$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3226710d-ca21-3639-b069-df71c3452f77.roa File: 3226710d-ca21-3639-b069-df71c3452f77.roa (raw, json) Hash identifier: blVfIQcg0j8gcuH4bB7+WqPBlIqVSnW6CIJdZwIUZWU= Subject key identifier: B4:62:20:96:FD:FC:E5:BF:B9:22:6A:F1:5D:CA:A4:A0:44:B8:BC:2B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1199BE37CE638BBC54A7AD20 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3226710d-ca21-3639-b069-df71c3452f77.roa Signing time: Thu 05 Mar 2026 15:20:05 +0000 ROA not before: Thu 05 Mar 2026 15:20:05 +0000 ROA not after: Wed 03 Jun 2026 14:20:05 +0000 asID: 36632 IP address blocks: 192.153.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:99:be:37:ce:63:8b:bc:54:a7:ad:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 5 15:20:05 2026 GMT Not After : Jun 3 14:20:05 2026 GMT Subject: CN=cd20d592-29fd-4b00-8641-06f2c5b672de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:52:6c:35:6d:e5:60:1a:58:9e:66:06:94:37: 7c:16:db:28:82:61:26:1a:0a:a4:4e:42:dd:0b:6d: 8e:c5:cf:c6:ca:d0:b7:d6:70:1f:47:de:cf:09:d4: 37:77:1d:23:c3:70:ec:d2:bd:30:bf:a3:e8:9f:18: ff:fe:fb:6a:8c:c8:bc:70:6c:0d:98:52:b2:74:a1: cd:ac:94:c9:52:40:9c:05:f9:67:68:04:f6:47:e9: bc:3e:f0:70:9e:db:fe:05:18:69:1e:1f:1d:b8:b9: 0e:c9:fc:1c:9b:d6:08:5a:85:d9:d8:63:d7:c3:88: d5:cd:f4:02:0c:35:55:23:92:99:ff:7a:13:0a:20: 8f:b2:39:dc:53:5d:ee:e5:93:fa:d8:b4:55:4a:b5: 1d:fe:1f:c9:db:b2:70:4e:be:87:7d:0d:87:3f:ec: 10:99:17:51:c9:e6:7f:51:c2:40:6e:5c:d5:50:a2: d6:2c:ab:d2:a6:a7:30:fa:d0:9f:08:6a:ab:fd:20: da:1c:df:66:11:52:8c:2f:cc:2e:99:ed:a3:bf:a8: ef:55:63:4d:02:85:3d:60:f0:71:41:f0:be:eb:27: e0:8e:f6:75:fa:7e:fe:18:92:fd:ca:93:9f:2a:21: 3d:05:bb:be:9e:5e:c9:f0:7a:3d:f3:d0:43:48:f9: 6a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:62:20:96:FD:FC:E5:BF:B9:22:6A:F1:5D:CA:A4:A0:44:B8:BC:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3226710d-ca21-3639-b069-df71c3452f77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.153.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:68:9e:9b:f4:35:87:10:b0:3f:22:7a:08:07:e8:63:40:3d: d6:e4:2a:11:e1:94:4c:f6:0a:8a:db:88:bb:de:62:f0:63:6c: 65:ea:81:6d:b5:8b:40:7e:64:10:a2:14:b8:a1:1f:5f:ae:ed: 87:68:b5:22:24:9d:aa:2c:f8:ee:3e:d9:8b:49:f5:ac:9c:21: cf:1e:13:55:03:00:cb:c6:b1:96:d0:43:69:70:26:a0:22:6c: e1:a8:f0:0d:ad:af:99:98:85:f5:a8:76:a1:59:5f:4d:0e:ba: ab:3a:94:18:59:c1:d0:ef:ff:9d:43:16:5e:14:d3:37:d1:ac: 12:07:44:be:bd:57:c9:0f:02:76:5a:15:fd:1c:5b:31:fb:ce: 4b:4d:1d:c7:d5:30:3a:6e:1f:72:f3:23:f0:fe:82:e6:40:2f: 3b:e2:7e:4d:7b:4c:79:b2:92:ed:bc:76:fb:a3:f7:3d:d4:76: 10:35:9e:88:9c:1f:ce:95:f7:a1:4e:08:b1:21:8c:be:3c:ef: db:12:d4:60:5a:b3:e3:e5:f5:d1:42:7e:d4:a3:f8:bc:d9:e9: f1:ec:04:15:ec:2e:05:ba:05:10:7b:8a:4b:a4:17:f8:d2:43: f3:9f:93:47:c1:d6:27:98:bd:9e:e6:4d:31:76:a4:0c:0a:ca: d4:c0:d1:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Rmb43zmOLvFSnrSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNTE1MjAwNVoXDTI2MDYwMzE0MjAwNVowLzEtMCsGA1UEAxMk Y2QyMGQ1OTItMjlmZC00YjAwLTg2NDEtMDZmMmM1YjY3MmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFJsNW3lYBpYnmYGlDd8FtsogmEmGgqkTkLd C22Oxc/GytC31nAfR97PCdQ3dx0jw3Ds0r0wv6Ponxj//vtqjMi8cGwNmFKydKHN rJTJUkCcBflnaAT2R+m8PvBwntv+BRhpHh8duLkOyfwcm9YIWoXZ2GPXw4jVzfQC DDVVI5KZ/3oTCiCPsjncU13u5ZP62LRVSrUd/h/J27JwTr6HfQ2HP+wQmRdRyeZ/ UcJAblzVUKLWLKvSpqcw+tCfCGqr/SDaHN9mEVKML8wume2jv6jvVWNNAoU9YPBx QfC+6yfgjvZ1+n7+GJL9ypOfKiE9Bbu+nl7J8Ho989BDSPlqNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRiIJb9/OW/uSJq8V3KpKBEuLwrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzIyNjcxMGQtY2EyMS0z NjM5LWIwNjktZGY3MWMzNDUyZjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJn3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRonpv0NYcQsD8ieggH6GNAPdbkKhHhlEz2CorbiLveYvBjbGXqgW21 i0B+ZBCiFLihH1+u7YdotSIknaos+O4+2YtJ9aycIc8eE1UDAMvGsZbQQ2lwJqAi bOGo8A2tr5mYhfWodqFZX00Ouqs6lBhZwdDv/51DFl4U0zfRrBIHRL69V8kPAnZa Ff0cWzH7zktNHcfVMDpuH3LzI/D+guZALzvifk17THmyku28dvuj9z3UdhA1noic H86V96FOCLEhjL4879sS1GBas+Pl9dFCftSj+LzZ6fHsBBXsLgW6BRB7ikukF/jS Q/Ofk0fB1ieYvZ7mTTF2pAwKytTA0UQ= -----END CERTIFICATE-----Generated at Thu Mar 26 08:39:27 2026 by rpki-client