$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25659463-2c37-32fc-8eb1-e485426edec8.roa File: 25659463-2c37-32fc-8eb1-e485426edec8.roa (raw, json) Hash identifier: XvqxefEVK2m0xBVkLpeaDHfzxi7qy6V6Y1x2w+uG14U= Subject key identifier: 49:22:EB:33:C2:54:73:C5:AD:67:E6:C7:57:0E:05:1F:0B:5F:88:7D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D3DFF8943BC76671C7416B080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25659463-2c37-32fc-8eb1-e485426edec8.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 397199 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:89:43:bc:76:67:1c:74:16:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=e00c7e32-43fb-430e-b7e5-ed75dcff446a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:07:6c:12:ad:3f:32:9f:f1:82:d9:83:04:11: b7:e7:32:18:db:80:11:e9:a4:76:33:28:fb:22:2b: 0f:89:27:ad:56:4a:43:0f:29:ca:e2:d5:eb:17:fd: c1:06:16:9b:62:28:4b:3d:5a:a7:e3:20:7c:6e:4b: 7c:3a:68:8d:58:2e:8c:c0:93:e4:99:d1:32:1e:46: e9:4a:68:6e:4a:0c:ae:77:5a:eb:1e:e6:e4:42:7d: b7:21:1d:a4:d0:93:8f:1b:a6:8e:35:88:b8:a6:6a: d8:86:2f:33:b8:16:01:45:19:f2:fa:6e:91:18:b5: 7e:12:e4:b9:7a:06:ef:c3:71:62:92:2f:9b:61:2b: aa:fd:2a:4b:9f:cd:30:53:53:ee:f8:5c:a0:bc:54: 61:c2:b3:d0:bb:64:52:99:af:25:8c:0b:f4:cd:6d: 91:16:08:d9:bd:d7:9b:f5:ce:6c:6a:6f:7c:f7:91: 87:4d:3d:d0:ae:0d:d3:3f:62:75:48:43:25:71:88: 2b:b4:25:27:cd:fa:ba:07:59:e8:0f:72:a5:07:03: 89:4d:99:06:c9:fc:53:c3:0a:f9:52:cd:f4:c0:c5: c6:9c:66:60:d4:11:57:1c:5f:7d:67:22:29:91:d6: 2f:91:75:1a:84:00:51:47:d5:09:0e:3b:fc:34:78: d6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:22:EB:33:C2:54:73:C5:AD:67:E6:C7:57:0E:05:1F:0B:5F:88:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25659463-2c37-32fc-8eb1-e485426edec8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:e2:b7:7a:9b:36:4f:ad:a1:50:2a:b1:c8:cb:3d:4b:d0:80: 58:c0:9c:93:25:34:44:5f:f9:9b:c1:57:d2:34:65:3d:e1:b7: 04:6e:30:e3:fd:d9:1a:cb:92:09:67:06:87:f4:9d:7b:9f:c0: e9:5a:e0:67:7e:50:51:68:7e:0f:70:1d:70:45:01:d2:00:0d: fe:2b:97:c6:dc:ef:47:2e:1b:07:e2:85:4a:7b:6a:d7:4b:91: 1b:56:5d:68:dd:ce:be:fd:e6:c6:73:5e:53:75:82:f7:e2:1c: 03:01:ac:67:a0:49:09:bf:81:91:7b:4b:1c:f9:3e:59:b4:d8: c9:53:2d:e8:6d:72:89:de:2e:23:14:f3:dd:2b:46:86:f8:c9: 7d:1b:3d:3c:db:55:33:27:62:dc:a1:a9:62:76:c6:6e:ae:99: 31:7f:e3:42:e5:e0:1e:e5:77:bd:54:fe:9d:72:0b:43:7e:9e: 96:20:b2:6a:11:5b:3d:0b:5b:33:46:22:69:e2:70:30:fe:c8: e1:e9:ab:ee:71:ab:65:1f:c3:a1:3e:d1:66:5a:38:55:c2:c3: 71:29:58:b0:3a:df:5d:68:04:42:95:65:51:02:98:1f:e7:13: b3:68:35:e7:59:f8:05:bd:19:77:25:d3:6b:b4:f1:2f:9c:96: 2c:d5:e4:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/4lDvHZnHHQWsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZTAwYzdlMzItNDNmYi00MzBlLWI3ZTUtZWQ3NWRjZmY0NDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgdsEq0/Mp/xgtmDBBG35zIY24AR6aR2Myj7 IisPiSetVkpDDynK4tXrF/3BBhabYihLPVqn4yB8bkt8OmiNWC6MwJPkmdEyHkbp SmhuSgyud1rrHubkQn23IR2k0JOPG6aONYi4pmrYhi8zuBYBRRny+m6RGLV+EuS5 egbvw3Fiki+bYSuq/SpLn80wU1Pu+FygvFRhwrPQu2RSma8ljAv0zW2RFgjZvdeb 9c5sam9895GHTT3Qrg3TP2J1SEMlcYgrtCUnzfq6B1noD3KlBwOJTZkGyfxTwwr5 Us30wMXGnGZg1BFXHF99ZyIpkdYvkXUahABRR9UJDjv8NHjWeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEki6zPCVHPFrWfmx1cOBR8LX4h9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjU2NTk0NjMtMmMzNy0z MmZjLThlYjEtZTQ4NTQyNmVkZWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjit3qbNk+toVAqscjLPUvQgFjAnJMlNERf+ZvBV9I0ZT3htwRuMOP9 2RrLkglnBof0nXufwOla4Gd+UFFofg9wHXBFAdIADf4rl8bc70cuGwfihUp7atdL kRtWXWjdzr795sZzXlN1gvfiHAMBrGegSQm/gZF7Sxz5Plm02MlTLehtconeLiMU 890rRob4yX0bPTzbVTMnYtyhqWJ2xm6umTF/40Ll4B7ld71U/p1yC0N+npYgsmoR Wz0LWzNGImnicDD+yOHpq+5xq2Ufw6E+0WZaOFXCw3EpWLA6311oBEKVZVECmB/n E7NoNedZ+AW9GXcl02u08S+clizV5IA= -----END CERTIFICATE-----Generated at Thu Mar 26 19:25:44 2026 by rpki-client