$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/841d9c1c-2d00-36a0-a392-c08f3da0678b.roa File: 841d9c1c-2d00-36a0-a392-c08f3da0678b.roa (raw, json) Hash identifier: V02K0hMuDFdctLvRkGSNEtk/aoesCZ7G2JzXItAIV34= Subject key identifier: 28:FD:40:57:DE:C6:99:86:81:6B:9A:86:E9:C2:B2:61:BE:EA:DF:AC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D2A74F7850FCE67CBB07EBF00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/841d9c1c-2d00-36a0-a392-c08f3da0678b.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 397203 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:f7:85:0f:ce:67:cb:b0:7e:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=afa7cf80-929d-4d8c-baf5-b57fdbb8ce03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:69:01:b0:fb:d3:0e:1e:77:95:b6:44:4d:70: c7:05:15:65:a0:87:cd:e6:58:aa:85:54:af:3c:28: cd:e6:53:9e:42:2c:67:77:9f:2c:56:0f:7f:99:4a: 38:cb:6a:90:ae:33:c9:48:a4:ec:b6:df:95:ae:fd: 68:68:0d:11:72:e1:47:5b:91:34:c5:ee:25:d0:82: 20:58:15:d6:64:4b:a9:c7:1b:83:91:48:ec:e9:77: 0c:34:94:ff:85:a4:78:8f:bd:f2:02:5c:7e:67:71: db:e7:a6:98:f9:96:0c:29:30:0f:f6:22:81:e9:26: 4c:b6:9e:02:d6:19:54:ea:10:13:40:bc:b2:a8:61: 26:96:74:34:63:11:ed:2b:c9:7d:60:c8:0d:78:04: e2:bb:ca:62:f2:f9:5b:8e:44:87:9d:7e:8b:1b:9e: ec:ed:2e:9e:6e:51:23:5a:68:1c:e0:84:14:ac:c1: 1b:e3:f9:cc:69:99:a4:33:5a:2a:db:64:a4:72:85: 66:e2:38:0d:e6:5b:e6:83:82:6a:3a:ff:37:d9:5d: 69:a9:49:47:0a:37:fb:d4:00:f9:a9:a8:19:42:d0: c4:13:9e:77:06:d6:88:68:2e:65:bb:02:2f:6d:76: 06:1e:be:a4:71:39:c1:d7:cd:09:75:b3:c9:56:40: 09:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FD:40:57:DE:C6:99:86:81:6B:9A:86:E9:C2:B2:61:BE:EA:DF:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/841d9c1c-2d00-36a0-a392-c08f3da0678b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:66:b8:40:c7:a4:ac:8c:68:d6:f6:e4:4a:fc:ec:fc:e0:71: 1c:5c:ef:59:fa:1b:f9:28:cf:59:b8:e6:d1:20:c2:bd:8b:eb: b1:b7:e1:48:bb:83:f4:f2:04:5a:23:0c:41:c6:8a:25:af:80: fb:0e:4a:9f:b0:b0:53:3d:06:72:68:75:3c:4f:04:2f:19:fa: d4:1a:46:75:c3:8a:38:b2:de:61:4a:2b:f2:75:b3:b8:f9:96: 23:b9:49:c1:6c:a1:67:c5:25:ac:13:a1:03:05:72:17:b8:68: fe:35:96:04:a4:b0:65:a9:c2:a3:5e:5e:a0:d8:87:22:66:0a: 82:5d:e2:0a:34:17:e7:56:44:a2:9d:d8:ef:d2:b7:58:d2:25: 92:bc:db:15:98:04:fa:76:77:b6:18:5c:01:a1:ea:88:92:20: a0:a7:09:8f:f2:77:31:ae:2f:87:3d:d6:b8:4e:d3:79:ef:52: 71:c6:6e:6c:83:25:86:63:ae:72:9c:ff:e7:1c:b6:8c:1c:b2: 92:ad:50:86:eb:b2:04:8e:99:a4:b3:8b:32:e8:81:c3:aa:ca: 4e:b9:fa:a3:b4:fd:d7:67:05:dc:59:b4:a3:41:94:d5:19:d3: 2e:75:5a:35:06:d3:b9:b6:4a:f6:d4:73:65:b3:1a:a9:9d:e8: c4:c3:12:15 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0qdPeFD85ny7B+vwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk YWZhN2NmODAtOTI5ZC00ZDhjLWJhZjUtYjU3ZmRiYjhjZTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2kBsPvTDh53lbZETXDHBRVloIfN5liqhVSv PCjN5lOeQixnd58sVg9/mUo4y2qQrjPJSKTstt+Vrv1oaA0RcuFHW5E0xe4l0IIg WBXWZEupxxuDkUjs6XcMNJT/haR4j73yAlx+Z3Hb56aY+ZYMKTAP9iKB6SZMtp4C 1hlU6hATQLyyqGEmlnQ0YxHtK8l9YMgNeATiu8pi8vlbjkSHnX6LG57s7S6eblEj Wmgc4IQUrMEb4/nMaZmkM1oq22SkcoVm4jgN5lvmg4JqOv832V1pqUlHCjf71AD5 qagZQtDEE553BtaIaC5luwIvbXYGHr6kcTnB180JdbPJVkAJ2wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCj9QFfexpmGgWuahunCsmG+6t+sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODQxZDljMWMtMmQwMC0z NmEwLWEzOTItYzA4ZjNkYTA2NzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCdZrhAx6SsjGjW9uRK/Oz84HEcXO9Z+hv5KM9ZuObRIMK9i+uxt+FI u4P08gRaIwxBxoolr4D7DkqfsLBTPQZyaHU8TwQvGfrUGkZ1w4o4st5hSivydbO4 +ZYjuUnBbKFnxSWsE6EDBXIXuGj+NZYEpLBlqcKjXl6g2IciZgqCXeIKNBfnVkSi ndjv0rdY0iWSvNsVmAT6dne2GFwBoeqIkiCgpwmP8ncxri+HPda4TtN571Jxxm5s gyWGY65ynP/nHLaMHLKSrVCG67IEjpmks4sy6IHDqspOufqjtP3XZwXcWbSjQZTV GdMudVo1BtO5tkr21HNlsxqpnejEwxIV -----END CERTIFICATE-----Generated at Thu Mar 26 15:42:04 2026 by rpki-client