$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1157fba7-9bec-36ee-a0af-25d05b6ffe8b.roa File: 1157fba7-9bec-36ee-a0af-25d05b6ffe8b.roa (raw, json) Hash identifier: 9FwHoPge4oY/79akRXZpvCaJn0RFr8Lio0TbUe7UQ5Q= Subject key identifier: 33:1D:9B:1A:EE:90:29:E3:F2:1E:D6:3E:40:0A:11:E4:26:15:28:68 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D3DFF90BC451C3979B40ED480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1157fba7-9bec-36ee-a0af-25d05b6ffe8b.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396646 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:90:bc:45:1c:39:79:b4:0e:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=59a1efc8-3f87-4973-9d39-c71857f95a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5b:47:41:37:90:bc:d3:3a:dc:ad:71:92:a5: e7:28:2c:6c:8a:4e:db:a1:05:78:8b:bb:99:7c:5a: 32:8e:6b:2f:c6:74:8d:95:2a:2c:2a:74:d6:3e:d8: 2c:48:01:4f:ab:2e:41:7f:f4:d1:b4:36:4e:1d:67: a0:d7:ec:dd:46:7a:f8:fd:33:a1:35:ff:da:e5:01: d9:02:c8:e0:9d:74:cd:cd:ac:cf:ba:e4:4e:87:5e: 9a:c7:7f:a6:a4:c2:5e:bf:c0:a1:25:98:7b:34:5c: 79:f4:0d:b1:e0:de:98:7c:88:13:70:de:b9:55:99: e2:4b:08:51:12:11:21:92:09:54:07:d7:c6:1a:05: a4:6f:0a:16:82:de:07:3b:40:7a:f6:e3:34:51:f0: 6c:93:5e:63:d1:da:07:2d:f7:7d:82:65:ae:5e:ca: 38:12:39:98:8f:16:3d:97:c4:25:05:b6:09:20:fa: 1a:56:46:92:62:b0:e9:bd:d8:6e:da:dc:3d:50:6f: e6:c4:ee:af:54:af:88:a1:72:8f:20:6e:50:8f:01: d9:91:17:85:1a:c6:fb:c9:4f:0b:01:3b:7a:3e:f7: 04:9d:86:20:03:55:cc:08:c8:3c:bd:b6:d8:7b:78: 53:0f:d0:cb:92:71:dc:40:18:79:e3:48:07:22:03: 3e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:1D:9B:1A:EE:90:29:E3:F2:1E:D6:3E:40:0A:11:E4:26:15:28:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1157fba7-9bec-36ee-a0af-25d05b6ffe8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:5c:2d:1e:50:ea:ed:da:0e:f5:67:33:c5:21:7d:70:52:ae: 32:9e:9b:9e:8b:02:ad:27:b0:24:28:a1:5e:76:f6:d5:10:21: fe:06:32:40:45:a4:74:c6:cd:90:35:0a:59:0e:f5:45:82:7f: 4a:b7:e1:6a:e0:43:64:4f:92:df:d6:e3:66:c2:dd:73:c8:64: d9:61:3c:b5:dc:e2:f3:69:b1:6f:4d:77:27:fc:65:89:85:f4: a1:8e:4c:66:46:1c:1b:58:61:fa:46:d9:46:5f:c3:43:4f:67: b3:3c:54:2d:00:60:b7:92:04:aa:86:f0:01:29:c1:82:ae:9a: ff:71:3f:c7:57:e8:19:98:94:d6:82:ab:54:16:71:ae:3b:0d: 45:fb:ee:8a:0f:ec:90:93:0b:68:62:d8:33:33:0f:ec:cd:0b: 79:bb:a4:39:db:13:d9:36:83:e8:a1:98:2a:2e:1c:5d:4c:25: e9:42:d1:0b:2d:7d:b5:bd:a8:65:f8:09:e7:74:65:ae:47:f5: bb:49:79:0b:dd:12:b7:6e:2e:ae:f8:95:5d:d8:f0:5f:42:e7: 7a:bf:ba:d5:7c:f1:6f:26:94:54:7a:1d:2b:2f:77:bc:18:5e: 67:9f:17:52:99:ca:70:a3:6e:6b:44:2a:2f:d0:ed:4b:61:7a: d9:86:07:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/5C8RRw5ebQO1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NTlhMWVmYzgtM2Y4Ny00OTczLTlkMzktYzcxODU3Zjk1YTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqltHQTeQvNM63K1xkqXnKCxsik7boQV4i7uZ fFoyjmsvxnSNlSosKnTWPtgsSAFPqy5Bf/TRtDZOHWeg1+zdRnr4/TOhNf/a5QHZ AsjgnXTNzazPuuROh16ax3+mpMJev8ChJZh7NFx59A2x4N6YfIgTcN65VZniSwhR EhEhkglUB9fGGgWkbwoWgt4HO0B69uM0UfBsk15j0doHLfd9gmWuXso4EjmYjxY9 l8QlBbYJIPoaVkaSYrDpvdhu2tw9UG/mxO6vVK+IoXKPIG5QjwHZkReFGsb7yU8L ATt6PvcEnYYgA1XMCMg8vbbYe3hTD9DLknHcQBh540gHIgM+ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMdmxrukCnj8h7WPkAKEeQmFShoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTE1N2ZiYTctOWJlYy0z NmVlLWEwYWYtMjVkMDViNmZmZThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5cLR5Q6u3aDvVnM8UhfXBSrjKem56LAq0nsCQooV529tUQIf4GMkBF pHTGzZA1ClkO9UWCf0q34WrgQ2RPkt/W42bC3XPIZNlhPLXc4vNpsW9Ndyf8ZYmF 9KGOTGZGHBtYYfpG2UZfw0NPZ7M8VC0AYLeSBKqG8AEpwYKumv9xP8dX6BmYlNaC q1QWca47DUX77ooP7JCTC2hi2DMzD+zNC3m7pDnbE9k2g+ihmCouHF1MJelC0Qst fbW9qGX4Ced0Za5H9btJeQvdErduLq74lV3Y8F9C53q/utV88W8mlFR6HSsvd7wY XmefF1KZynCjbmtEKi/Q7UthetmGByc= -----END CERTIFICATE-----Generated at Thu Mar 26 10:21:01 2026 by rpki-client