$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/4552c21f-8d05-3fbb-9242-1de377b08109.roa File: 4552c21f-8d05-3fbb-9242-1de377b08109.roa (raw, json) Hash identifier: NOFVI3desAC6f8Zl2Vxe388bnSrUYCRV40xf8YaJsHw= Subject key identifier: 8B:CC:86:CB:77:7F:2D:F8:61:52:70:31:E4:A5:E7:97:18:B4:82:EB Certificate issuer: /CN=0af21de0-2cae-45f7-b42c-9598c4271ef0 Certificate serial: 010D0C9F4328584EF7176680935D733F212C2B80 Authority key identifier: 91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/4552c21f-8d05-3fbb-9242-1de377b08109.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 397627 IP address blocks: 192.203.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:66:80:93:5d:73:3f:21:2c:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0af21de0-2cae-45f7-b42c-9598c4271ef0 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=b0536fca-6601-47bf-85df-7655c7440a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:44:ab:a6:bc:cd:d1:6f:ca:83:af:cc:d1:00: f3:2a:1f:68:8a:41:97:de:fd:9d:61:4c:af:21:0e: 7c:e3:cb:02:0c:2f:c0:e4:a7:1c:75:89:a1:91:90: 7a:00:3b:2c:a7:d5:d8:81:e1:e8:79:1d:80:24:27: d5:05:58:17:65:e6:79:e4:c8:4a:2a:ca:9c:de:c7: 21:95:61:38:f1:08:3b:e1:6a:64:72:88:fa:cd:a6: 19:ae:d9:6e:2c:2c:c2:6c:da:52:6d:39:ce:72:f0: fe:65:5c:8b:80:58:50:63:93:4a:1e:34:81:4a:c9: dc:da:a9:b2:e2:03:36:19:ef:d9:01:09:ec:83:0c: 55:84:88:36:5e:1f:0e:71:c0:2e:7a:05:13:29:ae: 6d:bd:fc:fb:9e:29:f7:18:09:c3:a7:19:1c:89:83: c6:b3:5b:47:32:15:ee:18:f7:5e:31:06:9e:35:1e: 5f:81:02:37:ab:24:5d:73:ec:46:64:4c:8a:61:77: 51:5d:0c:b4:f2:da:4d:08:b6:04:a5:a6:49:3b:7b: 7a:39:97:67:d6:ca:e7:41:1f:39:1f:ce:94:c5:a7: e9:34:68:d6:b4:a5:ce:eb:aa:38:2c:b9:ad:6b:19: 06:e6:1d:f6:2c:d5:f3:ea:00:01:4c:32:72:7a:da: 19:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:CC:86:CB:77:7F:2D:F8:61:52:70:31:E4:A5:E7:97:18:B4:82:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/4552c21f-8d05-3fbb-9242-1de377b08109.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.crl X509v3 Authority Key Identifier: keyid:91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer sbgp-ipAddrBlock: critical IPv4: 192.203.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:26:5e:5e:64:78:9d:a4:a4:3f:aa:5e:1b:85:ee:03:19:05: 69:0f:d5:e8:90:21:e8:31:ff:73:01:9a:05:53:cf:9a:86:c8: 96:64:3c:4c:33:30:0d:eb:66:0d:5c:11:82:e2:26:08:83:ed: ed:cd:f8:98:a4:88:33:cc:a9:eb:a5:e0:15:99:ed:9e:42:75: c7:63:58:e6:a1:9c:52:90:2b:3b:cd:f7:f0:41:04:c7:98:62: e3:8d:96:40:b5:aa:9a:d5:fc:29:fa:c3:95:70:f5:84:a3:cd: 5d:c9:a1:31:19:fc:cc:c9:cc:30:eb:0e:7a:9f:7a:2f:ce:b8: c7:b5:01:68:17:36:91:bb:45:79:9e:bd:08:7e:39:35:08:cf: db:e2:05:d5:c9:2b:ce:28:db:98:71:9e:09:ce:0e:e0:3c:37: 1e:cc:5b:31:b7:09:5c:e6:51:79:8d:2f:37:ce:9b:18:03:7b: 31:30:83:9a:5b:ea:b1:16:04:a0:af:e9:02:ee:a2:8a:58:fe: cf:d1:12:5a:97:5c:40:f1:06:e8:6f:de:9d:ed:a3:88:e4:22: f5:e9:3c:2e:1a:68:25:44:07:c5:0e:43:a1:5f:55:40:fd:4f: e5:8a:ca:00:db:15:c2:e6:28:a8:c5:c2:04:a8:40:d2:04:a3: 63:ce:c8:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F2aAk11zPyEsK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFmMjFkZTAtMmNhZS00NWY3LWI0MmMtOTU5OGM0Mjcx ZWYwMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk YjA1MzZmY2EtNjYwMS00N2JmLTg1ZGYtNzY1NWM3NDQwYTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvESrprzN0W/Kg6/M0QDzKh9oikGX3v2dYUyv IQ5848sCDC/A5KccdYmhkZB6ADssp9XYgeHoeR2AJCfVBVgXZeZ55MhKKsqc3sch lWE48Qg74Wpkcoj6zaYZrtluLCzCbNpSbTnOcvD+ZVyLgFhQY5NKHjSBSsnc2qmy 4gM2Ge/ZAQnsgwxVhIg2Xh8OccAuegUTKa5tvfz7nin3GAnDpxkciYPGs1tHMhXu GPdeMQaeNR5fgQI3qyRdc+xGZEyKYXdRXQy08tpNCLYEpaZJO3t6OZdn1srnQR85 H86UxafpNGjWtKXO66o4LLmtaxkG5h32LNXz6gABTDJyetoZowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvMhst3fy34YVJwMeSl55cYtILrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYWYy MWRlMC0yY2FlLTQ1ZjctYjQyYy05NTk4YzQyNzFlZjAvNDU1MmMyMWYtOGQwNS0z ZmJiLTkyNDItMWRlMzc3YjA4MTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGFmMjFkZTAtMmNhZS00NWY3LWI0 MmMtOTU5OGM0MjcxZWYwLzBhZjIxZGUwLTJjYWUtNDVmNy1iNDJjLTk1OThjNDI3 MWVmMC5jcmwwHwYDVR0jBBgwFoAUkUcM29/LGs+5vi+ClwB3jJblLWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYWYyMWRlMC0yY2FlLTQ1ZjctYjQyYy05NTk4 YzQyNzFlZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMv9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4mXl5keJ2kpD+qXhuF7gMZBWkP1eiQIegx/3MBmgVTz5qGyJZkPEwz MA3rZg1cEYLiJgiD7e3N+JikiDPMqeul4BWZ7Z5CdcdjWOahnFKQKzvN9/BBBMeY YuONlkC1qprV/Cn6w5Vw9YSjzV3JoTEZ/MzJzDDrDnqfei/OuMe1AWgXNpG7RXme vQh+OTUIz9viBdXJK84o25hxngnODuA8Nx7MWzG3CVzmUXmNLzfOmxgDezEwg5pb 6rEWBKCv6QLuoopY/s/RElqXXEDxBuhv3p3to4jkIvXpPC4aaCVEB8UOQ6FfVUD9 T+WKygDbFcLmKKjFwgSoQNIEo2POyO8= -----END CERTIFICATE-----Generated at Sat Sep 19 06:58:23 2026 by rpki-client