$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/8e5a05a2-0b0a-34bb-92e7-96d38e1f41ef.roa File: 8e5a05a2-0b0a-34bb-92e7-96d38e1f41ef.roa (raw, json) Hash identifier: L2v2hwF7YxfjaOBYDRBxLVRRJWffElWT1klWev85Fq8= Subject key identifier: AE:08:0E:52:8C:46:BB:F1:68:07:99:55:C6:FC:09:44:A2:29:86:7C Certificate issuer: /CN=5dc12714-5247-41c5-b244-d0edceb32982 Certificate serial: 010D0C9F4328584D27AA2EEDC31A386AF5C25280 Authority key identifier: 1D:F2:65:5D:FA:A6:94:E2:F8:5F:02:FD:43:1D:AE:D7:53:97:1A:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/8e5a05a2-0b0a-34bb-92e7-96d38e1f41ef.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 22856 IP address blocks: 209.237.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/5dc12714-5247-41c5-b244-d0edceb32982.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/5dc12714-5247-41c5-b244-d0edceb32982.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:2e:ed:c3:1a:38:6a:f5:c2:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dc12714-5247-41c5-b244-d0edceb32982 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=53ffc772-180f-4c49-8d9e-c92262de3cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:da:df:72:a5:93:4a:80:64:10:11:76:ca:52: fb:33:5c:2d:7c:fd:ab:4e:05:66:af:e0:97:61:53: e3:32:2a:f1:17:30:b1:68:94:f7:89:b3:d4:89:82: ab:1a:14:b4:df:5c:68:83:18:43:b6:5e:2a:36:17: 24:61:fc:3c:0b:05:c7:cb:b1:b4:c6:75:57:3f:eb: 24:90:72:d4:8d:1d:d3:95:ed:f1:5c:db:c3:ec:8b: f0:48:3d:5a:de:89:de:a1:77:54:e9:89:bb:8d:2e: c3:08:07:99:8a:18:30:4c:bb:ec:5c:be:bd:1f:f0: 4d:f6:d9:e9:b5:9d:99:57:26:77:93:64:8f:97:4b: b5:93:19:28:1e:07:87:28:01:9f:df:08:3a:8b:eb: 14:24:91:46:5e:47:7f:e6:07:f7:84:8e:20:63:ed: de:df:6a:a9:d3:58:9f:d3:8d:46:7c:50:06:4a:73: 55:b3:9c:46:10:12:0f:2a:00:95:8b:99:5c:1d:c8: ad:de:0b:da:7d:3f:40:d3:ac:f6:24:b5:45:65:79: 99:e5:9c:ad:0c:3e:1a:55:70:dc:79:e6:84:82:3e: f2:78:c3:e5:5d:74:89:58:c1:4d:d9:f2:67:79:02: 52:35:44:18:d4:07:f5:06:02:5d:d9:33:4a:98:c0: 7b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:08:0E:52:8C:46:BB:F1:68:07:99:55:C6:FC:09:44:A2:29:86:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/8e5a05a2-0b0a-34bb-92e7-96d38e1f41ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/5dc12714-5247-41c5-b244-d0edceb32982.crl X509v3 Authority Key Identifier: keyid:1D:F2:65:5D:FA:A6:94:E2:F8:5F:02:FD:43:1D:AE:D7:53:97:1A:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982.cer sbgp-ipAddrBlock: critical IPv4: 209.237.