$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522/1a9f6371-5de6-348f-926c-183d129cf5d2.roa File: 1a9f6371-5de6-348f-926c-183d129cf5d2.roa (raw, json) Hash identifier: clglj7A1GHMkB1Uxr2TO7dDtSCiUal+3+G+3+Dks/ok= Subject key identifier: 4A:4D:F2:2F:FA:59:F1:97:3B:51:A5:F8:92:D6:F6:FC:F2:9A:89:75 Certificate issuer: /CN=563c2ad3-4e5e-4758-b1be-07bf4ce94522 Certificate serial: 010D0C9F4328584D59EA79CE3F183B2CE4B4A3C0 Authority key identifier: E4:1D:68:AD:2A:A1:CA:56:12:93:53:E0:77:2B:30:47:23:63:15:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522/1a9f6371-5de6-348f-926c-183d129cf5d2.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 43009 IP address blocks: 208.93.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522/563c2ad3-4e5e-4758-b1be-07bf4ce94522.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522/563c2ad3-4e5e-4758-b1be-07bf4ce94522.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:79:ce:3f:18:3b:2c:e4:b4:a3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=563c2ad3-4e5e-4758-b1be-07bf4ce94522 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=cfad9e59-c32d-49f0-90ce-8acb288ca598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:dc:3e:4b:98:20:e2:78:75:a0:77:c9:5b:22: 8e:37:7a:28:00:61:76:9d:4c:14:48:84:97:08:19: 64:7a:fb:96:f5:29:5a:dc:e1:cf:b1:29:c9:61:39: c1:0e:22:ed:39:c2:ea:d1:51:06:0d:d4:70:04:7a: 6c:7a:79:45:01:a7:b7:6f:f4:7f:d2:33:3f:b9:63: 9f:d6:38:00:9b:ea:46:9a:28:b0:41:87:f3:88:39: c5:e1:c0:5e:1a:6c:18:76:09:62:cb:38:d7:9f:0e: 88:61:99:ca:4c:3f:ce:96:a5:74:9d:45:32:1d:9d: 53:60:bd:a1:c3:af:df:96:4a:97:00:f9:ca:1e:e3: 71:ab:2a:79:69:de:82:b6:cd:34:08:52:b8:55:73: 12:9f:70:4c:66:6d:30:72:2b:4e:4f:14:41:f9:db: f4:2d:42:b4:3c:98:e6:b6:8d:c2:2a:ad:f5:3b:d1: 1f:10:d1:6d:d9:c3:ef:0a:e2:56:32:34:9a:30:a1: b7:c8:5a:21:64:81:44:91:f0:7b:b6:7e:04:03:eb: 0e:d9:9b:e3:0f:4b:66:13:ef:ec:53:99:98:34:5b: d7:3a:44:20:0e:2c:73:f4:c5:5e:ab:b0:a0:37:de: 35:59:a6:17:c4:b1:d3:b9:c6:8c:e7:23:da:12:5a: dd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:4D:F2:2F:FA:59:F1:97:3B:51:A5:F8:92:D6:F6:FC:F2:9A:89:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522/1a9f6371-5de6-348f-926c-183d129cf5d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522/563c2ad3-4e5e-4758-b1be-07bf4ce94522.crl X509v3 Authority Key Identifier: keyid:E4:1D:68:AD:2A:A1:CA:56:12:93:53:E0:77:2B:30:47:23:63:15:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522.cer sbgp-ipAddrBlock: critical IPv4: 208.93.