$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1a7bfc39-b64d-3b65-80be-e3794b147834.roa File: 1a7bfc39-b64d-3b65-80be-e3794b147834.roa (raw, json) Hash identifier: 5uTumvLV2D4eIZI9KaHgpHff9Lp4xT0Veb8rvTZ68T0= Subject key identifier: 3D:53:61:80:E5:23:4D:1C:9A:D9:6F:F0:10:09:51:80:30:BD:80:DE Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E1FA9A7B6ABD46DF377F00F80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1a7bfc39-b64d-3b65-80be-e3794b147834.roa Signing time: Wed 10 Jun 2026 09:00:13 +0000 ROA not before: Wed 10 Jun 2026 09:00:13 +0000 ROA not after: Tue 08 Sep 2026 09:00:13 +0000 asID: 396356 IP address blocks: 192.253.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1f:a9:a7:b6:ab:d4:6d:f3:77:f0:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 10 09:00:13 2026 GMT Not After : Sep 8 09:00:13 2026 GMT Subject: CN=dba8a9c6-97e7-4893-97f1-a8e00f20e5de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:77:00:ba:c0:60:3a:67:fe:a2:69:5f:de:c5: af:33:c5:3a:be:f5:2a:03:8e:36:a4:5c:50:4f:25: c4:89:80:51:a2:b0:aa:76:1d:99:fc:cd:2b:47:df: cf:60:04:98:e1:b3:0e:df:59:5c:c4:3c:4b:e2:af: 31:b1:b0:cd:fa:d3:6e:7a:8a:8a:84:17:25:88:b8: 0b:17:51:73:1a:26:47:e5:ea:f1:7c:29:c9:98:34: 06:87:e7:49:04:11:8a:f5:29:00:70:b6:d1:21:68: ee:27:53:0f:f7:e1:d2:e7:53:03:0b:1b:41:78:76: 18:62:aa:8e:01:91:75:95:6b:6d:3c:33:a9:62:e2: 1d:2e:68:67:22:59:51:57:7f:f3:bc:07:b7:28:78: f2:2f:2a:d6:65:ce:b8:b7:59:61:ba:a3:b7:7d:4b: 74:21:87:40:32:36:af:4c:5b:82:d6:f7:e7:03:db: 65:a5:b3:0a:4f:56:8f:4a:ec:5e:1f:df:86:a1:e2: e3:86:1e:01:56:a8:f3:1d:bd:74:eb:13:8d:11:d6: c9:9f:9d:88:e2:33:8c:54:98:47:52:c3:46:5a:03: 33:6e:9f:f7:1d:1e:bb:6a:dd:07:3e:55:73:1a:b7: 99:66:b1:18:3f:bd:d7:16:97:d8:05:26:d1:7d:96: ce:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:53:61:80:E5:23:4D:1C:9A:D9:6F:F0:10:09:51:80:30:BD:80:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1a7bfc39-b64d-3b65-80be-e3794b147834.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 192.253.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:eb:d3:20:b2:de:02:8d:52:4c:6c:26:99:f6:fa:43:55:30: e6:67:59:dd:81:c0:7d:4b:16:03:6a:b6:23:39:44:30:82:e0: 20:6a:64:83:c4:75:69:16:d6:73:81:e2:ab:7e:a1:7a:2c:26: 65:aa:30:be:70:2b:37:cf:d4:da:fa:05:01:91:3c:67:7a:d5: 66:86:32:c0:67:ae:1f:9a:d3:b6:09:d0:12:b3:c9:e9:23:a9: 8c:c0:67:2f:06:93:2e:54:42:e6:9f:2c:b3:2a:c6:93:15:47: 2a:7f:91:7b:43:bc:a8:98:22:da:69:ae:b9:50:05:25:9d:84: 6e:2e:2d:40:12:ae:19:ed:88:db:16:d3:da:78:f0:5c:28:56: c3:04:69:69:fe:e8:8d:f4:86:ac:10:cb:33:63:1c:2a:64:e2: 7b:e9:ae:73:9c:b3:06:08:66:c4:7d:f1:db:80:b3:de:23:1e: 9c:c1:0e:36:d0:b0:5a:39:a9:1b:14:80:16:7e:69:8e:04:a7: c2:a0:30:27:c2:99:e9:02:45:61:c7:b4:3c:77:9f:31:de:59: 42:55:0d:64:54:95:9b:f1:ef:1a:c6:e1:0f:4a:2e:92:c1:4b: a1:3d:aa:a9:8f:2d:52:5b:b3:0d:a9:1e:8b:7f:9e:c9:5b:b1: a0:ef:79:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4fqae2q9Rt83fwD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDYxMDA5MDAxM1oXDTI2MDkwODA5MDAxM1owLzEtMCsGA1UEAxMk ZGJhOGE5YzYtOTdlNy00ODkzLTk3ZjEtYThlMDBmMjBlNWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3cAusBgOmf+omlf3sWvM8U6vvUqA442pFxQ TyXEiYBRorCqdh2Z/M0rR9/PYASY4bMO31lcxDxL4q8xsbDN+tNueoqKhBcliLgL F1FzGiZH5erxfCnJmDQGh+dJBBGK9SkAcLbRIWjuJ1MP9+HS51MDCxtBeHYYYqqO AZF1lWttPDOpYuIdLmhnIllRV3/zvAe3KHjyLyrWZc64t1lhuqO3fUt0IYdAMjav TFuC1vfnA9tlpbMKT1aPSuxeH9+GoeLjhh4BVqjzHb106xONEdbJn52I4jOMVJhH UsNGWgMzbp/3HR67at0HPlVzGreZZrEYP73XFpfYBSbRfZbO1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1TYYDlI00cmtlv8BAJUYAwvYDeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMWE3YmZjMzktYjY0ZC0z YjY1LTgwYmUtZTM3OTRiMTQ3ODM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP37MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPr0yCy3gKNUkxsJpn2+kNVMOZnWd2BwH1LFgNqtiM5RDCC4CBqZIPE dWkW1nOB4qt+oXosJmWqML5wKzfP1Nr6BQGRPGd61WaGMsBnrh+a07YJ0BKzyekj qYzAZy8Gky5UQuafLLMqxpMVRyp/kXtDvKiYItpprrlQBSWdhG4uLUASrhntiNsW 09p48FwoVsMEaWn+6I30hqwQyzNjHCpk4nvprnOcswYIZsR98duAs94jHpzBDjbQ sFo5qRsUgBZ+aY4Ep8KgMCfCmekCRWHHtDx3nzHeWUJVDWRUlZvx7xrG4Q9KLpLB S6E9qqmPLVJbsw2pHot/nslbsaDveaU= -----END CERTIFICATE-----Generated at Sat Jun 13 05:56:56 2026 by rpki-client