$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/683aad17-421a-3854-b08c-a27a7d2c193b.roa File: 683aad17-421a-3854-b08c-a27a7d2c193b.roa (raw, json) Hash identifier: sf1wz1WGYiQGYyDd5s8LCxa1ycjl5oPOt/CB9iYGwSg= Subject key identifier: 59:86:09:8B:AF:C1:59:B0:D3:DA:A8:26:C5:CF:B8:72:BB:9E:A5:E4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D46B11A077916FD44F2BE4B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/683aad17-421a-3854-b08c-a27a7d2c193b.roa Signing time: Tue 24 Mar 2026 15:45:00 +0000 ROA not before: Tue 24 Mar 2026 15:45:00 +0000 ROA not after: Mon 22 Jun 2026 15:45:00 +0000 asID: 396596 IP address blocks: 192.42.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:b1:1a:07:79:16:fd:44:f2:be:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 24 15:45:00 2026 GMT Not After : Jun 22 15:45:00 2026 GMT Subject: CN=4f8db3dd-c7f0-47a3-a70d-1e39d530b03a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:4c:24:a5:77:24:ae:10:45:f9:d4:8f:98:25: 7d:25:17:29:1a:2c:88:d8:fb:3e:11:0f:d5:31:33: cd:a0:c1:1a:dd:b0:e1:6f:88:26:4e:33:cd:a9:b8: 24:db:e9:37:b9:42:17:b0:b4:f3:26:be:e5:e4:65: a7:99:de:29:ef:af:9b:0f:87:77:d1:1f:64:be:cd: 22:09:df:8e:49:f9:67:44:25:a2:e1:1d:35:0c:1b: d8:3a:9e:24:9f:05:51:43:9e:8a:92:0f:c4:8d:a2: 9a:b3:2b:f1:2b:3f:f0:10:fd:ae:21:36:36:ef:1b: 5a:7f:90:87:06:1c:46:66:d4:c5:70:3a:18:59:c3: 61:a8:75:2a:60:6b:cc:9c:b5:2b:6a:37:46:7d:69: 4b:3f:31:b4:b0:87:3e:ce:32:1a:48:f3:a2:da:94: 7c:a0:b4:1f:26:ba:d4:0e:66:36:e1:e5:bc:b7:60: 88:39:d3:12:a8:85:c1:cf:5e:d2:f5:6f:d7:cb:48: 20:ca:b8:e4:85:18:5c:93:59:82:5c:d0:c2:a7:a7: 03:67:22:75:2c:23:d0:eb:db:09:4f:48:a2:45:a3: 32:7f:bd:86:21:17:2d:d3:7a:79:76:ce:c0:c8:a7: 13:c1:88:23:ee:c7:db:84:d8:cd:66:c1:6f:96:15: d5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:86:09:8B:AF:C1:59:B0:D3:DA:A8:26:C5:CF:B8:72:BB:9E:A5:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/683aad17-421a-3854-b08c-a27a7d2c193b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:06:35:14:4f:38:49:24:2a:39:f4:da:24:a8:7c:37:8b:5c: 1c:e1:00:37:3d:18:60:27:77:cb:67:c8:da:8d:8e:13:c3:45: 33:8a:98:84:f2:2b:31:6d:9d:57:7c:12:56:d8:15:6a:af:12: fb:f6:6a:cb:c0:a5:4a:a6:63:ce:42:45:b9:8c:9c:5c:74:c7: 13:32:1f:35:af:18:b6:b8:f7:7d:64:15:ab:ff:32:55:17:4e: 79:d2:de:72:e5:5d:b2:b4:91:1d:d5:2c:c6:42:15:80:db:d4: 95:6e:2a:92:61:77:c0:2d:70:ac:90:63:e9:fc:de:68:96:fb: 28:f2:27:8d:bb:e6:a2:92:83:2f:3d:4c:b0:4d:15:6c:42:5f: a0:cc:43:aa:77:8e:eb:21:0c:67:b5:da:f9:58:88:7f:ec:84: 53:f8:7c:ea:da:b3:61:52:e2:1b:39:0d:ea:97:db:2b:3f:a9: 31:42:f5:23:82:7a:66:01:fe:7c:d1:0b:25:64:40:24:9e:9f: b3:16:2d:a1:dd:f6:4b:0d:b2:26:9f:80:f0:e6:bd:39:04:42: 41:a4:de:65:51:8e:56:c8:af:9e:94:11:b4:72:e6:09:4a:8d: bf:db:3b:37:4f:09:4a:33:ca:3f:a2:59:20:a0:c8:9f:46:da: cd:99:46:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1GsRoHeRb9RPK+S4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyNDE1NDUwMFoXDTI2MDYyMjE1NDUwMFowLzEtMCsGA1UEAxMk NGY4ZGIzZGQtYzdmMC00N2EzLWE3MGQtMWUzOWQ1MzBiMDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9kwkpXckrhBF+dSPmCV9JRcpGiyI2Ps+EQ/V MTPNoMEa3bDhb4gmTjPNqbgk2+k3uUIXsLTzJr7l5GWnmd4p76+bD4d30R9kvs0i Cd+OSflnRCWi4R01DBvYOp4knwVRQ56Kkg/EjaKasyvxKz/wEP2uITY27xtaf5CH BhxGZtTFcDoYWcNhqHUqYGvMnLUrajdGfWlLPzG0sIc+zjIaSPOi2pR8oLQfJrrU DmY24eW8t2CIOdMSqIXBz17S9W/Xy0ggyrjkhRhck1mCXNDCp6cDZyJ1LCPQ69sJ T0iiRaMyf72GIRct03p5ds7AyKcTwYgj7sfbhNjNZsFvlhXV2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmGCYuvwVmw09qoJsXPuHK7nqXkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjgzYWFkMTctNDIxYS0z ODU0LWIwOGMtYTI3YTdkMmMxOTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCquMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAGNRRPOEkkKjn02iSofDeLXBzhADc9GGAnd8tnyNqNjhPDRTOKmITy KzFtnVd8ElbYFWqvEvv2asvApUqmY85CRbmMnFx0xxMyHzWvGLa4931kFav/MlUX TnnS3nLlXbK0kR3VLMZCFYDb1JVuKpJhd8AtcKyQY+n83miW+yjyJ4275qKSgy89 TLBNFWxCX6DMQ6p3jushDGe12vlYiH/shFP4fOras2FS4hs5DeqX2ys/qTFC9SOC emYB/nzRCyVkQCSen7MWLaHd9ksNsiafgPDmvTkEQkGk3mVRjlbIr56UEbRy5glK jb/bOzdPCUozyj+iWSCgyJ9G2s2ZRls= -----END CERTIFICATE-----Generated at Thu Mar 26 08:40:08 2026 by rpki-client