$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25cd7b7a-0721-3b40-9e14-ac1564875a2c.roa File: 25cd7b7a-0721-3b40-9e14-ac1564875a2c.roa (raw, json) Hash identifier: BIKbMaqBHiaFosfPeOsT5yQn33m7KPzYvtzkBjDgEew= Subject key identifier: 10:01:37:49:46:54:AA:EA:20:D1:19:15:D1:7E:FF:51:11:40:26:72 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D0EA7DB6C590F6CBEF8819C88 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25cd7b7a-0721-3b40-9e14-ac1564875a2c.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 397195 IP address blocks: 192.81.185.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:db:6c:59:0f:6c:be:f8:81:9c:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=33d082c2-bfc6-448b-9362-a9de5dc6c9b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c7:1c:46:87:b1:44:3d:90:a6:2d:09:a0:7d: 85:c0:69:41:7d:7f:cd:d1:af:25:93:ed:8d:1e:c9: 99:76:da:bb:f8:ec:6b:a7:d3:3e:ad:7b:63:f8:55: 4c:4c:5b:92:43:12:cb:48:44:ea:ce:c6:b0:6f:0c: 63:20:e3:b1:c6:d9:37:14:d7:bb:84:3a:9c:42:9c: 64:5f:a1:6f:8b:f9:71:cd:63:76:a4:08:1b:0c:71: fe:a9:aa:19:59:40:1c:e8:d3:b9:39:08:4c:06:df: 40:e6:38:e9:79:ff:8a:b0:66:60:be:b6:c1:28:b4: 4e:c0:c5:fa:f6:75:68:dc:b8:c0:62:ed:c3:21:2d: be:25:a9:7d:36:e4:8a:2b:76:bb:ba:a9:30:9b:5a: be:41:b7:00:df:1c:89:e9:c2:98:ff:aa:0d:0d:4f: 05:6d:cb:2b:42:ad:03:df:8c:9b:28:f5:a1:d1:12: 94:92:76:4a:04:c8:27:e9:bc:2a:15:67:b0:1b:e4: 35:69:94:7a:86:1d:36:95:d1:7a:12:5e:12:90:dd: e5:7e:8c:4a:b1:f8:3d:25:06:39:94:6e:a2:22:9b: cf:7f:01:85:1a:8b:27:05:2d:e1:fe:8b:c7:7c:13: da:96:cd:26:5e:a3:f5:1e:b8:fa:94:a3:e2:6d:92: 02:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:01:37:49:46:54:AA:EA:20:D1:19:15:D1:7E:FF:51:11:40:26:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25cd7b7a-0721-3b40-9e14-ac1564875a2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.81.185.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:ad:18:2d:36:af:56:c3:1d:11:d0:bf:aa:98:da:9b:65:0d: b8:0b:99:47:18:31:4d:71:58:c4:fb:5b:02:4c:cc:64:c8:5e: c1:76:84:f2:1d:d6:62:cd:a5:c8:a1:81:bb:2f:db:48:b6:cd: 00:b4:80:b8:cd:e6:7e:e9:3a:d0:a0:b1:1d:70:92:10:ee:45: 2f:29:af:d3:0c:8d:99:46:5c:50:09:47:08:86:0f:78:b1:d2: b8:cb:77:9e:35:95:e5:fe:3e:8c:ac:e3:1a:6a:06:2b:04:e8: 1d:c6:4a:b9:7a:af:21:77:d8:36:e5:dd:6d:bd:6a:58:67:0d: 87:79:00:7e:cc:e6:e9:f9:38:6b:85:7f:f6:04:08:12:31:6f: aa:c8:4e:ae:8f:cb:4c:dc:c6:19:f2:8d:dc:96:cc:da:d7:a5: 38:95:e3:aa:93:a7:a8:f5:ff:ac:70:f2:e8:fc:0e:b8:e5:d8: e0:9c:be:84:83:67:cb:1a:22:c1:02:5b:f5:58:3a:5d:d3:00: c4:e8:6b:5e:da:ed:22:88:ab:d0:ff:bc:57:9f:6a:c1:99:f8: da:33:4c:e9:57:68:fc:70:d3:0a:d7:01:19:5e:a2:aa:a4:8b: c9:26:ff:63:41:b8:d0:2f:19:92:fd:27:a4:d7:4f:e6:4e:0e: c0:35:d3:b4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0Op9tsWQ9svviBnIgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk MzNkMDgyYzItYmZjNi00NDhiLTkzNjItYTlkZTVkYzZjOWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksccRoexRD2Qpi0JoH2FwGlBfX/N0a8lk+2N HsmZdtq7+Oxrp9M+rXtj+FVMTFuSQxLLSETqzsawbwxjIOOxxtk3FNe7hDqcQpxk X6Fvi/lxzWN2pAgbDHH+qaoZWUAc6NO5OQhMBt9A5jjpef+KsGZgvrbBKLROwMX6 9nVo3LjAYu3DIS2+Jal9NuSKK3a7uqkwm1q+QbcA3xyJ6cKY/6oNDU8FbcsrQq0D 34ybKPWh0RKUknZKBMgn6bwqFWewG+Q1aZR6hh02ldF6El4SkN3lfoxKsfg9JQY5 lG6iIpvPfwGFGosnBS3h/ovHfBPals0mXqP1Hrj6lKPibZIClQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBABN0lGVKrqINEZFdF+/1ERQCZyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjVjZDdiN2EtMDcyMS0z YjQwLTllMTQtYWMxNTY0ODc1YTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFG5HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCWrRgtNq9Wwx0R0L+qmNqbZQ24C5lHGDFNcVjE+1sCTMxkyF7BdoTy HdZizaXIoYG7L9tIts0AtIC4zeZ+6TrQoLEdcJIQ7kUvKa/TDI2ZRlxQCUcIhg94 sdK4y3eeNZXl/j6MrOMaagYrBOgdxkq5eq8hd9g25d1tvWpYZw2HeQB+zObp+Thr hX/2BAgSMW+qyE6uj8tM3MYZ8o3clsza16U4leOqk6eo9f+scPLo/A645djgnL6E g2fLGiLBAlv1WDpd0wDE6Gte2u0iiKvQ/7xXn2rBmfjaM0zpV2j8cNMK1wEZXqKq pIvJJv9jQbjQLxmS/Sek10/mTg7ANdO0 -----END CERTIFICATE-----Generated at Thu Mar 26 16:43:40 2026 by rpki-client