$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2043549d-f40a-31a7-a1fa-16a4f971c708.roa File: 2043549d-f40a-31a7-a1fa-16a4f971c708.roa (raw, json) Hash identifier: /wSlOzINclXK7fqrgACTr9VamG4MOYckj1wT9cPDyrU= Subject key identifier: 38:FF:67:5B:AB:98:3C:47:5A:DF:8D:F0:F3:A8:2C:3B:DE:BB:22:1E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D8D8FF0BB1E0DEF17DEEF7480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2043549d-f40a-31a7-a1fa-16a4f971c708.roa Signing time: Sun 19 Apr 2026 01:00:23 +0000 ROA not before: Sun 19 Apr 2026 01:00:23 +0000 ROA not after: Sat 18 Jul 2026 01:00:23 +0000 asID: 397198 IP address blocks: 192.54.112.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:8f:f0:bb:1e:0d:ef:17:de:ef:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 19 01:00:23 2026 GMT Not After : Jul 18 01:00:23 2026 GMT Subject: CN=1eceed96-038c-45a6-a932-e50c3e3ee600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e5:6a:45:25:bc:96:65:81:24:81:c7:81:04: 33:7f:d0:ae:cc:ce:b5:f2:db:5c:0e:0a:9a:4a:ec: 3e:d9:74:91:45:0a:58:d5:eb:05:4d:4b:9a:d5:7e: ae:77:35:6b:48:1b:e8:75:8c:79:66:66:36:26:9c: 4b:70:77:2d:5f:62:aa:b4:e3:22:28:f4:82:87:fc: df:40:de:72:5e:82:7b:24:e4:28:a4:38:57:84:bc: ee:6f:34:63:42:f3:63:97:fa:95:4c:70:ad:08:0d: b3:dd:88:40:10:13:24:f6:de:6d:da:6e:75:06:cc: d2:ab:70:d3:73:f0:5e:f9:02:9c:ca:02:9c:4b:ff: 03:15:90:eb:48:bb:e9:bb:f3:51:31:06:2e:30:99: 6d:f8:ae:60:bc:ea:d6:c8:6b:7c:d8:ef:c7:67:46: cd:dd:16:55:ca:a7:5a:5d:73:fe:ed:d3:1f:88:01: 39:b4:4d:5c:c0:2f:b9:e5:c9:e0:98:e4:eb:71:cf: 52:61:1c:ec:0e:3e:3a:d3:c4:23:fd:aa:fd:b7:f6: da:43:f5:0c:e7:12:24:f0:0b:3e:27:3a:2b:d4:20: 95:f9:8e:a5:2a:5b:0d:d5:90:ca:da:db:e9:83:43: 78:a8:22:a1:62:37:ef:31:38:ef:a6:ab:fa:21:a6: 73:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:FF:67:5B:AB:98:3C:47:5A:DF:8D:F0:F3:A8:2C:3B:DE:BB:22:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2043549d-f40a-31a7-a1fa-16a4f971c708.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.54.112.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:61:70:57:6e:5c:c5:a6:55:08:35:3e:36:b8:03:e5:bd:3d: d8:e5:64:c7:da:68:58:e9:63:59:75:c5:7b:94:8a:58:0f:a4: e2:12:03:09:ef:f5:79:33:95:10:ca:81:8f:a2:81:97:af:07: ef:b3:bf:b1:99:4b:85:e1:cd:d6:8b:a2:fd:aa:b1:4f:99:05: 45:86:d0:57:dd:5c:85:66:d6:80:5e:2f:ce:f9:98:05:98:c2: 27:8f:d8:1d:d1:62:7a:b2:b4:13:9a:08:6c:c9:39:3e:99:bc: b1:76:d1:d1:16:af:e5:92:03:7f:0e:ed:d6:88:99:15:15:1d: e4:0b:a4:6c:34:c3:6c:4d:9e:0d:d6:8a:51:26:50:dc:a3:60: 1e:12:f2:e3:9c:de:19:43:88:78:28:b8:0c:62:a8:38:9b:77: fc:d0:1e:da:77:82:c0:b0:7f:0d:6f:c9:58:13:e3:ed:42:6b: c4:3f:1f:ad:3c:33:78:68:0b:4f:1f:59:3c:55:19:50:ce:6e: 34:5b:0b:2a:84:3f:0e:91:31:cc:67:98:73:59:8d:31:13:67: fe:12:82:5f:b1:08:a7:80:af:32:06:c5:e5:fc:bd:cb:9b:16: de:08:85:0c:1c:bd:eb:54:ea:d8:ad:97:0f:39:cf:76:32:50: 53:95:69:c6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2Nj/C7Hg3vF97vdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxOTAxMDAyM1oXDTI2MDcxODAxMDAyM1owLzEtMCsGA1UEAxMk MWVjZWVkOTYtMDM4Yy00NWE2LWE5MzItZTUwYzNlM2VlNjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeVqRSW8lmWBJIHHgQQzf9CuzM618ttcDgqa Suw+2XSRRQpY1esFTUua1X6udzVrSBvodYx5ZmY2JpxLcHctX2KqtOMiKPSCh/zf QN5yXoJ7JOQopDhXhLzubzRjQvNjl/qVTHCtCA2z3YhAEBMk9t5t2m51BszSq3DT c/Be+QKcygKcS/8DFZDrSLvpu/NRMQYuMJlt+K5gvOrWyGt82O/HZ0bN3RZVyqda XXP+7dMfiAE5tE1cwC+55cngmOTrcc9SYRzsDj4608Qj/ar9t/baQ/UM5xIk8As+ Jzor1CCV+Y6lKlsN1ZDK2tvpg0N4qCKhYjfvMTjvpqv6IaZzVQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDj/Z1urmDxHWt+N8POoLDveuyIeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjA0MzU0OWQtZjQwYS0z MWE3LWExZmEtMTZhNGY5NzFjNzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDZwHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCNYXBXblzFplUINT42uAPlvT3Y5WTH2mhY6WNZdcV7lIpYD6TiEgMJ 7/V5M5UQyoGPooGXrwfvs7+xmUuF4c3Wi6L9qrFPmQVFhtBX3VyFZtaAXi/O+ZgF mMInj9gd0WJ6srQTmghsyTk+mbyxdtHRFq/lkgN/Du3WiJkVFR3kC6RsNMNsTZ4N 1opRJlDco2AeEvLjnN4ZQ4h4KLgMYqg4m3f80B7ad4LAsH8Nb8lYE+PtQmvEPx+t PDN4aAtPH1k8VRlQzm40WwsqhD8OkTHMZ5hzWY0xE2f+EoJfsQingK8yBsXl/L3L mxbeCIUMHL3rVOrYrZcPOc92MlBTlWnG -----END CERTIFICATE-----Generated at Wed May 13 15:50:48 2026 by rpki-client