$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5fd2c127-1a0c-37ad-b6ff-fb1ebbc2312f.roa File: 5fd2c127-1a0c-37ad-b6ff-fb1ebbc2312f.roa (raw, json) Hash identifier: s423obVPVRNGa+IScBhtatEqk6wr5WxOO0U4KfcKtIw= Subject key identifier: B0:54:97:72:F8:A1:41:06:01:88:B7:82:F3:A9:CD:0E:B3:0A:13:2D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D46B11403E9D23F743C3EF480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5fd2c127-1a0c-37ad-b6ff-fb1ebbc2312f.roa Signing time: Tue 24 Mar 2026 15:44:57 +0000 ROA not before: Tue 24 Mar 2026 15:44:57 +0000 ROA not after: Mon 22 Jun 2026 15:44:57 +0000 asID: 20431 IP address blocks: 192.42.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:b1:14:03:e9:d2:3f:74:3c:3e:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 24 15:44:57 2026 GMT Not After : Jun 22 15:44:57 2026 GMT Subject: CN=d964f248-c386-4edf-b77e-d5dbad169c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0b:58:31:ab:dd:85:96:b3:0d:58:fe:bb:60: f4:ad:04:f4:d8:66:dd:4b:56:19:e6:37:a7:19:48: 69:b4:33:08:95:59:da:84:0e:ab:7b:2e:9e:73:bb: 30:3d:54:f0:4e:a0:a0:53:ba:38:b8:44:43:64:c3: b9:a6:30:be:9c:15:00:2f:62:28:71:de:d0:34:5a: 2a:66:0c:06:4e:7b:2d:bf:23:65:67:30:7a:d7:93: 15:bd:98:ba:e7:79:86:da:61:e8:d1:ee:ff:ac:69: c5:35:cc:b5:cf:4e:9c:f7:33:39:22:03:0f:d9:40: d9:cb:0a:45:8c:e3:2a:0d:53:a0:49:06:cd:d7:59: 0f:cf:e0:43:30:8a:cc:6f:c7:ad:0b:79:bd:51:4c: 57:37:1e:79:1e:86:1b:aa:5d:20:bc:e6:f6:45:e8: e6:59:39:18:4d:93:4c:c2:95:13:be:18:2f:05:4a: 2e:62:0a:a2:6b:b2:fb:03:36:cc:e6:e6:fe:f2:d6: 48:ce:75:4b:63:dd:4e:05:bd:66:d0:d4:b6:61:53: c1:8a:5d:52:fd:54:42:a3:6f:0e:ac:92:16:b8:5a: 83:6d:04:fa:56:99:a9:13:a5:73:dd:44:b6:f7:f4: 58:df:35:d3:8d:8d:a9:d5:43:ed:03:c5:0d:7d:cc: 43:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:54:97:72:F8:A1:41:06:01:88:B7:82:F3:A9:CD:0E:B3:0A:13:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5fd2c127-1a0c-37ad-b6ff-fb1ebbc2312f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:a2:17:b8:5b:c9:40:93:81:89:b2:ee:b5:86:82:7b:08:ee: 38:36:07:8d:f2:70:21:3c:59:00:fe:5f:42:68:f0:01:b2:4a: 54:d1:4d:c0:ed:88:00:a2:bf:96:80:33:5e:c9:ef:bc:60:e4: 72:6f:38:b8:ad:fb:11:81:72:e9:77:f3:a5:26:e3:56:89:f2: ff:ca:29:2f:dd:67:4b:0f:21:81:9c:ef:cf:57:12:6d:0a:ac: d4:ed:f5:62:81:b9:40:35:0c:71:56:a9:96:3b:40:5e:e9:4a: 2f:72:19:7a:eb:56:7a:ac:da:2e:cb:7a:2f:c0:f5:01:03:5a: dc:cb:b4:b2:94:8f:9b:36:be:20:b7:9a:0e:c8:de:9e:ee:f9: 3f:41:7b:c3:f2:34:c7:9b:2a:0e:61:5f:c2:cf:30:85:8b:be: 91:d8:20:cf:3d:65:d7:2f:e0:ee:a5:d1:24:81:67:6b:bf:52: d9:99:1c:3d:d8:5d:02:37:1e:3c:b8:5a:14:78:c5:4e:1a:2a: c1:ec:90:51:e5:e8:57:87:99:45:ed:bb:b2:da:52:39:e5:b3: ab:50:58:6a:5a:fd:2a:78:7d:54:86:35:38:64:d4:dd:d6:8a: d7:74:12:89:07:11:0f:11:a9:8e:4f:42:3d:69:f8:18:d2:db: c3:79:c7:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1GsRQD6dI/dDw+9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyNDE1NDQ1N1oXDTI2MDYyMjE1NDQ1N1owLzEtMCsGA1UEAxMk ZDk2NGYyNDgtYzM4Ni00ZWRmLWI3N2UtZDVkYmFkMTY5Yzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAtYMavdhZazDVj+u2D0rQT02GbdS1YZ5jen GUhptDMIlVnahA6rey6ec7swPVTwTqCgU7o4uERDZMO5pjC+nBUAL2Iocd7QNFoq ZgwGTnstvyNlZzB615MVvZi653mG2mHo0e7/rGnFNcy1z06c9zM5IgMP2UDZywpF jOMqDVOgSQbN11kPz+BDMIrMb8etC3m9UUxXNx55HoYbql0gvOb2RejmWTkYTZNM wpUTvhgvBUouYgqia7L7AzbM5ub+8tZIznVLY91OBb1m0NS2YVPBil1S/VRCo28O rJIWuFqDbQT6VpmpE6Vz3US29/RY3zXTjY2p1UPtA8UNfcxD7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBUl3L4oUEGAYi3gvOpzQ6zChMtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWZkMmMxMjctMWEwYy0z N2FkLWI2ZmYtZmIxZWJiYzIzMTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCquMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiiF7hbyUCTgYmy7rWGgnsI7jg2B43ycCE8WQD+X0Jo8AGySlTRTcDt iACiv5aAM17J77xg5HJvOLit+xGBcul386Um41aJ8v/KKS/dZ0sPIYGc789XEm0K rNTt9WKBuUA1DHFWqZY7QF7pSi9yGXrrVnqs2i7Lei/A9QEDWtzLtLKUj5s2viC3 mg7I3p7u+T9Be8PyNMebKg5hX8LPMIWLvpHYIM89Zdcv4O6l0SSBZ2u/UtmZHD3Y XQI3Hjy4WhR4xU4aKsHskFHl6FeHmUXtu7LaUjnls6tQWGpa/Sp4fVSGNThk1N3W itd0EokHEQ8RqY5PQj1p+BjS28N5x+Y= -----END CERTIFICATE-----Generated at Thu Mar 26 20:09:24 2026 by rpki-client