$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aefe7641-3223-37f5-b881-a8ea69ee4553.roa File: aefe7641-3223-37f5-b881-a8ea69ee4553.roa (raw, json) Hash identifier: ZVZg5o3m836UaqD8wMPX33T/Pm41quIyqMZtGHgRPYY= Subject key identifier: C7:A2:55:1D:5E:D6:70:43:D1:23:DC:D1:2B:E6:93:28:22:BC:49:FB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1199C3AD58E465B332649300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aefe7641-3223-37f5-b881-a8ea69ee4553.roa Signing time: Thu 05 Mar 2026 15:20:08 +0000 ROA not before: Thu 05 Mar 2026 15:20:08 +0000 ROA not after: Wed 03 Jun 2026 14:20:08 +0000 asID: 396610 IP address blocks: 192.153.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:99:c3:ad:58:e4:65:b3:32:64:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 5 15:20:08 2026 GMT Not After : Jun 3 14:20:08 2026 GMT Subject: CN=16ae3d95-2d0f-4f59-b9aa-4a8fd6e06569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c8:04:84:20:af:71:1b:42:e1:52:8b:2d:b7: 93:b8:11:d6:75:92:29:c6:88:94:4b:6b:d5:e5:90: 0b:e4:6f:9d:d0:f1:ad:59:2a:68:7e:ce:e0:de:cc: 52:db:10:63:f6:a3:8b:d1:38:49:f1:57:e4:bf:ef: 21:09:85:20:57:17:43:eb:17:2e:29:2c:d1:54:2f: c9:42:02:b4:3a:f3:5d:89:78:4a:b5:e6:73:40:05: 32:95:32:9c:44:3e:d3:14:1d:8d:b6:ed:6c:fe:4f: 73:8b:71:62:ec:b0:09:da:9f:88:96:85:2a:1f:0f: 2c:9a:b3:36:84:56:fd:70:31:90:62:cc:68:8e:c5: f4:c9:eb:08:6b:b6:52:ae:9d:9b:ec:c3:7a:c9:70: 01:d9:47:7b:d4:32:cd:5e:33:32:87:de:1e:14:09: ed:e4:9c:7d:c6:49:1a:54:f4:41:1c:26:80:96:ab: c3:cd:eb:6c:25:56:f8:c5:a6:89:63:9d:48:8d:5b: b7:a5:8c:6b:52:7a:cc:fe:58:c4:d9:ee:52:ad:7b: b0:ad:a6:be:55:14:4f:e2:e8:3b:77:a2:3a:d6:b7: fa:2c:39:5d:36:ac:1c:b4:86:f3:2c:67:46:2b:8e: aa:e9:3d:31:c0:58:d4:34:e1:30:51:e0:a5:12:45: c8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A2:55:1D:5E:D6:70:43:D1:23:DC:D1:2B:E6:93:28:22:BC:49:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aefe7641-3223-37f5-b881-a8ea69ee4553.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.153.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:4b:20:00:9f:5c:07:49:df:eb:d5:e9:b7:97:69:e8:12:d3: ab:c9:cb:be:b2:fe:21:c6:d3:59:7a:df:cd:26:05:76:e6:c6: 83:09:f2:78:57:a7:a0:f2:76:a2:ec:ef:20:f4:07:65:17:8a: a2:4c:14:ad:38:50:0b:e6:e6:14:d6:14:fc:ee:a3:2a:eb:29: 41:07:78:63:57:66:01:f4:5a:f4:86:ba:de:09:09:7e:ef:8e: 57:20:e0:f7:f2:1d:5a:77:0c:73:cd:4f:07:d7:d3:02:8a:1e: 29:c5:1e:a0:17:bc:a6:fc:43:ac:89:73:fa:79:08:c1:a3:9e: 9b:75:14:06:11:b3:72:ca:be:70:55:2f:19:21:27:e5:48:09: 6f:ef:d2:9f:65:6c:5b:dc:be:a1:f5:2f:b0:70:81:19:b5:d3: 4c:a2:94:ec:b7:37:49:e1:8b:24:70:b3:76:57:d9:9f:8f:bd: f4:8c:6e:aa:dc:65:02:df:af:4c:08:29:62:50:89:d8:d3:fd: b9:26:fd:3f:22:b7:db:07:94:3b:d5:c9:b1:f2:ad:6a:3b:7d: 1f:d8:7d:4f:8f:77:1c:a8:99:ce:7f:4a:46:e7:4d:0a:0e:0e: ca:b8:f8:4a:cf:fe:bd:ec:9e:5d:5e:a2:bd:f4:8d:21:f4:cd: c9:b9:03:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RmcOtWORlszJkkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNTE1MjAwOFoXDTI2MDYwMzE0MjAwOFowLzEtMCsGA1UEAxMk MTZhZTNkOTUtMmQwZi00ZjU5LWI5YWEtNGE4ZmQ2ZTA2NTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8gEhCCvcRtC4VKLLbeTuBHWdZIpxoiUS2vV 5ZAL5G+d0PGtWSpofs7g3sxS2xBj9qOL0ThJ8Vfkv+8hCYUgVxdD6xcuKSzRVC/J QgK0OvNdiXhKteZzQAUylTKcRD7TFB2Ntu1s/k9zi3Fi7LAJ2p+IloUqHw8smrM2 hFb9cDGQYsxojsX0yesIa7ZSrp2b7MN6yXAB2Ud71DLNXjMyh94eFAnt5Jx9xkka VPRBHCaAlqvDzetsJVb4xaaJY51IjVu3pYxrUnrM/ljE2e5SrXuwraa+VRRP4ug7 d6I61rf6LDldNqwctIbzLGdGK46q6T0xwFjUNOEwUeClEkXIawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMeiVR1e1nBD0SPc0SvmkygivEn7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWVmZTc2NDEtMzIyMy0z N2Y1LWI4ODEtYThlYTY5ZWU0NTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJn3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdLIACfXAdJ3+vV6beXaegS06vJy76y/iHG01l6380mBXbmxoMJ8nhX p6DydqLs7yD0B2UXiqJMFK04UAvm5hTWFPzuoyrrKUEHeGNXZgH0WvSGut4JCX7v jlcg4PfyHVp3DHPNTwfX0wKKHinFHqAXvKb8Q6yJc/p5CMGjnpt1FAYRs3LKvnBV LxkhJ+VICW/v0p9lbFvcvqH1L7BwgRm100yilOy3N0nhiyRws3ZX2Z+PvfSMbqrc ZQLfr0wIKWJQidjT/bkm/T8it9sHlDvVybHyrWo7fR/YfU+Pdxyomc5/SkbnTQoO Dsq4+ErP/r3snl1eor30jSH0zcm5Azw= -----END CERTIFICATE-----Generated at Thu Mar 26 08:40:07 2026 by rpki-client