$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e8607d6-bc0a-3404-adea-1dc766049cd1.roa File: 3e8607d6-bc0a-3404-adea-1dc766049cd1.roa (raw, json) Hash identifier: LT1CRErC4mMDZ3tKIYIznvUaJ/yONC994rUFnIss1oo= Subject key identifier: B3:8C:1E:B6:BE:DD:34:43:99:A1:A0:F6:1B:66:D9:46:4C:87:93:DD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1707C2234518374B6F3E54F0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e8607d6-bc0a-3404-adea-1dc766049cd1.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 396617 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:c2:23:45:18:37:4b:6f:3e:54:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=d9032c37-2ea6-4b57-8ec4-e66e893861a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:58:e7:9e:c6:2a:87:31:d7:48:77:07:c8:7c: 91:0a:dd:20:ca:25:05:7c:9d:b0:5b:b4:b3:a6:1c: 41:62:ec:20:7e:5f:e1:53:11:5e:1d:d2:00:e2:7a: 76:1c:5a:8c:31:23:eb:73:67:5b:4b:c9:97:b4:e6: 05:64:d4:7a:11:6e:df:58:e3:76:6f:07:a1:59:91: 55:17:08:a2:4d:72:07:35:4a:f1:94:3d:4e:fc:b4: 95:fc:fe:74:b1:b3:bb:6f:13:7d:19:dc:ba:cf:7f: 0f:cb:ee:47:fe:49:ad:9f:2e:6e:f1:9c:ca:65:e3: 37:39:25:ab:ae:2f:79:ee:6f:d3:c1:97:ea:9a:56: c7:3f:58:fa:4f:4b:07:1b:de:b1:d7:22:17:65:4e: b0:b9:6e:37:48:75:79:30:04:18:57:84:2a:18:95: 40:b3:b5:89:26:4b:17:35:3a:c9:46:1c:33:46:37: 88:97:a6:8c:a5:14:b1:26:a3:fc:16:7b:35:00:84: 65:10:a9:5a:0b:7a:3a:fe:f9:ac:86:e7:6a:f0:3c: 97:79:e7:2a:4f:4a:23:ec:56:c5:c3:d9:00:2a:bb: 87:2d:a7:68:80:b5:a0:17:61:9f:1c:85:6e:92:b4: a3:49:ca:98:c7:0d:8d:97:f1:49:25:71:ce:bf:ec: 5c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:8C:1E:B6:BE:DD:34:43:99:A1:A0:F6:1B:66:D9:46:4C:87:93:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e8607d6-bc0a-3404-adea-1dc766049cd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:9d:77:a5:70:c0:00:f8:cb:88:3a:17:75:d0:d4:13:cb:37: 20:77:4a:d6:be:a6:18:99:51:be:be:9d:85:4a:af:cf:bb:b8: 1c:9e:6b:21:47:77:68:ad:cf:31:31:ed:8a:f4:be:1a:0c:cb: 9f:78:22:ea:4b:b4:3d:40:93:50:2d:97:02:54:7d:c6:14:21: 44:1a:92:6c:b6:c1:6f:fd:93:3d:cb:77:92:6c:78:6a:b9:c0: ce:30:40:c0:c0:28:8e:19:2d:2a:dd:37:de:37:28:bb:63:6c: fc:0f:2f:31:35:99:78:13:0c:48:b4:e8:a8:d0:34:9d:36:92: 6d:f0:b7:99:87:a5:c6:8b:70:77:4a:e1:85:e4:83:de:53:1e: 19:ac:b6:24:fd:5a:e3:74:df:78:dc:56:4b:9e:69:0b:96:b1: 1a:68:e0:5a:07:7a:b7:27:b0:99:fc:48:3c:94:9d:1a:06:79: 5d:33:17:3f:1a:8f:27:1c:a6:94:eb:04:78:77:be:53:24:fe: 6e:fc:da:84:77:4e:53:60:13:d1:80:35:df:a0:9b:7c:ac:88: 32:e2:0f:ef:75:be:53:7f:77:dd:bb:79:d6:36:23:dd:ee:e8: 34:7d:d1:1c:69:2d:2a:17:2d:be:c8:08:a4:16:6f:55:9d:59: 9c:08:11:31 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0XB8IjRRg3S28+VPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk ZDkwMzJjMzctMmVhNi00YjU3LThlYzQtZTY2ZTg5Mzg2MWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVjnnsYqhzHXSHcHyHyRCt0gyiUFfJ2wW7Sz phxBYuwgfl/hUxFeHdIA4np2HFqMMSPrc2dbS8mXtOYFZNR6EW7fWON2bwehWZFV FwiiTXIHNUrxlD1O/LSV/P50sbO7bxN9Gdy6z38Py+5H/kmtny5u8ZzKZeM3OSWr ri957m/TwZfqmlbHP1j6T0sHG96x1yIXZU6wuW43SHV5MAQYV4QqGJVAs7WJJksX NTrJRhwzRjeIl6aMpRSxJqP8Fns1AIRlEKlaC3o6/vmshudq8DyXeecqT0oj7FbF w9kAKruHLadogLWgF2GfHIVukrSjScqYxw2Nl/FJJXHOv+xc9QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLOMHra+3TRDmaGg9htm2UZMh5PdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2U4NjA3ZDYtYmMwYS0z NDA0LWFkZWEtMWRjNzY2MDQ5Y2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBLnXelcMAA+MuIOhd10NQTyzcgd0rWvqYYmVG+vp2FSq/Pu7gcnmsh R3dorc8xMe2K9L4aDMufeCLqS7Q9QJNQLZcCVH3GFCFEGpJstsFv/ZM9y3eSbHhq ucDOMEDAwCiOGS0q3TfeNyi7Y2z8Dy8xNZl4EwxItOio0DSdNpJt8LeZh6XGi3B3 SuGF5IPeUx4ZrLYk/VrjdN943FZLnmkLlrEaaOBaB3q3J7CZ/Eg8lJ0aBnldMxc/ Go8nHKaU6wR4d75TJP5u/NqEd05TYBPRgDXfoJt8rIgy4g/vdb5Tf3fdu3nWNiPd 7ug0fdEcaS0qFy2+yAikFm9VnVmcCBEx -----END CERTIFICATE-----Generated at Thu Mar 26 10:18:13 2026 by rpki-client