$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8dcf7c33-1098-3b0a-b793-910afd9f6f32.roa File: 8dcf7c33-1098-3b0a-b793-910afd9f6f32.roa (raw, json) Hash identifier: ki6kZbjI0NVqQT5Yc2cNhJC0UCpVp93dWchgxRBWJpE= Subject key identifier: C7:28:3B:B5:E9:8D:A0:81:94:C4:7A:B3:EB:64:35:19:97:9D:11:E2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D46B11B4C2CBEDA90716ECB00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8dcf7c33-1098-3b0a-b793-910afd9f6f32.roa Signing time: Tue 24 Mar 2026 15:45:00 +0000 ROA not before: Tue 24 Mar 2026 15:45:00 +0000 ROA not after: Mon 22 Jun 2026 15:45:00 +0000 asID: 36626 IP address blocks: 192.42.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:b1:1b:4c:2c:be:da:90:71:6e:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 24 15:45:00 2026 GMT Not After : Jun 22 15:45:00 2026 GMT Subject: CN=bf911e9a-cf0e-4c58-a81c-7b85f513937f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:00:82:e6:18:e5:90:62:7e:34:c1:16:2b:dc: 73:8a:7c:96:d1:d8:9b:18:65:d4:3d:08:22:fb:d9: 69:ee:3f:4a:41:1c:6f:0b:24:6e:08:13:46:13:68: 9e:2a:33:fa:63:de:bc:7f:b2:bf:a2:e5:c2:a7:c4: 9a:26:f7:14:b7:1b:62:84:b1:83:fb:51:c8:2f:e0: 89:d9:e6:4a:cb:9d:1f:68:49:26:ae:00:9a:5e:50: b7:14:95:9a:c7:3c:71:80:ee:bc:54:30:26:da:3a: 25:0a:ac:a0:5d:50:a4:e7:17:91:fb:62:cc:37:fe: 40:83:50:68:c7:33:c6:24:3f:ac:49:c8:99:65:44: 54:11:ca:c2:4b:7e:26:32:25:2c:5d:7a:53:f0:95: e9:1a:50:38:40:fe:d3:0c:a3:4a:70:be:92:62:6a: be:84:b7:7e:20:12:4e:c2:f7:fd:1f:e4:da:51:74: 6b:12:a6:64:aa:51:d8:7f:5c:3e:a9:28:bd:8b:5d: 2f:8a:42:58:bb:d8:4f:c0:38:13:a7:49:6c:f8:85: 6e:fb:dd:15:4c:aa:ac:d4:7c:a4:91:c5:5b:17:ec: 5d:f1:e5:4f:a5:36:7b:3a:1f:ee:1c:16:ce:04:72: b0:85:46:7e:74:9c:98:0c:c2:1d:3d:78:7e:61:76: 79:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:28:3B:B5:E9:8D:A0:81:94:C4:7A:B3:EB:64:35:19:97:9D:11:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8dcf7c33-1098-3b0a-b793-910afd9f6f32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:a6:fe:d6:72:16:dc:be:19:17:58:3d:d5:dd:79:83:56:dc: ae:be:e3:2b:b5:f5:27:2a:fb:ad:35:55:e1:bc:61:40:53:90: 33:8e:07:83:d0:18:4a:b8:4d:4e:55:7f:ad:44:7d:11:02:f1: 56:52:ce:25:15:6c:a0:00:4a:ea:02:3c:df:e8:54:56:73:b4: 97:78:66:59:6d:6f:8d:d8:47:2f:91:1a:f8:65:30:39:52:51: d3:0f:b2:09:9c:bc:be:a6:81:8a:4b:44:2c:8d:a5:cd:72:83: ab:fd:8e:04:74:41:b0:90:c2:3f:85:74:a5:40:6a:90:8b:8a: 3a:a5:6e:50:83:8b:74:12:b3:1c:56:d7:77:86:03:6b:2e:b8: cb:b0:26:48:6d:5a:44:22:43:bd:90:1a:77:57:b0:83:4a:ed: 48:de:05:e0:b8:52:99:57:68:71:4e:b4:65:37:36:b7:c8:97: 60:46:dd:32:64:86:b4:4c:c5:bd:65:d6:1c:9a:a0:1b:71:e5: 45:93:98:7d:48:9d:d8:30:57:bc:b2:05:cd:90:47:53:f0:da: 93:a5:81:b8:b3:9f:8b:b5:37:0d:85:18:29:e6:2e:24:4f:ec: bc:8c:4c:60:0e:62:71:81:0a:e7:1f:06:a5:15:9e:a2:15:11: dd:0b:00:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1GsRtMLL7akHFuywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyNDE1NDUwMFoXDTI2MDYyMjE1NDUwMFowLzEtMCsGA1UEAxMk YmY5MTFlOWEtY2YwZS00YzU4LWE4MWMtN2I4NWY1MTM5MzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgCC5hjlkGJ+NMEWK9xzinyW0dibGGXUPQgi +9lp7j9KQRxvCyRuCBNGE2ieKjP6Y968f7K/ouXCp8SaJvcUtxtihLGD+1HIL+CJ 2eZKy50faEkmrgCaXlC3FJWaxzxxgO68VDAm2jolCqygXVCk5xeR+2LMN/5Ag1Bo xzPGJD+sSciZZURUEcrCS34mMiUsXXpT8JXpGlA4QP7TDKNKcL6SYmq+hLd+IBJO wvf9H+TaUXRrEqZkqlHYf1w+qSi9i10vikJYu9hPwDgTp0ls+IVu+90VTKqs1Hyk kcVbF+xd8eVPpTZ7Oh/uHBbOBHKwhUZ+dJyYDMIdPXh+YXZ5NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcoO7XpjaCBlMR6s+tkNRmXnRHiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGRjZjdjMzMtMTA5OC0z YjBhLWI3OTMtOTEwYWZkOWY2ZjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCquMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKam/tZyFty+GRdYPdXdeYNW3K6+4yu19Scq+601VeG8YUBTkDOOB4PQ GEq4TU5Vf61EfREC8VZSziUVbKAASuoCPN/oVFZztJd4Zlltb43YRy+RGvhlMDlS UdMPsgmcvL6mgYpLRCyNpc1yg6v9jgR0QbCQwj+FdKVAapCLijqlblCDi3QSsxxW 13eGA2suuMuwJkhtWkQiQ72QGndXsINK7UjeBeC4UplXaHFOtGU3NrfIl2BG3TJk hrRMxb1l1hyaoBtx5UWTmH1IndgwV7yyBc2QR1Pw2pOlgbizn4u1Nw2FGCnmLiRP 7LyMTGAOYnGBCucfBqUVnqIVEd0LAO8= -----END CERTIFICATE-----Generated at Thu Mar 26 08:39:05 2026 by rpki-client