$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/955539f8-1e06-3b2e-8075-f8c1d5fc48ce.roa File: 955539f8-1e06-3b2e-8075-f8c1d5fc48ce.roa (raw, json) Hash identifier: qWV/lK1zsSD9mhCqieHSHSzrl8QLz4b9V9DVRla8kBw= Subject key identifier: C8:25:DF:96:76:FD:3C:97:53:9F:73:B4:7B:5D:58:16:F8:49:C8:4F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1707EDACE1C388A3BE7E5CC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/955539f8-1e06-3b2e-8075-f8c1d5fc48ce.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 396550 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:ed:ac:e1:c3:88:a3:be:7e:5c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=a1900cf0-7fa5-4f62-9eda-bfbb116eaf44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5f:62:03:0e:e1:9f:ce:ba:ed:d1:31:15:7f: 6b:c9:40:eb:a5:d7:57:63:dc:5c:68:53:38:cf:7b: d1:62:cd:d9:7e:79:ff:b2:31:26:c6:92:9d:8e:85: db:31:7a:2b:6e:3c:dd:66:d9:9a:05:53:9b:15:b3: 2b:0e:a2:92:eb:98:0c:01:d0:8e:85:2d:9e:a1:c3: e8:89:b3:c3:94:29:dd:75:9a:6f:63:0d:e8:88:d4: 17:55:f9:0c:9b:8e:4b:b0:11:e3:6b:0a:c8:05:ed: 22:1c:b1:7d:c8:66:6f:c3:53:f9:e2:5b:41:4a:0a: ce:46:73:08:42:97:15:cf:1f:e7:e5:76:1c:be:53: e1:6d:d4:5d:09:f0:af:0d:4a:04:50:fa:ef:b8:41: 3c:af:21:17:8c:fe:94:16:fa:17:a8:da:36:19:7e: 3d:91:f5:a6:4b:fc:5e:8f:6f:91:b4:47:9e:5a:64: 47:dd:81:8e:b0:5c:30:ed:48:43:ab:76:9e:6d:79: b1:d7:7b:ae:e1:70:ac:a3:7e:05:01:7d:b9:56:c8: ed:08:a6:24:ec:ba:9e:c6:3c:8d:38:c2:62:54:9f: 05:c4:a1:a5:c5:66:47:a8:b0:ef:3a:61:ea:0b:c4: a3:35:0d:f6:44:a1:21:41:bc:d8:f5:ea:11:49:08: 18:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:25:DF:96:76:FD:3C:97:53:9F:73:B4:7B:5D:58:16:F8:49:C8:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/955539f8-1e06-3b2e-8075-f8c1d5fc48ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:b7:a1:00:e7:fe:ce:75:62:25:86:f3:58:c3:98:e1:33:cf: ae:8f:ba:f5:cd:3c:95:b0:91:9f:d5:37:69:23:d0:3b:21:05: 74:68:47:b4:f7:64:fa:ec:79:e7:21:ce:1b:1c:d1:eb:0f:9d: 09:44:1c:4f:fb:7c:b8:f5:8c:8a:99:fb:99:d2:10:fd:5b:47: ef:17:8e:dc:67:d1:f7:0f:0d:b3:69:8a:57:31:65:4e:d5:bf: 67:6d:0e:6a:f4:be:dd:e6:d4:6b:74:c9:cf:c5:a5:15:3b:9f: 7d:30:48:2d:31:b6:ff:3f:e5:fe:5f:9f:b2:d6:6b:49:d2:4b: 2e:04:6b:46:3e:8d:94:2b:78:a1:f3:74:db:3e:18:54:54:9d: 59:dd:de:a8:74:40:63:af:61:86:b7:e2:f2:d9:2e:21:bd:b9: 22:c0:fd:04:46:1e:36:50:ff:b0:8a:d0:35:3d:2a:76:98:ca: ad:f2:c5:00:3c:8f:a8:71:a5:31:5c:e8:0d:e8:71:da:0d:21: 76:ff:77:46:80:3b:48:47:12:a1:a4:98:a4:36:ca:3b:c2:7c: cd:59:0e:4a:12:28:0e:f5:b2:33:9d:7a:03:4a:79:bb:f8:f9: 0c:fc:54:50:03:ed:15:48:a7:ca:d6:81:72:a4:57:5d:8a:94: 81:20:87:6e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0XB+2s4cOIo75+XMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk YTE5MDBjZjAtN2ZhNS00ZjYyLTllZGEtYmZiYjExNmVhZjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF9iAw7hn8667dExFX9ryUDrpddXY9xcaFM4 z3vRYs3Zfnn/sjEmxpKdjoXbMXorbjzdZtmaBVObFbMrDqKS65gMAdCOhS2eocPo ibPDlCnddZpvYw3oiNQXVfkMm45LsBHjawrIBe0iHLF9yGZvw1P54ltBSgrORnMI QpcVzx/n5XYcvlPhbdRdCfCvDUoEUPrvuEE8ryEXjP6UFvoXqNo2GX49kfWmS/xe j2+RtEeeWmRH3YGOsFww7UhDq3aebXmx13uu4XCso34FAX25VsjtCKYk7LqexjyN OMJiVJ8FxKGlxWZHqLDvOmHqC8SjNQ32RKEhQbzY9eoRSQgYZQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMgl35Z2/TyXU59ztHtdWBb4SchPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTU1NTM5ZjgtMWUwNi0z YjJlLTgwNzUtZjhjMWQ1ZmM0OGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQANt6EA5/7OdWIlhvNYw5jhM8+uj7r1zTyVsJGf1TdpI9A7IQV0aEe0 92T67HnnIc4bHNHrD50JRBxP+3y49YyKmfuZ0hD9W0fvF47cZ9H3Dw2zaYpXMWVO 1b9nbQ5q9L7d5tRrdMnPxaUVO599MEgtMbb/P+X+X5+y1mtJ0ksuBGtGPo2UK3ih 83TbPhhUVJ1Z3d6odEBjr2GGt+Ly2S4hvbkiwP0ERh42UP+witA1PSp2mMqt8sUA PI+ocaUxXOgN6HHaDSF2/3dGgDtIRxKhpJikNso7wnzNWQ5KEigO9bIznXoDSnm7 +PkM/FRQA+0VSKfK1oFypFddipSBIIdu -----END CERTIFICATE-----Generated at Thu Mar 26 17:35:42 2026 by rpki-client