$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/a7046883-d9ee-3efe-bccd-cb6a013b3b4e.roa File: a7046883-d9ee-3efe-bccd-cb6a013b3b4e.roa (raw, json) Hash identifier: Jm0YUBUqgaw7PxDpOrpLPStrbAuB3Ew0RVgj8HIokd4= Subject key identifier: 84:D1:11:A6:0F:18:4D:2B:87:96:CA:D4:E8:54:37:0B:B5:4E:02:2B Certificate issuer: /CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Certificate serial: 010D0C9F4328584D95EFF04F5F0BC8EC370D8150 Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/a7046883-d9ee-3efe-bccd-cb6a013b3b4e.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 88 IP address blocks: 192.12.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:ef:f0:4f:5f:0b:c8:ec:37:0d:81:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=2f794174-5650-4380-8b55-287acd8b214f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b1:11:df:d6:e4:00:67:78:8f:d0:01:62:8a: 4f:72:76:e8:3f:4a:59:32:16:ea:fd:5c:25:90:5c: 6f:06:ed:af:2b:61:62:6b:5a:e2:ce:1b:c9:29:da: c2:57:a2:af:2c:78:ff:58:8a:6a:33:24:da:07:8c: 79:66:f4:6a:ff:65:f5:61:49:4f:30:08:cc:89:d2: e2:c0:7e:19:29:2b:7e:4e:bb:28:6b:3d:28:3e:f1: 8d:a8:18:69:9c:e2:eb:38:f9:d1:b2:98:6f:dc:c4: 9f:c8:4a:42:63:ff:b6:20:57:6c:b0:5d:34:3e:38: 90:71:29:e5:04:41:14:8e:e6:f8:93:88:fd:a7:d9: db:4e:e9:69:5b:83:a8:39:27:45:24:09:9a:a3:14: 0d:ea:55:29:50:af:63:b5:fd:d7:7a:05:51:8e:86: bb:69:a6:7c:37:67:6e:3b:91:cf:28:c7:67:20:0c: b6:99:89:2b:a0:06:53:e9:39:ef:ab:e5:85:bc:b6: e0:eb:e6:e3:ab:80:1b:3d:64:91:f0:34:02:86:bb: c3:b6:f0:39:73:10:40:5d:40:8b:4b:4d:c3:3a:00: 65:fb:19:32:28:36:62:5b:e6:3a:43:6d:13:1d:d3: da:d8:b0:ea:e7:8c:31:d5:e9:5f:58:dc:9c:40:d3: b3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D1:11:A6:0F:18:4D:2B:87:96:CA:D4:E8:54:37:0B:B5:4E:02:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/a7046883-d9ee-3efe-bccd-cb6a013b3b4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl X509v3 Authority Key Identifier: keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer sbgp-ipAddrBlock: critical IPv4: 192.12.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:fb:88:76:9d:b8:72:27:ad:7e:20:e3:18:09:b2:97:5b:b5: df:4f:53:62:8d:45:9f:07:11:f4:41:10:b4:63:86:08:65:14: 16:39:9d:84:ed:91:8a:88:b7:14:96:5d:e9:12:b1:80:80:6e: 10:53:51:d5:30:4e:ef:56:68:77:e2:38:e8:37:cf:d7:d6:6a: 64:9d:c4:9e:0e:a7:5f:08:20:e2:1b:2f:57:99:33:92:00:9b: 3b:91:0a:df:18:8f:a2:88:99:41:45:80:f4:15:87:26:15:42: e9:d9:f5:56:2a:41:ff:16:08:a9:49:85:ec:d2:e0:9a:b5:dc: 83:ae:70:0e:ab:68:1b:50:67:1c:31:30:2e:dc:11:e7:eb:27: aa:f9:af:af:5a:20:7f:9e:04:e7:e8:4b:d6:6f:a3:1b:31:7c: a4:50:f4:4e:50:ab:b0:a4:36:c2:39:d1:cf:d7:aa:6d:39:bc: ce:4c:66:f1:db:e0:d2:83:23:7e:3f:a3:9c:01:6e:cb:bb:02: f0:ba:3b:ec:79:1a:45:c4:1a:66:c6:27:b1:72:e7:89:af:9b: 73:cd:18:70:f2:fd:bb:e8:dd:47:48:89:30:fc:3a:d5:ad:cb: 37:46:cf:1f:06:bf:97:a7:80:f5:ff:99:a2:10:a9:ca:06:ef: 5f:8c:cd:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V7/BPXwvI7DcNgVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZjM1YzgtZTc5Yi00MzNhLWE5NTAtNmRmMTE4NDli ZmQzMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk MmY3OTQxNzQtNTY1MC00MzgwLThiNTUtMjg3YWNkOGIyMTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLER39bkAGd4j9ABYopPcnboP0pZMhbq/Vwl kFxvBu2vK2Fia1rizhvJKdrCV6KvLHj/WIpqMyTaB4x5ZvRq/2X1YUlPMAjMidLi wH4ZKSt+Trsoaz0oPvGNqBhpnOLrOPnRsphv3MSfyEpCY/+2IFdssF00PjiQcSnl BEEUjub4k4j9p9nbTulpW4OoOSdFJAmaoxQN6lUpUK9jtf3XegVRjoa7aaZ8N2du O5HPKMdnIAy2mYkroAZT6Tnvq+WFvLbg6+bjq4AbPWSR8DQChrvDtvA5cxBAXUCL S03DOgBl+xkyKDZiW+Y6Q20THdPa2LDq54wx1elfWNycQNOzTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITREaYPGE0rh5bK1OhUNwu1TgIrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Rm MzVjOC1lNzliLTQzM2EtYTk1MC02ZGYxMTg0OWJmZDMvYTcwNDY4ODMtZDllZS0z ZWZlLWJjY2QtY2I2YTAxM2IzYjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdkZjM1YzgtZTc5Yi00MzNhLWE5 NTAtNmRmMTE4NDliZmQzL2Q3ZGYzNWM4LWU3OWItNDMzYS1hOTUwLTZkZjExODQ5 YmZkMy5jcmwwHwYDVR0jBBgwFoAUxi/1pjvjkrSWK+6zxq5GPqE7L1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2RmMzVjOC1lNzliLTQzM2EtYTk1MC02ZGYx MTg0OWJmZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAw1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABf7iHaduHInrX4g4xgJspdbtd9PU2KNRZ8HEfRBELRjhghlFBY5nYTt kYqItxSWXekSsYCAbhBTUdUwTu9WaHfiOOg3z9fWamSdxJ4Op18IIOIbL1eZM5IA mzuRCt8Yj6KImUFFgPQVhyYVQunZ9VYqQf8WCKlJhezS4Jq13IOucA6raBtQZxwx MC7cEefrJ6r5r69aIH+eBOfoS9ZvoxsxfKRQ9E5Qq7CkNsI50c/Xqm05vM5MZvHb 4NKDI34/o5wBbsu7AvC6O+x5GkXEGmbGJ7Fy54mvm3PNGHDy/bvo3UdIiTD8OtWt yzdGzx8Gv5engPX/maIQqcoG71+MzU4= -----END CERTIFICATE-----Generated at Wed May 13 04:36:40 2026 by rpki-client