$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/4552c21f-8d05-3fbb-9242-1de377b08109.roa File: 4552c21f-8d05-3fbb-9242-1de377b08109.roa (raw, json) Hash identifier: HIzXxcVsLB0EPLzQBota4QrfZIDOHhpNv55hzSdvNLQ= Subject key identifier: 8D:1D:7C:DA:27:AA:8A:D5:9B:41:81:5E:40:98:F5:27:DF:14:00:99 Certificate issuer: /CN=0af21de0-2cae-45f7-b42c-9598c4271ef0 Certificate serial: 010D0C9F4328584E54B49AD4D491FFF5451BD080 Authority key identifier: 91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/4552c21f-8d05-3fbb-9242-1de377b08109.roa Signing time: Mon 29 Jun 2026 09:00:12 +0000 ROA not before: Mon 29 Jun 2026 09:00:12 +0000 ROA not after: Sun 27 Sep 2026 09:00:12 +0000 asID: 397627 IP address blocks: 192.203.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:54:b4:9a:d4:d4:91:ff:f5:45:1b:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0af21de0-2cae-45f7-b42c-9598c4271ef0 Validity Not Before: Jun 29 09:00:12 2026 GMT Not After : Sep 27 09:00:12 2026 GMT Subject: CN=38c3c77f-0e3e-4415-8fe5-fdbc2a156e53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a0:a3:9a:2e:96:3c:13:5c:13:cb:21:48:53: 60:10:8a:8d:a5:0c:02:b8:4f:cb:34:36:17:57:db: d0:14:bd:08:8d:d3:25:da:16:aa:be:54:10:7a:1b: 78:f4:cb:d3:5a:ca:db:7b:ba:9a:5a:06:c5:bc:9c: 54:f5:c3:da:a5:2e:1e:cc:6d:f4:58:da:f0:61:07: 2c:52:b9:da:54:f5:7f:c7:b4:cb:94:ca:73:ca:d5: 80:0a:88:0c:37:23:51:b0:99:ee:ad:30:45:6a:30: 33:f4:f5:1f:80:cb:80:5a:47:ca:0d:a6:ad:27:7d: a0:0a:c8:66:77:c1:27:e5:0d:0c:63:5a:6c:b9:85: 3c:3d:11:67:b3:93:96:2b:5c:71:6e:31:dd:8b:f4: 4b:42:0e:34:a9:9c:bd:14:04:23:6f:a2:b1:0a:0a: df:d6:d9:03:6d:db:61:2c:15:70:38:83:43:85:30: 2d:a4:74:4f:3f:4a:71:c1:90:1f:6f:85:79:59:2c: 34:d1:98:3d:25:c5:fd:14:ac:d9:3c:74:07:ec:d5: 3f:6d:17:cd:d0:60:0b:2f:46:79:d3:42:4e:4c:ad: 07:fa:9a:78:74:05:bc:7b:9e:7f:41:e1:cd:b0:32: 07:8e:3b:5c:6b:b3:a4:3e:6a:b1:e6:64:b3:41:06: 84:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:1D:7C:DA:27:AA:8A:D5:9B:41:81:5E:40:98:F5:27:DF:14:00:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/4552c21f-8d05-3fbb-9242-1de377b08109.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.crl X509v3 Authority Key Identifier: keyid:91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer sbgp-ipAddrBlock: critical IPv4: 192.203.