$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/4552c21f-8d05-3fbb-9242-1de377b08109.roa File: 4552c21f-8d05-3fbb-9242-1de377b08109.roa (raw, json) Hash identifier: 7nEwNkfMtIupAO+zBl07p1Abwy1SHKk2ibPOHwZIS98= Subject key identifier: 9B:5D:38:50:69:0D:B8:69:6A:B6:1C:3B:3D:FB:34:C1:2F:07:41:B6 Certificate issuer: /CN=0af21de0-2cae-45f7-b42c-9598c4271ef0 Certificate serial: 010D0C9F4328584C93D19BA1C27721B6EFEC68C0 Authority key identifier: 91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/4552c21f-8d05-3fbb-9242-1de377b08109.roa Signing time: Mon 19 Jan 2026 14:00:38 +0000 ROA not before: Mon 19 Jan 2026 14:00:38 +0000 ROA not after: Sun 19 Apr 2026 13:00:38 +0000 asID: 397627 IP address blocks: 192.203.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:93:d1:9b:a1:c2:77:21:b6:ef:ec:68:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0af21de0-2cae-45f7-b42c-9598c4271ef0 Validity Not Before: Jan 19 14:00:38 2026 GMT Not After : Apr 19 13:00:38 2026 GMT Subject: CN=3474e65d-365f-41ba-868d-9814068c38d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:58:78:41:df:89:78:45:26:1e:87:bb:6f:95: 8c:e9:f0:0a:09:48:e4:5a:a4:90:d5:5d:d8:1d:5f: e7:be:7f:e4:21:51:43:df:e6:9f:e9:c0:1d:be:90: 71:74:d0:b0:04:2d:90:a1:26:54:39:4d:52:e0:a5: 6a:f8:39:b8:3c:b5:0b:bd:84:54:da:a7:9f:f4:8d: e6:44:06:c1:7f:e5:99:94:ad:19:c6:ef:05:67:bb: 85:0c:d0:26:c0:c2:19:31:d9:14:42:29:f0:33:88: 88:6a:80:2d:99:ab:21:c6:26:5d:a5:cc:ce:c1:63: f2:19:c8:72:a9:34:ed:72:00:67:ab:0c:0c:60:bb: b0:30:88:74:94:6c:98:57:f6:1c:07:ed:99:07:79: 7c:76:75:0e:36:35:dc:da:2c:4d:00:15:ab:2b:06: 4d:8d:97:f5:0a:fd:c6:01:fc:7e:ee:7e:a7:59:61: 02:70:26:81:12:32:ea:6c:a9:89:f1:5d:c5:a6:17: 8e:36:17:c5:00:47:92:af:b8:ff:f1:04:65:48:58: ef:88:84:c1:e3:4b:21:e5:91:0b:bd:26:c9:2b:e4: 09:e7:cc:6e:18:a2:b0:fb:3f:01:ea:75:eb:d2:16: 97:b3:66:37:cc:cb:a7:e7:fd:4d:3f:a1:74:e9:70: e4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:5D:38:50:69:0D:B8:69:6A:B6:1C:3B:3D:FB:34:C1:2F:07:41:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/4552c21f-8d05-3fbb-9242-1de377b08109.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.crl X509v3 Authority Key Identifier: keyid:91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer sbgp-ipAddrBlock: critical IPv4: 192.203.