$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b2c7db1-99ac-31a9-8a99-14dae6b4ad09.roa File: 3b2c7db1-99ac-31a9-8a99-14dae6b4ad09.roa (raw, json) Hash identifier: LEYAtLiB5IqyPI+5ZOE8xsMkYpCU8hP/SjbLcChrP+w= Subject key identifier: 71:D7:0F:8D:7D:9A:49:D5:EF:61:CD:56:35:A4:E3:14:90:5D:56:D5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D3DFF9C63FDEA734E351D9D80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b2c7db1-99ac-31a9-8a99-14dae6b4ad09.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396587 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:9c:63:fd:ea:73:4e:35:1d:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=95d350a6-ab85-4315-938b-cfd45655ca7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2d:6c:5c:e5:a9:f1:4a:53:fe:f9:b6:d8:d0: f9:b1:48:c8:8e:00:2c:0c:eb:d6:c2:86:3c:d2:a4: 74:39:3a:06:a3:54:cf:85:12:de:1d:35:52:fe:a6: 04:24:09:81:04:00:7a:4f:84:e3:0e:3a:5f:06:0a: d0:ed:af:50:0f:b3:e0:05:87:32:d5:8a:be:af:ca: 57:87:0b:5d:a5:4c:a5:34:9e:48:5d:79:a8:1f:af: 5c:68:b7:aa:4e:60:50:95:17:a1:fa:bc:e1:7c:97: 13:80:e1:b7:f5:6b:6f:a4:89:57:a2:4e:00:9a:41: 5c:cb:be:e5:9e:ca:aa:e4:e2:6a:ca:f7:d2:95:31: 54:15:84:b7:ff:2f:62:a0:4c:d1:8a:56:70:99:26: b9:47:a9:cf:b0:f2:ef:d7:96:a9:ff:d2:c7:86:0e: ef:63:e0:84:44:fa:cb:36:8d:11:23:0e:b0:f1:a3: 32:06:42:43:d5:e8:87:c6:43:c5:d6:67:ca:24:73: e2:88:69:26:c7:4d:b3:30:8c:43:e4:60:7b:58:ff: 92:0e:fc:52:cc:d0:ad:d8:cc:65:51:e8:8c:39:26: 49:ab:2e:1e:26:f3:d5:7d:08:2c:5c:3e:f8:8d:5f: fa:c0:7d:fd:b9:e8:8e:1f:8f:22:55:84:f1:49:36: 5a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D7:0F:8D:7D:9A:49:D5:EF:61:CD:56:35:A4:E3:14:90:5D:56:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b2c7db1-99ac-31a9-8a99-14dae6b4ad09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:bf:95:cb:34:b2:3e:ed:cb:91:f2:a5:c6:0e:00:91:41:24: f1:3e:b6:2c:c7:5e:55:10:53:68:6f:30:8e:5d:92:40:35:28: a1:48:02:ef:04:c0:0e:64:3f:d7:e7:e9:e4:28:38:19:fc:dd: 8b:38:fc:25:0c:56:c9:2c:f0:f9:94:3a:48:24:62:58:a8:77: a8:38:b9:26:71:a9:fe:a7:65:39:b4:cc:bb:73:63:5c:d3:a2: be:b6:86:7c:10:db:d8:b1:7f:aa:70:e3:7c:86:18:b6:6c:1b: bb:36:8a:14:ee:d7:c3:13:99:69:3d:eb:b0:54:b4:0f:88:2e: 8d:6d:21:a8:b7:76:ca:99:4b:b3:62:2e:12:f3:3e:9c:6b:1d: aa:19:17:57:a4:65:50:d2:ad:0e:d3:4a:d7:0c:7f:db:c8:19: 35:e3:37:79:77:84:60:cc:ea:f3:cd:e2:7f:f2:6e:f8:9d:6b: 49:bc:7b:9f:a4:01:34:14:21:68:da:ba:cd:cc:cc:c8:2c:db: ce:6d:11:21:6b:27:ad:89:b4:ed:ba:66:8e:52:af:f4:0a:4e: 57:44:b0:07:c8:96:a6:44:2e:19:37:74:b7:3f:f4:b7:bc:ea: 69:34:75:cf:14:b2:63:2f:d4:7b:39:66:12:c2:7b:f5:e8:f2: 9a:57:df:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/5xj/epzTjUdnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk OTVkMzUwYTYtYWI4NS00MzE1LTkzOGItY2ZkNDU2NTVjYTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC1sXOWp8UpT/vm22ND5sUjIjgAsDOvWwoY8 0qR0OToGo1TPhRLeHTVS/qYEJAmBBAB6T4TjDjpfBgrQ7a9QD7PgBYcy1Yq+r8pX hwtdpUylNJ5IXXmoH69caLeqTmBQlReh+rzhfJcTgOG39WtvpIlXok4AmkFcy77l nsqq5OJqyvfSlTFUFYS3/y9ioEzRilZwmSa5R6nPsPLv15ap/9LHhg7vY+CERPrL No0RIw6w8aMyBkJD1eiHxkPF1mfKJHPiiGkmx02zMIxD5GB7WP+SDvxSzNCt2Mxl UeiMOSZJqy4eJvPVfQgsXD74jV/6wH39ueiOH48iVYTxSTZaXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHXD419mknV72HNVjWk4xSQXVbVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2IyYzdkYjEtOTlhYy0z MWE5LThhOTktMTRkYWU2YjRhZDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFS/lcs0sj7ty5HypcYOAJFBJPE+tizHXlUQU2hvMI5dkkA1KKFIAu8E wA5kP9fn6eQoOBn83Ys4/CUMVsks8PmUOkgkYliod6g4uSZxqf6nZTm0zLtzY1zT or62hnwQ29ixf6pw43yGGLZsG7s2ihTu18MTmWk967BUtA+ILo1tIai3dsqZS7Ni LhLzPpxrHaoZF1ekZVDSrQ7TStcMf9vIGTXjN3l3hGDM6vPN4n/ybvida0m8e5+k ATQUIWjaus3MzMgs285tESFrJ62JtO26Zo5Sr/QKTldEsAfIlqZELhk3dLc/9Le8 6mk0dc8UsmMv1Hs5ZhLCe/Xo8ppX350= -----END CERTIFICATE-----Generated at Thu Mar 26 12:07:02 2026 by rpki-client