$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e9c63de-1f9c-3c23-8afd-0af41159ca7e.roa File: 1e9c63de-1f9c-3c23-8afd-0af41159ca7e.roa (raw, json) Hash identifier: g0z6Ku9ImaWCMAYkmcdB16IGLJno/cEOZKCkFANOqOI= Subject key identifier: 42:48:38:4A:83:7C:64:7A:5F:71:7D:B7:A0:5B:6A:A8:2B:29:FC:9D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1707F0E67E6935452D97DF60 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e9c63de-1f9c-3c23-8afd-0af41159ca7e.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 396541 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:f0:e6:7e:69:35:45:2d:97:df:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=01fffc2d-7c4f-48fd-b2ed-35228d57ef97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:12:bd:01:14:48:bf:61:17:75:c3:47:d9:3f: b1:0f:96:63:23:8a:4e:49:33:81:63:42:95:09:01: 4c:f8:55:85:c2:4e:3b:f6:15:b3:6e:74:01:3a:04: 68:76:80:0b:43:e5:8a:7f:ab:49:7c:96:93:d5:b3: eb:a2:cc:20:c0:cf:19:00:3e:d9:96:bf:d3:b0:e9: 6b:18:38:2f:f9:04:76:f5:59:4e:6d:4d:01:24:62: a7:8b:f6:02:a2:49:95:4d:62:ee:d1:04:ff:86:81: e0:5d:f9:d1:d5:84:c2:0d:a4:62:b7:b5:a5:4a:bf: 9b:74:b3:08:1c:ea:dd:f1:79:42:bd:e4:bd:58:fc: fd:5d:88:0d:b8:30:44:db:7f:87:9c:2c:c4:52:ce: c5:7a:fb:cf:2e:ef:cb:a5:c1:66:cc:d5:64:cf:33: 73:8f:6f:2d:f2:70:0f:04:c2:b9:4c:f6:e9:4f:23: 53:96:fc:b4:43:9e:e8:db:3f:88:35:76:b5:3c:e4: 54:2d:39:43:30:88:6e:e1:86:95:85:f7:ae:8f:34: bf:61:f4:d8:a6:c8:ce:bc:e3:70:7f:a0:70:d3:f9: a6:64:22:4b:8c:95:49:9a:f6:a0:b0:b7:e6:5a:b8: 36:4e:2a:d3:7f:ea:bf:00:49:88:7c:97:3b:b6:2f: 05:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:48:38:4A:83:7C:64:7A:5F:71:7D:B7:A0:5B:6A:A8:2B:29:FC:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e9c63de-1f9c-3c23-8afd-0af41159ca7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:93:ff:17:c8:e8:fd:1e:5c:31:d4:ff:10:6c:8f:09:69:cd: 0a:4b:9a:01:1e:f4:5a:58:18:c7:63:54:80:dd:37:80:70:fc: 1f:aa:02:51:f4:d7:f9:f4:ee:6d:e8:39:f0:4c:3a:83:44:06: 7f:a5:95:94:6e:f3:d1:73:bb:de:a0:a6:e9:6c:88:a7:70:a6: a5:53:31:f1:1e:c9:b8:1a:8e:c6:47:c0:8e:12:37:28:5c:f5: 63:80:1a:31:32:60:41:b0:95:7d:38:0e:3f:5a:21:50:87:7f: 0c:d9:5d:59:cb:60:7d:d9:f1:39:0e:62:25:75:dd:73:5e:89: 3c:de:f3:44:41:0e:8b:20:a8:05:2a:57:26:34:93:72:61:73: eb:e0:ab:28:f8:e1:8a:5c:5a:46:9a:f6:c0:93:94:83:26:62: ec:49:9f:7a:34:8b:cc:c0:ba:45:77:fb:e1:fb:47:9c:c2:63: e6:32:b0:82:74:ce:8b:7b:b1:60:0a:89:f8:ac:62:a4:a3:09: 31:a8:d3:97:47:51:d1:0c:f5:4d:5a:01:06:1c:9f:ad:2f:67: 24:66:9e:9d:53:7f:92:1a:ef:0b:fe:0e:2b:7b:e1:5a:cd:8c: c2:88:6a:74:63:1e:7b:a1:58:4c:1f:af:eb:7e:b4:ae:18:44: d5:2d:de:e5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0XB/Dmfmk1RS2X32AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk MDFmZmZjMmQtN2M0Zi00OGZkLWIyZWQtMzUyMjhkNTdlZjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRK9ARRIv2EXdcNH2T+xD5ZjI4pOSTOBY0KV CQFM+FWFwk479hWzbnQBOgRodoALQ+WKf6tJfJaT1bProswgwM8ZAD7Zlr/TsOlr GDgv+QR29VlObU0BJGKni/YCokmVTWLu0QT/hoHgXfnR1YTCDaRit7WlSr+bdLMI HOrd8XlCveS9WPz9XYgNuDBE23+HnCzEUs7FevvPLu/LpcFmzNVkzzNzj28t8nAP BMK5TPbpTyNTlvy0Q57o2z+INXa1PORULTlDMIhu4YaVhfeujzS/YfTYpsjOvONw f6Bw0/mmZCJLjJVJmvagsLfmWrg2TirTf+q/AEmIfJc7ti8FoQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEJIOEqDfGR6X3F9t6BbaqgrKfydMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWU5YzYzZGUtMWY5Yy0z YzIzLThhZmQtMGFmNDExNTljYTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCuk/8XyOj9Hlwx1P8QbI8Jac0KS5oBHvRaWBjHY1SA3TeAcPwfqgJR 9Nf59O5t6DnwTDqDRAZ/pZWUbvPRc7veoKbpbIincKalUzHxHsm4Go7GR8COEjco XPVjgBoxMmBBsJV9OA4/WiFQh38M2V1Zy2B92fE5DmIldd1zXok83vNEQQ6LIKgF KlcmNJNyYXPr4Kso+OGKXFpGmvbAk5SDJmLsSZ96NIvMwLpFd/vh+0ecwmPmMrCC dM6Le7FgCon4rGKkowkxqNOXR1HRDPVNWgEGHJ+tL2ckZp6dU3+SGu8L/g4re+Fa zYzCiGp0Yx57oVhMH6/rfrSuGETVLd7l -----END CERTIFICATE-----Generated at Thu Mar 26 16:04:54 2026 by rpki-client