$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd67680e-3464-34b4-93fa-662529834bb2.roa File: bd67680e-3464-34b4-93fa-662529834bb2.roa (raw, json) Hash identifier: AsDqNPfe0LxSZI6zrCQqoW0TFrW5zNsyQix67BpVg0U= Subject key identifier: CE:6B:5C:0F:B8:4D:9D:EA:E7:11:84:4B:BA:CA:67:73:0D:79:C9:85 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1199C309174F877EAF76E620 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd67680e-3464-34b4-93fa-662529834bb2.roa Signing time: Thu 05 Mar 2026 15:20:08 +0000 ROA not before: Thu 05 Mar 2026 15:20:08 +0000 ROA not after: Wed 03 Jun 2026 14:20:08 +0000 asID: 396552 IP address blocks: 192.153.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:99:c3:09:17:4f:87:7e:af:76:e6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 5 15:20:08 2026 GMT Not After : Jun 3 14:20:08 2026 GMT Subject: CN=ce275c61-dafd-4215-9412-15b5a4bc8ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4a:21:56:dc:27:35:42:0f:4c:99:81:c4:61: 4d:a3:c7:a5:51:e7:75:f5:0c:d6:dd:27:c4:21:78: b3:91:63:a7:5c:cd:22:a5:0f:d6:55:41:c3:cd:ed: 14:78:0e:b8:07:20:ae:7b:db:96:eb:42:89:fa:24: 7e:b2:b4:32:b7:69:78:41:b1:d4:b4:99:dc:f7:12: 5f:1f:9f:f5:71:77:28:32:b8:55:e1:6f:a8:1b:d1: a0:b1:c1:08:ca:49:03:f9:d2:21:c1:e1:1a:3a:24: 7a:5f:b2:0f:fa:2f:e1:b1:43:5f:58:69:10:6e:79: f5:00:00:11:6b:f8:15:f6:f4:45:fa:f1:8f:c6:e9: 65:58:98:44:91:49:e6:06:c7:e0:54:72:bc:f8:61: 98:30:2c:4c:b2:5c:d8:95:b6:52:f0:fe:90:70:0b: 5e:68:14:25:6d:1f:ba:68:7e:72:9e:07:e9:3e:89: bc:f9:53:05:36:98:2e:17:dc:b5:a4:dc:cb:2f:07: 34:14:99:01:7d:ea:47:b7:0b:18:77:4a:41:67:5e: c3:20:61:11:78:ab:42:48:23:cc:2b:59:54:c8:11: 68:49:5f:8d:6c:d2:17:8e:7a:be:df:ef:d2:86:f3: 0c:bc:4b:7a:c0:fc:c6:ff:f3:cc:f1:30:af:56:b8: 73:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:6B:5C:0F:B8:4D:9D:EA:E7:11:84:4B:BA:CA:67:73:0D:79:C9:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd67680e-3464-34b4-93fa-662529834bb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.153.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:04:82:b1:5a:b1:81:91:0f:df:82:56:03:69:dc:e8:51:5d: 9c:32:b7:b2:d2:ac:01:c8:c3:b4:fa:15:93:57:f2:3e:2a:8b: f6:d4:f3:a7:41:97:ec:45:e7:19:a4:b9:0f:42:9a:d9:37:a4: bc:f3:35:cc:61:55:2f:13:2c:13:75:b4:b8:ec:82:88:54:0a: c4:27:31:26:8a:cf:ce:63:ff:23:a2:65:33:12:8b:30:e3:a4: 0d:cc:0c:22:59:49:2a:71:02:cb:1a:05:96:e1:d1:79:27:04: ae:77:3f:94:46:6a:20:59:5c:eb:94:ab:32:b1:ac:db:65:91: aa:0b:32:29:b8:53:b0:41:c6:17:de:4a:5a:ce:d1:73:31:73: ef:a4:53:35:15:18:a2:d1:08:50:31:5c:40:d7:78:88:d7:20: 7c:0f:60:64:86:9e:e5:e9:42:15:00:7b:16:a9:3e:e0:c8:24: 8d:09:6d:60:d9:e0:a7:4b:5f:d0:1f:e2:d7:5c:dd:e9:42:0e: fd:53:c1:61:33:62:fb:57:0d:67:4b:ac:d1:ea:ab:82:d0:f1: db:db:96:95:3d:f2:63:f0:3a:c5:25:b7:8d:60:31:25:9d:75: 9e:d7:7a:c0:dd:ba:b2:73:cf:c8:e4:6a:f5:4f:7a:72:ec:f2: b4:cd:fb:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RmcMJF0+Hfq925iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNTE1MjAwOFoXDTI2MDYwMzE0MjAwOFowLzEtMCsGA1UEAxMk Y2UyNzVjNjEtZGFmZC00MjE1LTk0MTItMTViNWE0YmM4YWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUohVtwnNUIPTJmBxGFNo8elUed19QzW3SfE IXizkWOnXM0ipQ/WVUHDze0UeA64ByCue9uW60KJ+iR+srQyt2l4QbHUtJnc9xJf H5/1cXcoMrhV4W+oG9GgscEIykkD+dIhweEaOiR6X7IP+i/hsUNfWGkQbnn1AAAR a/gV9vRF+vGPxullWJhEkUnmBsfgVHK8+GGYMCxMslzYlbZS8P6QcAteaBQlbR+6 aH5yngfpPom8+VMFNpguF9y1pNzLLwc0FJkBfepHtwsYd0pBZ17DIGEReKtCSCPM K1lUyBFoSV+NbNIXjnq+3+/ShvMMvEt6wPzG//PM8TCvVrhzRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5rXA+4TZ3q5xGES7rKZ3MNecmFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmQ2NzY4MGUtMzQ2NC0z NGI0LTkzZmEtNjYyNTI5ODM0YmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJn3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwEgrFasYGRD9+CVgNp3OhRXZwyt7LSrAHIw7T6FZNX8j4qi/bU86dB l+xF5xmkuQ9Cmtk3pLzzNcxhVS8TLBN1tLjsgohUCsQnMSaKz85j/yOiZTMSizDj pA3MDCJZSSpxAssaBZbh0XknBK53P5RGaiBZXOuUqzKxrNtlkaoLMim4U7BBxhfe SlrO0XMxc++kUzUVGKLRCFAxXEDXeIjXIHwPYGSGnuXpQhUAexapPuDIJI0JbWDZ 4KdLX9Af4tdc3elCDv1TwWEzYvtXDWdLrNHqq4LQ8dvblpU98mPwOsUlt41gMSWd dZ7XesDdurJzz8jkavVPenLs8rTN+48= -----END CERTIFICATE-----Generated at Thu Mar 26 08:39:32 2026 by rpki-client