$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57afccd3-d718-34ab-b3c7-5915e18acd5a.roa File: 57afccd3-d718-34ab-b3c7-5915e18acd5a.roa (raw, json) Hash identifier: D1AWdWKk8+Y+A8/4n16td94oJpQ0zmjcogJJww+jgY0= Subject key identifier: 19:F3:91:B7:4D:48:D2:9F:53:9A:A5:C3:80:71:55:3C:A7:38:4F:BF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EC0A763BE4BD1289B37C04140 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57afccd3-d718-34ab-b3c7-5915e18acd5a.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 396765 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:63:be:4b:d1:28:9b:37:c0:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=a21520d3-09db-4059-a5a7-4d85df7dac3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:50:60:cd:99:ef:a9:26:7f:cd:4a:73:19:6b: db:bc:cb:83:f4:10:53:16:8c:13:1f:5a:09:d3:de: 47:1c:8d:c9:6a:6c:e2:0e:ee:86:5a:58:29:97:07: ef:3b:bd:ab:4d:e5:2d:e4:a1:88:97:94:d5:03:64: 2c:8c:81:dc:4e:ed:cf:b2:e8:d3:9c:c0:f8:39:cb: 0b:87:5a:8c:8b:00:78:e7:e1:fb:e4:cb:8c:b7:e5: 7e:5f:20:44:c7:08:2a:a0:b8:c5:f7:cb:13:75:7d: 34:f1:c1:0c:d2:20:c2:3f:20:66:4a:5f:ce:01:60: 00:53:9e:59:91:15:d5:46:76:be:a2:cb:10:33:89: 44:d5:d5:87:7d:79:38:b3:5c:39:91:b0:e1:c5:30: 6e:42:6a:c0:f0:92:af:80:bc:d9:f0:06:f3:99:a7: 78:f0:d8:54:ef:b3:67:11:1a:33:41:8c:2f:e1:25: 47:d3:b3:0d:ae:5c:62:ef:20:7f:b4:32:af:21:fc: eb:88:43:42:91:86:15:8d:29:75:f8:ca:d1:2c:08: 81:04:02:b5:fa:69:35:e2:c8:14:9e:48:1c:01:06: 60:42:eb:74:bf:18:f9:e1:44:73:1a:1b:a7:73:18: ba:35:e1:f5:44:e2:57:2d:bc:6f:7c:de:d6:ad:88: 5a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F3:91:B7:4D:48:D2:9F:53:9A:A5:C3:80:71:55:3C:A7:38:4F:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57afccd3-d718-34ab-b3c7-5915e18acd5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:7d:5a:d6:ea:b3:15:cf:69:ab:44:b1:0f:cf:60:3f:42:bb: b9:d8:00:5a:09:ab:10:f5:bf:7e:f3:e0:37:14:9e:23:86:86: ab:33:4b:5f:16:0c:da:33:80:70:cc:97:96:68:63:fb:92:56: 90:9d:20:f1:08:61:de:f6:80:75:fd:ad:20:cf:5d:8d:af:44: 38:43:88:6f:4e:6f:3f:5d:ad:e1:66:f4:00:54:fb:97:a5:d4: 72:6f:21:c7:b0:ae:a7:8c:50:c1:98:6f:13:d0:57:35:9e:02: 7b:72:bf:56:25:ce:ec:40:c6:12:c0:87:3b:45:f1:51:1c:06: f4:4f:df:b1:7e:d8:ff:00:dc:44:4c:56:12:ff:39:96:84:1b: 4a:92:0d:cc:85:0b:a6:ab:86:30:62:b0:83:82:78:c2:2a:d8: be:55:d3:f3:80:43:4d:12:de:bf:4c:dd:54:dc:2e:26:de:0d: d3:ee:b5:54:50:71:d2:e8:f2:2f:ca:87:0f:08:bc:02:cb:1c: 95:5a:ad:96:74:31:77:6b:4a:69:39:86:f5:ba:58:7f:5e:58: 58:9e:9f:53:40:85:0b:20:83:40:36:a9:fb:96:11:d3:0f:05: 49:b7:b0:6d:e6:6c:71:1e:4b:8d:69:c1:17:b9:ac:91:2a:39: 7c:0d:a0:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Ap2O+S9EomzfAQUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk YTIxNTIwZDMtMDlkYi00MDU5LWE1YTctNGQ4NWRmN2RhYzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1BgzZnvqSZ/zUpzGWvbvMuD9BBTFowTH1oJ 095HHI3JamziDu6GWlgplwfvO72rTeUt5KGIl5TVA2QsjIHcTu3PsujTnMD4OcsL h1qMiwB45+H75MuMt+V+XyBExwgqoLjF98sTdX008cEM0iDCPyBmSl/OAWAAU55Z kRXVRna+ossQM4lE1dWHfXk4s1w5kbDhxTBuQmrA8JKvgLzZ8Abzmad48NhU77Nn ERozQYwv4SVH07MNrlxi7yB/tDKvIfzriENCkYYVjSl1+MrRLAiBBAK1+mk14sgU nkgcAQZgQut0vxj54URzGhuncxi6NeH1ROJXLbxvfN7WrYhaxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBnzkbdNSNKfU5qlw4BxVTynOE+/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTdhZmNjZDMtZDcxOC0z NGFiLWIzYzctNTkxNWUxOGFjZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALx9WtbqsxXPaatEsQ/PYD9Cu7nYAFoJqxD1v37z4DcUniOGhqszS18W DNozgHDMl5ZoY/uSVpCdIPEIYd72gHX9rSDPXY2vRDhDiG9Obz9dreFm9ABU+5el 1HJvIcewrqeMUMGYbxPQVzWeAntyv1YlzuxAxhLAhztF8VEcBvRP37F+2P8A3ERM VhL/OZaEG0qSDcyFC6arhjBisIOCeMIq2L5V0/OAQ00S3r9M3VTcLibeDdPutVRQ cdLo8i/Khw8IvALLHJVarZZ0MXdrSmk5hvW6WH9eWFien1NAhQsgg0A2qfuWEdMP BUm3sG3mbHEeS41pwRe5rJEqOXwNoN4= -----END CERTIFICATE-----Generated at Sat Sep 26 18:52:38 2026 by rpki-client