$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d2acb60-c56a-3c97-8bd0-b87e057b7d9a.roa File: 2d2acb60-c56a-3c97-8bd0-b87e057b7d9a.roa (raw, json) Hash identifier: L4O1cm/xuaieoCjAIKj1hUkUVBuz/I8362v+aasYCkc= Subject key identifier: 75:A6:94:68:B3:ED:DD:E5:B8:18:49:17:84:29:05:20:C7:FD:E6:94 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1707D82ABE413F3C86D38F46 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d2acb60-c56a-3c97-8bd0-b87e057b7d9a.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 396611 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:d8:2a:be:41:3f:3c:86:d3:8f:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=f449e218-c3da-4626-b93f-f08f2da69116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:13:f3:ec:f3:5e:c9:14:8f:dd:53:96:08:f1: 12:08:29:e0:3e:14:36:19:b3:fd:f8:7a:f8:17:45: e8:75:dc:cd:34:47:72:25:7b:7a:9a:97:c2:b2:ac: 71:15:cf:55:02:b3:8f:3c:f6:4c:f8:55:b3:82:a1: b1:b2:f5:eb:8d:01:dc:32:06:44:3d:11:44:83:c9: 51:04:3a:db:cc:cb:dd:ce:e8:01:db:c0:ba:fe:fb: 9f:65:37:54:bb:f8:92:36:dd:80:ec:1f:4c:a9:58: b4:7d:9a:ec:e0:d2:16:5f:8a:59:07:d2:68:e0:66: 65:04:87:5a:c3:00:9c:ff:07:fe:96:31:a5:13:09: a1:4c:5c:a1:b1:5e:37:df:1f:05:da:5f:02:63:b7: 4d:d1:aa:b9:0e:bf:09:72:1a:a5:fc:86:2d:83:e9: a7:a4:de:f6:e9:56:73:62:af:97:89:4b:0a:de:d3: da:6d:63:bd:47:0b:a4:23:00:29:75:26:bc:42:54: a2:77:b1:99:dc:45:aa:b8:ee:15:d0:2c:64:e0:55: d9:a9:1e:39:5d:69:6a:9d:d5:88:95:49:d7:62:3a: 09:04:c6:7c:00:3e:16:e5:02:21:fd:41:41:d3:94: 2d:a1:f0:97:d1:c6:96:96:96:53:e2:f6:ad:30:b3: 40:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A6:94:68:B3:ED:DD:E5:B8:18:49:17:84:29:05:20:C7:FD:E6:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d2acb60-c56a-3c97-8bd0-b87e057b7d9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:38:af:38:2c:d1:8b:33:37:76:c4:c5:af:40:6b:9f:f7:09: 6b:47:19:9c:a5:c3:1d:79:78:bc:4a:6d:4b:de:c0:13:91:c1: 99:fa:3b:f6:4f:39:00:04:97:c3:30:1d:51:69:81:2f:af:26: d7:98:61:5e:db:7e:42:12:46:6f:cf:d6:c3:e8:dc:a5:f8:67: a5:cf:0b:06:f5:3b:e8:86:c7:b2:c6:d6:70:0a:33:d9:fe:a2: a5:73:96:f0:27:cd:ee:b7:23:9d:9b:21:b2:a5:62:a4:9c:84: 7f:a5:c7:58:94:29:e4:0e:a6:1e:e8:86:20:6b:0a:20:8d:9e: c0:ed:c4:81:f7:00:95:17:3a:00:b2:38:23:16:8b:8f:6a:be: c3:d1:29:12:23:63:7c:b3:8f:dc:70:03:f9:74:6e:a1:3f:77: a1:0e:5a:be:4a:81:99:9f:38:b6:3d:81:7c:2d:bd:71:c5:33: cb:e4:c0:55:13:4e:f8:4a:6d:2a:e1:aa:8c:73:82:ef:08:2e: bc:86:73:46:e4:5f:52:fc:42:b9:b9:db:fe:ce:81:1c:97:8c: 32:45:21:53:7f:ff:fe:1f:2f:d6:15:d4:02:97:04:5b:30:78: 51:e7:44:2f:39:89:01:72:c6:95:32:67:4c:0d:1c:ca:a9:e8: a1:4d:b3:31 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0XB9gqvkE/PIbTj0YwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk ZjQ0OWUyMTgtYzNkYS00NjI2LWI5M2YtZjA4ZjJkYTY5MTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9BPz7PNeyRSP3VOWCPESCCngPhQ2GbP9+Hr4 F0XoddzNNEdyJXt6mpfCsqxxFc9VArOPPPZM+FWzgqGxsvXrjQHcMgZEPRFEg8lR BDrbzMvdzugB28C6/vufZTdUu/iSNt2A7B9MqVi0fZrs4NIWX4pZB9Jo4GZlBIda wwCc/wf+ljGlEwmhTFyhsV433x8F2l8CY7dN0aq5Dr8Jchql/IYtg+mnpN726VZz Yq+XiUsK3tPabWO9RwukIwApdSa8QlSid7GZ3EWquO4V0Cxk4FXZqR45XWlqndWI lUnXYjoJBMZ8AD4W5QIh/UFB05QtofCX0caWlpZT4vatMLNA+wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHWmlGiz7d3luBhJF4QpBSDH/eaUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmQyYWNiNjAtYzU2YS0z Yzk3LThiZDAtYjg3ZTA1N2I3ZDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAKOK84LNGLMzd2xMWvQGuf9wlrRxmcpcMdeXi8Sm1L3sATkcGZ+jv2 TzkABJfDMB1RaYEvrybXmGFe235CEkZvz9bD6Nyl+GelzwsG9TvohseyxtZwCjPZ /qKlc5bwJ83utyOdmyGypWKknIR/pcdYlCnkDqYe6IYgawogjZ7A7cSB9wCVFzoA sjgjFouPar7D0SkSI2N8s4/ccAP5dG6hP3ehDlq+SoGZnzi2PYF8Lb1xxTPL5MBV E074Sm0q4aqMc4LvCC68hnNG5F9S/EK5udv+zoEcl4wyRSFTf//+Hy/WFdQClwRb MHhR50QvOYkBcsaVMmdMDRzKqeihTbMx -----END CERTIFICATE-----Generated at Thu Mar 26 11:37:23 2026 by rpki-client