$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1a7bfc39-b64d-3b65-80be-e3794b147834.roa File: 1a7bfc39-b64d-3b65-80be-e3794b147834.roa (raw, json) Hash identifier: UtNEdIqQglhu814s2UN+snaZywKJWO0INqJJSXyT9co= Subject key identifier: EC:65:E0:86:F1:4A:74:4F:A7:D7:F3:26:09:29:32:01:39:81:22:24 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D3F64F10758BB8D6EE39D9680 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1a7bfc39-b64d-3b65-80be-e3794b147834.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 396356 IP address blocks: 192.253.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:f1:07:58:bb:8d:6e:e3:9d:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=c0790233-e34d-4859-b3ea-02f0e81edb64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:1f:7f:dd:4c:8d:c8:06:11:ae:2d:f8:4d:e3: 40:40:47:a7:1d:46:97:08:33:89:a8:8a:71:a6:fa: 22:59:6a:3c:53:c3:13:d4:cc:86:f6:81:fe:e3:59: 58:b7:a1:da:20:b9:1a:02:97:99:ca:5a:b7:f3:36: f5:26:51:05:a8:d8:37:76:be:6f:3c:15:99:ea:4c: 57:ca:92:f8:11:7f:ea:8a:26:dc:d4:ad:e9:93:dc: c8:5a:83:35:6c:f8:6c:ed:db:27:5e:3c:68:fb:04: 06:2b:f7:17:f0:93:18:44:34:4c:88:f9:7c:be:13: c1:58:70:5a:c7:74:9e:31:fc:0a:d6:b0:cb:21:32: fe:34:c6:94:3b:00:36:3e:31:6d:51:5a:1b:f8:aa: 37:1c:78:a1:36:77:e7:fe:52:a8:db:9b:b6:8e:f8: 7d:03:22:cb:3a:c3:7f:91:0f:1f:d7:6e:1c:69:62: 30:05:71:fe:25:e9:70:ad:a7:33:31:28:b9:15:57: b3:28:17:93:43:7e:5f:d3:fc:ed:e3:7c:c1:f2:eb: 7e:d4:06:8b:5b:f1:2d:a3:c3:ea:db:70:5c:65:7f: b9:36:56:09:70:48:87:39:8f:7f:b5:30:78:2f:ad: 05:47:3d:b5:12:d4:a8:a1:4f:d2:2a:ff:e4:3b:2f: a5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:65:E0:86:F1:4A:74:4F:A7:D7:F3:26:09:29:32:01:39:81:22:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1a7bfc39-b64d-3b65-80be-e3794b147834.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 192.253.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:e6:b5:6c:6a:a3:52:71:f5:8e:56:0c:55:fc:5c:c1:ff:e8: c6:9d:61:73:05:22:74:d4:fa:79:0a:0b:12:e2:05:46:4f:fe: ee:5b:8f:11:c9:a2:a7:d0:9a:2f:48:11:8d:de:17:c3:10:fa: 59:ae:c6:41:8e:a3:f1:4a:5d:9a:b5:fe:97:05:1d:5d:d0:88: 46:65:4e:2c:6f:f7:b2:64:4d:80:6d:96:ad:40:3e:bf:fe:57: e1:42:01:a1:3b:d6:b1:2a:1a:f2:22:89:e0:16:05:c6:83:7b: 6f:34:e9:20:0c:4b:96:6f:78:c3:43:16:5b:98:eb:6a:83:17: a6:6c:dd:10:68:06:15:4a:38:88:a0:93:be:33:e9:14:a9:97: 06:aa:b2:0b:4e:91:46:38:39:84:df:1e:18:83:08:a8:19:da: 01:1f:2c:2c:78:5c:41:5c:cf:ac:c0:c1:0e:0a:6d:54:bb:ed: 21:c1:ee:a2:d8:1f:2c:53:dc:b2:65:0d:bb:00:6e:da:d6:d7: 8f:a9:0a:44:9b:e0:e9:8e:84:46:83:f2:d0:38:82:1a:b1:8f: 39:1a:c4:16:80:e4:66:40:28:76:ff:77:d8:36:da:17:d8:b1: 8d:e4:5d:ca:c6:14:f2:f4:b5:ca:15:1e:b3:39:cc:5c:d2:35: 97:36:ba:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZPEHWLuNbuOdloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk YzA3OTAyMzMtZTM0ZC00ODU5LWIzZWEtMDJmMGU4MWVkYjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgh9/3UyNyAYRri34TeNAQEenHUaXCDOJqIpx pvoiWWo8U8MT1MyG9oH+41lYt6HaILkaApeZylq38zb1JlEFqNg3dr5vPBWZ6kxX ypL4EX/qiibc1K3pk9zIWoM1bPhs7dsnXjxo+wQGK/cX8JMYRDRMiPl8vhPBWHBa x3SeMfwK1rDLITL+NMaUOwA2PjFtUVob+Ko3HHihNnfn/lKo25u2jvh9AyLLOsN/ kQ8f124caWIwBXH+JelwraczMSi5FVezKBeTQ35f0/zt43zB8ut+1AaLW/Eto8Pq 23BcZX+5NlYJcEiHOY9/tTB4L60FRz21EtSooU/SKv/kOy+lKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxl4IbxSnRPp9fzJgkpMgE5gSIkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMWE3YmZjMzktYjY0ZC0z YjY1LTgwYmUtZTM3OTRiMTQ3ODM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP37MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTmtWxqo1Jx9Y5WDFX8XMH/6MadYXMFInTU+nkKCxLiBUZP/u5bjxHJ oqfQmi9IEY3eF8MQ+lmuxkGOo/FKXZq1/pcFHV3QiEZlTixv97JkTYBtlq1APr/+ V+FCAaE71rEqGvIiieAWBcaDe2806SAMS5ZveMNDFluY62qDF6Zs3RBoBhVKOIig k74z6RSplwaqsgtOkUY4OYTfHhiDCKgZ2gEfLCx4XEFcz6zAwQ4KbVS77SHB7qLY HyxT3LJlDbsAbtrW14+pCkSb4OmOhEaD8tA4ghqxjzkaxBaA5GZAKHb/d9g22hfY sY3kXcrGFPL0tcoVHrM5zFzSNZc2uoY= -----END CERTIFICATE-----Generated at Thu Mar 26 04:39:18 2026 by rpki-client