$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/686a98bf-02f7-3f74-9cb5-20cea4b6f345.roa File: 686a98bf-02f7-3f74-9cb5-20cea4b6f345.roa (raw, json) Hash identifier: oaqi7gcC0XfZ9xSTLbw+7JHt+k+pAvKPzDTc/zwPvM0= Subject key identifier: 49:41:22:EE:C2:F1:66:C3:A9:DA:AB:BC:16:C9:70:97:0D:26:1D:23 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D46B1139323DAC3EEBD75C0C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/686a98bf-02f7-3f74-9cb5-20cea4b6f345.roa Signing time: Tue 24 Mar 2026 15:44:57 +0000 ROA not before: Tue 24 Mar 2026 15:44:57 +0000 ROA not after: Mon 22 Jun 2026 15:44:57 +0000 asID: 396543 IP address blocks: 192.42.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:b1:13:93:23:da:c3:ee:bd:75:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 24 15:44:57 2026 GMT Not After : Jun 22 15:44:57 2026 GMT Subject: CN=d9eb0a2f-9f2b-4350-9c03-94c38075b8bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:71:d9:73:99:bf:5c:5a:97:66:d3:95:08:76: 73:2e:fd:a0:af:c3:72:d1:43:ff:db:c4:7f:04:0d: bb:d5:16:a8:bd:3e:61:99:50:bc:3f:2a:b8:85:7b: fb:6e:10:b8:20:3b:e5:ee:90:fc:8b:13:75:47:77: 60:63:a5:30:b7:03:45:e9:9b:5d:a0:b7:79:08:ac: 95:57:62:be:0c:b0:e3:38:21:59:1a:ef:e7:c8:b1: 52:9e:dc:23:f9:56:23:39:62:e3:ec:92:64:d5:5f: 32:60:4a:cf:be:0e:34:91:c7:7c:d5:65:12:73:d0: d7:7a:2d:67:44:d1:2d:aa:00:52:b3:6d:56:d2:f0: 1b:24:72:72:8a:b1:a6:ba:9f:23:c6:c1:e3:49:6a: fa:1f:35:8c:20:b8:26:57:99:9a:d7:4f:62:84:57: eb:f1:1b:6e:86:c7:77:86:d4:78:cc:df:86:07:43: 93:b1:be:12:ac:6c:91:07:24:65:f3:9d:41:21:ef: 9d:6f:27:22:0e:8d:15:67:c9:47:c7:c9:05:42:38: d7:0c:62:e2:e9:69:8c:fb:34:f3:03:39:7e:33:51: df:58:fd:29:18:35:44:48:a5:91:d9:4f:3d:ee:f9: 50:65:02:26:1a:d1:8d:36:55:75:6c:74:07:fe:ba: 9f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:41:22:EE:C2:F1:66:C3:A9:DA:AB:BC:16:C9:70:97:0D:26:1D:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/686a98bf-02f7-3f74-9cb5-20cea4b6f345.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:eb:1a:94:b2:88:d5:8e:00:5c:72:86:cc:7f:ee:0b:7c:7f: 35:7a:f4:27:ce:f0:3c:51:98:65:c3:67:1e:03:71:f9:47:f6: 6f:67:11:89:ee:d6:07:60:32:2b:d3:29:46:74:6d:bb:a7:bc: 53:f0:9c:c8:69:80:74:b0:31:3f:f7:16:a5:62:12:3f:30:1c: 48:0e:0e:b7:f7:4c:11:46:56:22:e2:f4:92:a6:1b:e3:17:02: 4a:7f:a3:07:20:42:29:3d:00:bc:f1:ff:a0:56:20:96:91:14: 47:16:85:64:ca:7f:f2:08:0b:b5:5f:24:c6:72:39:8d:94:5f: d3:b1:5d:3e:dc:07:2b:3c:07:d9:c9:5d:05:e2:c7:a1:61:96: 6e:d8:1c:08:02:fd:bf:2c:cd:20:ef:6d:2c:c8:80:fc:f6:17: 0b:2d:3a:cb:e1:e1:ff:af:e8:64:b0:54:28:38:35:70:f6:aa: eb:3d:bd:79:f4:b5:7e:6a:21:6e:ac:af:4d:73:18:81:75:76: f2:bc:9e:18:09:c0:e9:a0:fa:da:6a:f1:d6:9c:44:f7:a9:4d: f4:20:9d:7a:fa:fe:61:67:96:fb:f9:6a:61:45:90:bb:ba:2a: 31:f6:0b:9a:5f:90:05:cd:98:50:32:d1:10:6d:ab:47:15:c4: 0a:6d:b6:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1GsROTI9rD7r11wMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyNDE1NDQ1N1oXDTI2MDYyMjE1NDQ1N1owLzEtMCsGA1UEAxMk ZDllYjBhMmYtOWYyYi00MzUwLTljMDMtOTRjMzgwNzViOGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonHZc5m/XFqXZtOVCHZzLv2gr8Ny0UP/28R/ BA271RaovT5hmVC8Pyq4hXv7bhC4IDvl7pD8ixN1R3dgY6UwtwNF6ZtdoLd5CKyV V2K+DLDjOCFZGu/nyLFSntwj+VYjOWLj7JJk1V8yYErPvg40kcd81WUSc9DXei1n RNEtqgBSs21W0vAbJHJyirGmup8jxsHjSWr6HzWMILgmV5ma109ihFfr8Rtuhsd3 htR4zN+GB0OTsb4SrGyRByRl851BIe+dbyciDo0VZ8lHx8kFQjjXDGLi6WmM+zTz Azl+M1HfWP0pGDVESKWR2U897vlQZQImGtGNNlV1bHQH/rqf+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElBIu7C8WbDqdqrvBbJcJcNJh0jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjg2YTk4YmYtMDJmNy0z Zjc0LTljYjUtMjBjZWE0YjZmMzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCquMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK3rGpSyiNWOAFxyhsx/7gt8fzV69CfO8DxRmGXDZx4DcflH9m9nEYnu 1gdgMivTKUZ0bbunvFPwnMhpgHSwMT/3FqViEj8wHEgODrf3TBFGViLi9JKmG+MX Akp/owcgQik9ALzx/6BWIJaRFEcWhWTKf/IIC7VfJMZyOY2UX9OxXT7cBys8B9nJ XQXix6Fhlm7YHAgC/b8szSDvbSzIgPz2FwstOsvh4f+v6GSwVCg4NXD2qus9vXn0 tX5qIW6sr01zGIF1dvK8nhgJwOmg+tpq8dacRPepTfQgnXr6/mFnlvv5amFFkLu6 KjH2C5pfkAXNmFAy0RBtq0cVxApttq8= -----END CERTIFICATE-----Generated at Thu Mar 26 08:40:19 2026 by rpki-client