$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313/510d5549-a9f8-3043-82be-cf52d15d49bc.roa File: 510d5549-a9f8-3043-82be-cf52d15d49bc.roa (raw, json) Hash identifier: WPI0c1i2mKctF+KwYgfq3V9Z8nGhZBVUz5Vbu8NqYVY= Subject key identifier: A7:EC:7C:CC:71:30:EA:EB:0A:D5:85:26:CA:1D:B2:01:A6:6E:0D:B0 Certificate issuer: /CN=1a4498c7-70e2-4ca4-b18f-4a107d0a6313 Certificate serial: 010D0C9F4328584D3DFF86E97983E4FBBDCFD980 Authority key identifier: 8A:F8:32:26:BB:C6:50:50:85:B1:33:17:D2:97:08:AA:77:A5:1E:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313/510d5549-a9f8-3043-82be-cf52d15d49bc.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 40159 IP address blocks: 192.152.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313/1a4498c7-70e2-4ca4-b18f-4a107d0a6313.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313/1a4498c7-70e2-4ca4-b18f-4a107d0a6313.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:86:e9:79:83:e4:fb:bd:cf:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4498c7-70e2-4ca4-b18f-4a107d0a6313 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=1ce83b08-08db-4560-9561-2a91cd6f9cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b8:5b:98:26:df:13:dc:9e:3b:c6:bd:68:f4: 21:22:71:f0:16:19:57:77:fd:ce:da:7a:02:ea:4d: 5d:ca:33:de:98:97:4d:6e:61:2f:b8:be:12:d4:43: 9d:3a:61:02:35:22:71:48:6a:b9:c9:b6:4b:6d:5e: 33:9f:14:f6:1b:38:c9:40:b3:3a:35:c6:df:71:3b: 9f:54:8b:32:43:22:ec:cd:1d:52:f7:ca:4d:a1:74: 76:6f:1b:fb:ec:b7:d6:d3:c2:6f:28:44:9b:7b:fc: 51:3d:26:7c:cc:9d:2d:70:74:8f:ff:07:20:c5:00: 68:18:ac:af:d1:ea:aa:85:bb:2a:1e:22:32:c9:1b: 01:12:ce:2b:fb:84:6f:09:bd:7d:47:35:cf:88:3a: 34:57:f6:eb:04:a0:88:37:d6:78:bd:95:52:88:54: f2:db:15:61:57:f2:14:23:7d:0e:f2:63:66:bd:96: 2e:40:5b:1f:af:0d:ef:4a:ab:49:b1:ee:23:e6:14: b2:c6:da:85:b7:2d:3a:fa:d6:8a:04:6d:e5:b8:d6: 81:6f:5a:c7:bf:46:23:f1:6c:44:05:01:5c:ce:63: 4e:7a:17:54:2f:91:b2:b3:9e:00:5c:ea:6a:cb:7a: 93:b0:94:cf:c9:fe:14:e8:20:e1:9e:58:b7:c9:ff: 0f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:EC:7C:CC:71:30:EA:EB:0A:D5:85:26:CA:1D:B2:01:A6:6E:0D:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313/510d5549-a9f8-3043-82be-cf52d15d49bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313/1a4498c7-70e2-4ca4-b18f-4a107d0a6313.crl X509v3 Authority Key Identifier: keyid:8A:F8:32:26:BB:C6:50:50:85:B1:33:17:D2:97:08:AA:77:A5:1E:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313.cer sbgp-ipAddrBlock: critical IPv4: 192.152.