:93:60: 19:95:1a:24:35:ce:69:ca:19:a8:3c:ac:63:1c:87:ea:29:e6: 57:35:dc:07:76:1e:01:1c:7b:2e:7f:fe:0f:3b:db:27:81:a6: 61:fc:8a:d6:dd:6d:90:12:cc:a2:86:b3:59:11:bf:da:bc:8c: e4:70:a0:25:84:c7:92:17:00:dd:17:d2:c2:1b:93:c1:ca:dc: 47:ca:de:78:07:dc:0c:a3:67:05:80:92:af:c4:95:ee:fb:70: d4:17:cd:bb:47:be:d1:b8:f7:cf:4c:9c:df:a7:d6:9a:9c:42: 72:b4:5f:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExrVqxhJ0NGwVDUKLgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI2MDEwNTAyMDAzMVoXDTI2MDQwNTAxMDAzMVowLzEtMCsGA1UEAxMk NDEzYjRkY2UtMDAzMy00NzhkLWJmMWEtNzQ0N2ViYjM5MGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAze+zDMG74Yi8SnAV5DBZr7tfbWBlpbB5fWK5 6vAJ8YJScu2EWjDXipCAtSAmPUyr887nP5iTuJPTNuK4lypulRXtsgWkvMbegODX jIruk04eRi4vL3rXVFZqdTwpCa2f4r0jz59VsKwXNNwrNj2xAKotTrwuQiPBucCw GolbPtf/DUYTck9eVFM2c/vw66QKH0Lix3+qLtdxQLbkIcxxSGdqyT8HTf1962tM lEji+LKMkry3Qo/EtR2cehO2eO+r9bKU0TKSbsxvTJQvpzamwD00ZdcUvz6vmQ+4 MTIZbft9T/r/ixV7I34Ho8FCjOAuvVSI5OTg6hkCvHH/h+YmvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5QkyAlTNq82LO8RSi6FOLtYLCjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvY2YyN2ViNWYtYWE2NS0z MGE4LWI3MWUtMTg4OWY1MGJlMWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvVhI2YVhZMzMWEoIpy3Rehtyj059mmTlsvYTLi5lFl5lnqInPJkEd3 JOzNSVjUn+mYCZWaU5OrxeDWMcyeWd4wC6hKZLjxGPga7i76K5x/pu2NSK5Hvp3F PJMzbvYfN50kVVjiuJzojMXOZz0YsUO/CTOi16jZI0OyXx6peWNSupElem3bQa/s OF/9t6mTYBmVGiQ1zmnKGag8rGMch+op5lc13Ad2HgEcey5//g872yeBpmH8itbd bZASzKKGs1kRv9q8jORwoCWEx5IXAN0X0sIbk8HK3EfK3ngH3AyjZwWAkq/Ele77 cNQXzbtHvtG4989MnN+n1pqcQnK0Xzc= -----END CERTIFICATE-----Generated at Mon Mar 2 16:28:20 2026 by rpki-client