$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/0cd78578-12cc-3407-963c-6ed1de118dbb.roa File: 0cd78578-12cc-3407-963c-6ed1de118dbb.roa (raw, json) Hash identifier: KRaJrwyEgvoxPMXiYh7kpH1j7XSoCLDH2dFz8B+wSuQ= Subject key identifier: 27:6A:85:A2:4F:E6:84:50:2A:1A:8C:77:1C:13:C7:34:A8:59:E5:AD Certificate issuer: /CN=aafd6acf-1b90-42db-93ca-6a5c04007025 Certificate serial: 010D0C9F4328584D730A738E64167A63F7FE85A0 Authority key identifier: 33:52:98:80:D6:83:C5:3F:14:72:92:EA:A0:84:99:4F:1A:2D:BB:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/0cd78578-12cc-3407-963c-6ed1de118dbb.roa Signing time: Thu 09 Apr 2026 13:00:30 +0000 ROA not before: Thu 09 Apr 2026 13:00:30 +0000 ROA not after: Wed 08 Jul 2026 13:00:30 +0000 asID: 812 IP address blocks: 24.153.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:73:0a:73:8e:64:16:7a:63:f7:fe:85:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aafd6acf-1b90-42db-93ca-6a5c04007025 Validity Not Before: Apr 9 13:00:30 2026 GMT Not After : Jul 8 13:00:30 2026 GMT Subject: CN=ff749d98-5edf-4f78-9ca3-9284f6a42312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:37:0a:b2:ad:07:fd:39:c7:4f:57:f9:ba:50: 9a:dd:79:12:cf:ee:07:b4:66:22:df:34:c6:0f:54: 1e:3c:e2:44:ad:ec:a1:b0:57:99:bb:a4:9c:3e:bb: 34:bf:cb:22:b5:68:7c:0b:7b:f8:46:79:52:d2:66: 96:69:e5:ef:03:06:1a:03:a1:b6:27:5b:47:fb:83: 49:c7:6b:50:e0:c6:1f:a5:1f:68:27:e9:41:17:77: 9e:f1:ed:91:b7:e7:62:5f:6a:46:76:22:63:0e:b9: 76:d2:ae:35:51:bb:98:4f:27:8d:8e:1d:a2:78:f5: ae:6d:c4:d1:3c:b6:69:4b:d2:6b:d4:e3:ae:fe:16: 27:5d:36:64:e4:ff:e5:7b:18:87:89:1c:8c:4d:9e: b4:df:a5:8e:83:a1:ae:0f:1f:b6:ba:bc:84:b3:df: 52:50:ff:b2:de:25:68:28:58:bc:36:fe:02:07:a5: d1:dd:64:2c:6a:11:3b:83:38:35:7c:6a:11:f1:ad: e3:4b:c3:35:11:9c:af:cc:0d:f4:92:03:92:f0:57: 1f:e4:a3:b9:c6:45:d9:70:2a:a6:91:40:0b:d4:dc: 4b:38:3f:6c:b5:55:9d:2e:cf:55:20:50:4e:c0:6a: 71:fc:6d:28:3b:8c:c3:d0:33:2b:be:83:ea:b5:88: 65:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:6A:85:A2:4F:E6:84:50:2A:1A:8C:77:1C:13:C7:34:A8:59:E5:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/0cd78578-12cc-3407-963c-6ed1de118dbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.crl X509v3 Authority Key Identifier: keyid:33:52:98:80:D6:83:C5:3F:14:72:92:EA:A0:84:99:4F:1A:2D:BB:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer sbgp-ipAddrBlock: critical IPv4: 24.153.