$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52a13d69-a443-367f-be9a-4ce0a019a6c8.roa File: 52a13d69-a443-367f-be9a-4ce0a019a6c8.roa (raw, json) Hash identifier: jifhsTa3dpbOwzFb31ZKX/nio+GHgeyctj1UMTltI1k= Subject key identifier: B4:F1:EF:80:B0:6B:B5:D8:66:48:C0:05:82:DD:9E:07:5A:1B:3D:FB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1199C60D97DE0EF408E38F40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52a13d69-a443-367f-be9a-4ce0a019a6c8.roa Signing time: Thu 05 Mar 2026 15:20:09 +0000 ROA not before: Thu 05 Mar 2026 15:20:09 +0000 ROA not after: Wed 03 Jun 2026 14:20:09 +0000 asID: 396553 IP address blocks: 192.153.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:99:c6:0d:97:de:0e:f4:08:e3:8f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 5 15:20:09 2026 GMT Not After : Jun 3 14:20:09 2026 GMT Subject: CN=4a934926-9c97-47d1-b4de-6c9ca9358327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e5:f3:94:e9:e8:4b:7e:96:38:50:20:2e:76: 8b:10:e6:57:98:02:91:0c:f7:11:3f:f8:40:14:2e: e1:5c:bb:c1:f0:3c:62:69:d8:80:85:1f:7f:eb:90: c6:6a:f0:92:de:d4:6c:74:f6:45:ff:50:25:22:7a: af:be:87:9f:d3:6e:a0:57:24:44:cd:a5:5d:20:91: 5c:90:0d:ee:6d:4d:dc:0f:ff:02:5e:f3:6b:29:e7: a3:3e:0c:6b:68:28:67:a8:8f:6a:14:01:44:6e:c0: 7d:a0:49:3b:8a:b3:b1:1e:88:62:45:10:57:8f:7a: 9d:f8:46:e8:c9:ac:ce:c1:1e:ed:2d:e9:0c:3d:18: 09:0d:b3:28:8f:03:a2:74:7e:27:a2:4c:01:3e:40: 11:cc:c0:5b:b6:10:e3:72:cc:ea:13:51:53:76:84: e4:9a:c7:73:37:cd:88:4a:2f:06:65:42:71:06:2d: 3f:a8:19:7f:de:7b:0a:f6:e4:6e:af:7f:a5:b1:ff: ec:e4:35:52:32:78:9f:34:85:7c:3b:e8:b6:54:9a: 10:4e:91:b9:42:a2:69:58:50:8f:1a:55:62:f7:d7: 58:fa:c7:a0:61:37:3c:40:38:ff:1b:32:dd:74:33: 62:94:a9:22:07:32:db:3a:9f:90:d5:b9:f2:33:44: 78:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F1:EF:80:B0:6B:B5:D8:66:48:C0:05:82:DD:9E:07:5A:1B:3D:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52a13d69-a443-367f-be9a-4ce0a019a6c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.153.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:fe:5c:bf:60:63:66:81:5c:e7:99:f4:60:96:6d:9a:7e:40: 32:8c:0b:76:24:53:4a:fb:6f:cb:dd:9d:f6:fc:fd:b2:61:99: 68:51:7f:9b:d3:8c:02:8f:11:ab:e0:49:66:ed:eb:0e:0b:d0: b4:88:dd:7d:ed:31:c2:72:66:6e:71:6c:79:00:33:19:bd:20: fa:47:ce:9d:c8:76:e8:05:f4:8d:de:d6:3c:85:51:ba:89:40: 54:02:c3:e7:0c:b1:9c:04:5d:41:d7:22:0e:44:e9:5c:1f:d3: 58:d0:13:92:bf:ca:7f:af:d2:3e:ae:c6:1e:30:68:dd:7a:5a: 1b:fb:8f:c9:7c:9d:c3:7f:5f:da:6f:0e:75:ca:aa:b9:f8:ba: 2a:07:1f:66:6f:83:e9:df:7e:b5:41:22:db:ee:d0:53:37:67: 35:d3:0b:06:d0:27:9d:a1:4a:0b:85:3e:45:96:1f:0e:57:7a: ac:8f:fe:c6:19:a0:1b:f7:6a:e4:f4:0c:44:74:43:32:6a:20: b8:ad:9b:06:cf:a0:7d:dc:4e:1b:1e:25:6d:2e:a9:cf:ac:6b: 62:ad:e9:7b:a1:17:75:ce:38:40:56:cd:53:75:0a:a5:c6:08: e3:1c:f3:fc:c9:17:fb:bd:af:24:2f:5f:5f:41:b9:7a:dc:5d: e0:08:2c:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RmcYNl94O9Ajjj0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNTE1MjAwOVoXDTI2MDYwMzE0MjAwOVowLzEtMCsGA1UEAxMk NGE5MzQ5MjYtOWM5Ny00N2QxLWI0ZGUtNmM5Y2E5MzU4MzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheXzlOnoS36WOFAgLnaLEOZXmAKRDPcRP/hA FC7hXLvB8DxiadiAhR9/65DGavCS3tRsdPZF/1AlInqvvoef026gVyREzaVdIJFc kA3ubU3cD/8CXvNrKeejPgxraChnqI9qFAFEbsB9oEk7irOxHohiRRBXj3qd+Ebo yazOwR7tLekMPRgJDbMojwOidH4nokwBPkARzMBbthDjcszqE1FTdoTkmsdzN82I Si8GZUJxBi0/qBl/3nsK9uRur3+lsf/s5DVSMnifNIV8O+i2VJoQTpG5QqJpWFCP GlVi99dY+segYTc8QDj/GzLddDNilKkiBzLbOp+Q1bnyM0R4cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTx74Cwa7XYZkjABYLdngdaGz37MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTJhMTNkNjktYTQ0My0z NjdmLWJlOWEtNGNlMGEwMTlhNmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJn3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALD+XL9gY2aBXOeZ9GCWbZp+QDKMC3YkU0r7b8vdnfb8/bJhmWhRf5vT jAKPEavgSWbt6w4L0LSI3X3tMcJyZm5xbHkAMxm9IPpHzp3IdugF9I3e1jyFUbqJ QFQCw+cMsZwEXUHXIg5E6Vwf01jQE5K/yn+v0j6uxh4waN16Whv7j8l8ncN/X9pv DnXKqrn4uioHH2Zvg+nffrVBItvu0FM3ZzXTCwbQJ52hSguFPkWWHw5XeqyP/sYZ oBv3auT0DER0QzJqILitmwbPoH3cThseJW0uqc+sa2Kt6XuhF3XOOEBWzVN1CqXG COMc8/zJF/u9ryQvX19BuXrcXeAILBw= -----END CERTIFICATE-----Generated at Thu Mar 26 11:07:24 2026 by rpki-client