$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/4552c21f-8d05-3fbb-9242-1de377b08109.roa File: 4552c21f-8d05-3fbb-9242-1de377b08109.roa (raw, json) Hash identifier: I/8Xm7aNYWAd29Hnzu89UQ/naRrrIhS5NsXhii18aQk= Subject key identifier: 87:D7:BA:71:D2:C8:52:D4:8C:0A:E3:AD:7D:BC:EA:69:65:08:82:CB Certificate issuer: /CN=0af21de0-2cae-45f7-b42c-9598c4271ef0 Certificate serial: 010D0C9F4328584D746FC54B1BECB7D627A50280 Authority key identifier: 91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/4552c21f-8d05-3fbb-9242-1de377b08109.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 397627 IP address blocks: 192.203.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:c5:4b:1b:ec:b7:d6:27:a5:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0af21de0-2cae-45f7-b42c-9598c4271ef0 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=268aeb72-c58e-42ca-adcf-c4a2f4bbc7a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1d:fa:ab:5d:9b:5a:6a:a1:5d:45:3d:b2:11: a3:7d:b4:87:d4:0a:5b:44:41:5f:cc:65:20:ad:2b: 3f:aa:bb:30:dd:8a:69:fa:c1:80:b5:8d:bd:fa:a3: 80:31:3e:3b:12:bd:76:19:d1:e5:a0:22:c3:26:d3: ce:f4:f9:fb:97:9b:2b:7b:4b:33:33:15:64:8a:cc: b1:50:dd:bb:8c:66:6c:ac:5b:29:5e:b8:68:56:f1: cb:5a:f3:d5:86:27:ec:b7:9e:ba:dc:ff:10:2f:ac: 55:e3:26:dd:77:21:7c:89:5c:f4:a3:37:1f:7b:61: 1d:b0:b9:5b:57:20:28:c5:15:29:0a:b2:5e:75:fd: de:5d:96:fc:94:b6:dd:50:ee:21:5e:25:df:e0:9c: 20:46:29:ea:c7:2c:3f:b7:f5:84:c5:05:58:c2:51: 43:d3:69:51:ad:2e:95:07:64:6e:e9:c1:7b:6c:16: 32:d5:99:d0:dd:c3:dc:bc:24:03:96:e0:f3:b9:47: 52:9a:10:13:0a:d7:28:ad:42:42:79:57:cf:a9:dc: 1e:bb:c2:af:97:31:48:e4:07:89:c8:22:16:14:37: 0a:78:27:08:1f:77:43:3c:06:82:4d:31:f1:2f:0d: eb:8a:3e:6a:d3:24:2f:30:2c:37:48:ce:7e:8c:8c: a9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D7:BA:71:D2:C8:52:D4:8C:0A:E3:AD:7D:BC:EA:69:65:08:82:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/4552c21f-8d05-3fbb-9242-1de377b08109.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.crl X509v3 Authority Key Identifier: keyid:91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer sbgp-ipAddrBlock: critical IPv4: 192.203.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:bc:d7:1b:8d:4c:f2:95:30:85:a7:12:f6:a4:cd:d8:b3:f6: a9:a6:51:01:ac:a1:88:18:a4:3a:d0:f9:e2:a8:0f:aa:75:cb: d2:36:a4:83:02:e3:12:5b:63:f0:0d:61:f2:aa:8f:85:12:c3: 15:91:95:1d:4f:34:d0:dc:4e:1e:03:36:ae:bc:72:7b:b6:de: 71:b9:00:ae:51:2a:96:8a:f4:4a:5b:39:a4:fe:1d:9f:21:46: 01:20:df:75:8d:67:38:5b:bf:2b:38:4b:1c:56:cd:ab:0b:76: 68:d0:f4:83:d6:70:d6:69:9f:b9:0a:48:29:08:87:37:20:9b: 70:75:95:c8:8b:22:84:58:74:5c:d7:8b:1e:1a:88:5d:50:6b: 1e:20:8f:5e:7f:47:17:a8:dd:d7:aa:6b:b6:6f:ef:de:db:50: 6a:37:fb:a3:7e:db:b3:36:4a:6d:79:25:d2:88:5d:5b:32:90: b6:f6:cb:34:f3:ba:4b:42:32:fa:42:eb:de:6d:0a:66:a8:03: 73:41:f8:71:40:7d:52:ff:b8:a8:fc:64:a2:7b:e4:e3:10:d7: c5:2d:32:13:60:1e:2e:41:bb:36:3c:20:ab:7c:86:88:84:39: d9:5c:19:14:b0:48:92:22:c0:c6:78:f9:64:f8:e2:ca:34:c7: d7:e7:93:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b8VLG+y31ielAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFmMjFkZTAtMmNhZS00NWY3LWI0MmMtOTU5OGM0Mjcx ZWYwMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk MjY4YWViNzItYzU4ZS00MmNhLWFkY2YtYzRhMmY0YmJjN2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR36q12bWmqhXUU9shGjfbSH1ApbREFfzGUg rSs/qrsw3Ypp+sGAtY29+qOAMT47Er12GdHloCLDJtPO9Pn7l5sre0szMxVkisyx UN27jGZsrFspXrhoVvHLWvPVhifst5663P8QL6xV4ybddyF8iVz0ozcfe2EdsLlb VyAoxRUpCrJedf3eXZb8lLbdUO4hXiXf4JwgRinqxyw/t/WExQVYwlFD02lRrS6V B2Ru6cF7bBYy1ZnQ3cPcvCQDluDzuUdSmhATCtcorUJCeVfPqdweu8KvlzFI5AeJ yCIWFDcKeCcIH3dDPAaCTTHxLw3rij5q0yQvMCw3SM5+jIyp6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfXunHSyFLUjArjrX286mllCILLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYWYy MWRlMC0yY2FlLTQ1ZjctYjQyYy05NTk4YzQyNzFlZjAvNDU1MmMyMWYtOGQwNS0z ZmJiLTkyNDItMWRlMzc3YjA4MTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGFmMjFkZTAtMmNhZS00NWY3LWI0 MmMtOTU5OGM0MjcxZWYwLzBhZjIxZGUwLTJjYWUtNDVmNy1iNDJjLTk1OThjNDI3 MWVmMC5jcmwwHwYDVR0jBBgwFoAUkUcM29/LGs+5vi+ClwB3jJblLWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYWYyMWRlMC0yY2FlLTQ1ZjctYjQyYy05NTk4 YzQyNzFlZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMv9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEK81xuNTPKVMIWnEvakzdiz9qmmUQGsoYgYpDrQ+eKoD6p1y9I2pIMC 4xJbY/ANYfKqj4USwxWRlR1PNNDcTh4DNq68cnu23nG5AK5RKpaK9EpbOaT+HZ8h RgEg33WNZzhbvys4SxxWzasLdmjQ9IPWcNZpn7kKSCkIhzcgm3B1lciLIoRYdFzX ix4aiF1Qax4gj15/Rxeo3deqa7Zv797bUGo3+6N+27M2Sm15JdKIXVsykLb2yzTz uktCMvpC695tCmaoA3NB+HFAfVL/uKj8ZKJ75OMQ18UtMhNgHi5BuzY8IKt8hoiE OdlcGRSwSJIiwMZ4+WT44so0x9fnk9E= -----END CERTIFICATE-----Generated at Fri Apr 17 19:38:53 2026 by rpki-client