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:e2:f0:38:b6:ff:e7:53:58:3c:3d:12:12:36:01:e6:ba:1d: 29:0d:c2:41:0b:71:a7:99:4b:f8:df:e4:12:f8:7c:0d:d1:2c: f0:d3:1f:c9:bc:29:2a:b8:2c:0f:fc:b6:25:a4:18:4a:52:1f: ef:44:9b:e8:fd:00:06:7e:00:29:ee:56:e0:4f:72:57:e1:c0: 80:70:e2:41:c7:0c:87:47:12:1f:0f:f0:28:82:31:97:9e:56: 53:15:f7:4a:70:4f:11:93:e4:cd:69:2e:33:35:c3:93:77:57: a5:46:a4:84:f0:eb:f0:93:89:22:c4:8a:b6:8f:75:8e:1f:34: a7:50:19:a1:3e:80:35:49:ae:b2:f4:ed:43:cc:64:8b:ab:94: f9:30:eb:9b:c0:d7:fa:51:55:97:59:83:9b:85:ec:dd:f4:dd: ae:14:5e:d2:51:62:5f:59:7a:19:77:25:c3:5c:27:e2:05:81: 00:3a:cc:e1:f2:8a:52:be:5f:72:f3:48:ab:15:4e:ff:5a:dd: 49:18:de:18:3d:93:5e:b1:5a:29:e7:f3:ad:bb:ca:41:fc:36: 6d:e6:e6:b2:5c:4a:72:8a:f9:96:02:df:4e:46:37:71:a9:a3: 67:17:1c:0e:65:ec:01:af:8f:5f:8b:e0:ca:78:ae:b8:00:4b: b1:0a:31:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6nnOPxg7LOS0o8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTYzYzJhZDMtNGU1ZS00NzU4LWIxYmUtMDdiZjRjZTk0 NTIyMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk Y2ZhZDllNTktYzMyZC00OWYwLTkwY2UtOGFjYjI4OGNhNTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Nw+S5gg4nh1oHfJWyKON3ooAGF2nUwUSISX CBlkevuW9Sla3OHPsSnJYTnBDiLtOcLq0VEGDdRwBHpsenlFAae3b/R/0jM/uWOf 1jgAm+pGmiiwQYfziDnF4cBeGmwYdgliyzjXnw6IYZnKTD/OlqV0nUUyHZ1TYL2h w6/flkqXAPnKHuNxqyp5ad6Cts00CFK4VXMSn3BMZm0wcitOTxRB+dv0LUK0PJjm to3CKq31O9EfENFt2cPvCuJWMjSaMKG3yFohZIFEkfB7tn4EA+sO2ZvjD0tmE+/s U5mYNFvXOkQgDixz9MVeq7CgN941WaYXxLHTucaM5yPaElrdfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpN8i/6WfGXO1Gl+JLW9vzymol1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NjNj MmFkMy00ZTVlLTQ3NTgtYjFiZS0wN2JmNGNlOTQ1MjIvMWE5ZjYzNzEtNWRlNi0z NDhmLTkyNmMtMTgzZDEyOWNmNWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTYzYzJhZDMtNGU1ZS00NzU4LWIx YmUtMDdiZjRjZTk0NTIyLzU2M2MyYWQzLTRlNWUtNDc1OC1iMWJlLTA3YmY0Y2U5 NDUyMi5jcmwwHwYDVR0jBBgwFoAU5B1orSqhylYSk1PgdyswRyNjFRswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NjNjMmFkMy00ZTVlLTQ3NTgtYjFiZS0wN2Jm NGNlOTQ1MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F0zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDi8Di2/+dTWDw9EhI2Aea6HSkNwkELcaeZS/jf5BL4fA3RLPDTH8m8 KSq4LA/8tiWkGEpSH+9Em+j9AAZ+ACnuVuBPclfhwIBw4kHHDIdHEh8P8CiCMZee VlMV90pwTxGT5M1pLjM1w5N3V6VGpITw6/CTiSLEiraPdY4fNKdQGaE+gDVJrrL0 7UPMZIurlPkw65vA1/pRVZdZg5uF7N303a4UXtJRYl9Zehl3JcNcJ+IFgQA6zOHy ilK+X3LzSKsVTv9a3UkY3hg9k16xWinn8627ykH8Nm3m5rJcSnKK+ZYC305GN3Gp o2cXHA5l7AGvj1+L4Mp4rrgAS7EKMZo= -----END CERTIFICATE-----Generated at Sun Apr 19 11:21:53 2026 by rpki-client