$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ea1c498f-50ad-3f52-8860-b61f9a77e61f.roa File: ea1c498f-50ad-3f52-8860-b61f9a77e61f.roa (raw, json) Hash identifier: WKf+3TTouF2J9ZCGf0m5YDQtN7q0bt6B8WZ0dRIfKBk= Subject key identifier: 46:72:CF:97:3C:F0:CA:44:80:03:F5:1A:8F:23:CF:23:82:E7:A7:DF Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D40CA325219AB41754A60D480 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ea1c498f-50ad-3f52-8860-b61f9a77e61f.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 834 IP address blocks: 192.253.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:32:52:19:ab:41:75:4a:60:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=af0e9c21-40cf-4a5f-aaff-8d4e9b9b6a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:95:34:a2:c2:08:0c:a3:99:65:a0:8a:63:bf: f8:22:bd:12:c5:4a:bb:12:e3:ab:a4:1d:5a:71:df: e0:9f:47:dd:a5:77:db:64:d9:d2:f6:f8:5a:a8:d0: 0f:38:e8:a3:56:d6:6d:ce:f9:46:e3:83:f7:44:6f: 9e:e8:e7:29:62:3b:ea:cc:b5:e0:29:45:4b:0a:24: 9f:32:08:2f:d5:69:12:2a:f4:d5:bb:7a:f5:b7:80: 9d:23:9d:bc:35:0c:55:4b:64:7b:aa:f5:70:77:0a: 5b:65:34:05:56:fa:57:d0:50:35:e5:59:fd:57:1c: 35:14:60:08:ea:6a:fa:af:8f:df:12:42:26:ef:d6: 8a:5e:15:00:55:81:2a:3c:7f:4c:f1:0c:0f:18:22: 92:69:ac:73:74:1c:72:a1:b8:53:c0:b3:5c:e7:ac: 82:96:c7:14:34:4e:93:fd:09:6b:a1:81:0c:d7:cd: 84:32:52:3c:ce:6e:47:81:ed:ff:32:26:d2:48:ad: 1b:85:6c:82:38:8b:0a:c3:a0:9e:3c:01:03:f3:77: 11:cd:a5:e1:05:fa:e0:58:fb:6c:84:ce:0b:1a:6c: 27:69:7e:5c:8c:5a:95:5b:c4:2d:1d:fb:26:23:c1: 34:83:7d:f9:79:0d:97:cb:2f:12:4a:87:33:1b:71: ad:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:72:CF:97:3C:F0:CA:44:80:03:F5:1A:8F:23:CF:23:82:E7:A7:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ea1c498f-50ad-3f52-8860-b61f9a77e61f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 192.253.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:e4:29:c5:dd:ae:8f:25:a0:53:18:b1:bb:1d:44:b9:40:1b: 39:2a:d2:94:ca:be:44:86:62:7a:1b:6c:3e:8e:f2:c1:7f:f7: b3:67:df:8b:ac:03:d4:ca:92:70:75:17:68:49:cb:21:3c:f1: 91:60:e8:a7:ff:26:10:f1:66:5a:bd:c3:de:eb:1f:7e:36:2d: 82:12:c9:0d:93:ee:eb:9f:84:59:a0:be:a9:2d:8f:e1:95:65: 52:ff:ad:91:1e:85:49:38:72:fe:68:92:3a:48:f9:f0:e8:3b: b2:ac:47:a8:84:4e:4b:86:34:4a:d3:4a:3e:31:dd:bb:75:56: fe:0c:9f:00:95:fb:a1:d7:c0:0e:8c:77:f4:77:dc:63:ae:77: b6:8b:47:f1:bf:f4:a3:a9:f8:50:f7:ed:91:65:a5:c7:21:d5: 05:8b:fe:b7:de:9c:47:c0:8c:b2:52:f9:dc:b2:46:91:2e:99: bc:f1:be:39:fb:b8:dc:dd:89:29:ad:cb:6d:79:6c:0f:67:db: a4:77:e2:17:c3:4a:91:e6:8c:58:8e:24:8a:93:13:94:a0:ff: 51:8a:00:6a:18:c9:c0:dd:71:c6:1a:14:ae:89:e8:79:40:24: 16:0b:e6:10:a0:8d:ed:a9:87:37:9e:10:c3:25:0d:87:ff:fe: 9d:ef:92:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AyjJSGatBdUpg1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk YWYwZTljMjEtNDBjZi00YTVmLWFhZmYtOGQ0ZTliOWI2YTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpU0osIIDKOZZaCKY7/4Ir0SxUq7EuOrpB1a cd/gn0fdpXfbZNnS9vhaqNAPOOijVtZtzvlG44P3RG+e6OcpYjvqzLXgKUVLCiSf Mggv1WkSKvTVu3r1t4CdI528NQxVS2R7qvVwdwpbZTQFVvpX0FA15Vn9Vxw1FGAI 6mr6r4/fEkIm79aKXhUAVYEqPH9M8QwPGCKSaaxzdBxyobhTwLNc56yClscUNE6T /QlroYEM182EMlI8zm5Hge3/MibSSK0bhWyCOIsKw6CePAED83cRzaXhBfrgWPts hM4LGmwnaX5cjFqVW8QtHfsmI8E0g335eQ2Xyy8SSoczG3GtOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZyz5c88MpEgAP1Go8jzyOC56ffMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZWExYzQ5OGYtNTBhZC0z ZjUyLTg4NjAtYjYxZjlhNzdlNjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP3+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/kKcXdro8loFMYsbsdRLlAGzkq0pTKvkSGYnobbD6O8sF/97Nn34us A9TKknB1F2hJyyE88ZFg6Kf/JhDxZlq9w97rH342LYISyQ2T7uufhFmgvqktj+GV ZVL/rZEehUk4cv5okjpI+fDoO7KsR6iETkuGNErTSj4x3bt1Vv4MnwCV+6HXwA6M d/R33GOud7aLR/G/9KOp+FD37ZFlpcch1QWL/rfenEfAjLJS+dyyRpEumbzxvjn7 uNzdiSmty215bA9n26R34hfDSpHmjFiOJIqTE5Sg/1GKAGoYycDdccYaFK6J6HlA JBYL5hCgje2phzeeEMMlDYf//p3vkmI= -----END CERTIFICATE-----Generated at Thu Mar 26 14:28:23 2026 by rpki-client