$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58b146c8-3a81-318a-894b-f0a86c83b527.roa File: 58b146c8-3a81-318a-894b-f0a86c83b527.roa (raw, json) Hash identifier: ERahcZhRaRXGxhQ7xzBIx0n1xXt2/5UwAxzKEnHUofk= Subject key identifier: B5:DE:3B:01:FB:DE:96:2D:C9:87:F3:22:5A:6F:96:46:20:D4:9D:61 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D2A74E584A8E82AF4E6B1D600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58b146c8-3a81-318a-894b-f0a86c83b527.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 396564 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:e5:84:a8:e8:2a:f4:e6:b1:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=0daa4c5c-2a83-4e9f-b61c-8a359b45cabb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:40:d0:88:eb:4b:cb:87:41:37:84:55:77:51: 26:4c:50:61:38:eb:e4:03:26:bc:53:13:bd:a8:c6: 8b:02:e5:45:fa:35:ed:2e:dd:b4:43:0d:42:89:25: 6d:d9:ca:e7:03:35:59:72:f1:c9:db:04:8c:cd:56: 3f:2d:ff:54:b7:7b:b8:53:e0:e5:9f:a7:46:f6:22: ec:46:a2:d5:25:bc:74:33:7b:30:f3:86:a3:9a:bb: 17:65:55:18:3a:c1:fe:4a:0e:c8:2a:f1:bd:ab:72: 40:9d:99:f7:2f:26:c7:c0:d4:0b:3a:f2:87:82:19: f3:93:ab:71:e1:fb:e7:be:d0:98:66:59:99:97:91: e8:92:a1:42:23:08:12:66:0e:cb:e7:8e:40:b3:35: 36:66:c9:51:88:d0:84:1f:f4:34:a9:dd:91:a0:20: de:ff:f3:da:3f:58:88:43:ac:83:8c:6c:bd:f1:e8: 5e:1f:31:e5:eb:43:d3:9a:42:9a:1e:ff:fd:b7:21: 36:3e:c8:21:18:80:13:5e:da:65:28:ad:c0:e9:5e: 3c:5c:38:09:70:49:83:a4:d6:08:fb:41:95:9b:04: 4b:aa:06:11:e1:b7:92:2d:d4:e4:17:a1:c9:1c:00: 02:4e:35:f0:bd:b4:fe:0c:6a:a7:97:c6:94:d9:b6: fd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:DE:3B:01:FB:DE:96:2D:C9:87:F3:22:5A:6F:96:46:20:D4:9D:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58b146c8-3a81-318a-894b-f0a86c83b527.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:38:14:1f:78:e0:ce:c3:65:4f:0c:58:f4:67:1b:55:26:85: 56:c9:41:28:98:1c:0a:1d:90:63:68:bc:26:ed:8d:b6:c8:42: be:c8:22:8c:24:8c:77:9b:76:bd:c8:20:ff:1f:67:a6:5a:db: 2e:2f:8c:87:d4:32:33:a7:f5:ca:b0:4e:f7:0e:89:d7:c3:2b: b2:62:66:bb:23:5f:b0:76:5b:3f:1a:75:21:20:c7:90:0e:b8: d3:8e:ad:94:60:c6:51:ea:39:af:8e:5a:3f:73:8b:fe:4e:37: 43:a6:1d:56:4b:97:57:9d:67:ae:1c:12:70:28:b1:85:5a:df: 39:cf:bc:21:0c:07:a8:b6:00:da:08:90:7d:12:ae:49:f5:22: b8:d1:cb:88:6d:f9:c7:95:ea:75:f3:80:62:2e:bf:86:ac:0b: 95:4e:81:67:fd:ed:7d:64:25:f9:61:11:0a:ad:43:58:1b:3b: 60:3d:90:a2:59:9d:14:94:21:9a:d0:1d:8c:a1:59:b5:b5:a9: 25:50:a6:21:2d:48:89:fe:88:44:82:cd:3b:8e:4a:d5:d4:24: 10:cb:94:d9:0c:55:47:8e:c2:4b:2d:1a:22:24:ef:b9:1e:d9: 7c:c9:4a:3f:ef:8b:c4:96:1c:d1:63:e6:ac:83:f4:10:b1:4d: 1e:4b:70:08 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0qdOWEqOgq9Oax1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk MGRhYTRjNWMtMmE4My00ZTlmLWI2MWMtOGEzNTliNDVjYWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEDQiOtLy4dBN4RVd1EmTFBhOOvkAya8UxO9 qMaLAuVF+jXtLt20Qw1CiSVt2crnAzVZcvHJ2wSMzVY/Lf9Ut3u4U+Dln6dG9iLs RqLVJbx0M3sw84ajmrsXZVUYOsH+Sg7IKvG9q3JAnZn3LybHwNQLOvKHghnzk6tx 4fvnvtCYZlmZl5HokqFCIwgSZg7L545AszU2ZslRiNCEH/Q0qd2RoCDe//PaP1iI Q6yDjGy98eheHzHl60PTmkKaHv/9tyE2PsghGIATXtplKK3A6V48XDgJcEmDpNYI +0GVmwRLqgYR4beSLdTkF6HJHAACTjXwvbT+DGqnl8aU2bb98QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLXeOwH73pYtyYfzIlpvlkYg1J1hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNThiMTQ2YzgtM2E4MS0z MThhLTg5NGItZjBhODZjODNiNTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA2OBQfeODOw2VPDFj0ZxtVJoVWyUEomBwKHZBjaLwm7Y22yEK+yCKM JIx3m3a9yCD/H2emWtsuL4yH1DIzp/XKsE73DonXwyuyYma7I1+wdls/GnUhIMeQ DrjTjq2UYMZR6jmvjlo/c4v+TjdDph1WS5dXnWeuHBJwKLGFWt85z7whDAeotgDa CJB9Eq5J9SK40cuIbfnHlep184BiLr+GrAuVToFn/e19ZCX5YREKrUNYGztgPZCi WZ0UlCGa0B2MoVm1taklUKYhLUiJ/ohEgs07jkrV1CQQy5TZDFVHjsJLLRoiJO+5 Htl8yUo/74vElhzRY+asg/QQsU0eS3AI -----END CERTIFICATE-----Generated at Thu Mar 26 18:08:41 2026 by rpki-client