$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/49ced11a-836a-42db-af1a-ed18e7e3e2ee/30655a22-4d08-3289-87c9-108a79ab7835.roa File: 30655a22-4d08-3289-87c9-108a79ab7835.roa (raw, json) Hash identifier: HoskuGAU/Xc5Kj+m5dOw+uIhpGxoVMvhwsU5Q4hqgq0= Subject key identifier: C7:34:DF:97:7E:84:EE:60:D7:36:3E:89:B6:79:DA:50:52:09:A8:17 Certificate issuer: /CN=49ced11a-836a-42db-af1a-ed18e7e3e2ee Certificate serial: 010D0C9F4328584CB6B70B2A686F958E04AF8200 Authority key identifier: 72:9B:31:A7:A5:DE:CC:88:25:95:70:95:81:41:5C:FF:30:8F:D3:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/49ced11a-836a-42db-af1a-ed18e7e3e2ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/49ced11a-836a-42db-af1a-ed18e7e3e2ee/30655a22-4d08-3289-87c9-108a79ab7835.roa Signing time: Sun 01 Feb 2026 02:00:32 +0000 ROA not before: Sun 01 Feb 2026 02:00:32 +0000 ROA not after: Sat 02 May 2026 01:00:32 +0000 asID: 8075 IP address blocks: 192.190.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/49ced11a-836a-42db-af1a-ed18e7e3e2ee/49ced11a-836a-42db-af1a-ed18e7e3e2ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/49ced11a-836a-42db-af1a-ed18e7e3e2ee/49ced11a-836a-42db-af1a-ed18e7e3e2ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/49ced11a-836a-42db-af1a-ed18e7e3e2ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b6:b7:0b:2a:68:6f:95:8e:04:af:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49ced11a-836a-42db-af1a-ed18e7e3e2ee Validity Not Before: Feb 1 02:00:32 2026 GMT Not After : May 2 01:00:32 2026 GMT Subject: CN=c3ae4f56-2066-4773-83dd-91a566886af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:90:a0:c5:33:2d:13:22:5b:70:d0:0b:43:a5: 1b:8f:51:dd:b9:32:fa:9a:eb:75:08:2a:9f:d3:20: 06:1e:48:fd:ca:6f:85:4f:d1:d3:a2:5b:6b:b3:15: 6b:25:b2:9b:ab:02:f1:7e:d8:37:af:28:89:ee:e9: 74:22:ce:f2:97:27:d7:dc:b6:d2:53:40:81:63:f6: 93:01:4b:24:19:71:f1:47:48:32:3d:98:18:2d:b7: 85:fb:4a:f9:94:b8:f8:50:b6:c5:5c:fd:fd:10:b8: b1:df:05:37:41:34:ca:8e:04:f4:0b:c9:d6:62:50: 35:84:1a:e7:f2:b3:de:d6:08:f7:00:7c:b6:55:ad: 6f:b6:61:c7:ca:77:6b:f4:e1:d1:a5:88:cd:f2:d1: 26:8b:0d:01:1b:f9:09:97:3b:d7:cb:9e:f9:b5:0b: 80:32:1b:51:61:86:e1:0b:c5:14:72:05:cd:d7:78: 7b:d6:22:45:12:d9:47:ba:68:0c:6f:d0:4f:7e:44: bf:76:70:b6:e6:f7:56:d3:9c:bb:00:cb:ef:82:a8: 0e:24:cd:66:45:f1:95:50:45:db:de:d0:ba:2e:1f: a7:ad:d4:75:7d:7c:2b:6d:a8:8e:73:32:6b:da:95: 9c:a9:9e:b6:0a:4d:24:84:ac:97:4f:ef:06:8e:d1: ef:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:34:DF:97:7E:84:EE:60:D7:36:3E:89:B6:79:DA:50:52:09:A8:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/49ced11a-836a-42db-af1a-ed18e7e3e2ee/30655a22-4d08-3289-87c9-108a79ab7835.