$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/204f2da5-0e1a-3a60-a8c4-ea5b224adef1.roa File: 204f2da5-0e1a-3a60-a8c4-ea5b224adef1.roa (raw, json) Hash identifier: VzRiEQh2mgQ2GybFsgTwGIDAPHricNy7wo+IwCvxYNU= Subject key identifier: B6:5B:DC:DD:C7:95:2C:CE:75:CC:E0:2B:7C:AF:10:A5:D4:A6:D5:77 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D2A74DF668744D5C6E7713300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/204f2da5-0e1a-3a60-a8c4-ea5b224adef1.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 396576 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:df:66:87:44:d5:c6:e7:71:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=dbc7e278-e814-484e-be8b-b485b11b2d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:23:58:31:12:85:fe:7d:92:7c:a9:5b:88:b5: 02:37:4d:a3:a7:64:b1:99:9a:28:43:00:6d:13:37: 6a:d9:ae:a5:21:99:3c:a5:17:d8:b2:13:57:21:3f: e0:fa:f2:c6:bf:72:9d:bc:52:f3:93:89:f5:23:91: 12:4a:34:78:bf:db:ab:d0:b9:0f:94:4d:8f:0c:96: cc:da:ea:1a:73:07:65:cc:36:76:f0:91:4c:fa:46: 55:7d:2f:7c:68:4a:09:54:6c:42:d5:60:53:c4:0d: 8d:a4:7e:11:47:3a:6e:2e:70:73:f5:56:46:80:fc: 3d:05:51:5d:88:d0:e2:2d:54:3a:1e:b3:84:44:56: b1:b1:0c:c0:b6:21:5f:8f:44:c6:0a:fd:4b:56:60: 87:42:47:98:70:15:75:ac:4b:04:5b:5a:eb:5a:2a: 57:c8:27:42:01:59:03:0a:a5:da:2b:af:7c:10:d1: 51:dd:22:00:e2:08:67:b2:bb:7d:ac:3c:64:f0:3f: cd:b5:41:c0:92:28:6b:6a:f1:55:9f:e8:0f:f3:e8: 6c:d4:01:50:81:63:67:20:3b:8a:d6:af:0f:88:c2: f9:ae:28:7a:3d:40:29:cd:72:85:f7:ca:0a:82:fa: 83:34:0e:30:01:ce:fd:9b:a4:3d:9d:ab:1d:28:44: cc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:5B:DC:DD:C7:95:2C:CE:75:CC:E0:2B:7C:AF:10:A5:D4:A6:D5:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/204f2da5-0e1a-3a60-a8c4-ea5b224adef1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:91:0a:73:27:77:31:6a:43:a9:a5:fb:98:b0:42:dc:ce:07: b9:63:53:19:2e:52:2c:be:97:19:c0:26:43:64:fc:aa:02:31: 85:28:b5:f8:66:f1:47:89:e5:25:d2:e0:88:bf:bb:57:82:15: 1a:9b:1b:78:6b:d2:78:02:7f:09:ff:7c:2e:09:51:36:d6:fe: 72:98:6b:77:ba:9e:05:b1:a0:84:c5:1a:7e:68:3c:df:80:e3: 80:f7:d9:4c:82:53:de:1f:45:a0:9a:45:12:04:9b:30:c8:6b: 2e:51:ff:03:41:83:e1:bc:d9:4f:d7:66:bf:f5:ec:2f:eb:52: bf:67:68:2c:4b:ca:fe:a2:9e:c6:5a:4f:0d:4c:a0:ac:23:9f: 80:34:a9:52:b6:49:55:31:41:d4:80:cd:27:69:c3:34:b7:f0: f9:2e:4e:a7:2f:17:1d:f4:51:01:7f:ed:57:b6:b5:f5:e4:7c: 47:93:94:7d:8e:78:5f:50:e6:9a:0a:dc:7b:d2:e5:c2:60:a4: 5e:f2:c7:db:a9:87:c1:21:af:b7:1e:03:44:94:9e:b8:84:91: e9:00:0e:c4:f4:0b:0f:b5:fd:85:8f:2b:31:9e:d5:60:b8:4f: 9b:87:df:8f:de:82:ef:e0:4c:d2:8b:ae:89:ae:8c:5b:00:b1: a9:04:ee:cb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0qdN9mh0TVxudxMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk ZGJjN2UyNzgtZTgxNC00ODRlLWJlOGItYjQ4NWIxMWIyZDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+yNYMRKF/n2SfKlbiLUCN02jp2SxmZooQwBt Ezdq2a6lIZk8pRfYshNXIT/g+vLGv3KdvFLzk4n1I5ESSjR4v9ur0LkPlE2PDJbM 2uoacwdlzDZ28JFM+kZVfS98aEoJVGxC1WBTxA2NpH4RRzpuLnBz9VZGgPw9BVFd iNDiLVQ6HrOERFaxsQzAtiFfj0TGCv1LVmCHQkeYcBV1rEsEW1rrWipXyCdCAVkD CqXaK698ENFR3SIA4ghnsrt9rDxk8D/NtUHAkihravFVn+gP8+hs1AFQgWNnIDuK 1q8PiML5rih6PUApzXKF98oKgvqDNA4wAc79m6Q9nasdKETMrwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLZb3N3HlSzOdczgK3yvEKXUptV3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjA0ZjJkYTUtMGUxYS0z YTYwLWE4YzQtZWE1YjIyNGFkZWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAHkQpzJ3cxakOppfuYsELczge5Y1MZLlIsvpcZwCZDZPyqAjGFKLX4 ZvFHieUl0uCIv7tXghUamxt4a9J4An8J/3wuCVE21v5ymGt3up4FsaCExRp+aDzf gOOA99lMglPeH0WgmkUSBJswyGsuUf8DQYPhvNlP12a/9ewv61K/Z2gsS8r+op7G Wk8NTKCsI5+ANKlStklVMUHUgM0nacM0t/D5Lk6nLxcd9FEBf+1XtrX15HxHk5R9 jnhfUOaaCtx70uXCYKRe8sfbqYfBIa+3HgNElJ64hJHpAA7E9AsPtf2FjysxntVg uE+bh9+P3oLv4EzSi66JroxbALGpBO7L -----END CERTIFICATE-----Generated at Thu Mar 26 15:19:01 2026 by rpki-client