$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a94a189-0270-32d1-bec7-1c195c06dda1.roa File: 8a94a189-0270-32d1-bec7-1c195c06dda1.roa (raw, json) Hash identifier: y0bgYVcuVeK0E/Xc4CZU/9ODMPR2xYnKr53fgUYxqUU= Subject key identifier: 88:CE:DA:E9:C8:55:B5:36:D3:99:2F:71:69:D1:FA:89:E3:94:0D:B4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1199BAC31DE5755FE1AF8C40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a94a189-0270-32d1-bec7-1c195c06dda1.roa Signing time: Thu 05 Mar 2026 15:20:04 +0000 ROA not before: Thu 05 Mar 2026 15:20:04 +0000 ROA not after: Wed 03 Jun 2026 14:20:04 +0000 asID: 397210 IP address blocks: 192.153.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:99:ba:c3:1d:e5:75:5f:e1:af:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 5 15:20:04 2026 GMT Not After : Jun 3 14:20:04 2026 GMT Subject: CN=cb8645f4-58aa-4606-8e48-0f1750ee543a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:42:77:6f:81:c7:6e:9d:fe:ad:95:94:bd:83: 63:f1:fa:3c:0e:ca:d3:e2:9b:8d:5c:59:83:0f:02: 55:2f:8b:e1:7b:8f:7d:88:0b:74:0f:00:5c:2f:c4: 60:a2:39:b4:f3:b8:31:66:be:72:fe:d1:d8:94:fd: 0d:98:ad:43:26:65:47:ad:c0:24:86:bf:85:1c:42: 3b:b0:17:c5:5c:28:c8:12:47:04:42:c2:30:97:2f: 42:e7:31:93:43:db:59:70:9b:e8:0c:a1:89:52:28: 65:93:9c:c1:37:e4:aa:c2:be:e4:ac:ab:2e:18:9e: 3a:67:da:6b:59:74:64:e8:9d:27:0c:f8:42:20:7a: a3:c7:3f:f5:d6:24:82:e3:9c:a1:c3:f3:0b:ef:42: 09:fe:4b:de:70:e6:ed:3d:38:71:a6:3a:d4:c4:e5: 92:d6:b4:27:38:04:eb:47:9c:f6:0c:7a:f5:67:a8: 84:ef:23:62:b0:a4:6a:7a:28:c8:a1:50:4d:b3:68: 7e:d1:9d:7c:f8:c2:26:32:01:3b:5b:45:2b:e9:e0: 0a:60:11:3d:cb:f1:50:ed:ce:0b:38:1a:33:86:84: 34:ce:53:4a:e8:28:dd:e4:ae:d0:05:44:70:16:16: ed:ca:5a:77:25:0e:91:fa:75:9c:ee:dd:6d:af:de: 81:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:CE:DA:E9:C8:55:B5:36:D3:99:2F:71:69:D1:FA:89:E3:94:0D:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a94a189-0270-32d1-bec7-1c195c06dda1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.153.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:5f:43:53:7b:7c:3c:ee:77:72:d8:a2:95:5e:11:35:c5:f3: da:9e:70:b2:d2:b5:30:1a:94:fd:c1:c6:90:cd:20:9c:c5:7f: 27:af:88:3c:e3:89:f3:64:a7:e9:c4:dd:6a:2e:39:89:cb:2f: 54:ec:e9:08:6e:64:95:b8:c2:86:b3:66:f5:6f:cb:c5:98:8e: 69:05:33:f1:76:4a:5d:ee:ff:e1:81:84:48:4d:33:b0:03:8a: c4:cf:d0:b0:92:6e:56:c8:8d:25:ed:74:6b:9d:87:2e:54:15: 11:33:a2:d8:04:07:c4:34:97:3b:f6:65:21:22:ec:31:f6:49: 47:b6:33:ee:a7:5d:f7:25:4a:4c:a3:05:00:48:65:de:45:8e: 6a:b9:79:c0:bc:dd:4d:b4:2d:2f:21:79:3c:2c:44:1e:dd:b5: 54:5d:4d:27:5d:d9:47:75:dd:17:a1:23:99:40:79:f7:06:5c: 17:82:e3:fc:be:6d:44:85:21:3a:d0:ef:b4:24:a2:30:7f:ec: 40:ad:1b:58:5e:8b:31:42:8c:e3:3b:8f:2a:8c:fb:62:fc:ca: f5:18:38:ef:7d:d3:11:8e:02:60:17:2d:d6:64:0c:cc:94:61: b5:cd:f5:26:f5:de:15:df:fb:ba:fa:d1:42:bc:10:35:1f:87: 98:e8:cd:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RmbrDHeV1X+GvjEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNTE1MjAwNFoXDTI2MDYwMzE0MjAwNFowLzEtMCsGA1UEAxMk Y2I4NjQ1ZjQtNThhYS00NjA2LThlNDgtMGYxNzUwZWU1NDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30J3b4HHbp3+rZWUvYNj8fo8DsrT4puNXFmD DwJVL4vhe499iAt0DwBcL8Rgojm087gxZr5y/tHYlP0NmK1DJmVHrcAkhr+FHEI7 sBfFXCjIEkcEQsIwly9C5zGTQ9tZcJvoDKGJUihlk5zBN+Sqwr7krKsuGJ46Z9pr WXRk6J0nDPhCIHqjxz/11iSC45yhw/ML70IJ/kvecObtPThxpjrUxOWS1rQnOATr R5z2DHr1Z6iE7yNisKRqeijIoVBNs2h+0Z18+MImMgE7W0Ur6eAKYBE9y/FQ7c4L OBozhoQ0zlNK6Cjd5K7QBURwFhbtylp3JQ6R+nWc7t1tr96BZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjO2unIVbU205kvcWnR+onjlA20MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGE5NGExODktMDI3MC0z MmQxLWJlYzctMWMxOTVjMDZkZGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJn3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5fQ1N7fDzud3LYopVeETXF89qecLLStTAalP3BxpDNIJzFfyeviDzj ifNkp+nE3WouOYnLL1Ts6QhuZJW4woazZvVvy8WYjmkFM/F2Sl3u/+GBhEhNM7AD isTP0LCSblbIjSXtdGudhy5UFREzotgEB8Q0lzv2ZSEi7DH2SUe2M+6nXfclSkyj BQBIZd5Fjmq5ecC83U20LS8heTwsRB7dtVRdTSdd2Ud13RehI5lAefcGXBeC4/y+ bUSFITrQ77QkojB/7ECtG1heizFCjOM7jyqM+2L8yvUYOO990xGOAmAXLdZkDMyU YbXN9Sb13hXf+7r60UK8EDUfh5jozaI= -----END CERTIFICATE-----Generated at Thu Mar 26 14:40:57 2026 by rpki-client