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:3b:1d:93:02:c8:a2:d7:a0:17:75:49:65:3e:d4:05:9c:72: 5b:08:f6:bc:30:a5:1e:69:2d:65:4b:b6:18:47:5b:ea:ab:e4: f5:8a:74:76:fd:86:e2:6d:7a:fa:f7:92:81:8a:73:13:ce:71: 2f:d9:77:af:90:b9:0d:98:da:f7:dc:94:cb:23:38:3b:35:1d: 4e:06:fb:78:ed:cd:9d:a4:b3:e9:7f:2e:b7:ff:e1:f2:99:1c: 96:39:aa:39:34:85:8d:b1:da:94:18:b7:cd:41:85:b4:be:18: 82:84:f1:54:44:c0:04:56:32:16:52:8c:27:7e:5c:4a:fb:fe: 49:87:01:14:c4:93:46:cc:46:e2:b0:0b:61:22:15:c3:e8:f9: 11:88:aa:d3:40:1c:a4:bc:b6:8d:17:d7:40:30:38:6a:48:d1: 70:47:46:1a:9b:a9:c6:b3:90:c3:45:e5:0b:84:70:8a:fc:b8: 98:fb:fc:6b:00:3c:20:6b:b4:39:d3:f4:03:6c:e1:20:74:17: 7f:f6:6b:c0:d8:01:e5:1b:cb:62:08:e1:8d:35:de:f8:d3:2d: ff:87:40:85:4a:b3:10:5c:9d:6f:c9:c6:03:14:2e:3d:0f:b7: 4e:81:ff:99:cd:c7:65:59:77:d4:55:ed:b5:82:07:2b:a7:2b: ee:46:41:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyT0Zuhwnchtu/saMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFmMjFkZTAtMmNhZS00NWY3LWI0MmMtOTU5OGM0Mjcx ZWYwMB4XDTI2MDExOTE0MDAzOFoXDTI2MDQxOTEzMDAzOFowLzEtMCsGA1UEAxMk MzQ3NGU2NWQtMzY1Zi00MWJhLTg2OGQtOTgxNDA2OGMzOGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslh4Qd+JeEUmHoe7b5WM6fAKCUjkWqSQ1V3Y HV/nvn/kIVFD3+af6cAdvpBxdNCwBC2QoSZUOU1S4KVq+Dm4PLULvYRU2qef9I3m RAbBf+WZlK0Zxu8FZ7uFDNAmwMIZMdkUQinwM4iIaoAtmashxiZdpczOwWPyGchy qTTtcgBnqwwMYLuwMIh0lGyYV/YcB+2ZB3l8dnUONjXc2ixNABWrKwZNjZf1Cv3G Afx+7n6nWWECcCaBEjLqbKmJ8V3FpheONhfFAEeSr7j/8QRlSFjviITB40sh5ZEL vSbJK+QJ58xuGKKw+z8B6nXr0haXs2Y3zMun5/1NP6F06XDk7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtdOFBpDbhparYcOz37NMEvB0G2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYWYy MWRlMC0yY2FlLTQ1ZjctYjQyYy05NTk4YzQyNzFlZjAvNDU1MmMyMWYtOGQwNS0z ZmJiLTkyNDItMWRlMzc3YjA4MTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGFmMjFkZTAtMmNhZS00NWY3LWI0 MmMtOTU5OGM0MjcxZWYwLzBhZjIxZGUwLTJjYWUtNDVmNy1iNDJjLTk1OThjNDI3 MWVmMC5jcmwwHwYDVR0jBBgwFoAUkUcM29/LGs+5vi+ClwB3jJblLWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYWYyMWRlMC0yY2FlLTQ1ZjctYjQyYy05NTk4 YzQyNzFlZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMv9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEk7HZMCyKLXoBd1SWU+1AWcclsI9rwwpR5pLWVLthhHW+qr5PWKdHb9 huJtevr3koGKcxPOcS/Zd6+QuQ2Y2vfclMsjODs1HU4G+3jtzZ2ks+l/Lrf/4fKZ HJY5qjk0hY2x2pQYt81BhbS+GIKE8VREwARWMhZSjCd+XEr7/kmHARTEk0bMRuKw C2EiFcPo+RGIqtNAHKS8to0X10AwOGpI0XBHRhqbqcazkMNF5QuEcIr8uJj7/GsA PCBrtDnT9ANs4SB0F3/2a8DYAeUby2II4Y013vjTLf+HQIVKsxBcnW/JxgMULj0P t06B/5nNx2VZd9RV7bWCByunK+5GQVM= -----END CERTIFICATE-----Generated at Mon Mar 2 08:35:33 2026 by rpki-client