$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cef4cd4-dab0-375d-a79e-cb9078c0c2bf.roa File: 1cef4cd4-dab0-375d-a79e-cb9078c0c2bf.roa (raw, json) Hash identifier: ASpCTI7tYpwD9cdcZThqLMacW+yGfMwmHjKvSTBuFUw= Subject key identifier: A5:E9:90:8F:B8:C0:03:45:7A:3B:EB:83:41:2B:53:93:51:53:DB:1F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D3E000FA1AADE287E8F1DD500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cef4cd4-dab0-375d-a79e-cb9078c0c2bf.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 20431 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:0f:a1:aa:de:28:7e:8f:1d:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=0d2578a1-9467-46fb-aa8c-c11eae1fb8e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:94:53:be:d5:fb:27:75:7b:76:3c:2a:fa:3e: 50:bd:4a:d2:ce:21:cd:bd:9a:fd:5b:71:64:fa:e3: d8:39:74:22:85:32:a7:6f:e7:13:30:63:9b:05:57: b0:d0:24:c2:67:13:15:da:f7:e6:2b:55:9a:cf:a4: f4:03:2b:58:a8:96:d9:a6:c5:13:6c:e2:30:4d:e3: 9d:f7:d8:64:04:a7:c1:a9:b5:f7:91:20:38:83:d5: c6:59:40:55:76:23:5e:cf:c9:d8:21:2a:4f:b3:dc: 13:c6:51:8a:61:20:09:b3:27:af:62:85:b4:bb:e8: 1d:0d:1a:1f:9d:64:4f:a0:c5:4f:0e:c8:22:e4:7c: 88:01:48:9d:70:38:85:fb:b7:a6:cf:cb:cc:57:7e: bb:ab:d6:36:23:ae:02:90:e5:1a:10:e5:a5:42:10: 18:43:8f:c6:3c:a9:48:db:f0:ac:ad:62:a9:9e:95: 1e:5b:a3:33:80:ae:27:df:04:c7:6f:1e:f2:4e:e5: 11:d8:5b:08:2a:15:22:30:90:01:ea:d5:dd:45:00: 5c:40:31:4f:92:e5:a8:76:5c:2a:9b:b2:8b:72:b2: 4c:59:9b:da:94:72:20:a8:4c:b6:16:2d:f8:99:c2: 3d:c8:e4:69:e8:56:e9:56:d8:49:1d:62:08:75:6d: d1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E9:90:8F:B8:C0:03:45:7A:3B:EB:83:41:2B:53:93:51:53:DB:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cef4cd4-dab0-375d-a79e-cb9078c0c2bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:68:0f:fe:e4:84:ce:5c:30:0a:ed:eb:f3:29:bc:dc:14:87: a2:fa:34:14:81:5c:78:de:ca:20:f1:b2:47:a6:44:b4:5f:bf: de:bd:7f:a1:fc:d8:a7:52:55:98:24:78:3a:56:3e:2b:e2:78: 1a:94:44:2f:ea:19:93:06:38:43:3d:b7:07:bd:1c:f9:bf:66: 60:80:5b:a7:f4:2c:15:33:64:de:04:60:29:15:dd:51:40:c7: dd:42:86:fc:d2:d6:0f:28:c7:96:f6:dd:fc:ef:c1:0e:6c:8a: 91:c0:ff:ef:46:f5:9b:6e:05:54:8a:63:70:09:c4:72:3a:b5: 80:72:41:64:e6:e0:e3:f9:04:e0:0b:e6:ae:33:62:d4:77:f7: 4c:19:94:38:68:d2:ec:b4:e4:b2:06:0b:77:40:d6:0c:1d:63: 60:ae:f6:db:ff:be:e0:85:e2:04:4e:4a:d4:f5:a3:75:29:7e: 6a:7b:e4:42:70:30:b5:c9:95:20:52:c1:f4:8e:71:35:b2:3d: fa:46:e6:40:d1:82:22:5a:fb:9e:c2:eb:36:a9:ca:da:17:25: 49:92:c7:63:7d:d4:59:3e:4a:de:bb:26:f4:b2:56:22:07:03: aa:c6:57:a5:64:b9:88:b5:8d:c0:16:7e:34:e9:69:74:db:ef: b6:e7:9b:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AA+hqt4ofo8d1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MGQyNTc4YTEtOTQ2Ny00NmZiLWFhOGMtYzExZWFlMWZiOGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpRTvtX7J3V7djwq+j5QvUrSziHNvZr9W3Fk +uPYOXQihTKnb+cTMGObBVew0CTCZxMV2vfmK1Waz6T0AytYqJbZpsUTbOIwTeOd 99hkBKfBqbX3kSA4g9XGWUBVdiNez8nYISpPs9wTxlGKYSAJsyevYoW0u+gdDRof nWRPoMVPDsgi5HyIAUidcDiF+7emz8vMV367q9Y2I64CkOUaEOWlQhAYQ4/GPKlI 2/CsrWKpnpUeW6MzgK4n3wTHbx7yTuUR2FsIKhUiMJAB6tXdRQBcQDFPkuWodlwq m7KLcrJMWZvalHIgqEy2Fi34mcI9yORp6FbpVthJHWIIdW3R8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXpkI+4wANFejvrg0ErU5NRU9sfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWNlZjRjZDQtZGFiMC0z NzVkLWE3OWUtY2I5MDc4YzBjMmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFloD/7khM5cMArt6/MpvNwUh6L6NBSBXHjeyiDxskemRLRfv969f6H8 2KdSVZgkeDpWPivieBqURC/qGZMGOEM9twe9HPm/ZmCAW6f0LBUzZN4EYCkV3VFA x91ChvzS1g8ox5b23fzvwQ5sipHA/+9G9ZtuBVSKY3AJxHI6tYByQWTm4OP5BOAL 5q4zYtR390wZlDho0uy05LIGC3dA1gwdY2Cu9tv/vuCF4gROStT1o3Upfmp75EJw MLXJlSBSwfSOcTWyPfpG5kDRgiJa+57C6zapytoXJUmSx2N91Fk+St67JvSyViIH A6rGV6VkuYi1jcAWfjTpaXTb77bnm8E= -----END CERTIFICATE-----Generated at Thu Mar 26 12:06:10 2026 by rpki-client