$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/fbed4876-7519-30f0-92ed-4f017527a1f1.roa File: fbed4876-7519-30f0-92ed-4f017527a1f1.roa (raw, json) Hash identifier: 1fSIHLitbxX2nPy2aL7eXX5LJZ308YFwj2hMeJgIU+Y= Subject key identifier: D0:99:E1:CD:5F:48:91:AA:C6:7F:5F:ED:C7:B8:F1:80:EE:65:50:88 Certificate issuer: /CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Certificate serial: 010D0C9F4328584CF4222B5C68977C9AC53A3C00 Authority key identifier: 83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/fbed4876-7519-30f0-92ed-4f017527a1f1.roa Signing time: Mon 23 Feb 2026 02:00:31 +0000 ROA not before: Mon 23 Feb 2026 02:00:31 +0000 ROA not after: Sun 24 May 2026 01:00:31 +0000 asID: 399480 IP address blocks: 192.228.64.0/23 maxlen: 23 192.228.64.0/24 maxlen: 24 192.228.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f4:22:2b:5c:68:97:7c:9a:c5:3a:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Validity Not Before: Feb 23 02:00:31 2026 GMT Not After : May 24 01:00:31 2026 GMT Subject: CN=6a42f1a8-67e3-494b-9e68-87ac193e3ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9e:0e:a1:7d:90:a8:ed:0a:6e:96:d7:86:42: 37:46:45:f0:48:7c:99:8d:cf:c4:d2:28:90:17:09: 7b:3f:5a:d9:15:f0:39:af:08:f8:8e:b9:5e:fb:b7: 1d:d2:87:a7:43:82:e1:18:26:ad:ee:ea:75:61:53: a4:07:b5:b6:97:37:75:79:8e:b6:a1:dd:d0:76:0c: a7:69:07:cd:f1:16:37:ab:53:90:ab:47:14:b7:89: 5f:44:e2:71:48:c1:81:c2:ff:74:87:03:2e:54:43: 6b:6e:90:33:81:a5:89:b7:6e:30:80:e0:d8:8c:68: 7a:fc:ee:64:06:11:0b:7e:90:b4:e0:b2:00:19:61: 53:b2:37:3a:16:92:22:5d:66:08:84:08:f1:f6:4a: fd:a2:04:2d:ec:c6:e7:22:4f:16:34:b8:33:33:b6: 94:43:60:47:c6:45:de:44:a1:9d:20:f9:59:85:aa: c0:33:79:c7:35:8d:b3:01:20:63:34:74:73:41:91: a5:4b:e5:c0:df:75:21:16:f4:db:6d:c4:11:7f:50: ce:10:e9:e5:07:ba:2c:5f:2e:c0:ec:7d:ca:18:88: f6:17:2e:90:62:d0:df:fb:d8:80:39:59:f5:9a:f3: 8c:00:cd:ec:0f:b7:82:00:b3:e8:87:6e:dc:af:be: 80:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:99:E1:CD:5F:48:91:AA:C6:7F:5F:ED:C7:B8:F1:80:EE:65:50:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/fbed4876-7519-30f0-92ed-4f017527a1f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl X509v3 Authority Key Identifier: keyid:83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer sbgp-ipAddrBlock: critical IPv4: 192.228.