$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e747f40-345c-3b4c-a512-beeafffd8e3d.roa File: 8e747f40-345c-3b4c-a512-beeafffd8e3d.roa (raw, json) Hash identifier: fqOMNFfXQNa8mSwsgZlx1qY91A4b//7rj0v8wzgr9wI= Subject key identifier: 7C:36:59:3C:D1:54:06:35:69:6F:C6:31:24:82:C3:6C:46:AB:67:9F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D3E001B943BDB0EB21E1AC580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e747f40-345c-3b4c-a512-beeafffd8e3d.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396687 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:1b:94:3b:db:0e:b2:1e:1a:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=37205cce-4450-4333-b946-5427dc3abebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:45:8f:4b:f7:17:0d:29:2e:cb:13:6e:f0:98: f1:c7:af:e5:69:c5:26:7a:cc:60:f5:5f:71:eb:1f: 49:7a:8c:79:a4:c4:f4:6b:f5:03:cb:d2:22:bf:cf: 8c:ed:dc:86:50:62:17:0a:53:a2:6f:ec:bf:3a:12: bd:50:99:47:2e:9d:b6:c3:b2:55:a5:21:ce:a1:0f: 41:18:31:64:53:f5:f5:ab:a2:82:51:6d:b6:95:ae: bc:97:60:44:ec:e6:c5:c1:9a:01:58:35:0c:43:31: a4:37:40:2b:b8:71:3d:72:b0:83:47:d8:da:27:44: 37:35:7f:14:f5:ce:01:41:0d:fa:e2:65:db:5e:2f: 22:5d:69:f4:d4:c9:5c:8b:13:2d:60:a3:56:61:b3: 5e:93:f7:d6:ce:51:0a:87:1b:ea:86:b9:e1:4b:08: 67:26:08:4a:e1:79:77:19:d2:e7:7b:d2:26:6c:3f: ce:82:67:e4:b9:da:ee:e9:67:2e:c0:09:27:ad:af: 85:3e:9e:1c:6f:36:61:32:29:ce:08:1b:ca:00:55: fd:13:b0:76:8f:f7:8f:c1:14:e0:dd:3e:47:0e:84: 36:1f:10:91:7f:f0:7c:6b:87:28:76:e9:fc:12:d2: db:f3:f6:5f:1a:2a:d7:35:27:47:02:1d:8e:7e:87: 02:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:36:59:3C:D1:54:06:35:69:6F:C6:31:24:82:C3:6C:46:AB:67:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e747f40-345c-3b4c-a512-beeafffd8e3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:43:3d:be:fa:f3:58:af:a8:3e:5c:02:4b:ab:41:23:26:8d: 8d:03:52:97:53:52:de:7b:13:69:e4:27:e5:3c:14:46:51:70: 06:a0:8f:f9:29:9a:29:cc:a4:99:e3:0d:fc:b3:5c:ab:e3:be: 32:d3:96:f5:0e:9b:82:38:aa:78:88:73:d3:d9:aa:06:32:fd: 02:31:f8:67:31:91:2b:90:42:de:64:14:2e:78:6c:02:8a:16: a8:58:10:ce:9d:80:6b:56:5a:1e:78:49:95:da:ae:36:35:dd: 16:80:ca:d4:31:ad:3e:57:6a:dd:ec:d4:34:e9:4b:30:cd:50: d8:09:9e:38:b1:da:16:f9:bb:dc:d5:d0:01:a2:ac:26:06:a3: 8c:98:66:22:65:ca:27:8b:a5:06:7f:56:56:f2:13:20:0e:5d: 67:f0:41:f3:11:4d:9f:5f:3e:6a:68:80:99:45:dc:64:15:f6: 72:9f:83:be:f9:98:05:52:ae:37:76:8d:a8:67:7c:12:df:3c: c5:d7:48:79:f0:bd:8a:84:e9:62:ef:99:5a:70:58:f2:ed:7d: b1:0f:e3:44:ed:42:28:21:a6:e0:0d:ef:ac:3f:58:dc:a1:12: 5d:ae:77:b0:da:47:37:d0:6b:8e:17:86:0c:fa:a8:43:14:ae: 6d:3f:ed:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+ABuUO9sOsh4axYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MzcyMDVjY2UtNDQ1MC00MzMzLWI5NDYtNTQyN2RjM2FiZWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkWPS/cXDSkuyxNu8Jjxx6/lacUmesxg9V9x 6x9Jeox5pMT0a/UDy9Iiv8+M7dyGUGIXClOib+y/OhK9UJlHLp22w7JVpSHOoQ9B GDFkU/X1q6KCUW22la68l2BE7ObFwZoBWDUMQzGkN0AruHE9crCDR9jaJ0Q3NX8U 9c4BQQ364mXbXi8iXWn01MlcixMtYKNWYbNek/fWzlEKhxvqhrnhSwhnJghK4Xl3 GdLne9ImbD/Ogmfkudru6WcuwAknra+FPp4cbzZhMinOCBvKAFX9E7B2j/ePwRTg 3T5HDoQ2HxCRf/B8a4codun8EtLb8/ZfGirXNSdHAh2OfocCmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHw2WTzRVAY1aW/GMSSCw2xGq2efMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGU3NDdmNDAtMzQ1Yy0z YjRjLWE1MTItYmVlYWZmZmQ4ZTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZDPb7681ivqD5cAkurQSMmjY0DUpdTUt57E2nkJ+U8FEZRcAagj/kp minMpJnjDfyzXKvjvjLTlvUOm4I4qniIc9PZqgYy/QIx+GcxkSuQQt5kFC54bAKK FqhYEM6dgGtWWh54SZXarjY13RaAytQxrT5Xat3s1DTpSzDNUNgJnjix2hb5u9zV 0AGirCYGo4yYZiJlyieLpQZ/VlbyEyAOXWfwQfMRTZ9fPmpogJlF3GQV9nKfg775 mAVSrjd2jahnfBLfPMXXSHnwvYqE6WLvmVpwWPLtfbEP40TtQighpuAN76w/WNyh El2ud7DaRzfQa44Xhgz6qEMUrm0/7WU= -----END CERTIFICATE-----Generated at Thu Mar 26 15:19:33 2026 by rpki-client