$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f19cbdb-4d76-3ba7-aed0-01d19d2f3f96.roa File: 8f19cbdb-4d76-3ba7-aed0-01d19d2f3f96.roa (raw, json) Hash identifier: aOSIVFJEA8g0eEUWIvZKpwFc6zBqm10x53316SOToA4= Subject key identifier: 7F:EE:1F:FE:14:01:C6:9C:84:18:B3:2B:09:1D:CD:67:D0:59:F1:F5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D46B113B4C074D5C72250F240 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f19cbdb-4d76-3ba7-aed0-01d19d2f3f96.roa Signing time: Tue 24 Mar 2026 15:44:57 +0000 ROA not before: Tue 24 Mar 2026 15:44:57 +0000 ROA not after: Mon 22 Jun 2026 15:44:57 +0000 asID: 36617 IP address blocks: 192.42.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:b1:13:b4:c0:74:d5:c7:22:50:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 24 15:44:57 2026 GMT Not After : Jun 22 15:44:57 2026 GMT Subject: CN=40350aab-cf17-4066-9968-fefb75f1b6fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:84:a1:d0:68:be:d6:28:7e:0d:25:73:02:7f: be:d0:e2:c4:b7:9c:3f:8c:8d:86:f5:50:75:46:d7: ba:1f:80:dd:00:18:91:08:76:3c:f3:40:b5:c2:77: be:c1:2e:f9:6b:22:47:12:a9:a0:a9:b0:fd:ec:86: b0:aa:44:85:b0:d9:69:fa:93:39:83:20:89:44:51: 58:97:65:c3:f5:3b:8a:b5:31:06:36:12:18:64:ef: 55:8b:42:35:bf:52:38:57:f1:39:24:36:d3:97:b5: e2:19:da:75:3c:83:14:35:fb:d2:b2:c4:ae:6a:a7: f0:f9:85:a2:0b:eb:46:e8:6b:f3:52:14:18:4c:0e: b6:8f:88:8f:be:3e:52:52:f6:3e:4a:b0:14:a9:a8: 27:b1:d8:34:d4:d8:db:f3:15:1c:f1:a8:89:e9:b7: 2c:6c:40:2a:a3:07:16:74:6c:cf:0f:0d:29:bb:f3: 8c:08:1c:43:92:f2:a0:06:ec:d8:57:1b:f0:74:ff: 8e:a6:18:41:b4:65:d1:79:3f:77:19:a3:58:ae:a5: bd:71:d2:74:80:56:f8:ed:9d:81:49:d2:1c:df:d1: 52:62:a3:45:9a:cc:04:0d:b2:d8:b2:70:62:80:ca: 9b:d7:53:32:04:f1:4f:94:ed:a0:dc:8d:11:dd:d4: 65:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:EE:1F:FE:14:01:C6:9C:84:18:B3:2B:09:1D:CD:67:D0:59:F1:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f19cbdb-4d76-3ba7-aed0-01d19d2f3f96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:a2:66:80:bc:45:88:3f:d7:18:04:09:cd:53:8e:41:a1:36: cd:e2:25:c3:9f:60:1c:85:42:b3:da:f0:b3:17:c1:3f:a5:62: 41:ed:e2:9d:5d:7b:c8:fe:7a:ed:9d:c6:08:d3:74:0d:57:a1: 82:e4:39:ac:2a:43:4c:c9:48:05:42:2b:16:04:1a:3c:7e:c0: 1b:50:92:53:1a:95:62:fc:ca:4b:6f:7c:ad:3b:55:7c:91:b9: 0c:8b:ce:08:84:51:cc:0d:98:c0:79:9c:e6:b2:15:a3:6a:c7: 72:d2:0d:96:1c:78:c2:5b:07:bc:ca:76:41:19:ef:5b:0c:17: 70:ba:a8:a8:27:ec:e0:c8:70:fe:a1:fc:81:f0:96:3d:29:a3: d3:c1:b1:44:63:a9:5d:49:8b:47:56:5a:37:36:8c:69:c8:ac: 17:84:f9:6e:f1:b0:db:7d:10:f9:32:f9:01:80:06:39:5f:dc: 01:51:29:cd:31:41:25:e7:f4:2b:c7:55:14:25:43:63:c3:28: f5:3e:45:8c:07:be:8b:09:55:d1:b2:2f:de:59:63:e3:41:fc: 58:3d:29:51:1f:f2:b6:21:a1:ad:fb:1e:96:10:6b:c5:c5:dc: 45:76:74:ec:e5:a3:71:3e:75:e6:be:df:e7:64:77:b1:1b:e0: 4a:0d:4e:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1GsRO0wHTVxyJQ8kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyNDE1NDQ1N1oXDTI2MDYyMjE1NDQ1N1owLzEtMCsGA1UEAxMk NDAzNTBhYWItY2YxNy00MDY2LTk5NjgtZmVmYjc1ZjFiNmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4Sh0Gi+1ih+DSVzAn++0OLEt5w/jI2G9VB1 Rte6H4DdABiRCHY880C1wne+wS75ayJHEqmgqbD97IawqkSFsNlp+pM5gyCJRFFY l2XD9TuKtTEGNhIYZO9Vi0I1v1I4V/E5JDbTl7XiGdp1PIMUNfvSssSuaqfw+YWi C+tG6GvzUhQYTA62j4iPvj5SUvY+SrAUqagnsdg01Njb8xUc8aiJ6bcsbEAqowcW dGzPDw0pu/OMCBxDkvKgBuzYVxvwdP+OphhBtGXReT93GaNYrqW9cdJ0gFb47Z2B SdIc39FSYqNFmswEDbLYsnBigMqb11MyBPFPlO2g3I0R3dRlNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/uH/4UAcachBizKwkdzWfQWfH1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGYxOWNiZGItNGQ3Ni0z YmE3LWFlZDAtMDFkMTlkMmYzZjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCquMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+iZoC8RYg/1xgECc1TjkGhNs3iJcOfYByFQrPa8LMXwT+lYkHt4p1d e8j+eu2dxgjTdA1XoYLkOawqQ0zJSAVCKxYEGjx+wBtQklMalWL8yktvfK07VXyR uQyLzgiEUcwNmMB5nOayFaNqx3LSDZYceMJbB7zKdkEZ71sMF3C6qKgn7ODIcP6h /IHwlj0po9PBsURjqV1Ji0dWWjc2jGnIrBeE+W7xsNt9EPky+QGABjlf3AFRKc0x QSXn9CvHVRQlQ2PDKPU+RYwHvosJVdGyL95ZY+NB/Fg9KVEf8rYhoa37HpYQa8XF 3EV2dOzlo3E+dea+3+dkd7Eb4EoNTiw= -----END CERTIFICATE-----Generated at Thu Mar 26 08:36:34 2026 by rpki-client