$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/446e7701-6536-3fe0-b333-ddfd9894a3b2.roa File: 446e7701-6536-3fe0-b333-ddfd9894a3b2.roa (raw, json) Hash identifier: WDkh/+BJRGS+qrPDw8a+bjiotL5L7bNIPpYn8EI64G0= Subject key identifier: BB:59:7C:09:A8:98:1E:06:4A:E6:AC:8B:5D:3D:DE:8A:D2:44:15:0F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1707E5DB753C19B338A8B080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/446e7701-6536-3fe0-b333-ddfd9894a3b2.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 25485 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:e5:db:75:3c:19:b3:38:a8:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=c22d4d04-e48f-4d79-b1f1-fe2c9200021a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:35:ec:04:2e:91:cf:ff:9e:62:af:35:88:18: 3b:53:3b:14:30:ea:ee:45:01:b0:cf:36:0c:16:56: 90:18:63:c6:62:ae:1d:bd:64:dd:d2:78:63:93:bd: 4e:9a:10:ab:ca:e4:31:a7:ba:91:b5:e8:c9:8b:3d: 0f:03:d0:dd:e3:63:2f:01:b5:23:84:a3:6b:02:0d: 4c:43:4a:c2:40:18:5a:e8:4b:d5:c2:b9:c9:6f:00: de:a7:d9:44:e3:c6:87:7c:14:4b:78:eb:aa:e7:54: 48:a7:80:68:00:ae:45:62:88:d1:60:0d:7c:cb:56: 7a:d1:25:59:55:b7:53:fc:26:0f:11:a1:14:3a:8f: 80:2e:ce:2d:44:ea:45:0f:dc:9a:fe:45:af:a3:89: bf:e7:b0:38:c9:3b:e9:46:ba:0e:6a:b0:29:05:b7: 66:e7:74:7b:e5:fc:c3:09:16:a1:be:52:5e:1d:d0: 9f:ea:80:fb:51:75:f4:42:2b:e1:b9:0b:95:f8:d4: f9:4e:bd:11:40:5b:b8:ef:b5:be:2f:1b:e6:19:4f: 7e:1d:88:da:58:be:1b:1a:7a:27:ad:76:a1:25:3c: 85:75:d1:ef:af:43:05:6b:f4:c3:dd:df:2f:20:36: f8:c4:23:79:1b:01:70:a8:07:30:a7:0c:6c:f2:01: 9f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:59:7C:09:A8:98:1E:06:4A:E6:AC:8B:5D:3D:DE:8A:D2:44:15:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/446e7701-6536-3fe0-b333-ddfd9894a3b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:8c:8f:09:74:07:b8:c2:56:04:54:7c:2a:0f:eb:c1:bc:ee: 41:37:f2:64:ec:34:82:aa:41:cd:a8:ab:a2:06:18:85:5c:1e: fd:61:57:6e:e2:16:13:fb:f8:63:20:64:c6:0d:90:5b:8c:ab: a7:df:56:bf:43:70:3a:ec:da:54:23:98:81:5d:8c:d6:00:ba: 3d:d8:2c:5a:0e:12:17:66:9c:e1:d6:90:98:7a:a8:d8:e2:99: 98:d4:cf:03:33:a8:80:1a:cc:c5:f4:8b:65:79:27:41:17:c6: a2:9c:16:00:7e:cd:1c:ba:42:18:4b:bf:c9:09:9c:8c:10:e4: 5d:31:3f:06:c3:6d:2d:f3:a9:4e:1b:70:ab:41:98:cc:7f:0f: 82:72:74:94:04:d4:5b:9d:07:0c:41:d8:f0:86:98:94:7d:21: ec:af:b1:a9:ba:f4:57:4d:f5:4e:a9:f1:a1:b8:3c:d9:17:a1: 29:33:11:53:35:76:a9:90:7f:b9:d2:58:6d:a4:c6:d1:5a:c4: 67:80:4e:d3:a9:56:df:c1:a6:db:4d:d9:ca:d4:b0:0d:c4:db: 24:0d:a8:0a:56:a2:f8:a1:f4:34:ed:a3:ea:cc:9d:2c:62:d1: ed:4b:48:e6:35:37:74:b3:51:a0:af:20:32:b6:5e:66:f0:2f: 80:cb:4e:89 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0XB+XbdTwZsziosIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk YzIyZDRkMDQtZTQ4Zi00ZDc5LWIxZjEtZmUyYzkyMDAwMjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjXsBC6Rz/+eYq81iBg7UzsUMOruRQGwzzYM FlaQGGPGYq4dvWTd0nhjk71OmhCryuQxp7qRtejJiz0PA9Dd42MvAbUjhKNrAg1M Q0rCQBha6EvVwrnJbwDep9lE48aHfBRLeOuq51RIp4BoAK5FYojRYA18y1Z60SVZ VbdT/CYPEaEUOo+ALs4tROpFD9ya/kWvo4m/57A4yTvpRroOarApBbdm53R75fzD CRahvlJeHdCf6oD7UXX0QivhuQuV+NT5Tr0RQFu477W+LxvmGU9+HYjaWL4bGnon rXahJTyFddHvr0MFa/TD3d8vIDb4xCN5GwFwqAcwpwxs8gGfeQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLtZfAmomB4GSuasi1093orSRBUPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDQ2ZTc3MDEtNjUzNi0z ZmUwLWIzMzMtZGRmZDk4OTRhM2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBhjI8JdAe4wlYEVHwqD+vBvO5BN/Jk7DSCqkHNqKuiBhiFXB79YVdu 4hYT+/hjIGTGDZBbjKun31a/Q3A67NpUI5iBXYzWALo92CxaDhIXZpzh1pCYeqjY 4pmY1M8DM6iAGszF9ItleSdBF8ainBYAfs0cukIYS7/JCZyMEORdMT8Gw20t86lO G3CrQZjMfw+CcnSUBNRbnQcMQdjwhpiUfSHsr7GpuvRXTfVOqfGhuDzZF6EpMxFT NXapkH+50lhtpMbRWsRngE7TqVbfwabbTdnK1LANxNskDagKVqL4ofQ07aPqzJ0s YtHtS0jmNTd0s1GgryAytl5m8C+Ay06J -----END CERTIFICATE-----Generated at Thu Mar 26 16:20:03 2026 by rpki-client