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:94:b3:ad:c5:c6:cb:bb:2a:7b:97:df:81:c7:d8:c1:9e:04: 0f:25:83:42:2c:38:1b:37:22:25:ba:61:ea:70:0f:d7:5c:49: 0e:f5:06:05:1f:6b:80:49:14:de:52:46:cf:e5:0e:0b:73:22: a5:1e:6a:bf:30:55:26:9a:bd:a8:34:d9:bd:d8:23:c7:ec:70: 70:fe:4b:b6:c1:84:38:c1:32:c6:97:61:4b:2a:a0:c6:a3:c2: 9d:47:db:92:26:0e:bc:ae:e3:ba:c0:19:f2:a1:78:98:66:5d: bb:8e:e3:c7:91:ef:60:19:57:11:10:b6:ba:c3:05:b4:3a:55: 32:6a:dc:5c:f1:8e:c4:17:53:c6:11:86:e7:6c:fc:05:1f:9a: 13:02:85:5d:52:8b:31:09:fa:93:e7:12:21:3f:1a:7a:fb:21: 6f:08:e6:13:b6:e6:03:06:7c:d9:1d:bd:f9:cd:db:0c:8e:21: 43:8e:f5:28:0f:92:e4:01:ca:5b:ae:73:64:4f:95:41:77:e5: 25:c6:91:57:00:72:d9:86:88:47:03:7a:82:aa:77:b4:f2:fb: f1:e7:4c:ed:2c:85:fa:14:5e:87:03:be:ad:40:12:17:e2:15: 12:37:3f:fa:18:f9:15:76:d5:20:82:ea:d0:f8:af:98:d3:91: f8:3b:02:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/4bpeYPk+73P2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE0NDk4YzctNzBlMi00Y2E0LWIxOGYtNGExMDdkMGE2 MzEzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MWNlODNiMDgtMDhkYi00NTYwLTk1NjEtMmE5MWNkNmY5Y2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirhbmCbfE9yeO8a9aPQhInHwFhlXd/3O2noC 6k1dyjPemJdNbmEvuL4S1EOdOmECNSJxSGq5ybZLbV4znxT2GzjJQLM6NcbfcTuf VIsyQyLszR1S98pNoXR2bxv77LfW08JvKESbe/xRPSZ8zJ0tcHSP/wcgxQBoGKyv 0eqqhbsqHiIyyRsBEs4r+4RvCb19RzXPiDo0V/brBKCIN9Z4vZVSiFTy2xVhV/IU I30O8mNmvZYuQFsfrw3vSqtJse4j5hSyxtqFty06+taKBG3luNaBb1rHv0Yj8WxE BQFczmNOehdUL5Gys54AXOpqy3qTsJTPyf4U6CDhnli3yf8PEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfsfMxxMOrrCtWFJsodsgGmbg2wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8xYTQ0 OThjNy03MGUyLTRjYTQtYjE4Zi00YTEwN2QwYTYzMTMvNTEwZDU1NDktYTlmOC0z MDQzLTgyYmUtY2Y1MmQxNWQ0OWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMWE0NDk4YzctNzBlMi00Y2E0LWIx OGYtNGExMDdkMGE2MzEzLzFhNDQ5OGM3LTcwZTItNGNhNC1iMThmLTRhMTA3ZDBh NjMxMy5jcmwwHwYDVR0jBBgwFoAUivgyJrvGUFCFsTMX0pcIqnelHkEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8xYTQ0OThjNy03MGUyLTRjYTQtYjE4Zi00YTEw N2QwYTYzMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJgFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKyUs63Fxsu7KnuX34HH2MGeBA8lg0IsOBs3IiW6YepwD9dcSQ71BgUf a4BJFN5SRs/lDgtzIqUear8wVSaavag02b3YI8fscHD+S7bBhDjBMsaXYUsqoMaj wp1H25ImDryu47rAGfKheJhmXbuO48eR72AZVxEQtrrDBbQ6VTJq3FzxjsQXU8YR huds/AUfmhMChV1SizEJ+pPnEiE/Gnr7IW8I5hO25gMGfNkdvfnN2wyOIUOO9SgP kuQByluuc2RPlUF35SXGkVcActmGiEcDeoKqd7Ty+/HnTO0shfoUXocDvq1AEhfi FRI3P/oY+RV21SCC6tD4r5jTkfg7Amk= -----END CERTIFICATE-----Generated at Thu Mar 26 18:08:27 2026 by rpki-client