$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/b25afc6e-65f8-30df-b098-3a2395986d3e.roa File: b25afc6e-65f8-30df-b098-3a2395986d3e.roa (raw, json) Hash identifier: mbbePlPTbajZbzGve/doZVw3rxxYUnQnGF4dLbufkOY= Subject key identifier: E6:CA:C1:D7:DB:AC:4E:18:E0:40:E4:49:36:46:3E:62:7E:3F:C4:87 Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F4328584D746FBEE8A60FBFF6A595DAC0 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/b25afc6e-65f8-30df-b098-3a2395986d3e.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 27281 IP address blocks: 192.184.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:be:e8:a6:0f:bf:f6:a5:95:da:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=339516d3-4ae2-4724-afdb-eb81a1fd9459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:da:ee:b4:ed:04:cd:ca:06:dc:b1:1c:ed:db: 66:c8:41:31:90:3b:f9:71:77:ac:29:ce:25:b5:51: a7:f3:0b:7e:d5:08:94:c1:a4:8d:4e:41:b4:35:a1: 37:3c:a6:4e:67:85:6f:1d:af:0d:7e:b2:30:10:de: c4:8e:9e:94:a8:37:2d:00:d3:66:e0:d5:04:0e:28: a3:a5:97:3d:f0:22:ff:5d:55:0f:bc:fc:d0:b1:b7: 2e:48:de:1e:a5:b5:9c:40:39:d5:8b:d6:fc:1c:aa: 12:ac:56:81:ab:53:4e:5a:9e:c8:0e:8a:a6:32:65: d0:20:58:51:a2:81:cc:e6:2e:06:d7:36:78:bd:f2: 82:73:29:fb:62:3e:0c:06:39:dd:25:76:69:c8:dc: 67:80:16:18:43:f8:9e:af:2d:84:52:51:99:4f:28: ee:b4:41:02:71:8d:dc:ba:5c:31:ee:cb:a5:3f:6f: 4b:76:ec:d1:0a:04:a2:91:a4:2a:e3:70:f3:92:52: 5c:01:ec:b8:49:2b:07:07:b2:5c:92:11:6e:5a:c9: bb:bf:55:15:7b:1b:5d:f7:43:81:cb:6f:df:1f:f5: a3:1d:10:52:98:cd:ec:ab:d7:71:ea:e1:e1:15:ef: 90:d8:8c:1c:92:67:31:aa:bf:21:50:81:a2:fb:89: d4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:CA:C1:D7:DB:AC:4E:18:E0:40:E4:49:36:46:3E:62:7E:3F:C4:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/b25afc6e-65f8-30df-b098-3a2395986d3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv4: 192.184.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:c9:d4:e6:76:99:03:d2:c2:5f:a0:e7:32:a0:f4:0d:b7:2c: b8:3b:be:a2:a8:25:74:8d:f3:cd:cb:b4:47:d3:17:20:76:8f: 0a:e9:ab:06:df:2d:67:90:bc:76:05:36:1c:5a:a5:9c:d9:39: e7:95:de:64:5c:94:dc:ac:e7:80:86:af:24:c7:32:27:34:1f: 87:02:db:46:14:77:9b:97:a9:89:69:35:56:57:37:11:08:7d: 56:01:9e:3b:d1:ae:6a:b8:48:98:bf:ed:9c:7e:01:18:63:d1: 17:e4:d2:86:fd:3d:e6:7b:f0:2c:83:5d:c4:31:03:6b:fe:4c: 67:97:e3:c7:12:79:94:dc:2f:b8:28:95:32:88:d4:66:75:86: 4c:58:05:09:13:de:71:89:98:b7:51:f3:46:f9:20:3a:92:ef: 0c:2e:11:e3:dc:ec:02:cb:b8:f0:15:65:b2:2a:3b:0c:75:9c: 36:37:91:59:b5:bc:5b:0b:44:7a:10:4f:50:d6:5e:ef:4d:cd: 45:03:c4:4c:03:c9:ef:08:e4:9b:3a:8f:31:28:48:a9:a5:b9: 87:1a:99:2e:c8:67:44:64:70:36:53:c2:44:b3:e2:e0:14:fe: 51:c4:5b:c6:56:89:51:1d:35:8e:b4:14:fa:de:b2:2c:4b:81: 2f:d6:1f:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b77opg+/9qWV2sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk MzM5NTE2ZDMtNGFlMi00NzI0LWFmZGItZWI4MWExZmQ5NDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39rutO0EzcoG3LEc7dtmyEExkDv5cXesKc4l tVGn8wt+1QiUwaSNTkG0NaE3PKZOZ4VvHa8NfrIwEN7Ejp6UqDctANNm4NUEDiij pZc98CL/XVUPvPzQsbcuSN4epbWcQDnVi9b8HKoSrFaBq1NOWp7IDoqmMmXQIFhR ooHM5i4G1zZ4vfKCcyn7Yj4MBjndJXZpyNxngBYYQ/iery2EUlGZTyjutEECcY3c ulwx7sulP29LduzRCgSikaQq43DzklJcAey4SSsHB7JckhFuWsm7v1UVextd90OB y2/fH/WjHRBSmM3sq9dx6uHhFe+Q2Iwckmcxqr8hUIGi+4nUUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObKwdfbrE4Y4EDkSTZGPmJ+P8SHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvYjI1YWZjNmUtNjVmOC0z MGRmLWIwOTgtM2EyMzk1OTg2ZDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLhFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjJ1OZ2mQPSwl+g5zKg9A23LLg7vqKoJXSN883LtEfTFyB2jwrpqwbf LWeQvHYFNhxapZzZOeeV3mRclNys54CGryTHMic0H4cC20YUd5uXqYlpNVZXNxEI fVYBnjvRrmq4SJi/7Zx+ARhj0Rfk0ob9PeZ78CyDXcQxA2v+TGeX48cSeZTcL7go lTKI1GZ1hkxYBQkT3nGJmLdR80b5IDqS7wwuEePc7ALLuPAVZbIqOwx1nDY3kVm1 vFsLRHoQT1DWXu9NzUUDxEwDye8I5Js6jzEoSKmluYcamS7IZ0RkcDZTwkSz4uAU /lHEW8ZWiVEdNY60FPresixLgS/WH6g= -----END CERTIFICATE-----Generated at Fri Apr 17 19:24:21 2026 by rpki-client