$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/41387a42-8a00-3750-bed6-58a6e3fafc54.roa File: 41387a42-8a00-3750-bed6-58a6e3fafc54.roa (raw, json) Hash identifier: jtM4wWN6pTCGxwDLWufIxcXBpQ6MXQ1BbxV72VOFku8= Subject key identifier: DD:6B:AE:76:6F:67:40:CA:F3:EB:91:75:1B:4A:89:B0:A4:20:CF:07 Certificate issuer: /CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Certificate serial: 010D0C9F4328584CACF1D47468AF89447CA4C440 Authority key identifier: 83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/41387a42-8a00-3750-bed6-58a6e3fafc54.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 136806 IP address blocks: 192.163.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:d4:74:68:af:89:44:7c:a4:c4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=940191c3-5f34-42c1-886b-daae3749dd9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:10:83:e4:85:69:90:76:fb:81:e6:fd:11:fe: b5:08:5c:ca:be:46:75:a9:f2:16:e2:50:53:69:75: b7:94:44:01:b5:40:dd:0e:c3:d7:5c:86:b6:20:37: 9a:57:ed:99:c0:be:63:ee:a2:c7:37:e4:a9:ad:cb: c8:46:73:bb:35:7c:b4:50:48:8e:35:de:bd:12:77: e1:ea:da:7e:b5:50:e8:e7:2a:f6:7b:3f:ea:ef:36: 7d:03:b0:74:ea:68:3e:8f:88:03:85:1a:d4:ba:46: 2f:66:76:37:f3:45:06:2a:a0:d3:bc:f2:b7:9a:9d: 22:67:41:08:9d:38:20:ca:03:41:96:b5:6a:a9:ed: 05:fb:bd:e2:bb:ab:1f:fe:ca:fc:ef:a9:08:bb:bd: dc:7e:f7:51:64:85:7c:1d:e6:20:4e:6b:83:05:c2: 96:8b:bb:da:a9:30:3e:8e:b6:96:e6:bf:d6:70:37: 15:bb:44:5c:02:23:54:1e:72:b0:6d:15:eb:11:34: c8:dc:3e:bd:4e:f4:c1:89:88:ec:3d:3f:3a:5d:ab: bb:ea:e6:42:36:d4:2c:de:a4:37:ee:e9:26:06:73: 36:82:dd:57:d0:89:9a:c7:75:93:ba:05:9a:10:46: 37:14:24:23:e9:70:56:db:63:93:17:0a:94:0a:48: df:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6B:AE:76:6F:67:40:CA:F3:EB:91:75:1B:4A:89:B0:A4:20:CF:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/41387a42-8a00-3750-bed6-58a6e3fafc54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl X509v3 Authority Key Identifier: keyid:83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer sbgp-ipAddrBlock: critical IPv4: 192.163.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:93:b9:be:9b:47:82:8c:2b:76:5e:ef:7f:0d:03:9f:44:12: 58:31:e0:76:48:14:3f:d2:d4:64:48:e4:38:60:c6:30:4a:6c: b6:87:c4:1f:8a:6f:68:15:af:dd:4b:e6:b5:61:6e:26:ad:a8: 35:a5:b4:29:42:39:ee:44:f1:2c:b2:6f:92:98:4b:de:86:aa: 0f:e2:2c:ce:38:80:be:09:13:11:2e:3d:c5:95:15:2d:f5:c7: 7b:3b:1a:3f:23:f3:83:8b:2b:11:84:17:8d:f2:70:f9:cd:d2: 4f:31:4e:25:b7:ef:7c:54:62:0b:3a:bf:69:0f:8f:55:32:16: 5b:2a:25:32:7f:05:90:c6:14:1c:9f:b8:0e:b2:26:08:d7:6a: 04:39:86:ab:24:80:63:1b:51:1e:f3:df:6f:5f:eb:f4:52:70: bf:df:67:d9:63:5f:d4:77:b9:6c:bf:20:27:67:99:6f:63:a4: 80:84:30:79:76:f3:e8:46:f9:1e:69:74:0e:6a:69:3f:12:96: 47:ae:a5:7a:b5:66:ac:00:3b:72:37:50:62:0d:22:a6:10:6b: 90:1f:52:60:32:42:fe:55:04:a5:8c:3b:87:81:d3:97:5e:12: e6:f0:9a:f6:78:d5:3d:58:48:fd:41:57:9a:b7:9c:a8:7d:26: ac:7e:89:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEys8dR0aK+JRHykxEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiMjIxMTctYzNiMS00Zjc0LWFkMmEtMGZjZDEwYTJk NzhlMB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk OTQwMTkxYzMtNWYzNC00MmMxLTg4NmItZGFhZTM3NDlkZDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxCD5IVpkHb7geb9Ef61CFzKvkZ1qfIW4lBT aXW3lEQBtUDdDsPXXIa2IDeaV+2ZwL5j7qLHN+SprcvIRnO7NXy0UEiONd69Enfh 6tp+tVDo5yr2ez/q7zZ9A7B06mg+j4gDhRrUukYvZnY380UGKqDTvPK3mp0iZ0EI nTggygNBlrVqqe0F+73iu6sf/sr876kIu73cfvdRZIV8HeYgTmuDBcKWi7vaqTA+ jraW5r/WcDcVu0RcAiNUHnKwbRXrETTI3D69TvTBiYjsPT86Xau76uZCNtQs3qQ3 7ukmBnM2gt1X0Imax3WTugWaEEY3FCQj6XBW22OTFwqUCkjf+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1rrnZvZ0DK8+uRdRtKibCkIM8HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIy MjExNy1jM2IxLTRmNzQtYWQyYS0wZmNkMTBhMmQ3OGUvNDEzODdhNDItOGEwMC0z NzUwLWJlZDYtNThhNmUzZmFmYzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzRiMjIxMTctYzNiMS00Zjc0LWFk MmEtMGZjZDEwYTJkNzhlLzM0YjIyMTE3LWMzYjEtNGY3NC1hZDJhLTBmY2QxMGEy ZDc4ZS5jcmwwHwYDVR0jBBgwFoAUg10MEq+eKOvB66Bxguz0PklWr1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIyMjExNy1jM2IxLTRmNzQtYWQyYS0wZmNk MTBhMmQ3OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKMFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKTub6bR4KMK3Ze738NA59EElgx4HZIFD/S1GRI5DhgxjBKbLaHxB+K b2gVr91L5rVhbiatqDWltClCOe5E8Syyb5KYS96Gqg/iLM44gL4JExEuPcWVFS31 x3s7Gj8j84OLKxGEF43ycPnN0k8xTiW373xUYgs6v2kPj1UyFlsqJTJ/BZDGFByf uA6yJgjXagQ5hqskgGMbUR7z329f6/RScL/fZ9ljX9R3uWy/ICdnmW9jpICEMHl2 8+hG+R5pdA5qaT8SlkeupXq1ZqwAO3I3UGINIqYQa5AfUmAyQv5VBKWMO4eB05de EubwmvZ41T1YSP1BV5q3nKh9Jqx+iR0= -----END CERTIFICATE-----Generated at Mon Mar 2 06:06:01 2026 by rpki-client