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:56:91:be:97:e3:20:75:29:93:9e:cf:46:46:c6:ec:64:c3: bf:fb:32:f2:d4:17:a7:57:6f:84:99:9b:0d:69:ac:80:8f:dd: 49:33:02:13:53:49:6c:b9:2a:7a:fc:40:b4:b5:b9:a7:d6:1b: 08:ef:a9:27:88:0b:90:1e:9d:a5:17:f5:41:a6:16:42:f7:98: 43:9f:32:c4:0e:10:ef:63:b7:6e:60:ac:4a:e0:2a:d9:26:a5: 6b:f5:49:04:3e:a1:af:fe:25:36:46:41:c8:ad:f6:26:a9:d0: eb:58:e7:8e:a1:d2:31:92:9a:4f:1c:ff:e1:ef:d5:a4:24:ab: db:9a:64:c2:71:02:9a:06:ea:e6:f0:f9:b6:8c:6a:01:8b:c2: dd:72:20:59:45:d2:85:ba:e9:40:33:2c:a6:32:89:4c:ff:11: 2f:19:84:de:f6:7f:98:7e:2d:27:ae:de:37:6e:70:d4:3b:44: 42:9e:60:26:56:77:8e:6a:af:a5:0f:b8:fc:2c:bd:61:1f:6a: 4d:4e:f4:2f:7f:ed:a2:4b:56:ea:7f:2a:bb:c6:49:ae:00:0f: f1:39:f3:d4:15:39:ad:95:34:32:84:b0:6a:d9:89:7f:b3:22: cf:54:b4:00:49:4c:b6:b8:d0:c3:09:db:7b:8a:ac:c9:6a:45: 24:9d:89:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz0IitcaJd8msU6PAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiMjIxMTctYzNiMS00Zjc0LWFkMmEtMGZjZDEwYTJk NzhlMB4XDTI2MDIyMzAyMDAzMVoXDTI2MDUyNDAxMDAzMVowLzEtMCsGA1UEAxMk NmE0MmYxYTgtNjdlMy00OTRiLTllNjgtODdhYzE5M2UzZWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh54OoX2QqO0KbpbXhkI3RkXwSHyZjc/E0iiQ Fwl7P1rZFfA5rwj4jrle+7cd0oenQ4LhGCat7up1YVOkB7W2lzd1eY62od3Qdgyn aQfN8RY3q1OQq0cUt4lfROJxSMGBwv90hwMuVENrbpAzgaWJt24wgODYjGh6/O5k BhELfpC04LIAGWFTsjc6FpIiXWYIhAjx9kr9ogQt7MbnIk8WNLgzM7aUQ2BHxkXe RKGdIPlZharAM3nHNY2zASBjNHRzQZGlS+XA33UhFvTbbcQRf1DOEOnlB7osXy7A 7H3KGIj2Fy6QYtDf+9iAOVn1mvOMAM3sD7eCALPoh27cr76ATwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCZ4c1fSJGqxn9f7ce48YDuZVCIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIy MjExNy1jM2IxLTRmNzQtYWQyYS0wZmNkMTBhMmQ3OGUvZmJlZDQ4NzYtNzUxOS0z MGYwLTkyZWQtNGYwMTc1MjdhMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzRiMjIxMTctYzNiMS00Zjc0LWFk MmEtMGZjZDEwYTJkNzhlLzM0YjIyMTE3LWMzYjEtNGY3NC1hZDJhLTBmY2QxMGEy ZDc4ZS5jcmwwHwYDVR0jBBgwFoAUg10MEq+eKOvB66Bxguz0PklWr1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIyMjExNy1jM2IxLTRmNzQtYWQyYS0wZmNk MTBhMmQ3OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwORAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBWkb6X4yB1KZOez0ZGxuxkw7/7MvLUF6dXb4SZmw1prICP3UkzAhNT SWy5Knr8QLS1uafWGwjvqSeIC5AenaUX9UGmFkL3mEOfMsQOEO9jt25grErgKtkm pWv1SQQ+oa/+JTZGQcit9iap0OtY546h0jGSmk8c/+Hv1aQkq9uaZMJxApoG6ubw +baMagGLwt1yIFlF0oW66UAzLKYyiUz/ES8ZhN72f5h+LSeu3jducNQ7REKeYCZW d45qr6UPuPwsvWEfak1O9C9/7aJLVup/KrvGSa4AD/E589QVOa2VNDKEsGrZiX+z Is9UtABJTLa40MMJ23uKrMlqRSSdibY= -----END CERTIFICATE-----Generated at Mon Mar 2 06:05:38 2026 by rpki-client