$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3252953d-ba0c-37da-8fdf-34bd30068029.roa File: 3252953d-ba0c-37da-8fdf-34bd30068029.roa (raw, json) Hash identifier: H3mwrxBXQkASVJXeJgFxMzRKK8HOjE0iDD71tMHCz4Q= Subject key identifier: 91:8B:89:1D:8A:2B:B3:58:F8:14:35:DA:CB:49:3A:88:A9:61:99:54 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584DA11AB880F83C528F0F47BA00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3252953d-ba0c-37da-8fdf-34bd30068029.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 397207 IP address blocks: 192.48.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:b8:80:f8:3c:52:8f:0f:47:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=92c022cc-98c5-4dc9-8d00-00bb6b5ca849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b3:31:3d:20:cb:1c:18:d0:76:09:1c:eb:94: c5:f1:ba:95:1a:af:f4:cc:dc:5c:a8:f3:1f:06:56: 62:54:fc:4b:8e:67:2f:08:5d:4a:51:87:d2:29:fd: 97:a5:42:28:ad:e9:ad:15:bf:f9:23:c8:01:f1:88: e6:00:2c:a3:0a:d6:b1:88:75:d2:8b:63:5b:19:a2: e0:62:95:99:82:53:8e:3f:89:77:36:27:df:77:98: 63:c6:b7:b3:16:0b:cd:c3:e5:c7:18:c3:6c:bf:de: 60:36:80:6b:39:24:ed:ef:c4:69:7e:c2:0d:87:14: 13:20:09:3e:3d:29:c5:d4:06:cd:74:56:d2:9c:ef: 76:6b:ee:b8:d4:0a:15:48:e0:ce:8a:f8:38:1d:8d: 48:80:cc:41:20:6c:9f:cc:27:5f:db:94:20:59:53: 9d:48:47:4d:50:ab:14:2b:60:dc:1c:c0:a9:86:d2: f0:ce:28:5a:06:f0:e2:bf:f2:7d:ac:0d:2e:ee:02: bb:d7:df:99:08:60:3a:27:cb:27:8b:e5:b8:e9:db: 16:8f:57:27:61:61:73:cb:8b:f6:88:59:ef:c5:82: 30:a5:84:44:3f:a7:27:de:09:04:e6:32:58:b8:03: bd:e5:43:c2:8f:56:8b:fa:15:36:7e:96:b0:34:ac: 8d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8B:89:1D:8A:2B:B3:58:F8:14:35:DA:CB:49:3A:88:A9:61:99:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3252953d-ba0c-37da-8fdf-34bd30068029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.48.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:56:95:5b:2f:fc:24:65:32:f2:5e:0f:e1:2c:3a:bd:d3:ff: a3:02:12:6b:ff:da:fb:08:eb:1e:79:fe:6e:f4:3c:84:80:f0: 75:76:84:b7:2f:7c:d8:0d:7d:ca:61:67:60:c8:6b:4b:56:91: c2:46:91:40:95:e3:9a:2a:a4:36:24:29:cb:d1:8b:c1:ac:04: 23:8f:e7:99:4b:54:9b:91:55:2b:c4:de:37:2d:ee:83:4a:e8: 30:3c:22:b2:22:a7:04:af:5c:ec:5c:fd:83:d0:3f:00:7d:c5: 6c:49:47:ad:96:da:80:8f:0b:35:a1:27:6c:c9:a8:24:50:7e: 49:78:cc:96:1e:68:2d:d1:a5:16:53:da:3f:c8:6f:c5:37:14: 2a:1d:5d:58:b2:34:36:e2:30:eb:cd:fe:a6:51:16:b8:af:9b: 9d:75:99:65:df:1e:b9:56:59:31:a7:c4:0e:64:ed:fe:6a:5f: 92:78:56:5f:ee:16:22:59:94:bc:da:1e:56:81:11:fc:d8:ce: 52:f8:1e:5a:26:56:31:02:30:62:9e:62:5d:ea:1b:71:cd:e0: f3:45:73:23:7c:c5:20:8b:17:24:95:6a:7e:d4:c7:60:c7:6c: 7b:79:0c:b2:15:00:b0:20:db:f9:23:10:a8:02:05:37:48:e8: 5c:f6:11:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2hGriA+DxSjw9HugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk OTJjMDIyY2MtOThjNS00ZGM5LThkMDAtMDBiYjZiNWNhODQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37MxPSDLHBjQdgkc65TF8bqVGq/0zNxcqPMf BlZiVPxLjmcvCF1KUYfSKf2XpUIoremtFb/5I8gB8YjmACyjCtaxiHXSi2NbGaLg YpWZglOOP4l3Niffd5hjxrezFgvNw+XHGMNsv95gNoBrOSTt78RpfsINhxQTIAk+ PSnF1AbNdFbSnO92a+641AoVSODOivg4HY1IgMxBIGyfzCdf25QgWVOdSEdNUKsU K2DcHMCphtLwzihaBvDiv/J9rA0u7gK719+ZCGA6J8sni+W46dsWj1cnYWFzy4v2 iFnvxYIwpYREP6cn3gkE5jJYuAO95UPCj1aL+hU2fpawNKyNZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGLiR2KK7NY+BQ12stJOoipYZlUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzI1Mjk1M2QtYmEwYy0z N2RhLThmZGYtMzRiZDMwMDY4MDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDBPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlWlVsv/CRlMvJeD+EsOr3T/6MCEmv/2vsI6x55/m70PISA8HV2hLcv fNgNfcphZ2DIa0tWkcJGkUCV45oqpDYkKcvRi8GsBCOP55lLVJuRVSvE3jct7oNK 6DA8IrIipwSvXOxc/YPQPwB9xWxJR62W2oCPCzWhJ2zJqCRQfkl4zJYeaC3RpRZT 2j/Ib8U3FCodXViyNDbiMOvN/qZRFrivm511mWXfHrlWWTGnxA5k7f5qX5J4Vl/u FiJZlLzaHlaBEfzYzlL4HlomVjECMGKeYl3qG3HN4PNFcyN8xSCLFySVan7Ux2DH bHt5DLIVALAg2/kjEKgCBTdI6Fz2EfQ= -----END CERTIFICATE-----Generated at Wed May 13 11:24:45 2026 by rpki-client