$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/21aee54d-c4e1-3466-8a02-2480fde4af39.roa File: 21aee54d-c4e1-3466-8a02-2480fde4af39.roa (raw, json) Hash identifier: 1ONCi6SCVRLkkY1CvZXJdfqfw/VaHwN9mZJm8Jnmat0= Subject key identifier: 0E:F8:5E:7A:32:EE:03:E8:68:56:A2:C7:A9:04:2A:D8:7B:05:00:21 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584DBA3AFB4BD003F623AA1D1A80 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/21aee54d-c4e1-3466-8a02-2480fde4af39.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 212238 IP address blocks: 141.193.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3a:fb:4b:d0:03:f6:23:aa:1d:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=ba63b899-e92d-4ff3-bad3-028bd65324dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:58:4e:82:d3:52:3f:aa:f4:e3:e0:78:51:5f: b2:0c:a4:bc:56:27:a2:c5:fb:c0:04:a1:97:32:77: a1:15:e4:3d:ce:a0:1f:e7:61:94:2c:12:05:4f:62: 71:41:45:46:26:f3:2d:de:0b:9a:04:e8:37:54:0c: 3b:ba:76:c1:04:6d:6b:98:88:3b:e8:ba:75:7b:48: 4e:2a:32:10:36:64:65:79:8b:23:82:9a:15:0e:29: a8:b0:91:b2:01:cf:6d:b2:b5:9d:c6:f5:75:5f:7c: 29:f1:fc:70:60:33:0e:e5:01:21:36:8f:e1:af:a3: 20:b0:59:52:35:a2:30:06:db:9a:ee:07:07:f3:86: 16:ab:b4:7e:64:a7:a6:5c:e7:be:46:3a:ee:d7:92: 1b:94:c8:65:bb:4c:3a:02:63:1d:35:a0:51:47:51: 30:8f:87:c2:be:4e:ce:d3:62:5c:7a:29:fd:c8:b8: 14:52:b9:4e:ab:1d:84:ed:c7:04:b1:d4:8d:a3:52: af:1d:d2:58:0d:7e:cd:ed:40:23:aa:45:75:e1:f4: ac:b2:40:8b:3a:64:6e:05:3a:69:fd:74:48:25:fa: 50:ff:de:a7:57:3a:b8:c1:c4:56:b2:a8:7f:31:ca: 12:5e:d4:f3:2a:9b:19:da:1b:59:17:48:00:ac:e7: 06:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F8:5E:7A:32:EE:03:E8:68:56:A2:C7:A9:04:2A:D8:7B:05:00:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/21aee54d-c4e1-3466-8a02-2480fde4af39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 141.193.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:77:86:2d:4b:15:09:bb:1b:b3:73:19:96:4d:a1:18:c3:96: 8f:8f:94:b7:57:57:1d:14:2e:3a:2b:21:95:6a:20:6c:f9:7a: 34:bd:90:0c:b6:03:38:e1:2f:20:fc:0e:ce:cc:6c:26:75:48: cb:1e:5d:69:30:32:48:03:e9:1c:e9:c2:1a:1c:30:38:26:a8: 8b:26:b1:36:07:6f:9d:1d:4d:c6:4d:0e:69:08:d6:35:98:a6: 99:f1:d5:2c:d3:e5:f3:f8:80:b9:4f:27:29:15:30:b7:3c:0f: 69:44:e4:ab:10:21:87:e2:e1:2c:2c:97:47:9d:0e:e9:12:a0: 22:42:2d:20:9a:a5:8c:44:cf:0e:7d:98:fa:94:64:25:05:02: 3c:97:d8:1e:da:80:17:d4:bf:31:db:28:ed:73:a2:f9:ed:ae: f5:6c:9c:4b:91:dd:34:07:52:59:07:3d:a6:ab:e2:80:1c:96: a4:7f:18:b3:ba:55:49:be:73:22:5b:12:3c:d9:1f:40:cc:44: b8:1a:22:90:e9:d2:56:61:28:7b:22:f0:6a:9a:26:59:56:ab: 15:13:9c:1e:77:61:13:a6:32:6a:71:c6:68:e1:94:a7:09:fc: b1:80:fe:e2:22:60:7f:97:bf:a4:c2:73:97:ae:e7:9e:f2:18: c4:82:95:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26OvtL0AP2I6odGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk YmE2M2I4OTktZTkyZC00ZmYzLWJhZDMtMDI4YmQ2NTMyNGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVhOgtNSP6r04+B4UV+yDKS8VieixfvABKGX MnehFeQ9zqAf52GULBIFT2JxQUVGJvMt3guaBOg3VAw7unbBBG1rmIg76Lp1e0hO KjIQNmRleYsjgpoVDimosJGyAc9tsrWdxvV1X3wp8fxwYDMO5QEhNo/hr6MgsFlS NaIwBtua7gcH84YWq7R+ZKemXOe+Rjru15IblMhlu0w6AmMdNaBRR1Ewj4fCvk7O 02Jcein9yLgUUrlOqx2E7ccEsdSNo1KvHdJYDX7N7UAjqkV14fSsskCLOmRuBTpp /XRIJfpQ/96nVzq4wcRWsqh/McoSXtTzKpsZ2htZF0gArOcGtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA74Xnoy7gPoaFaix6kEKth7BQAhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMjFhZWU1NGQtYzRlMS0z NDY2LThhMDItMjQ4MGZkZTRhZjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjcHKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEV3hi1LFQm7G7NzGZZNoRjDlo+PlLdXVx0ULjorIZVqIGz5ejS9kAy2 AzjhLyD8Ds7MbCZ1SMseXWkwMkgD6RzpwhocMDgmqIsmsTYHb50dTcZNDmkI1jWY ppnx1SzT5fP4gLlPJykVMLc8D2lE5KsQIYfi4Swsl0edDukSoCJCLSCapYxEzw59 mPqUZCUFAjyX2B7agBfUvzHbKO1zovntrvVsnEuR3TQHUlkHPaar4oAclqR/GLO6 VUm+cyJbEjzZH0DMRLgaIpDp0lZhKHsi8GqaJllWqxUTnB53YROmMmpxxmjhlKcJ /LGA/uIiYH+Xv6TCc5eu557yGMSClSM= -----END CERTIFICATE-----Generated at Tue May 5 23:18:36 2026 by rpki-client