$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/a7b9c984-121f-38b6-83f4-f45ee1762fe3.roa File: a7b9c984-121f-38b6-83f4-f45ee1762fe3.roa (raw, json) Hash identifier: RcsI72+2Rmr06XW6w/D35IiBCRc+HV8q8KL1UXTiooY= Subject key identifier: FE:F9:C1:99:7A:A0:66:E8:02:38:7A:F0:B8:53:A5:9C:07:43:BE:4D Certificate issuer: /CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Certificate serial: 010D0C9F4328584CACF1C13291D58A1E6D66EF00 Authority key identifier: 83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/a7b9c984-121f-38b6-83f4-f45ee1762fe3.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 29057 IP address blocks: 192.91.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:c1:32:91:d5:8a:1e:6d:66:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=2c841d0d-6372-4461-ad04-2d6ccd40043e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7f:9b:ae:04:2f:16:c2:f7:0f:a8:10:90:c6: 3a:fc:08:a4:90:27:38:28:00:10:68:96:59:da:ca: a1:3e:03:d2:a5:d7:41:d4:d7:ba:1e:00:f4:7d:4e: 16:6b:55:23:81:f3:36:eb:90:05:e1:0f:f6:4c:e8: 4e:38:10:39:8d:fa:f5:10:c3:23:c7:e2:ec:9a:dd: c6:1f:43:92:7f:3c:ab:12:fb:28:ac:2c:41:a7:72: f4:a3:dc:72:9b:37:df:20:b7:59:0d:6a:47:b0:23: 96:15:df:c9:fc:28:f1:83:64:c6:f0:ca:6c:52:f0: a9:eb:98:fa:b7:e7:c2:40:c7:68:f3:ad:34:72:b5: af:5a:09:93:c2:5b:7c:7b:ac:08:30:f5:49:e4:3c: ed:1f:7e:80:c9:e5:18:89:1b:55:40:22:89:41:dd: 10:76:f0:76:d2:08:47:a4:71:7e:9a:5d:65:ba:de: e9:2e:f3:a6:5d:99:b9:db:af:bf:9b:a9:41:ec:e5: 07:5d:54:12:f6:56:d5:95:72:65:a7:85:ba:9b:98: 70:60:de:54:42:c5:83:0a:c2:0c:d4:ec:ae:d9:45: b2:96:86:fb:3a:07:c1:c1:95:45:b6:6c:d6:d7:bd: e2:8f:42:c4:1c:ae:73:d9:6f:7e:fc:ae:f4:d2:ec: 5e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F9:C1:99:7A:A0:66:E8:02:38:7A:F0:B8:53:A5:9C:07:43:BE:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/a7b9c984-121f-38b6-83f4-f45ee1762fe3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl X509v3 Authority Key Identifier: keyid:83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer sbgp-ipAddrBlock: critical IPv4: 192.91.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:15:ab:5e:2d:0b:4e:02:0f:d3:2e:7a:fe:ed:58:dd:06:1f: c8:9b:35:57:d5:78:f6:73:d9:1e:c3:d0:e6:89:07:c0:ff:0c: e1:f3:44:53:12:85:64:60:4a:0e:fb:c1:44:c6:05:97:7a:d4: e3:1f:16:b8:75:cb:36:08:46:26:b3:00:0e:eb:b4:73:ed:fe: be:73:72:e6:4c:72:f4:e6:f9:dc:e6:84:6c:4a:de:07:e1:73: 76:9b:bf:4d:db:af:d9:f5:33:12:0e:fd:f2:f5:73:75:fd:4e: f7:73:5b:8a:07:88:fc:02:7f:f5:d9:de:68:48:12:cb:c0:e2: 6f:20:59:f9:83:57:8d:8e:98:97:8f:06:86:a9:99:b8:84:4c: 5f:71:b3:73:25:94:62:29:f3:eb:9f:61:30:2f:57:0c:19:d1: de:62:ad:6b:6b:41:99:bd:d5:54:c3:85:01:53:2d:a6:03:b8: ee:d0:e1:06:f4:a8:2f:96:f1:33:1a:3d:3a:a0:8a:3c:c5:91: ec:69:8e:1c:03:b4:92:45:1c:b4:d4:89:04:5b:3e:10:07:32: 29:e9:b0:b5:72:06:9a:1d:25:9d:b8:e3:fe:8b:6e:62:37:17: 37:6a:de:c8:7f:f8:65:12:d8:1b:36:60:74:a7:2f:9a:75:50: 92:c4:b5:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEys8cEykdWKHm1m7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiMjIxMTctYzNiMS00Zjc0LWFkMmEtMGZjZDEwYTJk NzhlMB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk MmM4NDFkMGQtNjM3Mi00NDYxLWFkMDQtMmQ2Y2NkNDAwNDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjX+brgQvFsL3D6gQkMY6/AikkCc4KAAQaJZZ 2sqhPgPSpddB1Ne6HgD0fU4Wa1UjgfM265AF4Q/2TOhOOBA5jfr1EMMjx+Lsmt3G H0OSfzyrEvsorCxBp3L0o9xymzffILdZDWpHsCOWFd/J/Cjxg2TG8MpsUvCp65j6 t+fCQMdo8600crWvWgmTwlt8e6wIMPVJ5DztH36AyeUYiRtVQCKJQd0QdvB20ghH pHF+ml1lut7pLvOmXZm526+/m6lB7OUHXVQS9lbVlXJlp4W6m5hwYN5UQsWDCsIM 1Oyu2UWylob7OgfBwZVFtmzW173ij0LEHK5z2W9+/K700uxexwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP75wZl6oGboAjh68LhTpZwHQ75NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIy MjExNy1jM2IxLTRmNzQtYWQyYS0wZmNkMTBhMmQ3OGUvYTdiOWM5ODQtMTIxZi0z OGI2LTgzZjQtZjQ1ZWUxNzYyZmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzRiMjIxMTctYzNiMS00Zjc0LWFk MmEtMGZjZDEwYTJkNzhlLzM0YjIyMTE3LWMzYjEtNGY3NC1hZDJhLTBmY2QxMGEy ZDc4ZS5jcmwwHwYDVR0jBBgwFoAUg10MEq+eKOvB66Bxguz0PklWr1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIyMjExNy1jM2IxLTRmNzQtYWQyYS0wZmNk MTBhMmQ3OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFs/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEVq14tC04CD9Muev7tWN0GH8ibNVfVePZz2R7D0OaJB8D/DOHzRFMS hWRgSg77wUTGBZd61OMfFrh1yzYIRiazAA7rtHPt/r5zcuZMcvTm+dzmhGxK3gfh c3abv03br9n1MxIO/fL1c3X9TvdzW4oHiPwCf/XZ3mhIEsvA4m8gWfmDV42OmJeP BoapmbiETF9xs3MllGIp8+ufYTAvVwwZ0d5irWtrQZm91VTDhQFTLaYDuO7Q4Qb0 qC+W8TMaPTqgijzFkexpjhwDtJJFHLTUiQRbPhAHMinpsLVyBpodJZ244/6LbmI3 Fzdq3sh/+GUS2Bs2YHSnL5p1UJLEtXA= -----END CERTIFICATE-----Generated at Mon Mar 2 09:23:53 2026 by rpki-client