$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1cad8ae-b386-37db-8a67-9050cb7b730e.roa File: a1cad8ae-b386-37db-8a67-9050cb7b730e.roa (raw, json) Hash identifier: IXYqb33oj5iv8xc+BPrI2ohCe3Xn1qPvzjaoUT/tLxM= Subject key identifier: 27:C3:D8:71:82:77:BE:38:43:F9:4D:9E:D0:B1:11:E4:78:40:1D:A9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EA795927FE931629C3BA6D340 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1cad8ae-b386-37db-8a67-9050cb7b730e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 36620 IP address blocks: 192.153.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:92:7f:e9:31:62:9c:3b:a6:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4d6b9e56-d7da-4018-ab1c-c9bf8bf10fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:20:35:67:6c:4a:31:d7:e0:5f:ed:85:81:74: 92:11:48:bd:e7:d2:6d:8d:a2:61:ac:c3:0b:8f:8c: c4:72:22:e6:43:27:e4:9d:2e:a1:f0:14:00:66:b0: 34:18:ca:31:9f:92:11:52:3b:aa:90:07:40:dd:94: 98:be:77:78:bb:00:50:82:96:fa:b5:a7:91:0c:63: 37:a7:b7:94:71:56:14:30:35:52:5a:01:f5:ee:8d: af:bb:4c:ad:f9:92:58:29:27:62:95:62:99:ec:57: c0:d3:61:47:09:59:eb:6d:62:3c:95:0a:88:ef:5e: 74:35:23:5d:66:2f:5c:d3:4e:94:54:da:7a:5a:6c: 8d:d0:fb:b1:b4:95:72:d8:34:8b:b4:59:4d:67:bd: 41:b6:2e:46:93:62:b5:46:02:2a:dd:8d:b1:20:1e: 85:df:b9:7c:12:7c:75:98:10:0e:d9:c3:74:52:48: 5c:b7:65:68:b4:5b:36:00:1b:e9:33:c7:41:ad:c9: cf:5e:36:ba:74:ec:fa:76:96:d7:a5:f1:2c:9e:b6: 00:1b:61:5a:d9:69:f8:16:c4:b4:32:9d:95:cb:17: bd:9f:30:8d:20:16:63:8f:39:b0:53:30:cf:2d:86: e2:b4:30:b7:f3:77:ee:c1:6b:21:c6:2b:23:50:59: bf:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C3:D8:71:82:77:BE:38:43:F9:4D:9E:D0:B1:11:E4:78:40:1D:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1cad8ae-b386-37db-8a67-9050cb7b730e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.153.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:8e:13:81:40:c3:3f:8a:e2:a7:2d:87:ec:e1:f8:ee:43:68: 3e:aa:87:9d:19:80:29:f7:28:e2:cd:4e:69:db:e8:22:92:c2: fd:87:33:da:45:ae:11:42:23:25:de:7b:35:9a:a8:62:a7:90: 2c:d5:b8:f3:1c:71:20:60:42:99:f7:d7:17:3f:26:2a:3a:4f: 18:ea:0f:84:62:cd:03:c1:ea:70:65:a3:db:5d:1f:24:7f:3f: 30:6c:c1:69:c6:01:75:ea:0c:ef:6b:0e:f4:a5:67:08:7c:3a: b4:fa:6f:ee:ff:66:87:70:68:d2:bb:8e:58:d9:7c:d1:02:55: 09:e2:b5:09:68:0c:87:35:be:32:76:78:02:df:a5:c6:74:ea: 1a:7f:38:27:24:83:86:eb:91:65:ec:47:5c:ab:36:f3:b8:ee: 26:36:52:eb:a7:71:ef:72:85:04:44:d2:4c:37:3f:c7:44:60: 3b:43:97:13:f3:c6:1c:d9:14:38:80:e3:fb:2a:d6:89:2c:7d: 1e:dd:5a:12:cd:78:94:65:33:44:4d:fc:4e:45:1a:d3:5d:e0: af:76:34:0b:80:f3:d8:fa:40:8c:a4:1e:4d:77:80:0b:09:14: a1:09:98:aa:42:7f:47:94:88:d2:d0:b9:49:1f:4f:49:18:21: 8a:da:59:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlZJ/6TFinDum00AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NGQ2YjllNTYtZDdkYS00MDE4LWFiMWMtYzliZjhiZjEwZmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyA1Z2xKMdfgX+2FgXSSEUi959JtjaJhrMML j4zEciLmQyfknS6h8BQAZrA0GMoxn5IRUjuqkAdA3ZSYvnd4uwBQgpb6taeRDGM3 p7eUcVYUMDVSWgH17o2vu0yt+ZJYKSdilWKZ7FfA02FHCVnrbWI8lQqI7150NSNd Zi9c006UVNp6WmyN0PuxtJVy2DSLtFlNZ71Bti5Gk2K1RgIq3Y2xIB6F37l8Enx1 mBAO2cN0Ukhct2VotFs2ABvpM8dBrcnPXja6dOz6dpbXpfEsnrYAG2Fa2Wn4FsS0 Mp2Vyxe9nzCNIBZjjzmwUzDPLYbitDC383fuwWshxisjUFm/2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfD2HGCd744Q/lNntCxEeR4QB2pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTFjYWQ4YWUtYjM4Ni0z N2RiLThhNjctOTA1MGNiN2I3MzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJn3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWOE4FAwz+K4qcth+zh+O5DaD6qh50ZgCn3KOLNTmnb6CKSwv2HM9pF rhFCIyXeezWaqGKnkCzVuPMccSBgQpn31xc/Jio6TxjqD4RizQPB6nBlo9tdHyR/ PzBswWnGAXXqDO9rDvSlZwh8OrT6b+7/ZodwaNK7jljZfNECVQnitQloDIc1vjJ2 eALfpcZ06hp/OCckg4brkWXsR1yrNvO47iY2Uuunce9yhQRE0kw3P8dEYDtDlxPz xhzZFDiA4/sq1oksfR7dWhLNeJRlM0RN/E5FGtNd4K92NAuA89j6QIykHk13gAsJ FKEJmKpCf0eUiNLQuUkfT0kYIYraWao= -----END CERTIFICATE-----Generated at Wed Aug 19 20:18:19 2026 by rpki-client