$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f/af51d429-e74d-3b6c-92ae-a0ca559e4a2b.roa File: af51d429-e74d-3b6c-92ae-a0ca559e4a2b.roa (raw, json) Hash identifier: gM5vrihAAs2lxSshcHdzoM2gnlbdAF/Fi0o5OBAW5zo= Subject key identifier: C4:CC:B6:16:00:44:CC:56:D3:39:FB:92:40:DF:2B:AD:7E:DB:09:EC Certificate issuer: /CN=8bf08e2b-3722-4799-800f-2ecf7a554b0f Certificate serial: 010D0C9F4328584D773A8324DE3C008E03D38140 Authority key identifier: 0B:A0:ED:10:56:8B:05:D9:58:04:69:EA:B7:47:7F:B1:43:E4:CE:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f/af51d429-e74d-3b6c-92ae-a0ca559e4a2b.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 17318 IP address blocks: 192.153.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f/8bf08e2b-3722-4799-800f-2ecf7a554b0f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f/8bf08e2b-3722-4799-800f-2ecf7a554b0f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:83:24:de:3c:00:8e:03:d3:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bf08e2b-3722-4799-800f-2ecf7a554b0f Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=a13dfe33-6270-4a5f-b4ba-ad4a386db319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e7:1d:6c:9b:2d:26:ac:6e:7c:e2:17:bc:b0: fb:52:96:fe:79:5b:9b:38:d0:11:93:46:5e:75:fc: 15:10:f6:3b:fe:91:7b:c1:7e:57:1a:a0:2e:ea:aa: 62:ad:60:17:d7:7f:ca:b2:fc:80:05:67:64:f0:0e: 72:e9:7e:c7:91:de:f7:49:29:a7:77:8b:6d:99:46: 6b:78:eb:6c:96:59:9a:7e:df:7d:21:d5:9c:f5:4d: 16:87:57:7b:6b:76:9a:18:60:1e:91:c6:0e:72:06: 5a:88:ff:5e:82:6f:6c:8c:b4:49:d4:56:c6:d2:a7: 5c:7d:66:66:ae:83:d3:3a:41:f2:fa:8c:dc:68:92: ec:1e:4d:69:47:0c:0b:80:43:f5:4a:4c:e2:81:e3: 71:4f:8a:c4:e7:8f:ee:ba:85:e7:a4:92:81:ce:a6: b3:2e:b6:37:a3:59:7e:9d:f5:06:af:19:c4:01:82: 25:0f:a6:9c:6b:cb:cf:11:68:89:18:dc:5b:f9:01: 73:71:90:df:07:19:c4:fc:49:8a:ee:58:e5:48:8d: 01:0b:e3:4c:91:23:d6:d1:3b:f4:db:d3:1f:74:c5: 6b:81:69:fd:53:ba:b4:d2:52:82:f7:78:57:cd:4a: a5:e0:08:fe:fa:2d:9c:25:84:20:c6:9a:6e:d2:3a: bf:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:CC:B6:16:00:44:CC:56:D3:39:FB:92:40:DF:2B:AD:7E:DB:09:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f/af51d429-e74d-3b6c-92ae-a0ca559e4a2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f/8bf08e2b-3722-4799-800f-2ecf7a554b0f.crl X509v3 Authority Key Identifier: keyid:0B:A0:ED:10:56:8B:05:D9:58:04:69:EA:B7:47:7F:B1:43:E4:CE:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8bf08e2b-3722-4799-800f-2ecf7a554b0f.cer sbgp-ipAddrBlock: critical IPv4: 192.153.