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:66:67:db:4c:8c:f7:a9:76:2c:7a:52:9d:ca:61:55:da:b7: 17:8b:6d:89:77:00:d5:15:db:d3:b7:07:71:23:27:1d:68:85: b1:ad:2c:f2:11:c0:2a:24:1c:e8:b3:c4:4a:7d:2e:6b:d7:60: b7:b2:af:d0:52:29:08:15:92:29:ea:ce:91:16:bd:de:bb:bd: 8e:5b:a9:43:fa:90:56:fc:3c:bb:22:56:f8:77:bc:71:19:3d: a9:d4:73:f8:c2:fe:b4:4e:d4:16:b2:1b:e7:33:4a:4e:cb:39: 9b:13:86:a9:63:01:7d:00:27:b3:5b:09:ac:38:fe:00:cc:3f: 4a:24:37:1b:37:93:e9:ce:45:b2:de:b9:77:97:a3:56:ab:0b: 66:0c:19:81:7c:29:ef:d1:0c:d7:aa:c0:2e:2f:54:f2:4f:18: 93:66:f3:10:20:5a:7d:f1:6b:c9:6c:94:96:6f:1a:e1:2d:ff: 44:94:4f:42:46:bd:b5:d7:42:b7:57:f8:ef:39:c3:b9:73:c4: 17:bc:1e:b3:59:3c:b7:f7:97:f5:11:a9:0b:94:2a:e7:ff:36: 3b:dd:92:18:9f:6f:a2:8a:85:5e:82:90:14:9e:5d:fa:23:34: 57:8e:fc:ee:79:9c:e3:5f:bc:41:4a:03:d9:49:e8:b9:2d:19: 8d:58:bf:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqi7twxo4avXCUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjMTI3MTQtNTI0Ny00MWM1LWIyNDQtZDBlZGNlYjMy OTgyMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NTNmZmM3NzItMTgwZi00YzQ5LThkOWUtYzkyMjYyZGUzY2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6drfcqWTSoBkEBF2ylL7M1wtfP2rTgVmr+CX YVPjMirxFzCxaJT3ibPUiYKrGhS031xogxhDtl4qNhckYfw8CwXHy7G0xnVXP+sk kHLUjR3Tle3xXNvD7IvwSD1a3oneoXdU6Ym7jS7DCAeZihgwTLvsXL69H/BN9tnp tZ2ZVyZ3k2SPl0u1kxkoHgeHKAGf3wg6i+sUJJFGXkd/5gf3hI4gY+3e32qp01if 041GfFAGSnNVs5xGEBIPKgCVi5lcHcit3gvafT9A06z2JLVFZXmZ5ZytDD4aVXDc eeaEgj7yeMPlXXSJWMFN2fJneQJSNUQY1Af1BgJd2TNKmMB7bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4IDlKMRrvxaAeZVcb8CUSiKYZ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81ZGMx MjcxNC01MjQ3LTQxYzUtYjI0NC1kMGVkY2ViMzI5ODIvOGU1YTA1YTItMGIwYS0z NGJiLTkyZTctOTZkMzhlMWY0MWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWRjMTI3MTQtNTI0Ny00MWM1LWIy NDQtZDBlZGNlYjMyOTgyLzVkYzEyNzE0LTUyNDctNDFjNS1iMjQ0LWQwZWRjZWIz Mjk4Mi5jcmwwHwYDVR0jBBgwFoAUHfJlXfqmlOL4XwL9Qx2u11OXGlUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81ZGMxMjcxNC01MjQ3LTQxYzUtYjI0NC1kMGVk Y2ViMzI5ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e2ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtmZ9tMjPepdix6Up3KYVXatxeLbYl3ANUV29O3B3EjJx1ohbGtLPIR wCokHOizxEp9LmvXYLeyr9BSKQgVkinqzpEWvd67vY5bqUP6kFb8PLsiVvh3vHEZ PanUc/jC/rRO1BayG+czSk7LOZsThqljAX0AJ7NbCaw4/gDMP0okNxs3k+nORbLe uXeXo1arC2YMGYF8Ke/RDNeqwC4vVPJPGJNm8xAgWn3xa8lslJZvGuEt/0SUT0JG vbXXQrdX+O85w7lzxBe8HrNZPLf3l/URqQuUKuf/Njvdkhifb6KKhV6CkBSeXfoj NFeO/O55nONfvEFKA9lJ6LktGY1Yv7w= -----END CERTIFICATE-----Generated at Thu Mar 26 11:29:34 2026 by rpki-client