$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65ca1dc4-f312-34f3-97ff-8d97f0fa64ba.roa File: 65ca1dc4-f312-34f3-97ff-8d97f0fa64ba.roa (raw, json) Hash identifier: 2rf5l7I+Gk0tfzoBpTYsQ0ZHjCtqup2kNpXpWWu+YNE= Subject key identifier: 13:92:8B:D3:3C:43:C7:60:41:92:1A:29:B9:8D:26:F6:1E:5A:A3:D3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D3DFF94436448AA9193C21F40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65ca1dc4-f312-34f3-97ff-8d97f0fa64ba.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396722 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:94:43:64:48:aa:91:93:c2:1f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=31c7d476-5279-4a65-aa55-87a932c1b241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f0:70:f8:12:22:cd:33:4f:02:db:98:78:69: db:a8:c2:ae:26:5f:dc:c2:36:df:7b:f6:c3:69:b1: e1:09:25:cb:eb:2f:ef:66:43:66:d2:d7:5c:fc:4f: 33:4f:d3:59:cc:00:a1:26:f7:a4:41:e5:90:70:c5: 88:9d:02:76:fd:9e:22:69:b8:6b:45:63:73:4e:38: c9:7a:42:2d:13:51:b3:93:5f:77:8d:4f:44:67:19: 3e:ae:8d:43:e0:5d:fc:6e:17:da:85:11:78:8c:2c: 96:49:13:95:0b:90:76:a0:87:5e:6d:c4:4c:f6:e0: ea:c5:84:31:37:b8:76:b4:59:aa:8c:ca:16:d4:f0: 32:af:47:7a:10:fb:de:68:bc:22:59:55:cc:40:4a: df:86:78:63:2a:66:c1:be:2b:9f:b6:e8:34:22:1a: 8a:92:8b:9b:da:bf:ce:1a:06:af:15:83:c0:ec:fd: 7f:8a:dd:ce:e8:1e:4d:0d:74:89:82:f9:bf:2f:7e: 07:30:de:c9:59:74:bd:69:3c:4a:fc:61:8b:76:a1: 90:aa:3e:28:77:99:c1:fa:50:1a:d9:aa:45:2e:19: c7:23:6f:1b:46:8d:d5:1a:6e:58:ac:9c:a0:8c:bd: da:8a:23:c9:e6:b8:84:60:b2:7e:75:7b:af:ee:de: 4e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:92:8B:D3:3C:43:C7:60:41:92:1A:29:B9:8D:26:F6:1E:5A:A3:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65ca1dc4-f312-34f3-97ff-8d97f0fa64ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:37:65:fa:96:3f:01:b8:6d:34:89:c0:61:c5:b9:fb:ab:12: cd:e8:82:54:00:4a:ac:33:e3:b4:69:54:57:dd:aa:84:37:88: ce:26:16:f7:a1:b7:50:d0:46:a9:ac:06:37:dc:9a:44:05:87: 9b:9d:65:bc:91:0f:f3:bf:72:b0:b6:a3:57:9e:aa:6a:e9:91: 53:53:fb:f3:29:8e:0d:a9:c3:82:ff:f1:a4:c6:36:75:55:04: 01:8d:66:f9:9f:93:cd:49:73:1d:cc:c9:de:2e:b3:ca:00:8d: a4:52:2a:c9:f8:01:4c:98:e1:5d:99:00:9c:0d:6a:f4:10:83: bf:4f:67:6a:9d:4f:a6:3b:28:58:53:8a:e4:15:0c:b8:52:a6: ea:fe:1c:55:f5:75:ab:c4:11:0e:e2:48:73:24:5a:22:77:bf: 4d:fe:b4:6d:8a:38:70:6b:de:a0:6f:a7:d6:4c:e7:fb:87:35: a5:9c:24:34:8b:24:32:42:68:f2:f6:02:80:de:5a:99:b6:5a: 97:c0:5e:07:b4:38:ed:1a:f5:24:a7:73:31:65:47:49:75:a6: 44:93:3b:a3:ea:d8:f6:a7:b4:a9:88:2c:3f:70:04:8f:72:71: 7c:21:8a:3f:74:31:e1:c4:6d:1b:8a:ca:5e:02:c4:71:21:48: b5:92:5d:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/5RDZEiqkZPCH0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MzFjN2Q0NzYtNTI3OS00YTY1LWFhNTUtODdhOTMyYzFiMjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfBw+BIizTNPAtuYeGnbqMKuJl/cwjbfe/bD abHhCSXL6y/vZkNm0tdc/E8zT9NZzAChJvekQeWQcMWInQJ2/Z4iabhrRWNzTjjJ ekItE1Gzk193jU9EZxk+ro1D4F38bhfahRF4jCyWSROVC5B2oIdebcRM9uDqxYQx N7h2tFmqjMoW1PAyr0d6EPveaLwiWVXMQErfhnhjKmbBviuftug0IhqKkoub2r/O GgavFYPA7P1/it3O6B5NDXSJgvm/L34HMN7JWXS9aTxK/GGLdqGQqj4od5nB+lAa 2apFLhnHI28bRo3VGm5YrJygjL3aiiPJ5riEYLJ+dXuv7t5OjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOSi9M8Q8dgQZIaKbmNJvYeWqPTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjVjYTFkYzQtZjMxMi0z NGYzLTk3ZmYtOGQ5N2YwZmE2NGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGw3ZfqWPwG4bTSJwGHFufurEs3oglQASqwz47RpVFfdqoQ3iM4mFveh t1DQRqmsBjfcmkQFh5udZbyRD/O/crC2o1eeqmrpkVNT+/Mpjg2pw4L/8aTGNnVV BAGNZvmfk81Jcx3Myd4us8oAjaRSKsn4AUyY4V2ZAJwNavQQg79PZ2qdT6Y7KFhT iuQVDLhSpur+HFX1davEEQ7iSHMkWiJ3v03+tG2KOHBr3qBvp9ZM5/uHNaWcJDSL JDJCaPL2AoDeWpm2WpfAXge0OO0a9SSnczFlR0l1pkSTO6Pq2PantKmILD9wBI9y cXwhij90MeHEbRuKyl4CxHEhSLWSXdo= -----END CERTIFICATE-----Generated at Thu Mar 26 14:30:27 2026 by rpki-client