$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ba8c6bf-6582-354f-81a8-00fa81f5b4f8.roa File: 1ba8c6bf-6582-354f-81a8-00fa81f5b4f8.roa (raw, json) Hash identifier: oQm4ddJNdT+eMQj1yQMxfZUDFm8nPK45680XHEIvXfs= Subject key identifier: EC:AB:BA:2C:05:DD:57:0F:81:60:6B:68:82:65:0A:DA:58:23:32:6D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1707EEDCFEAD99A773009D60 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ba8c6bf-6582-354f-81a8-00fa81f5b4f8.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 396544 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:ee:dc:fe:ad:99:a7:73:00:9d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=fed8858d-5de0-43a0-9179-470c057700ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:61:63:4e:3b:6f:8c:b4:0d:09:5d:98:97:62: 09:4c:1b:a3:4b:7c:20:d0:6d:45:a7:63:46:97:be: 48:37:6a:e3:d7:4d:60:1e:23:ce:e7:6a:61:b9:6e: 2d:f2:95:a7:a2:06:77:53:52:d3:62:d9:a4:a7:b2: 39:57:5b:01:fa:2a:18:68:7d:d5:73:1e:b9:53:48: 89:40:45:70:10:31:56:35:41:3d:d7:c8:5d:3a:4d: b4:a1:f1:83:36:b6:d1:e0:65:05:48:62:17:da:79: 6e:dc:3a:2b:63:bd:40:43:a6:8a:ac:10:78:21:c7: 0f:d0:30:5a:6d:ae:fb:0c:37:cb:6e:c5:ec:6b:2b: 75:e9:ba:70:a5:54:e9:95:91:2e:13:b4:76:22:60: c3:40:4b:2f:e1:96:17:a9:92:7e:42:65:74:2d:b7: 5e:9a:25:39:94:18:5d:d5:07:92:32:3d:3f:fb:09: ab:53:28:de:96:2b:c5:b9:6b:4c:12:f9:2b:9d:b4: f7:23:41:2e:a8:c0:20:af:00:8f:47:59:94:33:58: c0:7f:9a:f7:e5:a6:23:60:e5:5c:54:28:03:51:48: 7d:12:c5:55:a5:00:c9:54:a1:ad:c7:bc:76:7e:50: b5:03:b1:bf:dc:24:96:c8:42:63:d3:49:6c:9a:73: 01:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:AB:BA:2C:05:DD:57:0F:81:60:6B:68:82:65:0A:DA:58:23:32:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ba8c6bf-6582-354f-81a8-00fa81f5b4f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:84:1c:91:00:d1:6d:3a:32:04:5e:50:af:ba:61:de:34:a8: e4:cf:20:9b:9a:0d:67:07:37:c0:08:e6:69:6e:dd:82:b7:e7: de:97:bf:16:e1:80:a4:b4:5b:b8:4d:75:08:c7:7e:e9:5c:0a: 1e:ec:73:d0:7c:f9:c7:41:29:60:d9:81:4f:0b:3d:55:66:73: f2:8a:0d:e8:19:94:fa:aa:b3:3d:c5:e0:e1:43:55:5d:d3:98: 65:fb:d0:87:9d:ca:01:20:d5:f0:a1:2a:cb:15:64:ac:ac:ec: 77:87:82:fa:bf:f8:9f:ad:49:a6:b4:05:bf:9f:be:61:17:0c: 94:52:d1:8a:8a:21:31:2a:ee:d8:94:71:5c:d1:88:27:9e:f4: a9:53:b2:ee:d6:a0:66:0f:e9:21:cb:b3:13:87:d2:ab:5e:0c: 8f:9d:93:79:7f:3b:c8:c3:2c:4c:69:4d:e9:ea:19:37:25:22: fb:b5:27:eb:ce:79:7e:9a:7e:13:ca:cc:fe:1f:b9:90:ec:06: cb:47:6a:ea:5d:ab:d9:4b:32:5e:4e:27:98:2f:ed:21:29:f2: 8e:99:ff:3b:f5:ec:47:5d:9f:78:93:cb:a3:bb:59:3d:c1:5b: 42:23:b2:a4:b7:7f:f1:ef:b0:eb:00:7b:fb:67:ad:0f:b3:d2: b4:82:38:9d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0XB+7c/q2Zp3MAnWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk ZmVkODg1OGQtNWRlMC00M2EwLTkxNzktNDcwYzA1NzcwMGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomFjTjtvjLQNCV2Yl2IJTBujS3wg0G1Fp2NG l75IN2rj101gHiPO52phuW4t8pWnogZ3U1LTYtmkp7I5V1sB+ioYaH3Vcx65U0iJ QEVwEDFWNUE918hdOk20ofGDNrbR4GUFSGIX2nlu3DorY71AQ6aKrBB4IccP0DBa ba77DDfLbsXsayt16bpwpVTplZEuE7R2ImDDQEsv4ZYXqZJ+QmV0LbdemiU5lBhd 1QeSMj0/+wmrUyjelivFuWtMEvkrnbT3I0EuqMAgrwCPR1mUM1jAf5r35aYjYOVc VCgDUUh9EsVVpQDJVKGtx7x2flC1A7G/3CSWyEJj00lsmnMBYwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOyruiwF3VcPgWBraIJlCtpYIzJtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWJhOGM2YmYtNjU4Mi0z NTRmLTgxYTgtMDBmYTgxZjViNGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAfhByRANFtOjIEXlCvumHeNKjkzyCbmg1nBzfACOZpbt2Ct+fel78W 4YCktFu4TXUIx37pXAoe7HPQfPnHQSlg2YFPCz1VZnPyig3oGZT6qrM9xeDhQ1Vd 05hl+9CHncoBINXwoSrLFWSsrOx3h4L6v/ifrUmmtAW/n75hFwyUUtGKiiExKu7Y lHFc0YgnnvSpU7Lu1qBmD+khy7MTh9KrXgyPnZN5fzvIwyxMaU3p6hk3JSL7tSfr znl+mn4Tysz+H7mQ7AbLR2rqXavZSzJeTieYL+0hKfKOmf879exHXZ94k8uju1k9 wVtCI7Kkt3/x77DrAHv7Z60Ps9K0gjid -----END CERTIFICATE-----Generated at Thu Mar 26 14:14:35 2026 by rpki-client