$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8555602e-aff4-324a-82e3-881223092991.roa File: 8555602e-aff4-324a-82e3-881223092991.roa (raw, json) Hash identifier: GqhaZc/ZLsSM6OHBGPZHry9MUv9/XNhP+9aMHGgp1us= Subject key identifier: 55:74:89:AB:42:27:38:E7:2C:C6:9C:41:6D:93:A2:2E:A6:96:25:FB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D3DFF8B67CFBB4FA4FBB22280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8555602e-aff4-324a-82e3-881223092991.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 40647 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:8b:67:cf:bb:4f:a4:fb:b2:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=7b5cdc2e-98e9-492c-9d78-253b4f5df0bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:42:80:7e:e5:c9:fb:5c:f2:57:3d:b2:81:1c: 09:0b:78:91:f6:52:d4:57:13:6a:6d:c9:a7:cb:7e: 91:24:96:20:25:77:de:fc:81:46:54:8e:77:e7:3f: 02:f4:b6:89:bc:dd:6a:50:55:30:49:fa:4a:9b:cd: a5:9d:d9:1d:8e:a9:c3:5e:78:cc:92:93:d6:0b:28: 98:d9:35:4f:24:dc:21:c8:93:1f:7d:2e:04:48:02: 9a:d7:98:8e:55:3b:4f:e9:68:99:94:d0:7c:09:08: a8:76:c5:66:63:66:9c:cf:d7:db:ad:dd:2d:ba:81: 82:bf:23:8a:02:c4:45:16:93:d7:87:73:84:b2:6f: ce:b2:97:db:64:83:3d:5c:68:9e:65:8e:e3:eb:63: 0d:2c:19:34:5b:68:88:bd:a5:4a:ef:2d:14:c7:a9: c8:16:73:b7:fb:ba:9d:b0:99:6a:06:78:c2:83:b9: 3f:0e:27:ff:52:a4:fc:5f:f5:df:0b:12:27:36:47: bc:b9:1d:16:73:fe:64:30:cb:67:49:6d:db:89:95: 21:7a:15:cd:78:fa:d7:98:e2:f1:54:c8:a7:a2:7f: 8e:4e:68:e4:20:8b:9e:6c:e9:5c:66:36:b1:51:83: ca:3d:47:f6:a4:1e:07:a0:37:4d:bc:ed:63:cf:31: 63:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:74:89:AB:42:27:38:E7:2C:C6:9C:41:6D:93:A2:2E:A6:96:25:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8555602e-aff4-324a-82e3-881223092991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:78:14:df:76:bf:49:61:46:98:af:98:4c:5c:03:5e:e3:54: cf:0e:9b:49:40:2a:9c:50:e9:45:ca:5a:b7:6f:32:68:57:20: fa:b4:f2:14:81:04:64:41:1d:9b:a1:e4:7d:69:c7:1b:a9:01: f2:57:de:7e:ce:7f:6b:6e:ea:ab:bb:23:8d:35:6d:e0:c4:94: 04:67:42:59:36:e2:cb:05:4a:aa:f2:67:64:44:3d:1c:09:61: c1:d7:70:e5:11:22:b7:91:ef:6f:0c:80:62:1d:de:b8:b2:39: cf:d2:3e:e3:0a:1d:42:4f:92:4f:7f:21:e9:67:4d:1a:1e:4b: 49:9d:0f:14:32:78:ad:f7:13:9b:a2:bc:41:24:3c:04:78:75: 9b:24:a7:d7:c5:cd:f6:70:a1:4b:c5:22:16:c3:7f:94:13:42: d0:94:ab:67:be:10:1c:fe:c8:1c:bd:31:13:c7:9d:2a:de:7d: 04:15:90:f8:22:ab:87:dd:71:3c:69:4d:df:26:86:18:0e:88: 2d:a6:9d:77:f2:f0:28:17:25:85:7d:ca:44:e7:bf:f7:8f:a3: f3:1d:60:f8:1d:1c:f6:f0:f7:a6:ae:9d:91:09:92:66:98:df: ee:02:cd:1f:23:44:66:72:6d:32:31:4c:05:25:9b:94:cb:c3: 4c:85:2a:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/4tnz7tPpPuyIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk N2I1Y2RjMmUtOThlOS00OTJjLTlkNzgtMjUzYjRmNWRmMGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokKAfuXJ+1zyVz2ygRwJC3iR9lLUVxNqbcmn y36RJJYgJXfe/IFGVI535z8C9LaJvN1qUFUwSfpKm82lndkdjqnDXnjMkpPWCyiY 2TVPJNwhyJMffS4ESAKa15iOVTtP6WiZlNB8CQiodsVmY2acz9fbrd0tuoGCvyOK AsRFFpPXh3OEsm/OspfbZIM9XGieZY7j62MNLBk0W2iIvaVK7y0Ux6nIFnO3+7qd sJlqBnjCg7k/Dif/UqT8X/XfCxInNke8uR0Wc/5kMMtnSW3biZUhehXNePrXmOLx VMinon+OTmjkIIuebOlcZjaxUYPKPUf2pB4HoDdNvO1jzzFjAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFV0iatCJzjnLMacQW2Toi6mliX7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODU1NTYwMmUtYWZmNC0z MjRhLTgyZTMtODgxMjIzMDkyOTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZ4FN92v0lhRpivmExcA17jVM8Om0lAKpxQ6UXKWrdvMmhXIPq08hSB BGRBHZuh5H1pxxupAfJX3n7Of2tu6qu7I401beDElARnQlk24ssFSqryZ2REPRwJ YcHXcOURIreR728MgGId3riyOc/SPuMKHUJPkk9/IelnTRoeS0mdDxQyeK33E5ui vEEkPAR4dZskp9fFzfZwoUvFIhbDf5QTQtCUq2e+EBz+yBy9MRPHnSrefQQVkPgi q4fdcTxpTd8mhhgOiC2mnXfy8CgXJYV9ykTnv/ePo/MdYPgdHPbw96aunZEJkmaY 3+4CzR8jRGZybTIxTAUlm5TLw0yFKqo= -----END CERTIFICATE-----Generated at Thu Mar 26 20:41:37 2026 by rpki-client