$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fa97136-fd6b-3b17-a4e0-17e953cd8a58.roa File: 2fa97136-fd6b-3b17-a4e0-17e953cd8a58.roa (raw, json) Hash identifier: 7f9tzT6OYkbGGMaAfkaNJIb8x1QUN1QL2zPDZ5jT0/s= Subject key identifier: 08:D5:81:41:92:AA:4D:CD:A7:DA:42:A5:D0:16:92:DE:76:84:C8:62 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1707D71539314290FF8EA100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fa97136-fd6b-3b17-a4e0-17e953cd8a58.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 211369 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:d7:15:39:31:42:90:ff:8e:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=e8d2dd82-51dc-4442-989e-5cbf59dc6ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:36:6d:79:15:d5:ec:7a:b1:6a:e9:d3:7d:a3: d2:4a:8e:45:c6:3a:5a:99:15:5d:00:66:97:43:ce: f7:fa:b3:f1:2c:c2:23:40:98:e9:54:7f:f0:db:06: d5:55:ac:6c:75:ea:1b:27:1c:d9:61:90:8a:a7:b8: 99:c5:47:b0:d0:ca:13:a0:09:65:e4:d2:cc:b8:24: 81:dc:68:39:f7:d2:f8:bc:78:1b:ea:27:63:65:72: ba:70:4a:de:9b:bd:96:e0:89:78:21:74:06:d4:bd: f2:7e:3b:f5:2f:f3:3c:84:31:f8:25:8a:f3:b0:6a: 14:66:0b:f2:d2:72:f3:0b:f6:dd:b1:47:89:25:21: 67:06:12:b2:10:66:7b:1a:a5:58:28:34:2a:a2:2c: 2e:82:37:9d:74:2b:b4:b6:2c:7c:f1:f4:40:2d:52: 7c:68:ec:a4:5a:3e:12:e5:cd:8a:19:37:b4:e0:a3: aa:92:82:f6:2f:13:4c:fb:16:0e:27:67:dd:41:76: de:28:a8:1e:b2:73:ea:7a:99:f0:94:2a:db:93:99: ad:54:aa:35:5b:b0:75:b8:51:d7:04:f8:56:bb:d5: f3:18:d5:7c:6c:f3:23:b9:40:98:77:e8:a7:54:f1: d7:33:62:d0:21:16:52:f5:22:4d:e1:e9:de:f2:e7: d9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D5:81:41:92:AA:4D:CD:A7:DA:42:A5:D0:16:92:DE:76:84:C8:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fa97136-fd6b-3b17-a4e0-17e953cd8a58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:16:ab:79:b1:a1:73:c3:a3:6a:84:fa:1f:a7:9a:ca:5d:03: d6:59:5d:33:10:6a:8a:c9:46:34:11:81:b1:4f:b5:78:b8:44: 74:64:d8:c7:b5:e7:c3:a3:81:a3:4e:2c:9d:95:a0:80:4e:b0: 6d:db:12:cb:19:7b:02:b8:05:ec:3e:73:ed:6c:8e:f6:c7:ad: f5:df:95:27:c5:93:ca:00:23:21:88:f8:07:07:3c:8b:2d:d4: 7d:3e:d9:f4:69:60:54:2d:53:3e:42:0f:c2:fe:75:89:a6:83: 9e:8b:2b:76:18:f8:c4:d1:59:49:e2:12:d7:29:07:64:3d:c0: 41:e8:fd:e1:4e:a8:f7:70:b2:0c:f0:29:46:60:1f:e2:f3:16: 4a:33:bd:71:f5:28:a4:c4:3d:e4:b1:f6:e1:a5:95:be:7b:72: ae:f9:3c:b9:44:3a:1b:06:18:3c:6b:20:34:12:5f:89:5d:a6: 31:fd:da:68:35:bb:b8:50:77:5a:c1:fd:7d:fa:c0:ba:87:f8: a5:78:82:6b:9c:ee:99:14:ed:4d:99:55:9d:72:f9:30:e8:bf: 86:9c:9e:15:61:7f:11:10:31:be:78:7d:44:76:a3:cd:4b:85: 70:66:ee:76:ae:10:44:a3:e9:8a:c3:58:94:71:f4:4d:9c:fe: 5c:c4:b0:eb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0XB9cVOTFCkP+OoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk ZThkMmRkODItNTFkYy00NDQyLTk4OWUtNWNiZjU5ZGM2ZWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTZteRXV7HqxaunTfaPSSo5FxjpamRVdAGaX Q873+rPxLMIjQJjpVH/w2wbVVaxsdeobJxzZYZCKp7iZxUew0MoToAll5NLMuCSB 3Gg599L4vHgb6idjZXK6cErem72W4Il4IXQG1L3yfjv1L/M8hDH4JYrzsGoUZgvy 0nLzC/bdsUeJJSFnBhKyEGZ7GqVYKDQqoiwugjeddCu0tix88fRALVJ8aOykWj4S 5c2KGTe04KOqkoL2LxNM+xYOJ2fdQXbeKKgesnPqepnwlCrbk5mtVKo1W7B1uFHX BPhWu9XzGNV8bPMjuUCYd+inVPHXM2LQIRZS9SJN4ene8ufZEwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAjVgUGSqk3Np9pCpdAWkt52hMhiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmZhOTcxMzYtZmQ2Yi0z YjE3LWE0ZTAtMTdlOTUzY2Q4YTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAvFqt5saFzw6NqhPofp5rKXQPWWV0zEGqKyUY0EYGxT7V4uER0ZNjH tefDo4GjTiydlaCATrBt2xLLGXsCuAXsPnPtbI72x63135UnxZPKACMhiPgHBzyL LdR9Ptn0aWBULVM+Qg/C/nWJpoOeiyt2GPjE0VlJ4hLXKQdkPcBB6P3hTqj3cLIM 8ClGYB/i8xZKM71x9SikxD3ksfbhpZW+e3Ku+Ty5RDobBhg8ayA0El+JXaYx/dpo Nbu4UHdawf19+sC6h/ileIJrnO6ZFO1NmVWdcvkw6L+GnJ4VYX8REDG+eH1EdqPN S4VwZu52rhBEo+mKw1iUcfRNnP5cxLDr -----END CERTIFICATE-----Generated at Thu Mar 26 09:58:50 2026 by rpki-client