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:3f:62:b0:19:25:14:9f:6d:38:96:ee:95:8a:70:4e:ca:9b: 13:04:e4:11:46:f6:47:24:84:5f:8b:ae:21:f5:b4:e6:da:99: 58:46:46:31:67:17:47:d1:7a:62:01:b1:49:a0:6a:34:c0:35: fb:99:08:1f:f8:cc:2b:3e:69:4e:69:e0:e8:56:3c:74:aa:94: 42:2c:4a:b1:38:0b:ba:c8:f2:fa:f4:e7:16:58:59:19:1c:4e: 2c:54:8b:b7:13:2e:2c:7d:57:d1:d2:06:2c:3d:6f:07:9b:d8: 1b:63:15:38:80:f7:6e:b6:64:1a:75:9e:36:d7:a5:dc:f2:d6: a2:a6:75:e5:a0:5a:2d:b5:d2:2b:4b:d7:ed:70:58:8f:79:03: 77:4c:78:82:00:40:f3:b2:ec:0b:20:8f:8c:39:6a:a4:0b:a4: 03:87:74:4e:9d:24:b3:8f:fd:c9:d9:c5:2d:d1:c9:b9:b2:93: 6e:04:a5:60:da:85:b7:77:02:d6:ac:b9:9f:12:f1:97:65:fd: 3d:66:be:a5:99:ba:b0:66:e2:88:06:5a:12:2d:31:24:7d:bc: 78:1c:3c:3a:d0:ce:c9:5c:9c:fe:de:a0:9f:8c:59:5a:f7:5d: 51:b5:10:bd:7c:71:59:db:3a:a9:e0:e9:86:f8:c3:54:79:1c: 71:18:ce:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5UtJrU1JH/9UUb0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFmMjFkZTAtMmNhZS00NWY3LWI0MmMtOTU5OGM0Mjcx ZWYwMB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk MzhjM2M3N2YtMGUzZS00NDE1LThmZTUtZmRiYzJhMTU2ZTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6Cjmi6WPBNcE8shSFNgEIqNpQwCuE/LNDYX V9vQFL0IjdMl2haqvlQQeht49MvTWsrbe7qaWgbFvJxU9cPapS4ezG30WNrwYQcs UrnaVPV/x7TLlMpzytWACogMNyNRsJnurTBFajAz9PUfgMuAWkfKDaatJ32gCshm d8En5Q0MY1psuYU8PRFns5OWK1xxbjHdi/RLQg40qZy9FAQjb6KxCgrf1tkDbdth LBVwOINDhTAtpHRPP0pxwZAfb4V5WSw00Zg9JcX9FKzZPHQH7NU/bRfN0GALL0Z5 00JOTK0H+pp4dAW8e55/QeHNsDIHjjtca7OkPmqx5mSzQQaEiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0dfNonqorVm0GBXkCY9SffFACZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYWYy MWRlMC0yY2FlLTQ1ZjctYjQyYy05NTk4YzQyNzFlZjAvNDU1MmMyMWYtOGQwNS0z ZmJiLTkyNDItMWRlMzc3YjA4MTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGFmMjFkZTAtMmNhZS00NWY3LWI0 MmMtOTU5OGM0MjcxZWYwLzBhZjIxZGUwLTJjYWUtNDVmNy1iNDJjLTk1OThjNDI3 MWVmMC5jcmwwHwYDVR0jBBgwFoAUkUcM29/LGs+5vi+ClwB3jJblLWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYWYyMWRlMC0yY2FlLTQ1ZjctYjQyYy05NTk4 YzQyNzFlZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMv9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACA/YrAZJRSfbTiW7pWKcE7KmxME5BFG9kckhF+LriH1tObamVhGRjFn F0fRemIBsUmgajTANfuZCB/4zCs+aU5p4OhWPHSqlEIsSrE4C7rI8vr05xZYWRkc TixUi7cTLix9V9HSBiw9bweb2BtjFTiA9262ZBp1njbXpdzy1qKmdeWgWi210itL 1+1wWI95A3dMeIIAQPOy7Asgj4w5aqQLpAOHdE6dJLOP/cnZxS3Rybmyk24EpWDa hbd3AtasuZ8S8Zdl/T1mvqWZurBm4ogGWhItMSR9vHgcPDrQzslcnP7eoJ+MWVr3 XVG1EL18cVnbOqng6Yb4w1R5HHEYzjw= -----END CERTIFICATE-----Generated at Tue Jul 21 16:50:31 2026 by rpki-client