$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd2bfca4-1eae-382d-ba51-f5ce5f4606e3.roa File: dd2bfca4-1eae-382d-ba51-f5ce5f4606e3.roa (raw, json) Hash identifier: XdKKuasFCs3n2VebX63EA/AyFAAIMzWHg8+b/3lYLGo= Subject key identifier: A8:8A:D6:85:72:FC:8E:4C:26:E0:82:F0:6F:2E:40:59:BE:36:EB:8D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584DF210B2885A4E51A9D9780930 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd2bfca4-1eae-382d-ba51-f5ce5f4606e3.roa Signing time: Mon 25 May 2026 01:00:24 +0000 ROA not before: Mon 25 May 2026 01:00:24 +0000 ROA not after: Sun 23 Aug 2026 01:00:24 +0000 asID: 396602 IP address blocks: 192.153.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f2:10:b2:88:5a:4e:51:a9:d9:78:09:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 25 01:00:24 2026 GMT Not After : Aug 23 01:00:24 2026 GMT Subject: CN=bbe07252-e011-4c77-8b80-ea1707093f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:18:41:4f:32:d1:ce:5a:6c:83:60:21:10:7c: 82:42:3a:18:0e:1e:71:4f:fb:0c:96:49:54:6c:7f: 9b:c9:2a:08:ce:8e:47:9e:06:04:1f:e8:fb:fe:0f: 72:61:48:6a:64:a3:e3:fb:32:fa:9d:c2:5f:82:87: 8d:8f:5a:41:e2:65:c4:8b:18:82:1b:c4:3f:b5:25: 63:bc:8c:cc:4b:5c:a7:96:93:85:4e:62:6c:4c:2a: f2:35:5a:b3:0e:d3:d6:27:c1:cb:27:49:f6:22:0a: 81:18:5a:87:8f:a5:ab:d6:40:e4:95:75:a8:5a:5b: 96:2d:9b:63:e2:e9:60:2a:11:73:e1:06:61:19:88: 3e:30:a5:98:f6:0b:83:f3:93:5a:71:22:85:65:85: 35:52:49:bd:cf:52:37:05:36:c0:43:13:32:1a:55: 6a:84:10:2e:4f:7a:7c:93:0c:5d:ff:c6:b2:6a:a1: 2b:39:e2:a1:81:6b:7c:03:7e:b5:be:25:df:7e:c7: b1:52:e6:20:3e:8d:99:34:77:52:9d:be:18:5a:4e: e0:65:00:21:02:3b:23:8b:ab:18:7e:e3:9d:13:fd: 5a:32:92:54:e6:2d:43:db:84:54:55:bf:3a:36:37: ed:ca:38:05:5d:52:96:02:d2:33:8f:18:6d:af:f0: ff:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8A:D6:85:72:FC:8E:4C:26:E0:82:F0:6F:2E:40:59:BE:36:EB:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd2bfca4-1eae-382d-ba51-f5ce5f4606e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.153.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:db:88:35:44:51:bb:58:ae:5c:ee:14:b4:e4:10:8e:2d:57: 7e:49:e6:14:c1:dd:1b:61:ed:fa:12:62:7c:ac:70:f9:88:8f: a9:92:7e:ce:23:c3:c0:1a:73:92:ad:8b:10:8a:94:d7:0e:ab: b2:c9:e6:ee:2c:54:02:fa:44:33:cc:7c:aa:d4:b5:59:d1:2f: 9a:14:f8:96:44:e6:d9:f1:a8:4e:af:70:76:07:d8:59:a3:5b: 34:94:69:5d:57:d1:e2:a8:86:be:a1:ca:f7:2b:26:eb:4c:a9: 2d:d5:85:21:33:d9:2d:17:2f:e3:1a:1a:cb:a3:2c:a8:95:0e: c8:aa:80:1e:ec:3f:11:ab:0b:3c:88:5a:45:3a:45:87:bc:9c: 55:73:2d:c2:43:9b:cc:52:d2:d8:ec:2b:eb:19:2b:91:8f:ec: 7d:81:d0:e9:55:d2:26:69:26:62:dc:84:7f:73:4d:6b:df:d1: fd:68:02:06:87:bd:e8:f8:b1:a6:2f:1a:3f:2c:0a:8f:e0:ae: 68:9b:e7:3a:bd:df:c2:5e:8b:e2:e5:7c:29:2e:74:36:41:df: dc:99:eb:b3:5b:ce:f5:24:64:7a:25:ed:ca:5c:f8:39:1c:6f: 2a:fa:af:25:a3:ab:54:ec:5d:b7:ca:34:3a:f7:82:4c:7b:0e: 49:7f:ad:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3yELKIWk5Rqdl4CTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDUyNTAxMDAyNFoXDTI2MDgyMzAxMDAyNFowLzEtMCsGA1UEAxMk YmJlMDcyNTItZTAxMS00Yzc3LThiODAtZWExNzA3MDkzZjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBhBTzLRzlpsg2AhEHyCQjoYDh5xT/sMlklU bH+bySoIzo5HngYEH+j7/g9yYUhqZKPj+zL6ncJfgoeNj1pB4mXEixiCG8Q/tSVj vIzMS1ynlpOFTmJsTCryNVqzDtPWJ8HLJ0n2IgqBGFqHj6Wr1kDklXWoWluWLZtj 4ulgKhFz4QZhGYg+MKWY9guD85NacSKFZYU1Ukm9z1I3BTbAQxMyGlVqhBAuT3p8 kwxd/8ayaqErOeKhgWt8A361viXffsexUuYgPo2ZNHdSnb4YWk7gZQAhAjsji6sY fuOdE/1aMpJU5i1D24RUVb86NjftyjgFXVKWAtIzjxhtr/D/5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiK1oVy/I5MJuCC8G8uQFm+NuuNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGQyYmZjYTQtMWVhZS0z ODJkLWJhNTEtZjVjZTVmNDYwNmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJn3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjbiDVEUbtYrlzuFLTkEI4tV35J5hTB3Rth7foSYnyscPmIj6mSfs4j w8Aac5KtixCKlNcOq7LJ5u4sVAL6RDPMfKrUtVnRL5oU+JZE5tnxqE6vcHYH2Fmj WzSUaV1X0eKohr6hyvcrJutMqS3VhSEz2S0XL+MaGsujLKiVDsiqgB7sPxGrCzyI WkU6RYe8nFVzLcJDm8xS0tjsK+sZK5GP7H2B0OlV0iZpJmLchH9zTWvf0f1oAgaH vej4saYvGj8sCo/grmib5zq938Jei+LlfCkudDZB39yZ67NbzvUkZHol7cpc+Dkc byr6ryWjq1TsXbfKNDr3gkx7Dkl/rbc= -----END CERTIFICATE-----Generated at Sat Jun 13 16:48:38 2026 by rpki-client