$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49b82197-fa22-31e3-8670-461b71d3a620.roa File: 49b82197-fa22-31e3-8670-461b71d3a620.roa (raw, json) Hash identifier: L3bRSwFH9FkhGsMSNGoslLIocH3JsbZmYwJNefcyh90= Subject key identifier: EE:AD:16:BD:14:D5:67:F8:76:92:EF:89:10:13:9E:21:3B:57:64:25 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1707F07AA85EF1C2F51D9100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49b82197-fa22-31e3-8670-461b71d3a620.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 397210 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:f0:7a:a8:5e:f1:c2:f5:1d:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=74ec855b-5faa-4eb7-8285-eaf9f002f4e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:dc:41:b0:ab:3f:e8:21:f1:04:29:7b:f3:48: 58:6b:cf:1f:bb:b3:fb:43:4e:55:b8:c6:6a:c6:15: 4a:47:94:68:82:c7:28:a9:a2:15:46:fe:e1:96:1d: 1f:8f:38:f1:15:27:59:16:12:0a:10:d5:5a:06:ac: 0b:3d:dc:26:d2:85:51:52:57:1a:93:e8:1c:2f:a4: 16:2b:e0:27:83:81:02:cf:d6:cf:26:7e:40:76:d6: cf:ba:62:5d:0f:bf:aa:3e:99:fb:83:25:88:10:36: 6b:6e:13:74:4b:db:85:04:db:fd:7b:84:a6:58:a1: e1:f5:15:8b:ab:86:4e:4c:7f:b6:f1:e0:b3:ea:89: 76:38:a9:dc:16:ee:30:80:ce:5b:f0:63:56:1e:5c: 56:e6:20:8c:e8:f9:8b:37:37:f4:94:3b:4f:7d:31: c2:0e:3c:af:d5:3b:fd:24:5b:dd:a2:9c:b4:b8:06: 7e:6c:24:1e:49:54:d5:77:28:44:93:40:f4:9f:66: ac:a7:9e:07:1b:2a:3a:b3:1f:43:47:d0:a1:c5:01: a9:27:41:7d:15:14:9d:e6:f3:fe:b2:c9:15:d6:12: 73:a3:97:1c:cf:74:12:db:11:35:99:b9:1f:51:9e: 4f:e5:3f:e2:85:66:f1:22:f3:c0:17:a2:f5:cc:ef: d6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:AD:16:BD:14:D5:67:F8:76:92:EF:89:10:13:9E:21:3B:57:64:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49b82197-fa22-31e3-8670-461b71d3a620.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:2f:33:6b:4e:cd:44:3a:d9:07:a5:a9:e2:52:18:21:8f:25: bc:3b:d6:12:1e:c8:d3:f3:0a:80:33:8b:75:61:8f:92:3b:41: 15:55:f8:0d:d9:3e:93:a2:6d:c6:ba:e4:dd:71:d4:dc:4c:a7: 81:9b:d7:86:28:45:54:e8:ba:a6:0c:81:dc:49:8a:4b:0e:46: 7f:4e:79:62:f6:87:ff:ff:64:60:72:b3:eb:c8:88:00:85:23: 84:29:70:58:ca:9b:e9:9d:57:fb:5c:0b:83:20:22:60:4f:9c: f3:47:95:79:cf:5a:18:29:8e:31:6b:64:25:e0:f5:18:22:14: fe:2c:88:85:81:8b:f3:97:47:fc:ec:4f:58:b4:a3:0d:29:51: 0a:c3:d1:4c:b1:bc:57:41:67:00:2d:ad:a3:03:7f:f0:d7:e9: 62:3a:f3:ae:0d:86:db:a1:63:45:f7:91:22:74:bc:fc:95:73: aa:16:7f:fb:ec:e0:a1:80:4a:8d:01:7d:e1:fa:a1:07:bf:c7: e2:6b:b4:9b:e6:e1:38:52:43:b4:07:ba:f0:f1:ce:ec:58:77: 28:6d:40:b9:74:f7:13:28:51:8c:1d:46:59:79:11:3e:3d:0c: 12:78:92:c9:bb:22:ce:7b:1d:e1:73:d4:23:a9:52:97:f2:c5: 82:df:5c:63 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0XB/B6qF7xwvUdkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk NzRlYzg1NWItNWZhYS00ZWI3LTgyODUtZWFmOWYwMDJmNGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9xBsKs/6CHxBCl780hYa88fu7P7Q05VuMZq xhVKR5RogscoqaIVRv7hlh0fjzjxFSdZFhIKENVaBqwLPdwm0oVRUlcak+gcL6QW K+Ang4ECz9bPJn5AdtbPumJdD7+qPpn7gyWIEDZrbhN0S9uFBNv9e4SmWKHh9RWL q4ZOTH+28eCz6ol2OKncFu4wgM5b8GNWHlxW5iCM6PmLNzf0lDtPfTHCDjyv1Tv9 JFvdopy0uAZ+bCQeSVTVdyhEk0D0n2asp54HGyo6sx9DR9ChxQGpJ0F9FRSd5vP+ sskV1hJzo5ccz3QS2xE1mbkfUZ5P5T/ihWbxIvPAF6L1zO/WPQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFO6tFr0U1Wf4dpLviRATniE7V2QlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDliODIxOTctZmEyMi0z MWUzLTg2NzAtNDYxYjcxZDNhNjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCFLzNrTs1EOtkHpaniUhghjyW8O9YSHsjT8wqAM4t1YY+SO0EVVfgN 2T6Tom3GuuTdcdTcTKeBm9eGKEVU6LqmDIHcSYpLDkZ/Tnli9of//2RgcrPryIgA hSOEKXBYypvpnVf7XAuDICJgT5zzR5V5z1oYKY4xa2Ql4PUYIhT+LIiFgYvzl0f8 7E9YtKMNKVEKw9FMsbxXQWcALa2jA3/w1+liOvOuDYbboWNF95EidLz8lXOqFn/7 7OChgEqNAX3h+qEHv8fia7Sb5uE4UkO0B7rw8c7sWHcobUC5dPcTKFGMHUZZeRE+ PQwSeJLJuyLOex3hc9QjqVKX8sWC31xj -----END CERTIFICATE-----Generated at Thu Mar 26 15:53:45 2026 by rpki-client