$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/406b998d-1770-30ed-830d-b6462060a172.roa File: 406b998d-1770-30ed-830d-b6462060a172.roa (raw, json) Hash identifier: GDnrqK0SCApDKAAHARzQGqC480+zYDw4xfTwNsZIxFE= Subject key identifier: D2:6B:A5:94:E2:AA:C2:3C:58:43:0C:55:DB:46:56:66:D1:35:B9:5F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D0EA7E05F3C7A623E7ED5EFB8 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/406b998d-1770-30ed-830d-b6462060a172.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 396549 IP address blocks: 192.81.185.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:e0:5f:3c:7a:62:3e:7e:d5:ef:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=7088f91b-648b-4f8c-a3f4-8bf03030d016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a8:c8:ad:aa:17:d9:e2:98:1d:81:cd:b6:a6: 2e:4f:67:f3:6a:39:45:11:1b:4b:68:4c:8c:76:c4: 50:a6:7e:95:38:05:74:dd:1f:3e:02:64:5b:f0:3e: a3:1a:6b:f2:06:9d:2e:e0:4b:c4:5f:ad:02:a2:ec: 6b:91:bd:5f:c6:d7:39:a8:08:5f:22:a3:8b:a1:4b: 44:55:15:99:2e:b8:98:6b:6f:3f:d1:53:3d:38:f4: 09:af:30:a6:ad:cc:ee:78:fb:6c:86:54:1a:bd:57: 3f:c3:a6:1c:e7:f6:cf:6c:38:ad:13:57:8f:0b:40: b3:12:56:56:6a:38:44:25:d4:cc:ad:82:18:c0:88: 16:d9:fb:72:b1:c6:2e:fa:02:34:3b:09:e9:d3:53: 1a:61:a0:43:bb:be:f0:32:18:b4:6e:33:d5:3e:22: ab:46:0f:5e:b2:b8:e4:cd:a9:9b:c1:e8:81:4c:2a: bd:c0:16:9e:84:81:22:d2:56:60:f9:98:85:78:58: b3:85:c2:73:b8:c7:57:81:60:cd:64:0d:9f:eb:53: 40:4d:73:c0:7f:a2:94:64:6f:d7:aa:5b:c6:ef:4f: 61:23:d1:4f:c7:39:ed:f8:84:46:49:92:ae:32:74: 9b:e6:5c:58:1c:ce:77:70:4d:a9:7d:27:58:b7:b1: 08:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6B:A5:94:E2:AA:C2:3C:58:43:0C:55:DB:46:56:66:D1:35:B9:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/406b998d-1770-30ed-830d-b6462060a172.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.81.185.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:0a:6a:f3:0d:b4:01:13:74:59:ab:84:a0:92:16:e2:4e:73: f9:70:c3:7d:39:cd:2a:03:f2:58:54:2c:f4:ff:4a:67:13:f0: f2:d8:f3:ee:23:0b:5f:64:42:5a:0f:58:97:d1:06:0a:2b:45: ba:a4:4f:1a:ad:ed:8d:72:3c:0b:8c:93:92:36:21:26:ff:3a: 4f:7d:bc:3b:5b:6d:3d:88:68:1a:6c:6a:02:a6:fe:2b:cc:57: 15:a5:bc:58:55:b2:60:7b:81:33:b3:1f:0b:56:4d:0b:99:77: ef:90:75:6b:fd:67:33:98:fd:cb:fa:12:63:97:5e:43:cb:39: 4c:33:7c:47:62:62:a0:6b:68:3c:3f:d9:8a:e1:58:30:a5:ec: 90:dd:87:17:fc:90:03:e4:33:99:f3:35:50:a8:cb:b3:72:bf: a9:64:6e:78:2c:6b:62:84:8c:e5:47:ba:60:58:f8:b5:e4:4d: 5c:37:fc:4d:4e:2b:9d:18:76:df:13:f4:8a:24:02:93:c2:ba: 53:70:9d:a6:76:c6:a1:96:28:58:cd:0d:dd:4b:3b:46:18:c8: b2:d0:d7:35:20:1e:4f:b2:66:f5:e8:eb:33:0f:50:29:74:ae: 07:97:4e:e2:3b:04:2d:89:66:4a:09:76:ba:10:6c:4b:93:bd: b5:5d:15:7d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0Op+BfPHpiPn7V77gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk NzA4OGY5MWItNjQ4Yi00ZjhjLWEzZjQtOGJmMDMwMzBkMDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqjIraoX2eKYHYHNtqYuT2fzajlFERtLaEyM dsRQpn6VOAV03R8+AmRb8D6jGmvyBp0u4EvEX60Couxrkb1fxtc5qAhfIqOLoUtE VRWZLriYa28/0VM9OPQJrzCmrczuePtshlQavVc/w6Yc5/bPbDitE1ePC0CzElZW ajhEJdTMrYIYwIgW2ftyscYu+gI0Ownp01MaYaBDu77wMhi0bjPVPiKrRg9esrjk zambweiBTCq9wBaehIEi0lZg+ZiFeFizhcJzuMdXgWDNZA2f61NATXPAf6KUZG/X qlvG709hI9FPxznt+IRGSZKuMnSb5lxYHM53cE2pfSdYt7EIJQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNJrpZTiqsI8WEMMVdtGVmbRNblfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDA2Yjk5OGQtMTc3MC0z MGVkLTgzMGQtYjY0NjIwNjBhMTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFG5HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC3CmrzDbQBE3RZq4SgkhbiTnP5cMN9Oc0qA/JYVCz0/0pnE/Dy2PPu IwtfZEJaD1iX0QYKK0W6pE8are2NcjwLjJOSNiEm/zpPfbw7W209iGgabGoCpv4r zFcVpbxYVbJge4Ezsx8LVk0LmXfvkHVr/WczmP3L+hJjl15DyzlMM3xHYmKga2g8 P9mK4VgwpeyQ3YcX/JAD5DOZ8zVQqMuzcr+pZG54LGtihIzlR7pgWPi15E1cN/xN TiudGHbfE/SKJAKTwrpTcJ2mdsahlihYzQ3dSztGGMiy0Nc1IB5Psmb16OszD1Ap dK4Hl07iOwQtiWZKCXa6EGxLk721XRV9 -----END CERTIFICATE-----Generated at Thu Mar 26 20:09:32 2026 by rpki-client