$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/816f4828-8706-31b3-a3fe-8ad751c59775.roa File: 816f4828-8706-31b3-a3fe-8ad751c59775.roa (raw, json) Hash identifier: QcGYytxUKTaNfW4GFPlWo8UE3Rs2Ti+oEwzQ1LD36/Q= Subject key identifier: 60:3F:C2:A9:31:7D:7D:99:80:B2:4B:D7:B0:4D:FE:B1:07:A7:44:72 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D46B1171F227310D85F849ED0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/816f4828-8706-31b3-a3fe-8ad751c59775.roa Signing time: Tue 24 Mar 2026 15:44:58 +0000 ROA not before: Tue 24 Mar 2026 15:44:58 +0000 ROA not after: Mon 22 Jun 2026 15:44:58 +0000 asID: 396549 IP address blocks: 192.35.51.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:b1:17:1f:22:73:10:d8:5f:84:9e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 24 15:44:58 2026 GMT Not After : Jun 22 15:44:58 2026 GMT Subject: CN=9694d345-89e6-4d7f-bacf-8844d95484e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:72:36:1f:15:09:ae:0b:e7:da:e5:41:7a:5b: 74:fc:5d:1d:71:60:6e:e2:f4:61:21:7c:8d:04:74: 26:43:85:c1:16:ab:6e:9d:a4:d9:74:65:1c:5a:e0: a4:da:c0:d3:d8:06:ad:5a:4c:e7:34:7f:70:52:ec: a5:0a:a1:d8:f2:2d:91:c9:d0:0b:0c:7c:bf:1c:34: 14:96:b1:d5:ff:f4:3c:bf:01:68:d0:68:fd:4b:17: 20:9c:8b:a1:3c:7e:32:c1:ed:d9:c1:20:0c:38:85: d4:cc:7a:c7:59:98:36:36:84:01:5d:f8:3e:9f:71: 0d:cc:0f:19:2b:05:21:fa:c1:d6:6a:cb:98:55:69: 44:97:98:80:2a:6e:66:21:2a:25:b0:41:e2:4d:fb: 7d:27:d3:78:4f:20:a0:12:f0:a2:63:31:53:90:b5: 96:5a:03:fa:7b:7a:35:70:27:91:5d:02:4f:a6:b5: e2:31:f7:46:f8:00:d7:6b:d2:11:e3:a5:f2:cc:78: 10:1e:10:ea:24:c1:d5:74:be:4e:c0:68:41:6b:97: 8f:ad:9e:08:92:5a:75:dd:0a:da:0c:09:8f:28:c9: 51:cb:dc:0c:d6:b1:24:1f:07:50:9a:96:ea:da:33: cd:41:f0:92:24:2b:da:54:79:05:14:d2:f7:63:6a: 9f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:3F:C2:A9:31:7D:7D:99:80:B2:4B:D7:B0:4D:FE:B1:07:A7:44:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/816f4828-8706-31b3-a3fe-8ad751c59775.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.35.51.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:bc:ad:8d:45:c5:af:ed:03:20:50:25:f6:0a:8b:7c:f7:7a: 27:7f:88:a8:5a:53:cf:bb:b9:cc:ba:69:32:98:70:80:43:48: 2d:78:82:08:65:71:77:69:85:c5:77:da:f9:15:3f:de:96:06: 64:2d:06:91:62:1b:11:7b:fd:7d:0c:3b:36:72:d8:63:c6:8d: cb:92:24:87:07:67:ba:19:19:03:29:43:2c:ee:9d:66:26:6c: 4e:5c:ce:1e:80:45:c2:33:40:7b:45:93:0a:43:2b:36:a9:9f: a1:97:0c:84:cc:24:00:ea:a6:5e:fc:67:c7:49:e6:76:34:27: 1d:dc:db:ea:b6:e1:5a:c9:24:31:ba:53:6f:0b:ff:45:38:2c: 41:ae:d7:e9:01:0a:5a:ec:59:73:3b:70:39:c0:74:5c:73:ba: 97:b9:b3:c5:a2:a7:ec:3a:78:2c:60:4c:07:aa:25:74:e1:4f: c1:e5:10:97:5b:5a:b9:74:f1:c2:d7:41:f1:0f:c0:f7:71:09: 52:65:07:6e:5e:00:57:fb:c4:47:f7:f3:a8:57:1f:cd:64:92: ff:f2:a4:f1:5f:cb:d2:c1:d7:1e:34:ac:95:8d:90:3f:c4:b1: 5f:02:0e:62:08:a1:f3:f8:fc:1f:09:83:a9:12:a8:f9:52:8c: d9:1e:c5:f2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1GsRcfInMQ2F+EntAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyNDE1NDQ1OFoXDTI2MDYyMjE1NDQ1OFowLzEtMCsGA1UEAxMk OTY5NGQzNDUtODllNi00ZDdmLWJhY2YtODg0NGQ5NTQ4NGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3I2HxUJrgvn2uVBelt0/F0dcWBu4vRhIXyN BHQmQ4XBFqtunaTZdGUcWuCk2sDT2AatWkznNH9wUuylCqHY8i2RydALDHy/HDQU lrHV//Q8vwFo0Gj9SxcgnIuhPH4ywe3ZwSAMOIXUzHrHWZg2NoQBXfg+n3ENzA8Z KwUh+sHWasuYVWlEl5iAKm5mISolsEHiTft9J9N4TyCgEvCiYzFTkLWWWgP6e3o1 cCeRXQJPprXiMfdG+ADXa9IR46XyzHgQHhDqJMHVdL5OwGhBa5ePrZ4Iklp13Qra DAmPKMlRy9wM1rEkHwdQmpbq2jPNQfCSJCvaVHkFFNL3Y2qfAQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGA/wqkxfX2ZgLJL17BN/rEHp0RyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODE2ZjQ4MjgtODcwNi0z MWIzLWEzZmUtOGFkNzUxYzU5Nzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCMzHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQANvK2NRcWv7QMgUCX2Cot893onf4ioWlPPu7nMumkymHCAQ0gteIII ZXF3aYXFd9r5FT/elgZkLQaRYhsRe/19DDs2cthjxo3LkiSHB2e6GRkDKUMs7p1m JmxOXM4egEXCM0B7RZMKQys2qZ+hlwyEzCQA6qZe/GfHSeZ2NCcd3NvqtuFaySQx ulNvC/9FOCxBrtfpAQpa7FlzO3A5wHRcc7qXubPFoqfsOngsYEwHqiV04U/B5RCX W1q5dPHC10HxD8D3cQlSZQduXgBX+8RH9/OoVx/NZJL/8qTxX8vSwdceNKyVjZA/ xLFfAg5iCKHz+PwfCYOpEqj5UozZHsXy -----END CERTIFICATE-----Generated at Thu Mar 26 15:25:39 2026 by rpki-client