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:86:40:9f:2b:69:85:7d:d1:e8:c5:ba:d2:12:b7:03:94:9d: d6:5e:70:79:f6:ce:de:27:90:e7:45:df:45:31:98:32:62:fa: e2:71:97:76:39:f1:36:41:89:94:d1:1e:ed:92:e8:89:0c:67: 5a:40:7d:41:e2:71:5f:aa:58:17:2c:e0:a2:96:78:0f:99:ec: ec:e7:27:47:cb:0c:3e:1a:da:91:e5:40:19:95:b1:38:46:c4: 90:89:f4:d5:55:ce:fc:7e:b7:67:6f:3b:95:3a:68:4e:eb:57: 2d:04:58:88:44:da:c4:21:f0:6a:be:80:30:8c:5f:f7:a3:67: cf:68:d3:7d:9c:d3:dc:21:b7:df:c4:6b:33:2b:f8:5a:28:46: 90:6b:65:db:3e:86:f9:83:7f:77:4a:d8:0c:1a:ae:02:19:82: 6a:05:90:87:d3:59:7b:32:a0:22:22:67:1e:db:65:91:49:74: fd:27:b3:ec:39:3d:12:53:25:e8:71:bc:b1:b2:81:57:b9:03: 0a:57:48:f1:51:a4:ec:97:be:da:fa:ef:e6:cc:e7:0f:a2:60: ed:c8:51:86:13:01:13:7d:94:18:f6:fd:28:33:f6:7e:82:cc: 28:d5:10:b2:86:3b:79:a5:de:15:ef:42:ff:92:25:9d:6f:6d: d7:2b:fc:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1zCnOOZBZ6Y/f+haAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmZDZhY2YtMWI5MC00MmRiLTkzY2EtNmE1YzA0MDA3 MDI1MB4XDTI2MDQwOTEzMDAzMFoXDTI2MDcwODEzMDAzMFowLzEtMCsGA1UEAxMk ZmY3NDlkOTgtNWVkZi00Zjc4LTljYTMtOTI4NGY2YTQyMzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDcKsq0H/TnHT1f5ulCa3XkSz+4HtGYi3zTG D1QePOJEreyhsFeZu6ScPrs0v8sitWh8C3v4RnlS0maWaeXvAwYaA6G2J1tH+4NJ x2tQ4MYfpR9oJ+lBF3ee8e2Rt+diX2pGdiJjDrl20q41UbuYTyeNjh2iePWubcTR PLZpS9Jr1OOu/hYnXTZk5P/lexiHiRyMTZ6036WOg6GuDx+2uryEs99SUP+y3iVo KFi8Nv4CB6XR3WQsahE7gzg1fGoR8a3jS8M1EZyvzA30kgOS8Fcf5KO5xkXZcCqm kUAL1NxLOD9stVWdLs9VIFBOwGpx/G0oO4zD0DMrvoPqtYhlaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdqhaJP5oRQKhqMdxwTxzSoWeWtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hYWZk NmFjZi0xYjkwLTQyZGItOTNjYS02YTVjMDQwMDcwMjUvMGNkNzg1NzgtMTJjYy0z NDA3LTk2M2MtNmVkMWRlMTE4ZGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWFmZDZhY2YtMWI5MC00MmRiLTkz Y2EtNmE1YzA0MDA3MDI1L2FhZmQ2YWNmLTFiOTAtNDJkYi05M2NhLTZhNWMwNDAw NzAyNS5jcmwwHwYDVR0jBBgwFoAUM1KYgNaDxT8UcpLqoISZTxotu+QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hYWZkNmFjZi0xYjkwLTQyZGItOTNjYS02YTVj MDQwMDcwMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGJkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJaGQJ8raYV90ejFutIStwOUndZecHn2zt4nkOdF30UxmDJi+uJxl3Y5 8TZBiZTRHu2S6IkMZ1pAfUHicV+qWBcs4KKWeA+Z7OznJ0fLDD4a2pHlQBmVsThG xJCJ9NVVzvx+t2dvO5U6aE7rVy0EWIhE2sQh8Gq+gDCMX/ejZ89o032c09wht9/E azMr+FooRpBrZds+hvmDf3dK2AwargIZgmoFkIfTWXsyoCIiZx7bZZFJdP0ns+w5 PRJTJehxvLGygVe5AwpXSPFRpOyXvtr67+bM5w+iYO3IUYYTARN9lBj2/Sgz9n6C zCjVELKGO3ml3hXvQv+SJZ1vbdcr/Fs= -----END CERTIFICATE-----Generated at Mon Apr 13 12:11:01 2026 by rpki-client