$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bafe09b-782b-32ab-adf9-bb1ff65a90d6.roa File: 3bafe09b-782b-32ab-adf9-bb1ff65a90d6.roa (raw, json) Hash identifier: PuqPU79gHvljRJ5Yhw/xtxPjzsRrwTqUe56HvhMO0Ds= Subject key identifier: 3F:FE:5B:11:F6:23:08:49:03:AB:82:2F:BD:2D:AE:A0:D6:EE:22:64 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D2A74FB9D7EAF0C0B59A00E80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bafe09b-782b-32ab-adf9-bb1ff65a90d6.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 396585 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:fb:9d:7e:af:0c:0b:59:a0:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=10e3cb9c-c0eb-44a5-8612-890169ad4af9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:fe:26:ea:74:d0:2d:e1:6d:81:50:e2:26:57: a5:fa:33:f4:d1:84:96:f9:68:e8:2d:91:45:d5:d2: ea:c3:11:08:b3:b7:a6:aa:b8:d0:ae:fb:95:1d:0e: 8e:e9:f6:34:61:7b:62:64:9c:b8:b1:b9:5a:e1:55: 6f:69:1d:e9:5d:95:bf:6c:a7:ae:2f:8a:5c:2c:01: d7:0c:4d:43:87:c3:79:5a:3c:fd:54:79:a5:57:b8: 1b:e5:61:a2:95:b7:d2:ab:73:06:76:14:33:21:d1: 92:61:1f:c2:63:15:75:6e:0b:b0:a3:4e:f4:a8:f2: 43:1e:a2:d8:63:a8:f7:71:cc:ca:04:5f:e3:84:2f: cd:18:ee:cd:57:b5:45:b8:14:67:3f:86:4d:04:68: 9e:fa:c7:54:c5:04:44:14:9a:66:5e:fc:85:f9:dd: a8:87:80:bd:94:00:a6:b4:c0:48:29:80:48:30:a0: 63:5f:84:d7:4c:79:8e:f3:14:49:f1:8a:2c:8b:34: 2e:b0:87:bf:33:11:8f:72:ac:d2:9c:c2:14:2d:28: 89:aa:c0:19:c4:cc:f4:c9:d6:82:38:cf:e8:a6:c8: 89:16:3b:57:f8:52:29:97:56:f8:76:8c:49:23:94: a7:23:91:5a:40:b3:4b:33:9e:62:30:d6:63:f9:b2: bc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FE:5B:11:F6:23:08:49:03:AB:82:2F:BD:2D:AE:A0:D6:EE:22:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bafe09b-782b-32ab-adf9-bb1ff65a90d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:39:89:cd:eb:14:7b:41:82:c2:b8:c6:14:d0:06:bd:0c:45: b4:2d:7e:26:a7:14:02:1b:21:2f:84:f8:59:bf:11:95:ef:e8: e5:c7:93:ed:51:de:d7:1d:1a:c2:86:74:00:ce:20:f0:21:6d: 93:41:9d:bc:96:65:6c:15:3d:78:c0:18:59:a1:ea:95:26:33: fa:3e:14:53:35:f5:62:83:50:8f:00:b1:09:bd:92:45:9c:69: 36:21:24:02:60:6e:bd:91:e7:05:cf:e1:52:cf:d8:bb:0c:14: 8e:1d:64:a4:29:b0:49:83:4a:df:ea:9c:60:cd:70:4d:5a:60: d2:32:4e:d6:8e:92:8a:40:6e:d5:81:bc:0e:44:15:28:82:12: 79:66:1e:82:28:fd:60:bb:15:1f:c3:7a:b9:aa:c3:f5:c9:38: bf:a6:29:4c:65:5e:e3:a6:c2:10:ae:6f:93:17:0f:b4:14:3e: ef:51:5d:b1:4f:7a:7b:c8:07:2d:ab:66:52:85:ad:af:48:24: 9a:7e:a8:a0:e6:95:ca:01:d8:59:58:c1:07:27:bd:9f:24:3f: 23:11:9b:87:2e:1c:35:9a:8f:23:70:2e:80:2d:97:f7:3c:46: 9e:2e:18:fa:ac:01:0e:67:d1:20:ba:25:e1:f0:1c:4d:53:fd: 33:ae:1c:fd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0qdPudfq8MC1mgDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk MTBlM2NiOWMtYzBlYi00NGE1LTg2MTItODkwMTY5YWQ0YWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8v4m6nTQLeFtgVDiJlel+jP00YSW+WjoLZFF 1dLqwxEIs7emqrjQrvuVHQ6O6fY0YXtiZJy4sbla4VVvaR3pXZW/bKeuL4pcLAHX DE1Dh8N5Wjz9VHmlV7gb5WGilbfSq3MGdhQzIdGSYR/CYxV1bguwo070qPJDHqLY Y6j3cczKBF/jhC/NGO7NV7VFuBRnP4ZNBGie+sdUxQREFJpmXvyF+d2oh4C9lACm tMBIKYBIMKBjX4TXTHmO8xRJ8YosizQusIe/MxGPcqzSnMIULSiJqsAZxMz0ydaC OM/opsiJFjtX+FIpl1b4doxJI5SnI5FaQLNLM55iMNZj+bK8ewIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFD/+WxH2IwhJA6uCL70trqDW7iJkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2JhZmUwOWItNzgyYi0z MmFiLWFkZjktYmIxZmY2NWE5MGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBxOYnN6xR7QYLCuMYU0Aa9DEW0LX4mpxQCGyEvhPhZvxGV7+jlx5Pt Ud7XHRrChnQAziDwIW2TQZ28lmVsFT14wBhZoeqVJjP6PhRTNfVig1CPALEJvZJF nGk2ISQCYG69kecFz+FSz9i7DBSOHWSkKbBJg0rf6pxgzXBNWmDSMk7WjpKKQG7V gbwORBUoghJ5Zh6CKP1guxUfw3q5qsP1yTi/pilMZV7jpsIQrm+TFw+0FD7vUV2x T3p7yActq2ZSha2vSCSafqig5pXKAdhZWMEHJ72fJD8jEZuHLhw1mo8jcC6ALZf3 PEaeLhj6rAEOZ9EguiXh8BxNU/0zrhz9 -----END CERTIFICATE-----Generated at Thu Mar 26 14:30:26 2026 by rpki-client