$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87f65451-ec52-3ff0-acfa-d69d59382d24.roa File: 87f65451-ec52-3ff0-acfa-d69d59382d24.roa (raw, json) Hash identifier: ihQ6JQ7sMEl1ltRQT//hhkxg0bHCQuh5bAILe8tmKvQ= Subject key identifier: BE:52:EA:6D:5E:01:7D:A0:17:D2:FC:0A:19:F1:07:FC:93:77:23:16 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1199C8C38319BBE838AA9380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87f65451-ec52-3ff0-acfa-d69d59382d24.roa Signing time: Thu 05 Mar 2026 15:20:10 +0000 ROA not before: Thu 05 Mar 2026 15:20:10 +0000 ROA not after: Wed 03 Jun 2026 14:20:10 +0000 asID: 396593 IP address blocks: 192.153.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:99:c8:c3:83:19:bb:e8:38:aa:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 5 15:20:10 2026 GMT Not After : Jun 3 14:20:10 2026 GMT Subject: CN=d512caec-ab34-4340-adaa-01e495dbc1fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:36:5b:89:b1:5c:a5:a8:57:3d:9b:20:e4:bd: ad:63:22:73:0d:79:e0:f5:a0:ff:7b:ae:43:52:f8: 9d:79:ff:3f:f8:bd:7d:a4:1f:d6:3e:83:52:cf:ab: 3d:c1:bc:97:8c:22:f3:2c:ea:2a:4a:8b:18:03:2a: c1:06:09:b9:2b:ea:13:d2:f7:f4:b7:71:7b:af:0d: 60:1c:a2:14:6b:99:f2:66:c0:60:5e:54:16:9f:32: 9e:f6:fe:92:3b:bd:ca:cf:ab:5f:94:15:05:ea:0b: 8e:76:67:92:eb:ed:f0:e5:9d:02:f1:f2:51:06:50: 4c:e1:57:a4:13:c4:4f:7b:a1:62:c3:2e:bc:69:be: ff:37:37:95:44:57:ec:1b:3c:bc:6e:e5:b8:fa:7e: d2:66:37:7d:e8:b8:6f:4b:95:fb:3b:ac:f1:7a:c9: 7f:02:35:fc:fb:20:b3:eb:a9:45:3c:e6:19:cf:11: c6:24:9f:78:ce:af:ca:d8:bc:a5:82:6d:27:8f:6f: c0:87:97:78:9b:35:eb:37:69:50:f5:6a:86:93:b1: 7a:a0:7d:b0:95:50:5f:7d:e8:2e:1f:53:1d:a5:fc: c8:15:cd:77:f9:95:f5:a6:98:51:b8:c7:5b:75:c0: 20:dc:f9:7c:e6:e4:7e:4b:ae:fb:29:55:ae:27:73: f7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:52:EA:6D:5E:01:7D:A0:17:D2:FC:0A:19:F1:07:FC:93:77:23:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87f65451-ec52-3ff0-acfa-d69d59382d24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.153.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:a9:36:20:8a:ec:15:ed:cb:6e:7b:70:f8:ed:04:b7:75:32: 2b:d4:cb:d5:6c:45:1b:56:60:e8:ec:3e:84:ae:7a:98:f6:ac: 64:27:0b:22:05:d6:9e:a8:e1:ee:74:38:da:18:22:fd:e1:d7: 00:1d:81:a3:cf:84:b8:2b:9f:dc:7a:7f:86:45:52:85:71:4c: 36:4a:44:0e:46:78:81:59:c2:68:d0:6e:59:e4:e8:d4:ff:c1: c0:1a:2c:f9:e3:d3:96:62:be:9b:50:92:43:6d:46:c8:b0:e8: 62:7a:15:db:bb:88:04:86:d8:bd:39:6d:60:9a:ac:41:a1:cb: ab:bf:4b:22:ec:6e:25:09:60:fe:af:5b:9b:2d:29:b6:48:25: 32:7f:19:5b:85:6d:f0:f4:61:e6:4b:d6:30:64:b0:1a:d1:2b: c8:e0:d4:e2:aa:95:89:53:a5:36:d5:ab:df:12:b4:1f:65:2b: 88:a9:09:84:f3:33:c4:b9:b5:dd:1b:68:d0:3d:90:34:1c:80: 42:9f:b1:f0:73:54:d8:42:4e:f0:8a:d1:4a:08:d6:33:00:84: dc:89:91:a1:7f:23:c0:1b:00:e5:dd:d0:71:f5:41:62:da:0f: c7:b3:bb:90:e4:5f:61:de:43:cc:6e:9c:56:e9:6a:71:bf:c4: ec:7b:ec:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RmcjDgxm76Diqk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNTE1MjAxMFoXDTI2MDYwMzE0MjAxMFowLzEtMCsGA1UEAxMk ZDUxMmNhZWMtYWIzNC00MzQwLWFkYWEtMDFlNDk1ZGJjMWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzZbibFcpahXPZsg5L2tYyJzDXng9aD/e65D Uvidef8/+L19pB/WPoNSz6s9wbyXjCLzLOoqSosYAyrBBgm5K+oT0vf0t3F7rw1g HKIUa5nyZsBgXlQWnzKe9v6SO73Kz6tflBUF6guOdmeS6+3w5Z0C8fJRBlBM4Vek E8RPe6Fiwy68ab7/NzeVRFfsGzy8buW4+n7SZjd96LhvS5X7O6zxesl/AjX8+yCz 66lFPOYZzxHGJJ94zq/K2Lylgm0nj2/Ah5d4mzXrN2lQ9WqGk7F6oH2wlVBffegu H1MdpfzIFc13+ZX1pphRuMdbdcAg3Pl85uR+S677KVWuJ3P3jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5S6m1eAX2gF9L8ChnxB/yTdyMWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODdmNjU0NTEtZWM1Mi0z ZmYwLWFjZmEtZDY5ZDU5MzgyZDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJn3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWpNiCK7BXty257cPjtBLd1MivUy9VsRRtWYOjsPoSuepj2rGQnCyIF 1p6o4e50ONoYIv3h1wAdgaPPhLgrn9x6f4ZFUoVxTDZKRA5GeIFZwmjQblnk6NT/ wcAaLPnj05ZivptQkkNtRsiw6GJ6Fdu7iASG2L05bWCarEGhy6u/SyLsbiUJYP6v W5stKbZIJTJ/GVuFbfD0YeZL1jBksBrRK8jg1OKqlYlTpTbVq98StB9lK4ipCYTz M8S5td0baNA9kDQcgEKfsfBzVNhCTvCK0UoI1jMAhNyJkaF/I8AbAOXd0HH1QWLa D8ezu5DkX2HeQ8xunFbpanG/xOx77Gc= -----END CERTIFICATE-----Generated at Thu Mar 26 11:07:20 2026 by rpki-client