$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11afe5f8-01e1-3b9f-b1fd-141d95855009.roa File: 11afe5f8-01e1-3b9f-b1fd-141d95855009.roa (raw, json) Hash identifier: n7qybZ3tCCqauItQVpGrF0KKAT/9iotOcAcnZdOPmRs= Subject key identifier: F3:49:51:92:03:27:FE:16:86:15:4D:72:C5:23:62:10:A8:6B:3E:77 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D46B115629E2A5087BB5750E0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11afe5f8-01e1-3b9f-b1fd-141d95855009.roa Signing time: Tue 24 Mar 2026 15:44:58 +0000 ROA not before: Tue 24 Mar 2026 15:44:58 +0000 ROA not after: Mon 22 Jun 2026 15:44:58 +0000 asID: 396551 IP address blocks: 192.42.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:b1:15:62:9e:2a:50:87:bb:57:50:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 24 15:44:58 2026 GMT Not After : Jun 22 15:44:58 2026 GMT Subject: CN=ce19c20a-dfb3-4064-bbca-be9e665e1a3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8a:4d:02:ad:e8:e0:bb:19:2c:af:64:65:fb: 0b:1c:c0:00:b8:52:27:f7:32:26:ce:51:50:31:24: f9:d3:a3:db:b2:92:22:08:d1:9b:ea:b1:8f:50:ab: eb:df:55:1d:60:36:b5:7c:d0:8e:82:46:04:1e:e8: 42:a3:d9:47:27:52:99:b7:64:cd:d3:8e:cc:32:26: 13:e6:d6:80:e8:d1:68:d4:ac:e7:55:20:44:96:56: 8f:ca:27:82:56:f6:be:fe:f2:ae:04:74:c8:78:c7: 92:80:7b:db:30:51:da:9f:c3:34:fe:cd:56:b6:ad: bf:ef:08:09:f7:f0:5b:e8:43:98:15:7c:c9:45:40: 83:83:69:33:86:a1:f0:2b:d9:1f:db:8e:f1:56:e1: 5f:6d:e9:f1:7b:d0:65:1d:77:c5:ae:44:03:e7:71: c6:46:5b:2a:36:4a:5a:19:b1:86:1f:d5:aa:93:0b: 20:ad:07:ae:56:94:e2:14:66:37:af:eb:84:a1:66: fb:a6:b1:8f:40:e3:ef:d4:81:a8:7e:90:65:9a:7b: 60:0c:18:eb:6a:01:44:78:50:4c:4a:02:11:8e:a2: c9:d8:5c:a2:f2:59:b9:af:5b:85:6a:e7:fc:67:c0: 53:3a:f3:2e:f5:d7:22:57:a8:a0:ad:0c:48:74:de: 24:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:49:51:92:03:27:FE:16:86:15:4D:72:C5:23:62:10:A8:6B:3E:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11afe5f8-01e1-3b9f-b1fd-141d95855009.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:4f:c8:2c:eb:f6:c9:63:7b:fe:0d:b4:b9:6a:48:7b:ce:97: a3:42:33:76:76:75:61:77:2e:cf:32:8c:94:08:8a:c8:f9:37: 7e:4a:6a:a1:8b:08:b7:a1:b0:83:bc:c7:09:83:63:fd:d3:f2: d9:61:9e:6c:fe:cf:cf:e7:41:a8:be:e6:37:2a:53:a2:e9:bf: 1f:3b:5c:7a:f4:9a:39:a3:90:b3:b0:e8:4b:82:79:bf:10:e4: 67:1c:26:48:ed:6c:f7:56:f7:39:99:7d:c9:1c:38:74:d5:64: bd:72:a5:a9:f7:ba:d1:b9:52:b9:d0:fb:b8:8f:ed:5a:b1:6f: 1a:b5:b9:cc:6b:a2:49:de:df:f3:57:80:af:59:81:4a:45:c7: 24:a3:68:6a:c0:21:bb:bb:58:80:25:d3:f0:86:4a:b1:e5:d4: f9:ed:7e:d5:4a:e7:93:51:c1:52:d4:41:8a:5a:ec:d9:42:95: d0:57:b1:80:e1:bc:ba:1a:18:ff:c3:80:83:54:7d:37:a7:b9: 5f:27:fa:56:fa:6e:d3:fe:df:71:d9:6b:ad:27:51:b6:3d:b5: 0c:2d:62:d1:8b:78:69:46:79:67:73:50:58:59:c8:ff:89:ad: 47:fb:f9:32:a2:6f:5d:62:25:ae:0b:46:4f:42:00:d7:7f:69: c0:64:f3:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1GsRVinipQh7tXUOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyNDE1NDQ1OFoXDTI2MDYyMjE1NDQ1OFowLzEtMCsGA1UEAxMk Y2UxOWMyMGEtZGZiMy00MDY0LWJiY2EtYmU5ZTY2NWUxYTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnopNAq3o4LsZLK9kZfsLHMAAuFIn9zImzlFQ MST506PbspIiCNGb6rGPUKvr31UdYDa1fNCOgkYEHuhCo9lHJ1KZt2TN047MMiYT 5taA6NFo1KznVSBEllaPyieCVva+/vKuBHTIeMeSgHvbMFHan8M0/s1Wtq2/7wgJ 9/Bb6EOYFXzJRUCDg2kzhqHwK9kf247xVuFfbenxe9BlHXfFrkQD53HGRlsqNkpa GbGGH9WqkwsgrQeuVpTiFGY3r+uEoWb7prGPQOPv1IGofpBlmntgDBjragFEeFBM SgIRjqLJ2Fyi8lm5r1uFauf8Z8BTOvMu9dciV6igrQxIdN4keQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNJUZIDJ/4WhhVNcsUjYhCoaz53MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTFhZmU1ZjgtMDFlMS0z YjlmLWIxZmQtMTQxZDk1ODU1MDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCquMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNPyCzr9slje/4NtLlqSHvOl6NCM3Z2dWF3Ls8yjJQIisj5N35KaqGL CLehsIO8xwmDY/3T8tlhnmz+z8/nQai+5jcqU6Lpvx87XHr0mjmjkLOw6EuCeb8Q 5GccJkjtbPdW9zmZfckcOHTVZL1ypan3utG5UrnQ+7iP7Vqxbxq1ucxrokne3/NX gK9ZgUpFxySjaGrAIbu7WIAl0/CGSrHl1PntftVK55NRwVLUQYpa7NlCldBXsYDh vLoaGP/DgINUfTenuV8n+lb6btP+33HZa60nUbY9tQwtYtGLeGlGeWdzUFhZyP+J rUf7+TKib11iJa4LRk9CANd/acBk81k= -----END CERTIFICATE-----Generated at Thu Mar 26 13:33:15 2026 by rpki-client