$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/de3fa3f5-5652-3ad8-bd4c-689c608d392a.roa File: de3fa3f5-5652-3ad8-bd4c-689c608d392a.roa (raw, json) Hash identifier: 5Sa9kkw9TvA2S+0JpPFHKr/JnIRIR13sSoliNjrDV2o= Subject key identifier: 89:61:1E:72:28:F9:50:5F:74:D7:2B:3C:0C:09:9A:51:91:96:7B:47 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D3F64F11600D91B444504B680 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/de3fa3f5-5652-3ad8-bd4c-689c608d392a.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 396356 IP address blocks: 192.253.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:f1:16:00:d9:1b:44:45:04:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=8d871788-7015-40af-a43f-3e480a403931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:85:52:93:f3:ff:b6:3a:d9:65:94:3c:bc:20: cd:35:9a:bb:69:fd:3d:81:ae:54:35:db:55:a2:90: 0a:05:cf:33:a1:e9:55:bc:5c:20:38:37:db:0a:09: 68:8c:d8:5c:bd:99:82:a5:90:cd:a1:8b:33:8f:95: bd:60:85:c4:22:7c:ea:c3:b3:24:c4:4d:f6:29:41: ed:ea:f4:b7:b4:3e:1b:5f:f8:62:c5:d7:7b:c0:7b: 97:c4:78:6e:a5:a7:7b:9c:63:53:72:9b:12:b1:31: af:68:c9:e3:eb:cb:8c:b2:57:0c:10:45:8f:75:0c: de:c4:a1:3b:3b:1d:c8:c5:59:5c:f7:6c:26:de:ab: 68:18:84:19:2b:26:c6:2a:1e:1a:d2:a8:fe:15:4d: 4e:a3:cb:6a:6d:a4:58:51:3d:13:63:b8:e3:ac:6d: ab:b3:f6:7f:fd:4d:84:48:5e:96:1e:d7:61:2d:5d: fb:72:f5:35:06:2e:c0:35:92:26:cb:3f:75:6d:fb: be:90:5e:f6:45:a6:97:e9:43:9e:d8:c8:82:dc:d0: ac:25:6b:21:ff:b6:28:dc:32:ab:eb:fb:88:14:33: 31:1c:9a:8c:de:1b:c3:be:1f:b5:c4:5b:f0:0d:8f: 91:54:22:19:57:3a:3b:3e:74:99:9d:d9:ad:f7:58: 06:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:61:1E:72:28:F9:50:5F:74:D7:2B:3C:0C:09:9A:51:91:96:7B:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/de3fa3f5-5652-3ad8-bd4c-689c608d392a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 192.253.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:8b:2e:ff:aa:04:b1:84:ef:bc:89:40:34:68:da:fb:cd:4b: 84:40:81:04:7c:da:5e:8d:6f:a8:c7:22:87:9a:46:94:e1:e7: fb:32:ed:b1:20:c1:65:18:9a:19:fc:69:fe:4a:55:a5:1c:d0: 22:17:e7:24:b5:ff:cc:9a:4a:af:af:28:15:cb:52:a4:c9:96: 62:1a:1a:1b:3b:65:09:b6:d7:eb:2c:7c:d0:bf:47:75:41:31: 21:ec:b1:3b:08:24:1e:e3:1c:41:0b:9a:2b:25:f8:eb:61:28: cc:b0:2e:aa:03:ad:4b:bc:0b:59:48:15:f6:7d:79:f1:ce:ad: d9:16:f5:e2:a3:73:38:9d:5d:68:fa:e5:cd:5a:92:99:15:b6: 0a:22:2f:18:e9:e2:de:69:e4:e3:5e:52:b2:50:10:87:a0:aa: 4d:fe:0b:57:94:8a:37:9b:7e:61:33:c5:eb:80:af:c0:b6:0a: d3:56:d5:00:0e:0d:98:fe:b6:c7:85:32:79:52:9f:0a:0e:9b: b0:ce:94:af:9a:ed:35:ef:82:57:21:b6:d4:06:0d:79:a6:9c: 6a:f8:d3:85:cc:1f:92:b5:b4:61:ab:f8:bc:7c:ac:1a:7b:6a: 61:14:83:4f:3b:72:e5:51:77:2f:94:27:37:90:4e:a4:5f:e6: fa:e0:d6:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZPEWANkbREUEtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk OGQ4NzE3ODgtNzAxNS00MGFmLWE0M2YtM2U0ODBhNDAzOTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIVSk/P/tjrZZZQ8vCDNNZq7af09ga5UNdtV opAKBc8zoelVvFwgODfbCglojNhcvZmCpZDNoYszj5W9YIXEInzqw7MkxE32KUHt 6vS3tD4bX/hixdd7wHuXxHhupad7nGNTcpsSsTGvaMnj68uMslcMEEWPdQzexKE7 Ox3IxVlc92wm3qtoGIQZKybGKh4a0qj+FU1Oo8tqbaRYUT0TY7jjrG2rs/Z//U2E SF6WHtdhLV37cvU1Bi7ANZImyz91bfu+kF72RaaX6UOe2MiC3NCsJWsh/7Yo3DKr 6/uIFDMxHJqM3hvDvh+1xFvwDY+RVCIZVzo7PnSZndmt91gGLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlhHnIo+VBfdNcrPAwJmlGRlntHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZGUzZmEzZjUtNTY1Mi0z YWQ4LWJkNGMtNjg5YzYwOGQzOTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP35MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuLLv+qBLGE77yJQDRo2vvNS4RAgQR82l6Nb6jHIoeaRpTh5/sy7bEg wWUYmhn8af5KVaUc0CIX5yS1/8yaSq+vKBXLUqTJlmIaGhs7ZQm21+ssfNC/R3VB MSHssTsIJB7jHEELmisl+OthKMywLqoDrUu8C1lIFfZ9efHOrdkW9eKjczidXWj6 5c1akpkVtgoiLxjp4t5p5ONeUrJQEIegqk3+C1eUijebfmEzxeuAr8C2CtNW1QAO DZj+tseFMnlSnwoOm7DOlK+a7TXvglchttQGDXmmnGr404XMH5K1tGGr+Lx8rBp7 amEUg087cuVRdy+UJzeQTqRf5vrg1uQ= -----END CERTIFICATE-----Generated at Thu Mar 26 07:52:25 2026 by rpki-client