$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/af253897-34b0-302d-99ea-bc80edc69de5.roa File: af253897-34b0-302d-99ea-bc80edc69de5.roa (raw, json) Hash identifier: 0WkvOuFe3Ast2RtHSWsGCBJD1ZTThEHygg8eW1ksNaY= Subject key identifier: F0:99:FF:D0:75:F6:36:D6:50:31:86:68:BF:FD:07:B0:D3:F8:3B:85 Certificate issuer: /CN=a02a1775-e3ef-4d5e-a934-1d4204e1ca18 Certificate serial: 010D0C9F4328584D8EF56558C2856A8D232D8780 Authority key identifier: 60:34:7A:ED:F0:21:25:5B:C6:90:06:B5:57:06:93:34:AA:5D:35:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/af253897-34b0-302d-99ea-bc80edc69de5.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 32450 IP address blocks: 192.107.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:65:58:c2:85:6a:8d:23:2d:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a02a1775-e3ef-4d5e-a934-1d4204e1ca18 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=38beccf0-1f16-4700-8984-14b3b82480a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:af:0c:2c:c5:b6:b4:b3:5c:38:c5:43:10:de: 93:0f:0e:8d:51:7d:29:77:66:2c:b5:8a:32:c9:6d: 64:a2:db:b0:fe:72:c4:e0:79:2b:69:4d:c6:17:04: 88:ae:a7:7a:af:92:d4:63:61:c2:87:7c:73:72:d4: e2:88:2b:95:f2:cc:39:94:19:7c:8d:a2:fa:7a:bc: a9:d5:04:48:27:71:6d:40:18:d1:c6:87:14:74:6d: 1e:34:25:f2:bc:b5:a5:02:31:e5:c0:a8:f2:a6:71: 61:a1:ae:55:e5:3d:d2:1d:3e:78:af:2c:2a:44:40: da:c7:62:c4:8e:d8:30:bc:66:c1:11:43:cb:59:41: 29:fe:f9:64:35:71:e9:3d:fc:5e:7d:0a:ea:54:16: 77:47:82:b2:4c:a0:01:ec:f6:10:6a:cc:c7:73:91: 60:d6:b0:f7:71:0f:82:30:a5:fc:f8:fa:c6:27:4f: 6a:02:05:f0:c1:9f:cd:38:ff:e0:e9:ad:1c:8e:07: 22:95:d2:cd:96:93:10:bf:86:3f:71:4b:5b:6e:39: 33:b0:dd:47:59:e1:e3:03:e7:58:79:b0:e6:3a:12: 83:7d:0c:8e:d1:9e:2a:2a:1c:20:ec:c1:b7:85:e3: 45:c9:8e:82:7f:28:72:a6:ae:26:da:f2:9b:72:aa: d2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:99:FF:D0:75:F6:36:D6:50:31:86:68:BF:FD:07:B0:D3:F8:3B:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/af253897-34b0-302d-99ea-bc80edc69de5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.crl X509v3 Authority Key Identifier: keyid:60:34:7A:ED:F0:21:25:5B:C6:90:06:B5:57:06:93:34:AA:5D:35:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.cer sbgp-ipAddrBlock: critical IPv4: 192.107.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:32:2f:ba:7c:fa:6d:e1:b8:83:01:c2:44:7f:30:74:d0:f2: 4b:a4:89:11:3b:0f:d9:62:cc:e7:85:dc:ed:0b:02:01:be:d5: da:85:34:5b:56:cc:68:1a:c1:aa:72:57:a6:ca:dd:9b:83:5b: 12:f0:38:4c:85:d7:1a:08:59:56:32:fb:91:90:20:48:c3:ab: 77:67:1c:b7:31:a4:a7:2c:c9:27:64:88:52:42:3b:23:e2:e7: b1:66:7f:ea:9b:67:f1:c8:f3:93:ab:ce:93:b2:c1:8b:c1:8b: aa:8a:5f:ae:62:73:0b:ae:22:44:d0:64:b1:af:65:f9:f0:93: f4:a4:ad:58:65:d3:63:9a:dd:b4:07:ca:7d:38:85:59:8d:01: 92:54:c5:98:7e:19:40:81:23:1b:9f:21:d8:bc:54:6a:e1:c7: af:af:77:05:5c:13:59:ac:4d:c6:41:6b:30:1a:19:e3:e7:dc: 0f:f4:79:b4:ba:2f:e0:8b:d4:37:a6:92:2b:57:02:e9:9f:ef: 12:39:8e:73:d4:77:65:b7:50:4b:47:36:dd:de:1b:4b:c9:91: 4e:d5:c8:be:84:73:cf:0f:9d:d8:2f:bf:6a:58:95:4c:8d:e2: 34:19:ae:55:dc:32:7c:bf:28:24:77:2a:9c:11:34:7b:53:5e: d1:c8:9b:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9WVYwoVqjSMth4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTAyYTE3NzUtZTNlZi00ZDVlLWE5MzQtMWQ0MjA0ZTFj YTE4MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MzhiZWNjZjAtMWYxNi00NzAwLTg5ODQtMTRiM2I4MjQ4MGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkK8MLMW2tLNcOMVDEN6TDw6NUX0pd2YstYoy yW1kotuw/nLE4HkraU3GFwSIrqd6r5LUY2HCh3xzctTiiCuV8sw5lBl8jaL6eryp 1QRIJ3FtQBjRxocUdG0eNCXyvLWlAjHlwKjypnFhoa5V5T3SHT54rywqREDax2LE jtgwvGbBEUPLWUEp/vlkNXHpPfxefQrqVBZ3R4KyTKAB7PYQaszHc5Fg1rD3cQ+C MKX8+PrGJ09qAgXwwZ/NOP/g6a0cjgcildLNlpMQv4Y/cUtbbjkzsN1HWeHjA+dY ebDmOhKDfQyO0Z4qKhwg7MG3heNFyY6Cfyhypq4m2vKbcqrSGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCZ/9B19jbWUDGGaL/9B7DT+DuFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMDJh MTc3NS1lM2VmLTRkNWUtYTkzNC0xZDQyMDRlMWNhMTgvYWYyNTM4OTctMzRiMC0z MDJkLTk5ZWEtYmM4MGVkYzY5ZGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTAyYTE3NzUtZTNlZi00ZDVlLWE5 MzQtMWQ0MjA0ZTFjYTE4L2EwMmExNzc1LWUzZWYtNGQ1ZS1hOTM0LTFkNDIwNGUx Y2ExOC5jcmwwHwYDVR0jBBgwFoAUYDR67fAhJVvGkAa1VwaTNKpdNTQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMDJhMTc3NS1lM2VmLTRkNWUtYTkzNC0xZDQy MDRlMWNhMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGsrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkyL7p8+m3huIMBwkR/MHTQ8kukiRE7D9lizOeF3O0LAgG+1dqFNFtW zGgawapyV6bK3ZuDWxLwOEyF1xoIWVYy+5GQIEjDq3dnHLcxpKcsySdkiFJCOyPi 57Fmf+qbZ/HI85OrzpOywYvBi6qKX65icwuuIkTQZLGvZfnwk/SkrVhl02Oa3bQH yn04hVmNAZJUxZh+GUCBIxufIdi8VGrhx6+vdwVcE1msTcZBazAaGePn3A/0ebS6 L+CL1DemkitXAumf7xI5jnPUd2W3UEtHNt3eG0vJkU7VyL6Ec88Pndgvv2pYlUyN 4jQZrlXcMny/KCR3KpwRNHtTXtHImzI= -----END CERTIFICATE-----Generated at Mon Apr 27 11:18:45 2026 by rpki-client