$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3eeada00-de69-31c7-970a-f942f4a599aa.roa File: 3eeada00-de69-31c7-970a-f942f4a599aa.roa (raw, json) Hash identifier: dRSnaZ/xF5SSfR4l0lprMyq0kff2ToGH57PojNWV+5g= Subject key identifier: F1:52:B0:21:DB:3B:3F:C2:0A:6D:6C:15:2C:9B:23:AA:E0:E6:2F:8E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D3DFF92F579E0E11191E26F00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3eeada00-de69-31c7-970a-f942f4a599aa.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396613 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:92:f5:79:e0:e1:11:91:e2:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=6c48812c-98e2-41fa-ae6e-4b2b2da7f906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e3:6e:10:71:91:2a:45:3f:a7:98:41:13:43: b1:73:f7:28:28:65:3f:db:6e:c6:c0:b0:76:e7:2a: dd:81:b2:3c:e9:e9:91:ae:28:2c:37:93:00:5c:74: 8d:b8:ec:1d:66:8b:8a:20:9b:21:8d:67:00:4e:0f: 87:22:8b:46:f6:44:af:78:dd:f9:64:4c:ed:c1:6a: 21:63:a2:fc:5c:a8:ee:e8:4c:50:3f:ef:64:7d:cd: ec:01:a4:c5:36:2f:b8:3d:02:f8:dd:d8:7b:48:26: 6f:d5:35:31:1c:ea:0b:43:96:0f:9a:6c:27:d4:e4: 0a:cc:e4:fc:96:59:56:85:20:58:e3:88:56:fb:33: 2a:53:08:e2:db:e8:0e:5e:4e:e6:69:b3:b1:ff:86: 7e:de:a1:03:ba:97:55:c3:2e:f9:6f:58:da:1e:c8: 8a:9c:25:25:8f:e5:9b:e6:bc:8e:3c:a5:c4:92:a7: 1c:09:e3:43:28:a4:bb:61:d9:14:c1:27:6d:33:46: 9b:6f:b4:01:72:c0:87:7a:60:0c:d4:f6:01:57:4c: 76:da:ea:e8:e2:3e:a7:ba:f5:2e:bd:9e:da:80:c6: f8:ea:8c:46:56:58:f8:58:01:97:3d:b7:08:ba:fc: e1:54:49:bb:8e:0b:88:1f:1e:86:6a:18:57:67:fa: c6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:52:B0:21:DB:3B:3F:C2:0A:6D:6C:15:2C:9B:23:AA:E0:E6:2F:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3eeada00-de69-31c7-970a-f942f4a599aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:6c:55:60:cb:21:2f:24:a7:d4:2a:9d:7b:24:e4:ea:42:b2: 35:ef:b4:39:99:a9:c7:3a:1c:3c:dd:48:41:a8:39:14:a9:9f: fd:52:93:b3:90:9f:91:c6:9c:00:54:45:32:8b:7c:c2:e5:60: aa:16:93:87:27:91:23:d5:85:3a:1c:eb:21:88:9e:7a:2c:63: 2c:93:de:a7:0b:5c:b5:d5:7d:bd:18:f4:75:a0:cf:fb:09:3b: 1f:5a:49:ec:27:01:2b:48:19:8f:e0:04:cd:20:e8:ad:89:3d: a1:6d:21:6a:73:29:29:e1:27:89:2c:4f:b8:5c:ea:13:7a:91: e1:17:f0:b3:af:aa:7b:8b:2a:67:0d:04:ea:ae:db:c8:d9:5b: 5f:25:d4:64:dd:ab:b2:0b:ad:e2:a9:d2:30:34:ab:77:67:6c: 83:b9:cd:bb:aa:41:b1:a4:d3:b1:74:b1:1f:ba:16:c7:5f:e5: 69:10:11:9c:8f:2d:b5:39:75:dc:62:94:9c:89:49:0d:2d:72: bf:94:b5:79:b8:27:b4:e5:2d:59:d1:24:98:44:3f:27:8a:0f: a4:01:f8:63:d0:b8:a6:41:c1:ae:23:0f:e8:d5:4c:07:a2:df: dc:5a:b6:c3:31:c6:1d:10:e9:c6:a5:52:1c:13:07:8d:24:ce: 01:82:cd:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/5L1eeDhEZHibwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NmM0ODgxMmMtOThlMi00MWZhLWFlNmUtNGIyYjJkYTdmOTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuNuEHGRKkU/p5hBE0Oxc/coKGU/227GwLB2 5yrdgbI86emRrigsN5MAXHSNuOwdZouKIJshjWcATg+HIotG9kSveN35ZEztwWoh Y6L8XKju6ExQP+9kfc3sAaTFNi+4PQL43dh7SCZv1TUxHOoLQ5YPmmwn1OQKzOT8 lllWhSBY44hW+zMqUwji2+gOXk7mabOx/4Z+3qEDupdVwy75b1jaHsiKnCUlj+Wb 5ryOPKXEkqccCeNDKKS7YdkUwSdtM0abb7QBcsCHemAM1PYBV0x22uro4j6nuvUu vZ7agMb46oxGVlj4WAGXPbcIuvzhVEm7jguIHx6GahhXZ/rGWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFSsCHbOz/CCm1sFSybI6rg5i+OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2VlYWRhMDAtZGU2OS0z MWM3LTk3MGEtZjk0MmY0YTU5OWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALNsVWDLIS8kp9QqnXsk5OpCsjXvtDmZqcc6HDzdSEGoORSpn/1Sk7OQ n5HGnABURTKLfMLlYKoWk4cnkSPVhToc6yGInnosYyyT3qcLXLXVfb0Y9HWgz/sJ Ox9aSewnAStIGY/gBM0g6K2JPaFtIWpzKSnhJ4ksT7hc6hN6keEX8LOvqnuLKmcN BOqu28jZW18l1GTdq7ILreKp0jA0q3dnbIO5zbuqQbGk07F0sR+6Fsdf5WkQEZyP LbU5ddxilJyJSQ0tcr+UtXm4J7TlLVnRJJhEPyeKD6QB+GPQuKZBwa4jD+jVTAei 39xatsMxxh0Q6calUhwTB40kzgGCzcs= -----END CERTIFICATE-----Generated at Thu Mar 26 19:29:29 2026 by rpki-client