$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a298bed-f619-3c13-81c0-fb9ebdb5b2f6.roa File: 2a298bed-f619-3c13-81c0-fb9ebdb5b2f6.roa (raw, json) Hash identifier: M61x7brYh79LmyyUMxpUfPIXe0qapulmP+TlBzAibaU= Subject key identifier: 9C:AC:48:4F:6C:E9:64:A9:72:B4:BA:FE:5A:B9:D0:F0:F3:95:6A:CD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D3DFF86228687DC4C00C44B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a298bed-f619-3c13-81c0-fb9ebdb5b2f6.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 19836 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:86:22:86:87:dc:4c:00:c4:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=20cf6765-6a36-44d9-a313-06cf3084ba08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:66:dc:8c:50:0f:a2:a0:0c:00:21:44:b7:08: d0:f1:66:fc:7e:61:cd:83:0b:b9:bb:70:a7:df:4a: e1:1a:68:fe:bd:fe:00:82:88:98:e7:95:84:0f:46: cd:79:b8:5d:1c:34:f3:ea:22:d3:fa:83:90:93:df: ad:03:36:4d:83:97:4f:d4:cf:01:c2:77:c0:ac:6f: 8e:d7:49:c9:10:df:f7:d5:de:9a:5a:2a:38:81:44: 36:ce:36:9a:41:cc:76:85:c4:0b:a0:ae:38:7f:50: 4e:23:18:df:ec:e2:4a:90:75:08:4c:cd:99:3f:d2: 6f:87:ea:b0:3c:fb:cf:4b:ba:e5:c3:f6:79:34:1d: 03:ce:42:f9:05:2b:3a:e3:8a:a8:82:b9:5b:e4:79: 51:44:1d:81:3f:da:ad:5a:f4:48:50:7c:ce:5f:e0: e1:e6:5f:40:5a:4c:80:45:aa:95:a9:6a:9b:28:d9: 31:b5:df:74:8f:a1:6b:a8:f4:11:65:54:2d:01:e3: 48:26:7d:7e:fb:b0:bf:80:c2:f4:2c:26:26:69:01: 05:e6:48:9e:a0:88:aa:8e:26:15:d2:be:78:96:5b: e7:88:b7:16:ff:81:64:6d:2c:2c:2a:23:4a:26:fb: 7b:32:75:b3:95:19:ec:7c:ed:a4:aa:62:30:55:fc: b4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:AC:48:4F:6C:E9:64:A9:72:B4:BA:FE:5A:B9:D0:F0:F3:95:6A:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a298bed-f619-3c13-81c0-fb9ebdb5b2f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:eb:71:0e:7c:d4:be:a8:39:ce:a9:fa:a6:64:c4:33:4b:ed: 2f:2b:a5:5d:a5:32:0e:c9:87:2e:08:d0:cf:75:ce:c4:43:08: 11:b4:62:ea:30:32:f3:d4:02:bb:8a:5d:0a:0b:94:07:79:97: ee:25:ef:1f:51:32:a1:01:11:a9:f4:29:9f:86:9a:9c:36:2e: ca:41:b3:58:aa:29:93:84:1d:72:4a:bc:75:04:4d:91:f7:d7: 5a:3a:7e:e4:39:2a:55:2e:28:8d:c4:1f:3f:38:aa:6a:f7:df: a9:82:47:60:2b:5a:fc:33:1d:7c:49:f4:ab:eb:79:ca:8d:5d: 80:f4:38:68:67:d6:2a:02:b2:b0:8e:95:7f:c7:2e:4c:91:e1: 2f:c8:39:e2:45:88:3a:9e:e9:b8:61:6c:5a:27:89:c0:66:83: a6:96:4f:30:d9:9d:23:52:32:ef:ef:8c:12:26:9d:e8:5f:52: 8e:b1:82:56:a3:00:62:b6:a1:8d:6c:97:84:a5:ae:b8:e7:63: b8:de:f6:2f:29:70:2b:4f:01:a7:d5:6f:95:72:9b:33:82:4b: a8:f8:75:2d:ba:36:2d:91:e8:fb:45:21:55:0c:4d:22:8b:89: 5d:ef:29:db:ab:2a:ef:f3:5d:d5:e7:74:5c:fa:1f:5c:ec:98: 30:df:1d:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/4YihofcTADES4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MjBjZjY3NjUtNmEzNi00NGQ5LWEzMTMtMDZjZjMwODRiYTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWbcjFAPoqAMACFEtwjQ8Wb8fmHNgwu5u3Cn 30rhGmj+vf4AgoiY55WED0bNebhdHDTz6iLT+oOQk9+tAzZNg5dP1M8BwnfArG+O 10nJEN/31d6aWio4gUQ2zjaaQcx2hcQLoK44f1BOIxjf7OJKkHUITM2ZP9Jvh+qw PPvPS7rlw/Z5NB0DzkL5BSs644qogrlb5HlRRB2BP9qtWvRIUHzOX+Dh5l9AWkyA RaqVqWqbKNkxtd90j6FrqPQRZVQtAeNIJn1++7C/gML0LCYmaQEF5kieoIiqjiYV 0r54llvniLcW/4FkbSwsKiNKJvt7MnWzlRnsfO2kqmIwVfy0gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJysSE9s6WSpcrS6/lq50PDzlWrNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmEyOThiZWQtZjYxOS0z YzEzLTgxYzAtZmI5ZWJkYjViMmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfrcQ581L6oOc6p+qZkxDNL7S8rpV2lMg7Jhy4I0M91zsRDCBG0Yuow MvPUAruKXQoLlAd5l+4l7x9RMqEBEan0KZ+Gmpw2LspBs1iqKZOEHXJKvHUETZH3 11o6fuQ5KlUuKI3EHz84qmr336mCR2ArWvwzHXxJ9KvrecqNXYD0OGhn1ioCsrCO lX/HLkyR4S/IOeJFiDqe6bhhbFonicBmg6aWTzDZnSNSMu/vjBImnehfUo6xglaj AGK2oY1sl4SlrrjnY7je9i8pcCtPAafVb5VymzOCS6j4dS26Ni2R6PtFIVUMTSKL iV3vKdurKu/zXdXndFz6H1zsmDDfHfo= -----END CERTIFICATE-----Generated at Thu Mar 26 18:52:04 2026 by rpki-client