$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e747f40-345c-3b4c-a512-beeafffd8e3d.roa File: 8e747f40-345c-3b4c-a512-beeafffd8e3d.roa (raw, json) Hash identifier: WpphQ56P7KGgAWnIR4X+wRp/o7mVi07Xy5r2E7syRuc= Subject key identifier: E0:4C:B4:F3:4E:95:3D:C6:C9:59:78:F2:D4:AD:61:6D:EF:A9:17:5D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F62931CBC53A078369CD1AB80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e747f40-345c-3b4c-a512-beeafffd8e3d.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396687 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:1c:bc:53:a0:78:36:9c:d1:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=2882ddfd-0811-45f9-b56b-4b208c07acf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:59:4f:54:6d:65:eb:a9:52:05:29:91:be:f4: 5a:2c:79:68:83:1a:89:81:58:13:cf:49:7b:31:21: 5b:ad:aa:37:d2:58:d5:98:b9:f7:af:6a:fd:2e:04: 71:8f:d8:24:35:93:5c:4a:ca:42:01:13:47:a3:ab: b9:0e:c9:a1:5b:14:56:77:56:97:8e:da:9e:c7:26: e6:dd:aa:92:8f:6d:54:ea:68:07:49:00:d5:28:e8: 0d:4d:12:ff:37:d5:6a:ee:04:b4:ca:ea:18:df:11: 27:70:8e:9c:e2:23:f9:37:35:91:38:4d:1c:18:b3: 00:63:11:14:81:27:5e:7f:6c:21:f3:f8:5a:ea:c6: e7:9a:bc:6f:fa:32:7e:bb:7a:6e:b4:0d:30:d2:42: 50:3c:64:e1:68:89:11:7d:b6:e6:69:0d:e2:e8:b2: a6:78:17:38:61:07:ab:4f:ca:72:8c:3c:5d:86:65: 59:5b:17:71:cd:9f:f1:a2:70:95:4d:fb:9a:40:be: 5a:67:ca:62:f4:02:a7:e1:65:0c:7d:44:b1:28:86: d3:79:e3:82:ad:b0:0a:fb:9d:c3:79:63:58:b9:2f: dc:ad:fd:27:7d:29:81:88:1c:29:29:38:da:41:44: 21:36:27:59:3c:ec:a9:cf:52:b9:ae:80:35:63:13: 59:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:4C:B4:F3:4E:95:3D:C6:C9:59:78:F2:D4:AD:61:6D:EF:A9:17:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e747f40-345c-3b4c-a512-beeafffd8e3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:7a:50:59:bc:17:fb:14:6e:db:c1:e8:dc:c2:59:d6:92:34: 1c:bc:5e:86:56:25:89:a0:09:d5:c3:fb:b5:61:40:a1:9f:c6: c3:0a:5c:c7:81:43:ab:18:77:13:65:0a:04:e5:a2:d5:a8:fe: fd:13:47:3e:da:a7:02:76:96:45:08:e3:79:ec:59:fc:fb:cb: 7c:1b:f2:cb:4a:47:5a:ea:00:7a:02:ee:2c:f1:03:2a:48:6a: cc:03:81:4d:dc:22:a0:f4:2d:35:ef:be:a4:8a:22:f5:7b:76: 24:15:f3:57:5b:3c:1b:8f:8e:28:ef:60:2a:c2:a4:80:5b:90: 8b:7f:7c:9c:15:44:e2:81:33:ac:09:91:87:38:7c:5f:5d:a8: 81:84:35:0a:cb:e1:fd:16:80:ca:55:b2:1c:c1:7c:36:c4:a6: 6d:ec:84:bd:2c:1e:6c:18:05:a6:a6:a1:58:25:24:67:9e:1c: 99:e8:60:a0:e0:c8:8c:7e:60:3f:e5:7c:34:b2:99:88:09:99: 70:1e:66:b4:00:06:b1:a3:8f:aa:a8:6c:aa:9d:ca:45:98:9a: eb:73:84:8d:78:b1:90:87:cb:55:29:4e:b2:dd:78:b1:4a:a0: ed:37:66:53:5c:23:66:a3:69:44:93:a7:d3:9e:67:35:3d:41: 82:a5:34:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikxy8U6B4NpzRq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk Mjg4MmRkZmQtMDgxMS00NWY5LWI1NmItNGIyMDhjMDdhY2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFlPVG1l66lSBSmRvvRaLHlogxqJgVgTz0l7 MSFbrao30ljVmLn3r2r9LgRxj9gkNZNcSspCARNHo6u5DsmhWxRWd1aXjtqexybm 3aqSj21U6mgHSQDVKOgNTRL/N9Vq7gS0yuoY3xEncI6c4iP5NzWROE0cGLMAYxEU gSdef2wh8/ha6sbnmrxv+jJ+u3putA0w0kJQPGThaIkRfbbmaQ3i6LKmeBc4YQer T8pyjDxdhmVZWxdxzZ/xonCVTfuaQL5aZ8pi9AKn4WUMfUSxKIbTeeOCrbAK+53D eWNYuS/crf0nfSmBiBwpKTjaQUQhNidZPOypz1K5roA1YxNZ7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBMtPNOlT3GyVl48tStYW3vqRddMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGU3NDdmNDAtMzQ1Yy0z YjRjLWE1MTItYmVlYWZmZmQ4ZTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALx6UFm8F/sUbtvB6NzCWdaSNBy8XoZWJYmgCdXD+7VhQKGfxsMKXMeB Q6sYdxNlCgTlotWo/v0TRz7apwJ2lkUI43nsWfz7y3wb8stKR1rqAHoC7izxAypI aswDgU3cIqD0LTXvvqSKIvV7diQV81dbPBuPjijvYCrCpIBbkIt/fJwVROKBM6wJ kYc4fF9dqIGENQrL4f0WgMpVshzBfDbEpm3shL0sHmwYBaamoVglJGeeHJnoYKDg yIx+YD/lfDSymYgJmXAeZrQABrGjj6qobKqdykWYmutzhI14sZCHy1UpTrLdeLFK oO03ZlNcI2ajaUSTp9OeZzU9QYKlNFg= -----END CERTIFICATE-----Generated at Sun Oct 4 08:38:16 2026 by rpki-client