$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/56a66c36-fa67-3231-9bc0-c23adb54a7d2.roa File: 56a66c36-fa67-3231-9bc0-c23adb54a7d2.roa (raw, json) Hash identifier: xscQ7k5jdp/NoyQluMb4yHj42jG+8fO59FlcTPUL7Bc= Subject key identifier: 8E:7A:7F:CC:43:89:04:9A:34:5F:76:7E:EC:71:E5:3C:5D:5A:38:38 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1199C7384BC08A1938BFCDC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/56a66c36-fa67-3231-9bc0-c23adb54a7d2.roa Signing time: Thu 05 Mar 2026 15:20:10 +0000 ROA not before: Thu 05 Mar 2026 15:20:10 +0000 ROA not after: Wed 03 Jun 2026 14:20:10 +0000 asID: 397203 IP address blocks: 192.153.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:99:c7:38:4b:c0:8a:19:38:bf:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 5 15:20:10 2026 GMT Not After : Jun 3 14:20:10 2026 GMT Subject: CN=647490f0-60ff-4fbf-b27e-19d9cb6f4ebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:69:a1:0e:3a:85:1b:f2:09:68:60:31:f3:3c: 85:e9:6c:a0:88:6b:c3:65:b1:60:0e:b5:eb:f1:0d: 28:25:a0:39:d5:00:20:68:99:f7:52:f6:c3:4d:85: 11:10:09:f1:c6:a0:71:19:ab:97:ae:44:d0:d0:2a: 27:c4:52:24:e9:2c:18:13:46:04:dd:93:1d:4b:07: 42:eb:90:e5:db:ad:28:90:5d:db:92:87:27:be:a6: 3c:fe:d0:4d:f5:6f:e4:2e:fc:cf:c9:14:d7:a3:91: a8:bc:f5:66:76:97:88:56:f0:16:e9:27:c9:f4:78: 7f:d3:b7:13:19:1e:7a:e0:1c:5d:46:62:50:cc:79: 5b:d3:aa:7d:bd:15:80:5c:f5:b2:5a:4b:2e:07:a9: 8a:5f:c3:57:a6:b3:d1:d8:e4:c2:e6:42:c2:40:23: da:0b:46:d3:9e:6e:a7:6b:30:6f:e3:b6:84:5a:5e: 24:95:d1:18:96:4f:41:81:90:c9:7c:dc:75:d9:ab: 55:72:f4:46:66:06:59:6a:1a:2c:58:5b:99:79:8e: f7:98:ab:5f:32:e4:58:fe:ae:5c:cc:06:0e:1d:87: 95:6c:c9:10:d4:88:4a:f1:c6:79:0c:54:36:ac:d3: 51:3b:56:ff:30:d9:ad:55:4d:b8:48:a8:1f:3f:0b: c2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7A:7F:CC:43:89:04:9A:34:5F:76:7E:EC:71:E5:3C:5D:5A:38:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/56a66c36-fa67-3231-9bc0-c23adb54a7d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.153.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:d8:d6:61:76:e8:47:32:a2:cc:85:26:56:8c:bd:89:e5:98: 22:12:40:d4:3d:0b:f6:08:7d:a5:91:e4:2d:52:c2:15:f1:ff: 7f:97:a8:04:1b:9d:e0:d8:6d:26:52:40:ae:b0:8e:a8:ce:f2: 97:b0:4c:e4:98:f6:c3:f0:43:87:c7:a3:85:18:4e:e0:e3:47: da:de:ac:29:bc:3a:b3:eb:17:5f:90:41:94:b3:6a:ed:5b:f0: 9f:45:b9:94:cc:b9:a5:0d:27:be:ac:be:6a:87:72:50:dd:41: 6e:df:3c:b3:ec:d5:76:a3:9f:48:b6:30:59:b4:06:3c:70:77: 7d:35:84:cf:f6:f4:9e:2a:a6:72:db:8e:e8:98:c2:e4:52:43: b6:46:0b:14:f4:cb:27:75:78:60:39:0c:66:da:e5:a4:24:ba: c9:9c:d4:2c:12:bb:21:dc:a5:e5:62:98:3e:f3:ef:63:98:5c: f2:e3:97:08:fe:7b:44:89:0c:21:e6:13:98:69:b5:bf:a4:7f: e4:28:10:9c:b8:f4:5f:e5:4e:8d:fd:f4:3c:01:c9:e8:62:52: 43:19:82:78:d6:c6:2f:1a:b8:42:01:7a:56:f7:16:35:1d:76: a1:07:14:e8:de:b2:95:fc:e1:d0:4e:91:97:a9:31:7e:f2:40: 83:66:3a:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Rmcc4S8CKGTi/zcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNTE1MjAxMFoXDTI2MDYwMzE0MjAxMFowLzEtMCsGA1UEAxMk NjQ3NDkwZjAtNjBmZi00ZmJmLWIyN2UtMTlkOWNiNmY0ZWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWmhDjqFG/IJaGAx8zyF6WygiGvDZbFgDrXr 8Q0oJaA51QAgaJn3UvbDTYUREAnxxqBxGauXrkTQ0ConxFIk6SwYE0YE3ZMdSwdC 65Dl260okF3bkocnvqY8/tBN9W/kLvzPyRTXo5GovPVmdpeIVvAW6SfJ9Hh/07cT GR564BxdRmJQzHlb06p9vRWAXPWyWksuB6mKX8NXprPR2OTC5kLCQCPaC0bTnm6n azBv47aEWl4kldEYlk9BgZDJfNx12atVcvRGZgZZahosWFuZeY73mKtfMuRY/q5c zAYOHYeVbMkQ1IhK8cZ5DFQ2rNNRO1b/MNmtVU24SKgfPwvCPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI56f8xDiQSaNF92fuxx5TxdWjg4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTZhNjZjMzYtZmE2Ny0z MjMxLTliYzAtYzIzYWRiNTRhN2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJn3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXY1mF26EcyosyFJlaMvYnlmCISQNQ9C/YIfaWR5C1SwhXx/3+XqAQb neDYbSZSQK6wjqjO8pewTOSY9sPwQ4fHo4UYTuDjR9rerCm8OrPrF1+QQZSzau1b 8J9FuZTMuaUNJ76svmqHclDdQW7fPLPs1Xajn0i2MFm0Bjxwd301hM/29J4qpnLb juiYwuRSQ7ZGCxT0yyd1eGA5DGba5aQkusmc1CwSuyHcpeVimD7z72OYXPLjlwj+ e0SJDCHmE5hptb+kf+QoEJy49F/lTo399DwByehiUkMZgnjWxi8auEIBelb3FjUd dqEHFOjespX84dBOkZepMX7yQINmOtk= -----END CERTIFICATE-----Generated at Thu Mar 26 09:53:26 2026 by rpki-client