$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/768c821a-c68f-3be7-b357-f3ae515d2dd0.roa File: 768c821a-c68f-3be7-b357-f3ae515d2dd0.roa (raw, json) Hash identifier: 2b8ZuO8H448qSVjKtIabH/xh4b96asgT/BRAw949twI= Subject key identifier: 87:BF:AE:B4:23:DE:FA:D0:3F:60:46:B7:73:FB:59:75:1A:C3:8E:FA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D2A74DD9CFD6D3ADFC2F97C80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/768c821a-c68f-3be7-b357-f3ae515d2dd0.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 396584 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:dd:9c:fd:6d:3a:df:c2:f9:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=22eb5923-69a1-42a0-88b5-1f7a279539c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:25:0d:25:37:af:1d:8f:0d:80:7e:1a:ef:b3: a8:25:c2:65:9d:0f:5d:49:56:61:80:a2:7b:83:87: 5e:35:eb:49:af:b8:31:bf:9b:18:31:fd:d9:64:1c: aa:44:1d:cc:8a:54:91:8b:55:d8:9c:97:f4:64:9e: a3:07:18:d3:1e:06:a8:7a:75:36:cc:a1:c9:7c:fc: 32:62:e6:94:bf:26:cb:c8:c5:3d:6b:bf:67:c8:17: 9f:b1:95:3f:3a:4c:85:28:e5:69:36:db:a0:ee:40: 28:9f:e4:29:5a:a0:32:a4:da:47:67:aa:78:8e:74: ff:c0:2d:10:08:bb:31:18:b8:0e:b9:0c:e3:5a:b9: 49:38:08:78:c4:35:c8:64:bb:f2:4c:aa:08:ab:8d: 69:6f:39:7b:d4:05:34:6e:a9:41:2d:33:c7:61:6a: 19:f5:1a:ee:67:83:51:27:aa:4e:22:d8:a3:0f:35: c8:3b:5a:44:fa:75:12:53:2b:ba:1f:99:a8:4d:24: ed:97:e0:2c:4d:9e:be:a2:2e:b1:7f:6e:6a:a3:ce: 3a:9f:2d:ec:ed:3a:09:95:4a:7c:8f:bc:7e:1e:62: 33:38:15:d4:02:ee:cc:59:9d:e6:0c:c5:a0:a2:3d: 6d:81:8c:4f:5d:25:5d:28:0c:55:bd:27:0b:b8:58: 90:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BF:AE:B4:23:DE:FA:D0:3F:60:46:B7:73:FB:59:75:1A:C3:8E:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/768c821a-c68f-3be7-b357-f3ae515d2dd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:d8:03:36:99:33:8d:ac:f6:f9:1c:bb:62:49:ff:c8:98:03: 8c:37:d3:5d:40:f3:19:1a:be:72:c9:0c:12:95:e8:2a:eb:12: f4:32:49:f9:a1:35:03:09:ce:e2:58:2a:5d:e7:23:b8:36:b1: 8d:03:95:78:d4:e5:dd:68:c3:5e:f7:e7:bc:4c:43:d2:b8:d5: 2b:8b:6b:42:1d:84:b4:8d:75:ed:e5:bc:41:82:b7:2b:81:50: 68:dd:27:bd:24:c2:f7:01:d0:92:e4:d6:52:4d:16:41:a1:53: 6e:99:0d:1b:96:5b:0f:71:13:29:6e:c1:a4:5b:f6:36:6b:63: c4:4d:4a:ec:40:60:c3:4f:f3:04:e4:a0:2b:25:6f:6f:77:5f: 5c:4d:26:ad:fd:e8:db:f9:be:65:ed:6d:2e:d4:52:de:53:96: 2b:a3:dd:4d:cb:88:39:a0:a3:2d:cb:72:d7:d4:3d:c2:9d:55: d8:49:70:5c:0d:46:a7:aa:50:1e:a9:0e:cd:84:42:81:5d:c6: dd:80:f4:dd:30:d0:04:d0:b2:90:2c:2d:82:63:84:af:ee:dc: da:5d:63:e3:03:0d:42:72:25:e0:65:36:0e:ab:40:6e:e4:36: 7c:a7:be:7d:a3:cf:bd:e4:00:fa:ad:31:cc:71:8c:9e:4d:f2: 0b:19:84:23 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0qdN2c/W0638L5fIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk MjJlYjU5MjMtNjlhMS00MmEwLTg4YjUtMWY3YTI3OTUzOWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCUNJTevHY8NgH4a77OoJcJlnQ9dSVZhgKJ7 g4deNetJr7gxv5sYMf3ZZByqRB3MilSRi1XYnJf0ZJ6jBxjTHgaoenU2zKHJfPwy YuaUvybLyMU9a79nyBefsZU/OkyFKOVpNtug7kAon+QpWqAypNpHZ6p4jnT/wC0Q CLsxGLgOuQzjWrlJOAh4xDXIZLvyTKoIq41pbzl71AU0bqlBLTPHYWoZ9RruZ4NR J6pOItijDzXIO1pE+nUSUyu6H5moTSTtl+AsTZ6+oi6xf25qo846ny3s7ToJlUp8 j7x+HmIzOBXUAu7MWZ3mDMWgoj1tgYxPXSVdKAxVvScLuFiQuwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIe/rrQj3vrQP2BGt3P7WXUaw476MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzY4YzgyMWEtYzY4Zi0z YmU3LWIzNTctZjNhZTUxNWQyZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAc2AM2mTONrPb5HLtiSf/ImAOMN9NdQPMZGr5yyQwSlegq6xL0Mkn5 oTUDCc7iWCpd5yO4NrGNA5V41OXdaMNe9+e8TEPSuNUri2tCHYS0jXXt5bxBgrcr gVBo3Se9JML3AdCS5NZSTRZBoVNumQ0bllsPcRMpbsGkW/Y2a2PETUrsQGDDT/ME 5KArJW9vd19cTSat/ejb+b5l7W0u1FLeU5Yro91Ny4g5oKMty3LX1D3CnVXYSXBc DUanqlAeqQ7NhEKBXcbdgPTdMNAE0LKQLC2CY4Sv7tzaXWPjAw1CciXgZTYOq0Bu 5DZ8p759o8+95AD6rTHMcYyeTfILGYQj -----END CERTIFICATE-----Generated at Thu Mar 26 13:23:51 2026 by rpki-client