$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79143ffe-4d99-359f-a7c7-928a9034ac1e.roa File: 79143ffe-4d99-359f-a7c7-928a9034ac1e.roa (raw, json) Hash identifier: rA2DGdO4UMuJ6ec/f9HzpO7d4yk2MGpD0BXndWG7D80= Subject key identifier: 23:D7:29:A6:F0:56:A3:40:91:FB:6F:F5:17:C1:B6:5D:F3:47:C7:40 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D3DFF840A5F69622B84D17940 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79143ffe-4d99-359f-a7c7-928a9034ac1e.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 26415 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:84:0a:5f:69:62:2b:84:d1:79:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=61163db7-a065-4f0e-98a0-c71c3ffbf109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4b:a9:99:b9:e3:12:88:ac:70:5b:da:16:8e: d5:6f:78:c5:af:9d:3c:57:14:1f:79:f7:5d:3a:b7: 10:f3:de:83:c5:fe:b6:55:e4:18:13:c8:6f:74:86: 0e:cf:80:29:dd:68:12:03:33:52:8f:fa:36:04:23: c6:a5:75:ab:36:62:cc:fb:fb:3c:46:30:52:09:9d: 46:99:79:ba:ca:0b:86:8e:2a:83:d9:88:ea:fb:bb: 7f:6f:b4:9e:60:87:2c:da:2f:52:a8:83:56:4f:85: f5:4b:64:42:85:9a:d7:67:68:7a:21:33:4c:48:1d: 12:f3:6e:33:7c:c6:24:c3:cf:cc:f9:87:34:cb:bd: 4f:9c:38:9a:35:3e:5d:b2:1a:d7:be:fe:f0:18:26: 0e:3f:23:42:ca:67:bb:15:08:97:75:a0:34:e2:84: 3b:b3:7c:3e:5e:a6:08:9c:8b:10:74:c7:65:55:eb: c2:75:a7:a9:53:51:5e:33:f7:af:c3:89:8a:20:a7: b2:8c:4e:90:73:bd:3b:6e:fb:73:40:2c:03:fd:ca: 25:4c:fc:88:8e:6c:fe:a6:86:0f:6c:f2:04:90:c9: 04:41:7d:0e:e4:fd:09:62:0e:61:38:fc:e8:a6:23: ce:d0:69:8c:67:03:0e:a4:77:1d:4b:3b:8f:09:0f: a7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D7:29:A6:F0:56:A3:40:91:FB:6F:F5:17:C1:B6:5D:F3:47:C7:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79143ffe-4d99-359f-a7c7-928a9034ac1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:11:b3:05:df:94:df:e3:f1:71:b2:3b:b6:c6:8b:32:38:3b: 05:f6:cf:5b:73:fe:08:ba:15:f2:19:c8:7d:0b:46:1d:74:9a: 26:3b:da:f8:57:2b:10:29:4b:cd:33:59:ff:00:3c:96:9a:9c: 3b:65:0f:44:4f:b3:3b:3d:8c:82:44:24:36:b0:3e:69:89:07: 5f:d3:3c:aa:aa:04:91:d2:a1:a6:53:c8:18:10:c6:92:b5:25: 92:5e:60:86:e5:f9:5e:e5:b9:80:67:f5:25:db:e9:86:91:a7: 14:bc:7b:e6:9e:ea:67:50:64:17:48:57:e7:5b:11:6e:f9:23: 62:18:6c:af:57:f6:3e:de:b2:53:f0:b8:3c:ae:e8:c9:90:30: 47:af:ed:0b:fe:5d:6b:c1:89:dc:c2:a8:3b:18:2d:13:0f:f7: 8f:2e:58:fa:21:65:04:5d:c9:1f:6c:df:7a:7a:60:19:a3:88: 07:a8:ce:8f:e9:0a:20:ca:1c:32:2f:66:7a:9a:7d:6a:e7:6a: 65:51:0a:d8:a5:f1:24:b6:20:c4:e6:c2:6f:83:eb:76:09:79: b7:c6:31:bf:09:95:d5:46:a2:94:00:0f:f4:30:69:6b:15:62: da:4a:4f:8f:aa:30:ac:eb:9c:7d:4e:50:20:69:8e:ca:85:f2: 77:ff:72:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/4QKX2liK4TReUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NjExNjNkYjctYTA2NS00ZjBlLTk4YTAtYzcxYzNmZmJmMTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUupmbnjEoiscFvaFo7Vb3jFr508VxQfefdd OrcQ896Dxf62VeQYE8hvdIYOz4Ap3WgSAzNSj/o2BCPGpXWrNmLM+/s8RjBSCZ1G mXm6yguGjiqD2Yjq+7t/b7SeYIcs2i9SqINWT4X1S2RChZrXZ2h6ITNMSB0S824z fMYkw8/M+Yc0y71PnDiaNT5dshrXvv7wGCYOPyNCyme7FQiXdaA04oQ7s3w+XqYI nIsQdMdlVevCdaepU1FeM/evw4mKIKeyjE6Qc707bvtzQCwD/colTPyIjmz+poYP bPIEkMkEQX0O5P0JYg5hOPzopiPO0GmMZwMOpHcdSzuPCQ+njQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPXKabwVqNAkftv9RfBtl3zR8dAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzkxNDNmZmUtNGQ5OS0z NTlmLWE3YzctOTI4YTkwMzRhYzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAARswXflN/j8XGyO7bGizI4OwX2z1tz/gi6FfIZyH0LRh10miY72vhX KxApS80zWf8APJaanDtlD0RPszs9jIJEJDawPmmJB1/TPKqqBJHSoaZTyBgQxpK1 JZJeYIbl+V7luYBn9SXb6YaRpxS8e+ae6mdQZBdIV+dbEW75I2IYbK9X9j7eslPw uDyu6MmQMEev7Qv+XWvBidzCqDsYLRMP948uWPohZQRdyR9s33p6YBmjiAeozo/p CiDKHDIvZnqafWrnamVRCtil8SS2IMTmwm+D63YJebfGMb8JldVGopQAD/QwaWsV YtpKT4+qMKzrnH1OUCBpjsqF8nf/cto= -----END CERTIFICATE-----Generated at Thu Mar 26 17:02:00 2026 by rpki-client