$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1aa972f3-aa07-3939-b538-d992fbf89f5e.roa File: 1aa972f3-aa07-3939-b538-d992fbf89f5e.roa (raw, json) Hash identifier: WD8oLmhQZycJejIcd1LnZ0SDCC42kUG7FHYNoon4YyE= Subject key identifier: 27:34:73:36:7F:8E:29:FC:3E:07:29:8C:8B:11:C9:0B:56:C8:D5:B0 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D7A0530E5A6C3605DDEA01B80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1aa972f3-aa07-3939-b538-d992fbf89f5e.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 1225 IP address blocks: 192.102.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:30:e5:a6:c3:60:5d:de:a0:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=2504b44a-16fd-40e0-9668-5688b75701e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f0:b6:13:e3:a5:be:45:e9:f6:55:e0:64:82: a2:db:34:bd:bf:45:5c:fe:f5:be:00:b5:86:ee:1e: 1c:41:79:91:e3:13:35:05:d6:db:c7:40:bf:eb:9d: 03:63:ac:1f:fe:dc:a5:ce:c6:5c:11:43:ca:65:4b: b3:d3:be:fc:a9:5e:31:03:3c:4a:a0:c3:32:6d:f6: 4b:e8:d0:f6:c1:9d:a6:11:98:cc:33:3f:3c:fe:99: d5:68:a7:27:7d:9c:c6:64:d4:34:9f:57:6b:12:07: f0:58:eb:1a:ea:41:e8:8c:df:0c:a6:11:7c:37:f1: fe:22:a7:91:8d:ab:a6:6e:a6:90:57:98:8c:52:cf: 42:8c:7a:8d:c2:ca:6b:89:4e:d5:f9:58:7a:cc:67: 81:9d:b6:1f:06:fe:c6:64:bf:73:92:64:25:e1:6b: e4:4b:1b:66:98:af:4d:0b:1a:0b:3f:3d:5a:1a:5e: 36:3f:53:26:ca:9d:16:d8:7b:23:5a:8c:80:04:1b: b9:b2:38:74:98:30:85:27:ba:05:c2:74:6e:5f:96: 4d:8f:45:1b:64:6b:3f:4d:ef:ac:2e:bf:b7:b4:b3: 36:12:52:ad:69:dd:3a:e6:8f:e6:a0:f4:d5:c9:59: 69:77:d0:cf:59:e2:9f:52:ea:54:0a:36:00:e4:2f: d9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:34:73:36:7F:8E:29:FC:3E:07:29:8C:8B:11:C9:0B:56:C8:D5:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1aa972f3-aa07-3939-b538-d992fbf89f5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 192.102.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:cc:85:c2:b6:01:30:e7:4b:57:b0:39:e7:7b:34:d5:67:ca: eb:66:d4:fa:92:d2:73:47:b6:41:70:96:77:13:55:c5:f8:bc: 05:60:ad:7d:ce:bf:f2:8d:47:07:c9:ec:1c:b6:e0:6f:6a:80: 1a:92:c4:43:66:a3:a3:0c:93:1d:ec:b0:2a:d7:cb:76:9c:78: 8a:9b:ac:43:c2:ff:b0:13:41:78:4f:3f:b3:ae:1a:aa:98:b9: a3:06:e6:2c:7f:2a:0d:89:59:8d:e1:e2:08:f0:61:39:b0:d8: 90:66:96:92:3f:ee:dc:90:98:4d:f4:c3:33:e9:73:11:3c:10: 0c:32:83:5f:94:d1:e0:12:0d:0a:b9:93:03:8d:94:c4:8d:9b: 98:0b:47:54:e6:46:cd:01:02:fd:22:da:d3:e5:8d:d1:67:f8: 97:e7:3e:f1:8b:74:51:4f:0b:5b:d1:00:74:1e:bc:7f:bc:47: 06:72:e4:2d:5c:9c:12:27:28:48:f0:64:58:cc:f9:8c:ca:49: 6c:c5:19:64:43:31:9b:7f:c4:fa:d7:cb:32:d9:5b:cd:09:b8: 71:c4:ec:47:54:fa:34:e3:e1:a2:f2:bf:67:af:80:0c:10:4b: b0:b6:de:39:c7:64:86:57:86:a4:56:4f:c1:0d:a8:3d:80:dd: 00:60:0f:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BTDlpsNgXd6gG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk MjUwNGI0NGEtMTZmZC00MGUwLTk2NjgtNTY4OGI3NTcwMWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/C2E+OlvkXp9lXgZIKi2zS9v0Vc/vW+ALWG 7h4cQXmR4xM1Bdbbx0C/650DY6wf/tylzsZcEUPKZUuz0778qV4xAzxKoMMybfZL 6ND2wZ2mEZjMMz88/pnVaKcnfZzGZNQ0n1drEgfwWOsa6kHojN8MphF8N/H+IqeR jaumbqaQV5iMUs9CjHqNwspriU7V+Vh6zGeBnbYfBv7GZL9zkmQl4WvkSxtmmK9N CxoLPz1aGl42P1Mmyp0W2HsjWoyABBu5sjh0mDCFJ7oFwnRuX5ZNj0UbZGs/Te+s Lr+3tLM2ElKtad065o/moPTVyVlpd9DPWeKfUupUCjYA5C/ZhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCc0czZ/jin8PgcpjIsRyQtWyNWwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMWFhOTcyZjMtYWEwNy0z OTM5LWI1MzgtZDk5MmZiZjg5ZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGb4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDMhcK2ATDnS1ewOed7NNVnyutm1PqS0nNHtkFwlncTVcX4vAVgrX3O v/KNRwfJ7By24G9qgBqSxENmo6MMkx3ssCrXy3aceIqbrEPC/7ATQXhPP7OuGqqY uaMG5ix/Kg2JWY3h4gjwYTmw2JBmlpI/7tyQmE30wzPpcxE8EAwyg1+U0eASDQq5 kwONlMSNm5gLR1TmRs0BAv0i2tPljdFn+JfnPvGLdFFPC1vRAHQevH+8RwZy5C1c nBInKEjwZFjM+YzKSWzFGWRDMZt/xPrXyzLZW80JuHHE7EdU+jTj4aLyv2evgAwQ S7C23jnHZIZXhqRWT8ENqD2A3QBgDxM= -----END CERTIFICATE-----Generated at Fri Apr 17 11:44:57 2026 by rpki-client