$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b1cd5d0-79a4-3a09-953a-5b1e08584046.roa File: 2b1cd5d0-79a4-3a09-953a-5b1e08584046.roa (raw, json) Hash identifier: DFuLnIyrx8h7m6uRokwI4b8ExRxuv8K44smANyqaOr0= Subject key identifier: 18:A0:4B:4B:36:3B:30:AB:8F:1C:97:8A:4D:CB:CE:3C:9C:59:8E:4A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1199BC988CF72B2E5BCDD890 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b1cd5d0-79a4-3a09-953a-5b1e08584046.roa Signing time: Thu 05 Mar 2026 15:20:05 +0000 ROA not before: Thu 05 Mar 2026 15:20:05 +0000 ROA not after: Wed 03 Jun 2026 14:20:05 +0000 asID: 211369 IP address blocks: 192.153.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:99:bc:98:8c:f7:2b:2e:5b:cd:d8:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 5 15:20:05 2026 GMT Not After : Jun 3 14:20:05 2026 GMT Subject: CN=29f96aae-e5b4-4e44-be3f-6d7f45cc2182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:55:89:2b:9e:62:5e:eb:27:cf:23:70:92:04: 37:e3:42:9c:fc:a6:0a:37:a4:92:6f:13:0a:53:fe: e7:bd:65:79:9b:f0:82:56:37:49:29:ae:10:5d:70: 66:e3:7e:dd:bc:f6:35:91:28:91:a5:be:d3:b3:04: cf:3d:37:22:92:c6:32:e8:41:84:e4:31:10:fa:e8: 95:eb:4b:4e:5a:3f:8d:fc:a5:88:ec:7f:2c:71:a5: d5:09:6a:d4:95:f5:91:84:ef:02:1f:b7:3f:73:7a: d0:9b:df:d9:a5:25:fa:ff:69:59:73:74:00:b7:4e: 5c:80:61:91:e0:8e:cf:77:c7:61:ec:9f:0c:fb:1d: 18:23:08:d5:d0:4a:cf:b7:e3:69:ba:40:37:72:68: 36:d2:4e:f0:9b:82:9f:8c:cb:ac:6f:6b:02:21:21: 59:3b:ce:ea:60:ef:ca:54:4d:bd:87:cd:89:15:d2: b2:0a:03:ff:64:ed:b1:7d:5a:3e:bd:2c:71:b4:a6: 41:85:db:51:99:dc:cc:7b:be:9e:28:ff:b4:eb:e2: 75:61:32:77:ed:02:30:9d:fe:93:e5:81:78:cf:71: 46:79:66:24:dc:44:bd:6c:81:f9:ef:c7:83:ed:9a: 62:6a:2e:34:f6:0c:03:b3:65:b5:0d:83:d8:d0:3f: f7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A0:4B:4B:36:3B:30:AB:8F:1C:97:8A:4D:CB:CE:3C:9C:59:8E:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b1cd5d0-79a4-3a09-953a-5b1e08584046.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.153.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:b8:4e:af:58:8b:74:e6:dc:d6:c5:8c:a9:f6:72:e6:64:fa: 36:bb:a5:48:9c:0a:49:b5:13:d6:cd:f9:7d:91:ca:df:a5:6d: 01:32:ee:1d:8f:ec:5c:fd:17:08:08:6b:de:19:bf:56:89:e4: e5:be:d1:6b:e1:60:ad:41:61:d5:22:c3:2f:13:6a:12:f7:35: 4d:1d:18:38:8e:a2:8c:e9:91:7c:36:26:32:8a:76:ec:95:7f: 8b:9f:58:a3:02:cd:f0:79:4c:73:86:05:62:36:5d:c8:28:7a: 6f:4b:06:f6:b5:0c:ad:ff:8d:9e:a8:e0:ac:32:b5:fa:ca:14: 86:23:84:73:c5:c7:2d:8b:1a:80:fa:96:ca:4a:64:83:2f:1b: 52:a9:cf:68:e9:a0:04:25:eb:bd:63:8b:c8:c8:f2:02:5c:be: a6:ea:75:6a:d2:ff:a2:40:fd:a6:14:6a:d7:58:c3:3c:0b:bf: bc:13:99:b1:8e:9a:72:1e:26:25:c7:c5:a8:ed:7b:ab:91:a1: 8d:2a:0c:ef:81:be:4b:28:7c:d5:f3:47:52:62:f1:ae:fc:c1: 85:5b:e8:8f:0f:d8:9e:8e:b9:65:34:dd:ca:a5:c2:31:17:e1: b2:ac:f1:74:cb:54:ea:f9:55:74:52:92:91:d3:35:75:9d:49: 71:2e:ff:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RmbyYjPcrLlvN2JAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNTE1MjAwNVoXDTI2MDYwMzE0MjAwNVowLzEtMCsGA1UEAxMk MjlmOTZhYWUtZTViNC00ZTQ0LWJlM2YtNmQ3ZjQ1Y2MyMTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1WJK55iXusnzyNwkgQ340Kc/KYKN6SSbxMK U/7nvWV5m/CCVjdJKa4QXXBm437dvPY1kSiRpb7TswTPPTciksYy6EGE5DEQ+uiV 60tOWj+N/KWI7H8scaXVCWrUlfWRhO8CH7c/c3rQm9/ZpSX6/2lZc3QAt05cgGGR 4I7Pd8dh7J8M+x0YIwjV0ErPt+NpukA3cmg20k7wm4KfjMusb2sCISFZO87qYO/K VE29h82JFdKyCgP/ZO2xfVo+vSxxtKZBhdtRmdzMe76eKP+06+J1YTJ37QIwnf6T 5YF4z3FGeWYk3ES9bIH578eD7Zpiai409gwDs2W1DYPY0D/33wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBigS0s2OzCrjxyXik3LzjycWY5KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmIxY2Q1ZDAtNzlhNC0z YTA5LTk1M2EtNWIxZTA4NTg0MDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJn3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFe4Tq9Yi3Tm3NbFjKn2cuZk+ja7pUicCkm1E9bN+X2Ryt+lbQEy7h2P 7Fz9FwgIa94Zv1aJ5OW+0WvhYK1BYdUiwy8TahL3NU0dGDiOoozpkXw2JjKKduyV f4ufWKMCzfB5THOGBWI2Xcgoem9LBva1DK3/jZ6o4KwytfrKFIYjhHPFxy2LGoD6 lspKZIMvG1Kpz2jpoAQl671ji8jI8gJcvqbqdWrS/6JA/aYUatdYwzwLv7wTmbGO mnIeJiXHxajte6uRoY0qDO+BvksofNXzR1Ji8a78wYVb6I8P2J6OuWU03cqlwjEX 4bKs8XTLVOr5VXRSkpHTNXWdSXEu/zY= -----END CERTIFICATE-----Generated at Thu Mar 26 09:35:53 2026 by rpki-client