$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f1da7cbc-cb5d-3e52-b6f9-364a30c43102.roa File: f1da7cbc-cb5d-3e52-b6f9-364a30c43102.roa (raw, json) Hash identifier: Bi/avpY9oOJ+L0Btc4ZfOnP1FNWkq++PJ+nJbL4YPOQ= Subject key identifier: D1:A3:D4:FC:5B:7D:5F:E8:52:13:4F:13:EC:52:93:F2:EB:5E:56:BF Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D88CDFA32BD533E639B500AE0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f1da7cbc-cb5d-3e52-b6f9-364a30c43102.roa Signing time: Fri 17 Apr 2026 08:06:32 +0000 ROA not before: Fri 17 Apr 2026 08:06:32 +0000 ROA not after: Thu 16 Jul 2026 08:06:32 +0000 asID: 9009 IP address blocks: 192.253.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:88:cd:fa:32:bd:53:3e:63:9b:50:0a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 17 08:06:32 2026 GMT Not After : Jul 16 08:06:32 2026 GMT Subject: CN=97e846b9-5172-4c59-88e2-227cf4567807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a8:c0:9f:0b:fe:b4:13:df:aa:86:cb:6e:09: 1f:88:b7:24:9a:48:87:48:37:f5:72:d7:4c:3f:95: 1a:6d:6f:85:4f:f5:a5:d5:f9:4c:81:30:4e:20:f3: 2e:34:75:c9:c4:42:39:3e:12:c1:5f:2e:c4:46:6a: d1:9e:f9:f2:52:6a:14:eb:a4:e3:7a:5e:f5:62:af: bd:b5:6a:17:4d:02:73:ee:16:de:9b:0c:54:26:36: 7e:c6:1e:a3:46:ac:32:f0:cc:af:65:12:2c:2b:99: 93:f7:35:86:09:6f:e5:7f:cf:c1:31:11:d5:94:c8: 1e:bb:3d:f0:7d:23:de:92:13:00:fb:a9:98:83:3b: 1b:1b:df:7a:82:54:2e:ca:8f:66:5e:d4:99:5d:6f: 5c:09:42:44:7c:95:74:3c:95:8d:60:88:d8:8f:d2: fb:6c:78:24:72:8b:ac:e8:7c:9c:73:72:77:7c:89: d0:97:ba:e8:58:49:08:91:01:31:53:83:bd:70:97: 33:dd:56:60:3c:93:a5:2c:ce:e0:4f:5a:9c:c7:c6: 50:d9:04:6e:58:b2:08:25:33:44:65:10:b5:45:0f: 32:71:4c:97:3e:26:e1:f4:6b:c3:e7:71:13:48:63: b4:a3:34:39:8b:36:7f:ec:71:80:0a:ae:90:27:2e: 13:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A3:D4:FC:5B:7D:5F:E8:52:13:4F:13:EC:52:93:F2:EB:5E:56:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f1da7cbc-cb5d-3e52-b6f9-364a30c43102.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 192.253.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:2d:1c:01:b7:ca:9a:b7:7f:54:d5:6c:ad:f5:ad:23:dd:87: 56:a8:66:d8:66:fd:b2:ee:d2:b9:93:7f:d5:f4:5e:11:ed:ec: 10:2d:4e:2f:a7:8c:67:62:b3:70:2d:cc:66:d8:52:a2:42:fc: 3a:3c:66:89:a7:2b:8f:af:9c:84:22:43:c4:10:c5:a7:aa:c0: 42:20:e1:90:2c:56:d1:8c:d5:eb:3c:b7:e3:4f:32:f6:6c:de: a8:72:ca:39:4c:3a:d8:c9:bd:13:c7:54:04:9a:6b:8f:55:10: 28:21:d1:21:8b:11:e7:f0:56:14:3b:2c:3f:e7:44:a9:92:ff: 9e:0a:aa:71:fc:86:fc:19:f1:60:30:5d:66:b2:89:92:86:7a: 2b:dc:d8:4d:63:17:27:74:d5:53:61:ef:9f:48:cc:39:b5:26: 17:ab:f3:c2:24:ed:21:a1:fe:93:8b:e5:1a:b9:50:df:6e:9d: ab:f6:10:c7:8e:1f:57:04:27:9e:e4:e8:5b:ff:e0:ec:5d:99: 73:8d:48:b7:fc:35:4a:ae:ed:b8:ca:e9:42:ab:63:56:01:6a: db:f3:eb:ba:80:ab:4f:49:e4:68:2d:9c:95:a2:0a:81:40:9d: 99:15:c1:e6:9c:de:08:d2:45:74:45:f2:53:51:56:b1:0e:6b: bb:ae:0c:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2IzfoyvVM+Y5tQCuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQxNzA4MDYzMloXDTI2MDcxNjA4MDYzMlowLzEtMCsGA1UEAxMk OTdlODQ2YjktNTE3Mi00YzU5LTg4ZTItMjI3Y2Y0NTY3ODA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6jAnwv+tBPfqobLbgkfiLckmkiHSDf1ctdM P5UabW+FT/Wl1flMgTBOIPMuNHXJxEI5PhLBXy7ERmrRnvnyUmoU66Tjel71Yq+9 tWoXTQJz7hbemwxUJjZ+xh6jRqwy8MyvZRIsK5mT9zWGCW/lf8/BMRHVlMgeuz3w fSPekhMA+6mYgzsbG996glQuyo9mXtSZXW9cCUJEfJV0PJWNYIjYj9L7bHgkcous 6Hycc3J3fInQl7roWEkIkQExU4O9cJcz3VZgPJOlLM7gT1qcx8ZQ2QRuWLIIJTNE ZRC1RQ8ycUyXPibh9GvD53ETSGO0ozQ5izZ/7HGACq6QJy4TEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGj1PxbfV/oUhNPE+xSk/LrXla/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjFkYTdjYmMtY2I1ZC0z ZTUyLWI2ZjktMzY0YTMwYzQzMTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP3zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8tHAG3ypq3f1TVbK31rSPdh1aoZthm/bLu0rmTf9X0XhHt7BAtTi+n jGdis3AtzGbYUqJC/Do8ZomnK4+vnIQiQ8QQxaeqwEIg4ZAsVtGM1es8t+NPMvZs 3qhyyjlMOtjJvRPHVASaa49VECgh0SGLEefwVhQ7LD/nRKmS/54KqnH8hvwZ8WAw XWayiZKGeivc2E1jFyd01VNh759IzDm1Jher88Ik7SGh/pOL5Rq5UN9unav2EMeO H1cEJ57k6Fv/4OxdmXONSLf8NUqu7bjK6UKrY1YBatvz67qAq09J5GgtnJWiCoFA nZkVweac3gjSRXRF8lNRVrEOa7uuDMc= -----END CERTIFICATE-----Generated at Sat Apr 18 22:20:23 2026 by rpki-client