$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a05dde5-7609-32bc-b771-6c52a4968a3e.roa File: 2a05dde5-7609-32bc-b771-6c52a4968a3e.roa (raw, json) Hash identifier: KypPSgYavN5LGEWwhbjyNIk6hWpFKxnNb7XLqBKyz3Y= Subject key identifier: A0:BF:33:B2:25:B2:98:F8:A7:B7:08:02:6D:51:8E:EB:62:09:32:55 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1199BC696385237ED560B330 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a05dde5-7609-32bc-b771-6c52a4968a3e.roa Signing time: Thu 05 Mar 2026 15:20:05 +0000 ROA not before: Thu 05 Mar 2026 15:20:05 +0000 ROA not after: Wed 03 Jun 2026 14:20:05 +0000 asID: 396564 IP address blocks: 192.153.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:99:bc:69:63:85:23:7e:d5:60:b3:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 5 15:20:05 2026 GMT Not After : Jun 3 14:20:05 2026 GMT Subject: CN=7d2bf1b0-eb35-4eae-90a0-2989c752f6ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d2:ec:c5:f7:be:44:2b:ad:a0:f1:e4:90:a5: c3:48:0c:aa:5a:ab:56:c4:bb:5d:74:d7:54:7b:dd: cb:7a:34:3a:3d:01:fe:7f:88:80:fb:79:57:42:9d: 8c:dc:76:91:de:35:a5:e5:04:bd:d1:87:0a:71:91: 20:72:d1:26:ee:83:51:c3:87:42:d5:70:49:d8:7f: 2f:99:93:32:c1:64:ba:9d:41:5e:80:c6:d4:ec:08: d6:ea:7c:43:e9:c4:fb:01:82:ad:fa:0a:9b:8d:22: dd:46:ac:88:95:c8:20:c6:84:eb:c7:f4:24:54:9a: 20:a4:f0:46:a6:53:f8:f7:01:bf:04:a4:8e:a4:e9: 3f:a9:3a:56:ac:fc:ab:17:8d:02:21:e4:7a:07:81: e7:50:74:6c:2a:ba:9a:95:0c:80:20:1f:06:bc:73: 48:c0:d6:91:a1:2c:ef:c9:ef:a6:73:ec:02:bf:c6: 4b:8a:cc:3a:81:6e:74:eb:18:88:21:f5:a4:35:33: e9:e6:d7:a1:a7:3f:3c:d7:ae:e0:73:9e:a8:ff:a1: 25:ca:c7:c9:c4:2b:3d:3e:72:8b:22:01:e3:df:14: b0:ec:53:6e:31:8d:12:43:f0:e7:ef:b9:89:e2:91: 2e:c5:67:71:31:a1:a4:37:d3:48:67:ba:fb:ae:06: 89:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BF:33:B2:25:B2:98:F8:A7:B7:08:02:6D:51:8E:EB:62:09:32:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a05dde5-7609-32bc-b771-6c52a4968a3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.153.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:c7:34:aa:e8:94:8b:45:92:d3:9d:aa:d2:c5:c6:0a:c0:2a: a9:9d:e5:5b:74:f1:df:0d:7d:b1:f8:cd:9d:71:b3:8f:8d:ee: 16:a5:25:b7:69:1f:2f:43:8c:0c:6b:60:68:55:ae:05:15:fd: b4:b7:28:99:6e:34:b0:5d:4e:c3:40:31:3c:80:a0:18:a7:0c: fd:14:e7:2c:23:ce:eb:f4:35:a2:87:f3:c7:2c:80:5f:24:75: 48:8b:27:f4:b1:9d:39:c4:b4:8b:85:68:4a:84:9c:07:ed:ce: 6f:33:37:db:87:fe:46:e3:4c:17:6c:e8:40:4b:4d:30:a7:ae: 51:a9:53:80:bb:69:03:0f:08:d2:7c:d4:61:35:0d:e7:ac:e7: bf:8c:59:db:88:44:46:de:72:92:99:1f:63:70:4a:fe:ff:b0: 40:32:69:f7:43:ff:7f:b6:bb:a0:7a:8d:bd:26:56:21:1c:a7: 5f:dd:24:f9:40:5d:86:ee:ba:39:f8:05:f2:98:95:d4:b8:94: 96:17:e4:d6:67:c2:37:3e:1c:2f:53:66:73:f4:ce:69:c0:ee: e7:58:2c:df:d5:ee:cd:b0:1c:28:04:e0:8a:bd:79:bc:2c:17: ce:74:99:64:d6:f3:30:01:33:47:ce:7f:a5:ff:ad:8d:0e:7c: d3:9b:ae:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RmbxpY4UjftVgszAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNTE1MjAwNVoXDTI2MDYwMzE0MjAwNVowLzEtMCsGA1UEAxMk N2QyYmYxYjAtZWIzNS00ZWFlLTkwYTAtMjk4OWM3NTJmNmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9Lsxfe+RCutoPHkkKXDSAyqWqtWxLtddNdU e93LejQ6PQH+f4iA+3lXQp2M3HaR3jWl5QS90YcKcZEgctEm7oNRw4dC1XBJ2H8v mZMywWS6nUFegMbU7AjW6nxD6cT7AYKt+gqbjSLdRqyIlcggxoTrx/QkVJogpPBG plP49wG/BKSOpOk/qTpWrPyrF40CIeR6B4HnUHRsKrqalQyAIB8GvHNIwNaRoSzv ye+mc+wCv8ZLisw6gW506xiIIfWkNTPp5tehpz88167gc56o/6ElysfJxCs9PnKL IgHj3xSw7FNuMY0SQ/Dn77mJ4pEuxWdxMaGkN9NIZ7r7rgaJGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKC/M7Ilspj4p7cIAm1RjutiCTJVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmEwNWRkZTUtNzYwOS0z MmJjLWI3NzEtNmM1MmE0OTY4YTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJn3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7HNKrolItFktOdqtLFxgrAKqmd5Vt08d8NfbH4zZ1xs4+N7halJbdp Hy9DjAxrYGhVrgUV/bS3KJluNLBdTsNAMTyAoBinDP0U5ywjzuv0NaKH88csgF8k dUiLJ/SxnTnEtIuFaEqEnAftzm8zN9uH/kbjTBds6EBLTTCnrlGpU4C7aQMPCNJ8 1GE1Dees57+MWduIREbecpKZH2NwSv7/sEAyafdD/3+2u6B6jb0mViEcp1/dJPlA XYbuujn4BfKYldS4lJYX5NZnwjc+HC9TZnP0zmnA7udYLN/V7s2wHCgE4Iq9ebws F850mWTW8zABM0fOf6X/rY0OfNObrn8= -----END CERTIFICATE-----Generated at Thu Mar 26 10:59:51 2026 by rpki-client