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:db:81:e6:af:6e:bf:93:31:4f:a7:b5:f9:05:5a:21:8e:e7: 40:92:4d:3d:1d:69:93:61:50:69:7c:bc:35:45:8c:aa:c4:28: 34:56:12:cc:c0:59:1a:44:8e:52:d8:33:7f:f5:2c:29:64:0b: 3d:5e:e3:41:a6:52:2a:b9:61:0f:da:c8:61:57:fd:3f:c2:99: cf:9e:56:7e:8f:8c:e0:cf:03:5b:21:4b:ad:bc:37:a7:9e:07: 9b:1a:93:2f:48:71:a1:0b:4d:ee:a6:c2:c9:a8:e6:48:44:5f: de:69:ad:7f:43:07:f6:6a:3e:d8:af:c4:de:2e:f7:78:50:94: 6a:16:62:e7:b9:f1:8d:19:b0:55:11:5d:e6:cd:ca:19:0b:4d: 2c:9a:70:0d:77:fc:18:57:8a:fe:5b:e1:29:b7:1a:74:31:9e: de:fa:f6:93:9f:41:8e:d2:25:7d:b2:62:bf:43:40:ce:16:ed: 15:7e:26:fb:ef:e6:ef:b8:66:de:5c:87:b1:b6:3b:90:a5:ca: bb:7f:69:25:b7:57:6b:12:6a:99:2b:a6:72:93:04:ef:dd:00: 49:48:0b:ab:a6:87:43:54:e8:24:1b:e1:31:11:dd:c0:f6:2b: 65:17:54:36:8a:a4:f5:82:ae:5a:d0:91:42:45:f0:20:6e:8d: 46:5e:8a:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13OoMk3jwAjgPTgUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJmMDhlMmItMzcyMi00Nzk5LTgwMGYtMmVjZjdhNTU0 YjBmMB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk YTEzZGZlMzMtNjI3MC00YTVmLWI0YmEtYWQ0YTM4NmRiMzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+cdbJstJqxufOIXvLD7Upb+eVubONARk0Ze dfwVEPY7/pF7wX5XGqAu6qpirWAX13/KsvyABWdk8A5y6X7Hkd73SSmnd4ttmUZr eOtsllmaft99IdWc9U0Wh1d7a3aaGGAekcYOcgZaiP9egm9sjLRJ1FbG0qdcfWZm roPTOkHy+ozcaJLsHk1pRwwLgEP1SkzigeNxT4rE54/uuoXnpJKBzqazLrY3o1l+ nfUGrxnEAYIlD6aca8vPEWiJGNxb+QFzcZDfBxnE/EmK7ljlSI0BC+NMkSPW0Tv0 29MfdMVrgWn9U7q00lKC93hXzUql4Aj++i2cJYQgxppu0jq/sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTMthYARMxW0zn7kkDfK61+2wnsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84YmYw OGUyYi0zNzIyLTQ3OTktODAwZi0yZWNmN2E1NTRiMGYvYWY1MWQ0MjktZTc0ZC0z YjZjLTkyYWUtYTBjYTU1OWU0YTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvOGJmMDhlMmItMzcyMi00Nzk5LTgw MGYtMmVjZjdhNTU0YjBmLzhiZjA4ZTJiLTM3MjItNDc5OS04MDBmLTJlY2Y3YTU1 NGIwZi5jcmwwHwYDVR0jBBgwFoAUC6DtEFaLBdlYBGnqt0d/sUPkzu8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS84YmYwOGUyYi0zNzIyLTQ3OTktODAwZi0yZWNm N2E1NTRiMGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJmaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrbgeavbr+TMU+ntfkFWiGO50CSTT0daZNhUGl8vDVFjKrEKDRWEszA WRpEjlLYM3/1LClkCz1e40GmUiq5YQ/ayGFX/T/Cmc+eVn6PjODPA1shS628N6ee B5saky9IcaELTe6mwsmo5khEX95prX9DB/ZqPtivxN4u93hQlGoWYue58Y0ZsFUR XebNyhkLTSyacA13/BhXiv5b4Sm3GnQxnt769pOfQY7SJX2yYr9DQM4W7RV+Jvvv 5u+4Zt5ch7G2O5Clyrt/aSW3V2sSapkrpnKTBO/dAElIC6umh0NU6CQb4TER3cD2 K2UXVDaKpPWCrlrQkUJF8CBujUZeiqA= -----END CERTIFICATE-----Generated at Fri Apr 17 12:45:51 2026 by rpki-client