$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8caf640c-3e1d-3441-a59c-1d937eb66080.roa File: 8caf640c-3e1d-3441-a59c-1d937eb66080.roa (raw, json) Hash identifier: BMXw7wwO6F3sNBFQyCqsDlcb3/TApD2en+B7fkSc0G8= Subject key identifier: BD:F9:C7:12:88:51:30:2B:2F:BD:EF:6E:F9:F2:AF:8A:29:EF:C5:E7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D2A74FAE873FF7781F0367F00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8caf640c-3e1d-3441-a59c-1d937eb66080.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 396572 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:fa:e8:73:ff:77:81:f0:36:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=21c3fb47-b373-4ff1-bd7e-1dc367b9e212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a9:fd:c2:ec:cd:f0:fa:ef:bb:c2:a3:7d:f9: 47:68:e9:61:2d:3d:b3:b7:3a:dc:35:20:d2:6a:02: 56:0e:a9:de:73:9a:13:28:b1:a0:2a:7c:44:6d:3e: 9a:0e:f2:7d:47:3a:56:50:84:8d:a2:65:59:cc:a5: 61:0f:ec:fc:4f:a6:37:41:41:9a:d5:30:f4:57:06: 47:5e:f3:78:cf:0e:87:5f:51:e2:af:8c:37:76:99: 70:28:7c:26:a5:92:e5:88:4d:40:25:13:45:cd:22: cd:d5:3b:83:ae:d3:e1:66:43:5b:92:4c:7d:28:00: f2:c5:2e:1c:ad:a7:71:e0:e6:69:3e:da:1b:84:b5: 47:84:8b:65:3a:86:d2:d5:58:23:ec:8f:27:7c:fe: 3c:13:72:e5:7b:8b:d4:05:34:b0:0d:c2:b2:e9:99: 70:e4:70:36:f0:b4:36:c0:31:54:46:02:73:5a:14: 17:cb:65:ea:89:04:2b:63:06:06:ef:d2:9b:ae:44: 43:72:4c:18:1f:d8:1f:d4:d4:0e:f5:1d:71:c8:b9: 7c:d5:6a:aa:d5:1c:26:e6:40:62:96:1e:6a:a4:5a: 60:ca:1e:6d:46:a2:d6:68:b9:aa:e1:de:8d:57:6f: c2:ad:bc:d7:61:23:ae:e2:67:3c:67:49:49:66:17: 3b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F9:C7:12:88:51:30:2B:2F:BD:EF:6E:F9:F2:AF:8A:29:EF:C5:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8caf640c-3e1d-3441-a59c-1d937eb66080.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:f3:22:ba:26:f9:13:3c:66:b3:ca:a7:e8:59:cb:03:e2:41: ff:2e:a0:b9:9f:17:48:d9:da:ca:cc:2e:13:2d:b2:96:a0:d3: 0c:cf:5e:83:01:5b:f6:8a:bd:e8:6f:ad:a6:21:ed:06:ce:c3: 32:38:6a:e5:8a:cd:c0:da:1e:cf:83:1c:aa:79:9a:35:24:52: d5:78:01:68:35:4a:bb:af:92:e4:dc:2e:f6:22:fd:5d:4e:8b: d1:f3:56:b8:7d:5c:b0:9c:62:e9:10:68:bf:0f:fe:f8:d9:33: 41:81:e7:26:23:7e:52:2a:1c:f1:30:7f:3f:96:73:57:e8:6a: 66:e3:3e:db:7e:47:ec:2f:ad:85:91:7d:69:ca:ba:6e:82:f5: c3:8f:1b:6e:92:19:23:9b:74:c7:17:1c:6d:72:3b:94:f3:9e: 5d:3b:ae:a5:52:35:03:85:72:29:2e:f1:e6:f9:79:1c:c2:ad: 59:51:b8:ef:4a:fe:19:3a:0e:2b:c8:da:a6:fe:3a:89:86:95: b3:3c:92:8a:10:42:1a:88:ec:53:d3:67:85:86:38:3c:e8:6e: 94:8c:8a:4e:b1:83:be:9a:f2:9a:99:b8:57:7e:92:3b:e7:33: 7d:e0:89:e2:cd:64:d2:ef:59:2d:b4:48:88:2a:21:79:28:36: eb:24:9f:44 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0qdProc/93gfA2fwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk MjFjM2ZiNDctYjM3My00ZmYxLWJkN2UtMWRjMzY3YjllMjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKn9wuzN8Prvu8KjfflHaOlhLT2ztzrcNSDS agJWDqnec5oTKLGgKnxEbT6aDvJ9RzpWUISNomVZzKVhD+z8T6Y3QUGa1TD0VwZH XvN4zw6HX1Hir4w3dplwKHwmpZLliE1AJRNFzSLN1TuDrtPhZkNbkkx9KADyxS4c radx4OZpPtobhLVHhItlOobS1Vgj7I8nfP48E3Lle4vUBTSwDcKy6Zlw5HA28LQ2 wDFURgJzWhQXy2XqiQQrYwYG79KbrkRDckwYH9gf1NQO9R1xyLl81Wqq1Rwm5kBi lh5qpFpgyh5tRqLWaLmq4d6NV2/CrbzXYSOu4mc8Z0lJZhc7bQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFL35xxKIUTArL73vbvnyr4op78XnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGNhZjY0MGMtM2UxZC0z NDQxLWE1OWMtMWQ5MzdlYjY2MDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCK8yK6JvkTPGazyqfoWcsD4kH/LqC5nxdI2drKzC4TLbKWoNMMz16D AVv2ir3ob62mIe0GzsMyOGrlis3A2h7PgxyqeZo1JFLVeAFoNUq7r5Lk3C72Iv1d TovR81a4fVywnGLpEGi/D/742TNBgecmI35SKhzxMH8/lnNX6Gpm4z7bfkfsL62F kX1pyrpugvXDjxtukhkjm3THFxxtcjuU855dO66lUjUDhXIpLvHm+Xkcwq1ZUbjv Sv4ZOg4ryNqm/jqJhpWzPJKKEEIaiOxT02eFhjg86G6UjIpOsYO+mvKambhXfpI7 5zN94InizWTS71kttEiIKiF5KDbrJJ9E -----END CERTIFICATE-----Generated at Thu Mar 26 16:56:22 2026 by rpki-client