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/49ced11a-836a-42db-af1a-ed18e7e3e2ee/49ced11a-836a-42db-af1a-ed18e7e3e2ee.crl X509v3 Authority Key Identifier: keyid:72:9B:31:A7:A5:DE:CC:88:25:95:70:95:81:41:5C:FF:30:8F:D3:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/49ced11a-836a-42db-af1a-ed18e7e3e2ee.cer sbgp-ipAddrBlock: critical IPv4: 192.190.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:33:58:b0:89:44:47:db:94:44:3f:17:25:1f:9e:98:af:d9: 2d:6f:c7:28:0e:dc:c7:fa:14:b3:dc:7d:69:b7:12:90:a5:a9: e3:dc:db:cf:5c:8b:86:2c:e0:dd:e9:b2:1b:3a:33:6e:d9:95: cc:0b:27:0f:a4:14:af:e5:a7:0c:12:a1:1d:61:2b:0f:3d:15: 42:c3:50:4b:6b:62:83:ce:ea:60:db:c4:ce:8e:d2:b1:1b:6f: f0:b0:98:e7:c9:bb:29:9f:a8:45:e2:fb:8d:ca:0c:05:28:b4: 63:a6:56:ad:d9:92:4c:37:9f:3a:f4:7d:27:2b:47:57:40:8a: 62:ee:3e:02:b2:4c:21:84:ed:68:3d:52:59:f7:8a:92:ea:e4: 90:c5:87:35:f9:df:9d:c2:d6:5f:4b:13:b5:10:dd:7a:ad:8b: 15:53:0f:ce:eb:9a:ca:2a:b9:9d:26:2c:9e:8a:80:b6:5f:19: 30:f3:c2:de:29:ff:cf:47:36:2f:6b:e8:47:78:34:f7:4f:dc: 92:bc:5c:7e:81:5e:45:d5:df:3e:72:6e:3a:3c:7d:ba:2c:f6: 95:eb:45:12:8d:15:0a:e0:57:ac:c8:7e:53:ff:8a:cf:21:0e: ba:6c:e9:4a:61:76:94:70:71:3c:8e:cb:55:fd:2c:eb:f9:a3: 38:cd:20:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy2twsqaG+VjgSvggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDljZWQxMWEtODM2YS00MmRiLWFmMWEtZWQxOGU3ZTNl MmVlMB4XDTI2MDIwMTAyMDAzMloXDTI2MDUwMjAxMDAzMlowLzEtMCsGA1UEAxMk YzNhZTRmNTYtMjA2Ni00NzczLTgzZGQtOTFhNTY2ODg2YWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJCgxTMtEyJbcNALQ6Ubj1HduTL6mut1CCqf 0yAGHkj9ym+FT9HToltrsxVrJbKbqwLxftg3ryiJ7ul0Is7ylyfX3LbSU0CBY/aT AUskGXHxR0gyPZgYLbeF+0r5lLj4ULbFXP39ELix3wU3QTTKjgT0C8nWYlA1hBrn 8rPe1gj3AHy2Va1vtmHHyndr9OHRpYjN8tEmiw0BG/kJlzvXy575tQuAMhtRYYbh C8UUcgXN13h71iJFEtlHumgMb9BPfkS/dnC25vdW05y7AMvvgqgOJM1mRfGVUEXb 3tC6Lh+nrdR1fXwrbaiOczJr2pWcqZ62Ck0khKyXT+8GjtHvhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMc035d+hO5g1zY+ibZ52lBSCagXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80OWNl ZDExYS04MzZhLTQyZGItYWYxYS1lZDE4ZTdlM2UyZWUvMzA2NTVhMjItNGQwOC0z Mjg5LTg3YzktMTA4YTc5YWI3ODM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDljZWQxMWEtODM2YS00MmRiLWFm MWEtZWQxOGU3ZTNlMmVlLzQ5Y2VkMTFhLTgzNmEtNDJkYi1hZjFhLWVkMThlN2Uz ZTJlZS5jcmwwHwYDVR0jBBgwFoAUcpsxp6XezIgllXCVgUFc/zCP04cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80OWNlZDExYS04MzZhLTQyZGItYWYxYS1lZDE4 ZTdlM2UyZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwL4UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4zWLCJREfblEQ/FyUfnpiv2S1vxygO3Mf6FLPcfWm3EpClqePc289c i4Ys4N3pshs6M27ZlcwLJw+kFK/lpwwSoR1hKw89FULDUEtrYoPO6mDbxM6O0rEb b/CwmOfJuymfqEXi+43KDAUotGOmVq3Zkkw3nzr0fScrR1dAimLuPgKyTCGE7Wg9 Uln3ipLq5JDFhzX5353C1l9LE7UQ3XqtixVTD87rmsoquZ0mLJ6KgLZfGTDzwt4p /89HNi9r6Ed4NPdP3JK8XH6BXkXV3z5ybjo8fbos9pXrRRKNFQrgV6zIflP/is8h Drps6UphdpRwcTyOy1X9LOv5ozjNIOg= -----END CERTIFICATE-----Generated at Mon Mar 2 13:03:49 2026 by rpki-client