$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86ffd968-02c6-388c-b8db-e56815461be6.roa File: 86ffd968-02c6-388c-b8db-e56815461be6.roa (raw, json) Hash identifier: W5cE+PVgaTwToUEPhJsJQt1KzU5ZHChz0Jv23ixrhYI= Subject key identifier: 7A:9E:6D:D1:FF:4E:97:0B:59:6C:6E:C0:4F:64:65:F9:8D:6B:0B:EC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D3E00161ADC059153551B1300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86ffd968-02c6-388c-b8db-e56815461be6.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396745 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:16:1a:dc:05:91:53:55:1b:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=1b706147-60b1-4674-9bda-942efdc1734c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:44:b6:5e:66:22:10:3f:9b:65:30:b4:0d:54: 7b:a1:63:c7:4e:aa:a8:7f:3b:0a:cb:0c:70:b5:bd: aa:d7:14:76:99:9d:cb:0d:8c:09:e9:56:03:f4:39: 16:c2:62:72:55:da:70:94:bc:94:e5:7e:26:37:50: fc:8b:af:2b:5c:e3:a7:61:82:a0:3f:eb:75:f0:f6: c1:50:75:e6:18:d5:a0:0b:16:0a:d6:f7:3e:18:6b: b2:05:f2:25:d4:9f:40:46:93:67:e4:c5:40:27:7c: 1d:14:58:74:78:83:60:62:de:ee:76:dd:b6:8b:e8: ed:2f:e4:43:df:15:36:a9:78:c4:f8:90:86:bb:95: 74:4c:78:0f:fb:72:15:4b:f2:5d:2d:c1:75:b2:39: 27:92:a3:4c:62:aa:db:f8:dc:b4:c6:a7:6f:85:95: 39:ca:96:79:91:6a:de:6a:0e:52:00:c0:25:4d:8d: 4d:e9:e1:ac:52:a6:e9:af:ae:f7:e9:8f:de:35:cc: ae:da:2e:ff:51:43:86:e7:75:ad:b7:b4:e4:d4:72: 05:a1:3a:66:8c:d9:35:40:f4:9a:45:5b:a3:06:4a: e7:b0:ce:55:4c:35:d6:a8:17:77:1d:83:af:c2:17: f8:e2:3f:f8:2f:73:81:60:a9:3a:b5:1f:5d:fb:ed: 40:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:9E:6D:D1:FF:4E:97:0B:59:6C:6E:C0:4F:64:65:F9:8D:6B:0B:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86ffd968-02c6-388c-b8db-e56815461be6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:dc:3d:27:31:c4:b3:51:2d:a2:f3:ab:90:61:df:d8:ae:88: 2d:cd:2d:4e:9b:bb:6b:34:41:00:00:6b:20:54:93:f2:e5:3a: dd:2b:97:57:61:69:b7:1d:66:34:84:e7:e8:10:0b:6f:6b:1f: b3:e0:99:86:c2:4e:e2:b0:4c:b0:e4:fd:53:53:49:2f:13:09: ab:4d:79:e5:07:c7:ef:0e:62:e8:0b:2a:ca:9c:30:a8:87:b9: 52:eb:73:71:ba:a8:72:12:53:83:22:0d:8f:c0:ee:43:be:18: 86:58:e3:ec:12:d4:f9:4f:42:e8:69:62:e6:6b:87:b0:20:cb: d5:41:e8:5d:d6:4e:82:c5:2c:85:5b:4b:b8:53:7e:6a:13:0a: a6:ef:f9:0a:7d:b8:df:36:36:d9:ba:03:fe:37:d5:35:39:b0: 02:cd:8f:90:a7:40:77:63:8c:cc:48:f5:bf:2c:69:4f:72:04: a1:4b:26:6e:be:97:ca:5f:9d:49:42:7c:41:5f:9b:fa:99:78: de:8e:b3:6b:f0:dd:11:88:2a:54:ca:f1:8d:68:b5:4d:e5:26: 57:89:ea:1b:58:a3:8e:ae:6b:c7:bd:4d:af:9c:1d:20:f4:d2: b6:8f:1b:23:41:30:dd:6f:f3:91:e3:86:a6:a3:9d:55:14:80: 98:ce:b0:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+ABYa3AWRU1UbEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MWI3MDYxNDctNjBiMS00Njc0LTliZGEtOTQyZWZkYzE3MzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUS2XmYiED+bZTC0DVR7oWPHTqqofzsKywxw tb2q1xR2mZ3LDYwJ6VYD9DkWwmJyVdpwlLyU5X4mN1D8i68rXOOnYYKgP+t18PbB UHXmGNWgCxYK1vc+GGuyBfIl1J9ARpNn5MVAJ3wdFFh0eINgYt7udt22i+jtL+RD 3xU2qXjE+JCGu5V0THgP+3IVS/JdLcF1sjknkqNMYqrb+Ny0xqdvhZU5ypZ5kWre ag5SAMAlTY1N6eGsUqbpr6736Y/eNcyu2i7/UUOG53Wtt7Tk1HIFoTpmjNk1QPSa RVujBkrnsM5VTDXWqBd3HYOvwhf44j/4L3OBYKk6tR9d++1APwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqebdH/TpcLWWxuwE9kZfmNawvsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODZmZmQ5NjgtMDJjNi0z ODhjLWI4ZGItZTU2ODE1NDYxYmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3cPScxxLNRLaLzq5Bh39iuiC3NLU6bu2s0QQAAayBUk/LlOt0rl1dh abcdZjSE5+gQC29rH7PgmYbCTuKwTLDk/VNTSS8TCatNeeUHx+8OYugLKsqcMKiH uVLrc3G6qHISU4MiDY/A7kO+GIZY4+wS1PlPQuhpYuZrh7Agy9VB6F3WToLFLIVb S7hTfmoTCqbv+Qp9uN82Ntm6A/431TU5sALNj5CnQHdjjMxI9b8saU9yBKFLJm6+ l8pfnUlCfEFfm/qZeN6Os2vw3RGIKlTK8Y1otU3lJleJ6htYo46ua8e9Ta+cHSD0 0raPGyNBMN1v85HjhqajnVUUgJjOsCE= -----END CERTIFICATE-----Generated at Thu Mar 26 14:30:43 2026 by rpki-client