$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1cad8ae-b386-37db-8a67-9050cb7b730e.roa File: a1cad8ae-b386-37db-8a67-9050cb7b730e.roa (raw, json) Hash identifier: rAWgHHscjqlelt17hYWJcoP/iPOfpDS7P5Q0ZJlqb7c= Subject key identifier: 9B:48:96:D4:4F:2D:49:93:3C:34:D9:A1:E1:43:AA:24:5C:B1:76:89 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1199BDC8AF89E63EC2781340 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1cad8ae-b386-37db-8a67-9050cb7b730e.roa Signing time: Thu 05 Mar 2026 15:20:05 +0000 ROA not before: Thu 05 Mar 2026 15:20:05 +0000 ROA not after: Wed 03 Jun 2026 14:20:05 +0000 asID: 36620 IP address blocks: 192.153.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:99:bd:c8:af:89:e6:3e:c2:78:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 5 15:20:05 2026 GMT Not After : Jun 3 14:20:05 2026 GMT Subject: CN=9c1c5909-80ad-4b66-86de-8284ec8e519b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5d:db:49:9b:a4:ce:79:c0:42:b7:e3:62:a5: 27:ee:f2:d1:c9:5f:2c:23:bd:91:19:6d:3e:bf:35: c6:ea:3e:62:96:02:52:9a:54:e7:c7:0a:8e:12:4a: eb:ec:4c:df:a5:08:52:1a:9e:62:d1:09:12:b8:26: af:66:6a:89:df:b4:f7:fc:d8:ef:10:30:35:a4:3f: dc:3e:a4:75:88:13:b6:a6:2a:af:12:6b:6e:54:ad: 84:1c:c4:3a:6c:b1:84:a6:b5:f7:01:3d:23:0f:2e: 85:7d:72:db:06:9c:57:ee:80:98:ec:dd:67:4d:2d: 09:e3:f1:7f:56:3c:63:0d:19:59:8f:55:bc:59:00: 57:2a:8d:4f:8f:02:bf:f1:2f:49:4b:dd:ad:bd:0e: 01:96:6f:33:1f:82:10:4c:f9:54:b0:0e:48:f4:07: 88:23:00:c6:d1:48:23:ad:47:b9:d6:15:00:47:23: 18:f2:bb:b4:bd:ac:78:ea:03:57:4e:71:a8:69:b4: 24:f7:51:b1:36:52:b1:65:bc:b9:f4:80:59:73:0b: 2f:41:b4:ea:6c:53:98:1b:ac:65:28:60:5e:02:fc: c0:05:95:a1:e0:2f:6d:e7:55:df:1f:69:06:81:9b: d8:89:d8:ec:1d:42:2d:82:e7:d2:77:41:0e:db:52: e5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:48:96:D4:4F:2D:49:93:3C:34:D9:A1:E1:43:AA:24:5C:B1:76:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1cad8ae-b386-37db-8a67-9050cb7b730e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.153.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:49:45:e4:3a:a5:52:c8:da:db:a9:06:72:e7:fb:10:05:b6: bd:2d:65:88:b5:51:a7:41:e1:75:67:09:86:31:cd:bd:d8:36: c5:a7:33:96:b4:cf:65:e9:f0:b2:0e:20:2e:0b:aa:e8:97:c2: 1e:ef:bb:86:9e:9b:af:da:0d:d9:0f:24:45:d4:ec:ac:7b:14: c9:89:81:44:ca:9d:1a:29:07:98:a5:b6:54:86:00:36:33:f9: 03:b3:f0:c3:10:59:cd:85:73:a3:21:9b:47:66:ca:4b:a2:35: 58:02:3e:53:16:ee:03:e3:cb:bb:18:28:a6:a6:97:69:9b:fd: 05:c4:1a:75:ff:be:6a:a4:db:c4:d8:e9:5d:86:fc:56:d7:d1: 0a:64:15:2c:43:17:e8:e1:ea:fe:c2:0e:a1:bb:ac:b1:0f:7b: 7e:23:e0:cd:ee:ff:16:6f:25:a7:b0:50:f0:9c:67:af:99:47: 79:60:96:f8:25:ce:b6:e8:6c:69:b3:72:53:fd:6f:de:4f:f5: 58:11:9a:e9:6a:49:c6:f8:0c:f4:20:06:41:59:2a:45:6b:8c: 5c:cc:93:6b:9a:0b:7d:56:e9:13:82:f4:04:b8:d8:34:0a:fc: 16:29:47:cd:0d:41:7c:56:17:31:a9:c4:49:18:76:8a:58:c4: 45:68:fc:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Rmb3Ir4nmPsJ4E0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNTE1MjAwNVoXDTI2MDYwMzE0MjAwNVowLzEtMCsGA1UEAxMk OWMxYzU5MDktODBhZC00YjY2LTg2ZGUtODI4NGVjOGU1MTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF3bSZukznnAQrfjYqUn7vLRyV8sI72RGW0+ vzXG6j5ilgJSmlTnxwqOEkrr7EzfpQhSGp5i0QkSuCavZmqJ37T3/NjvEDA1pD/c PqR1iBO2piqvEmtuVK2EHMQ6bLGEprX3AT0jDy6FfXLbBpxX7oCY7N1nTS0J4/F/ VjxjDRlZj1W8WQBXKo1PjwK/8S9JS92tvQ4Blm8zH4IQTPlUsA5I9AeIIwDG0Ugj rUe51hUARyMY8ru0vax46gNXTnGoabQk91GxNlKxZby59IBZcwsvQbTqbFOYG6xl KGBeAvzABZWh4C9t51XfH2kGgZvYidjsHUItgufSd0EO21LlIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtIltRPLUmTPDTZoeFDqiRcsXaJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTFjYWQ4YWUtYjM4Ni0z N2RiLThhNjctOTA1MGNiN2I3MzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJn3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBJReQ6pVLI2tupBnLn+xAFtr0tZYi1UadB4XVnCYYxzb3YNsWnM5a0 z2Xp8LIOIC4LquiXwh7vu4aem6/aDdkPJEXU7Kx7FMmJgUTKnRopB5iltlSGADYz +QOz8MMQWc2Fc6Mhm0dmykuiNVgCPlMW7gPjy7sYKKaml2mb/QXEGnX/vmqk28TY 6V2G/FbX0QpkFSxDF+jh6v7CDqG7rLEPe34j4M3u/xZvJaewUPCcZ6+ZR3lglvgl zrbobGmzclP9b95P9VgRmulqScb4DPQgBkFZKkVrjFzMk2uaC31W6ROC9AS42DQK /BYpR80NQXxWFzGpxEkYdopYxEVo/H0= -----END CERTIFICATE-----Generated at Thu Mar 26 21:26:03 2026 by rpki-client