$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b2c74a4-97c8-3d4e-9348-8d6838e55f9c.roa File: 2b2c74a4-97c8-3d4e-9348-8d6838e55f9c.roa (raw, json) Hash identifier: /NPkIhieNEBlPs15jsuodO/3VXWCF+S2lgzM1L6Y0s8= Subject key identifier: EA:02:A5:03:27:41:75:04:F5:86:CE:F2:12:75:44:58:76:93:48:39 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584FBED1450DB3E71C4ACF72A380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b2c74a4-97c8-3d4e-9348-8d6838e55f9c.roa Signing time: Fri 06 Nov 2026 02:00:14 +0000 ROA not before: Fri 06 Nov 2026 02:00:14 +0000 ROA not after: Thu 04 Feb 2027 02:00:14 +0000 asID: 396602 IP address blocks: 192.42.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:be:d1:45:0d:b3:e7:1c:4a:cf:72:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 6 02:00:14 2026 GMT Not After : Feb 4 02:00:14 2027 GMT Subject: CN=e00f4f48-5020-4fa8-a87e-67e8d51de37b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f7:90:70:34:cf:57:cc:04:6e:9b:96:d2:6c: cd:25:ec:38:d7:53:a1:d4:94:53:b2:28:b7:ac:b5: 59:12:ab:90:5d:94:00:de:ee:ef:bf:27:e3:a2:d5: e2:d1:d0:99:4a:57:bd:bd:04:4e:94:d4:9d:4c:55: ac:c9:8b:b7:b3:74:5e:9c:65:67:41:7e:4e:e2:da: c9:60:ca:10:19:d5:b8:b8:51:fb:d6:82:e9:d2:86: 6c:de:9f:08:82:d9:69:ed:74:03:30:2e:c4:80:9c: 7c:10:09:5f:7c:8a:0c:f5:11:53:ad:59:99:cb:4e: be:49:2d:cd:33:79:41:1a:43:51:dd:2c:87:b0:ab: 23:e1:5e:2a:fb:ca:2a:7e:1b:08:ea:0e:5c:de:17: d6:d4:81:2f:b0:00:e0:b8:0f:18:c2:5c:8f:07:d8: 70:c2:84:ad:42:4e:e8:86:4d:c1:db:3a:6d:89:99: 84:c3:cd:3b:19:08:b2:17:e8:0f:42:1c:49:d4:0a: d1:ed:b3:b4:e6:1c:2b:1d:94:4b:eb:f5:81:b5:b1: 1c:42:a2:51:76:e1:cb:ea:9a:0b:5a:94:71:0a:79: 0a:90:21:9b:f2:da:44:13:57:1d:d4:3d:7f:3a:22: 01:02:ff:10:71:45:c9:97:c8:00:f7:1c:03:c3:b5: 31:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:02:A5:03:27:41:75:04:F5:86:CE:F2:12:75:44:58:76:93:48:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b2c74a4-97c8-3d4e-9348-8d6838e55f9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:3c:4d:51:b9:54:19:0c:68:01:1c:a1:31:d1:2a:74:53:30: f4:f7:16:90:15:a8:dc:b8:0b:63:f7:e1:a7:6e:26:d0:e8:48: b2:1c:ba:be:72:d0:b2:66:13:af:21:ec:37:8a:e2:6e:55:0e: 7b:03:d2:28:26:71:52:db:dc:39:9b:17:f8:68:7c:a6:a6:59: 1b:29:82:dc:ef:cd:8e:1f:cd:07:02:19:af:e8:cf:4a:3d:c9: e8:e9:24:d8:85:e0:be:9b:ed:ec:55:a1:2e:69:69:6e:51:0c: 8a:70:3a:0a:bc:bd:bc:e4:e2:b0:57:1f:11:d1:3c:5c:2e:91: c7:c5:0a:5d:4e:9b:ab:19:dc:e7:7c:77:1c:eb:19:40:00:b2: ce:50:c0:54:7a:83:bf:93:b7:19:04:2d:26:25:e7:e9:c5:fb: a9:73:9e:90:5a:47:00:d7:da:87:7c:dd:ff:2c:6b:b4:ca:41: f5:4f:b6:a3:81:87:a7:47:34:45:a4:f7:a4:95:6b:bd:15:95: 82:f1:ec:60:91:a6:1a:6e:db:cc:45:a2:78:40:fa:30:dd:ed: 31:87:15:0b:a6:80:a8:9d:d9:69:63:8f:58:e0:a4:eb:b7:9c: 30:b8:d7:f6:fd:73:8a:3e:c4:98:b7:d9:10:a1:54:80:fc:e6: 20:66:88:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE++0UUNs+ccSs9yo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTEwNjAyMDAxNFoXDTI3MDIwNDAyMDAxNFowLzEtMCsGA1UEAxMk ZTAwZjRmNDgtNTAyMC00ZmE4LWE4N2UtNjdlOGQ1MWRlMzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/eQcDTPV8wEbpuW0mzNJew411Oh1JRTsii3 rLVZEquQXZQA3u7vvyfjotXi0dCZSle9vQROlNSdTFWsyYu3s3RenGVnQX5O4trJ YMoQGdW4uFH71oLp0oZs3p8Igtlp7XQDMC7EgJx8EAlffIoM9RFTrVmZy06+SS3N M3lBGkNR3SyHsKsj4V4q+8oqfhsI6g5c3hfW1IEvsADguA8YwlyPB9hwwoStQk7o hk3B2zptiZmEw807GQiyF+gPQhxJ1ArR7bO05hwrHZRL6/WBtbEcQqJRduHL6poL WpRxCnkKkCGb8tpEE1cd1D1/OiIBAv8QcUXJl8gA9xwDw7UxSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOoCpQMnQXUE9YbO8hJ1RFh2k0g5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmIyYzc0YTQtOTdjOC0z ZDRlLTkzNDgtOGQ2ODM4ZTU1ZjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALU8TVG5VBkMaAEcoTHRKnRTMPT3FpAVqNy4C2P34aduJtDoSLIcur5y 0LJmE68h7DeK4m5VDnsD0igmcVLb3DmbF/hofKamWRspgtzvzY4fzQcCGa/oz0o9 yejpJNiF4L6b7exVoS5paW5RDIpwOgq8vbzk4rBXHxHRPFwukcfFCl1Om6sZ3Od8 dxzrGUAAss5QwFR6g7+TtxkELSYl5+nF+6lznpBaRwDX2od83f8sa7TKQfVPtqOB h6dHNEWk96SVa70VlYLx7GCRphpu28xFonhA+jDd7TGHFQumgKid2Wljj1jgpOu3 nDC41/b9c4o+xJi32RChVID85iBmiDc= -----END CERTIFICATE-----Generated at Sun Nov 15 17:36:50 2026 by rpki-client