$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/95674fc2-d10e-3d5f-ba18-3f0332ecfd39.roa File: 95674fc2-d10e-3d5f-ba18-3f0332ecfd39.roa (raw, json) Hash identifier: tNSlrCyjrR+Z8D0yb3rIdUnrB3oJ1WpU8bDQ1gRackI= Subject key identifier: 2D:CD:87:43:A7:EF:44:E9:93:51:C4:43:12:34:F1:F5:40:41:79:3D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D3E000ECF554A232952026CC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/95674fc2-d10e-3d5f-ba18-3f0332ecfd39.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 27544 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:0e:cf:55:4a:23:29:52:02:6c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=7342f1a2-799a-4f9e-a3c4-27ed35b47cb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:01:3f:e7:8c:0f:db:b8:48:f3:8e:8e:fb:94: bd:a7:f0:26:f4:f3:a3:0b:74:99:65:a8:f3:5f:e7: 74:52:76:27:fa:55:85:59:38:69:8b:0c:b2:61:15: 2c:39:23:b1:12:88:12:97:05:c6:45:9a:d0:83:33: e7:82:5e:36:63:77:92:5b:5c:55:97:70:a5:ba:37: 32:9b:cf:8f:bb:af:d8:bc:e3:99:af:d1:32:00:ec: f9:a4:a2:ff:fd:7b:c1:2b:31:38:3d:b9:c0:6d:81: 43:ca:b1:b3:a1:bc:32:42:94:a7:ff:d6:4f:34:14: ee:9c:fb:73:c3:ce:80:1a:cb:48:98:ec:ae:ca:ee: f1:ea:a5:50:7f:2e:e9:53:1c:69:ed:a9:bb:b3:4b: 22:5b:21:3c:65:db:3c:36:86:fb:88:1a:b2:7d:82: a4:fa:0a:a5:89:00:ae:88:16:2a:05:2b:5f:c6:2a: 2b:90:5d:03:f7:7a:97:bb:6d:9c:97:a0:65:dd:1d: 5c:6f:4d:d7:50:35:31:e2:af:5b:f5:38:c8:db:04: 6a:8a:a6:8d:95:84:44:a3:e2:c1:5a:60:4a:84:6f: f4:65:98:52:6c:c7:71:6c:50:ce:76:03:1e:a1:1d: 19:21:bd:7c:a8:75:0d:af:dc:43:e8:9f:be:d0:93: d6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CD:87:43:A7:EF:44:E9:93:51:C4:43:12:34:F1:F5:40:41:79:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/95674fc2-d10e-3d5f-ba18-3f0332ecfd39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:60:29:86:97:50:0f:42:34:d3:89:9d:02:ee:55:05:66:bd: 1e:13:57:6d:37:57:6a:51:ac:30:e8:07:ea:3d:ac:89:19:f0: 37:47:65:64:22:f0:2b:8b:ed:a8:87:7f:09:af:ac:c9:05:5f: 8d:b9:88:dd:31:2e:fa:91:d5:b7:d2:01:49:59:0f:07:6d:eb: fd:f2:68:7b:a4:3c:87:bf:47:af:58:5a:cf:d4:f6:cb:0a:c7: c3:99:3f:df:dd:90:39:96:17:db:4a:75:be:58:b5:97:c2:06: fe:74:21:de:7c:c6:2c:24:65:69:b1:2b:6e:b2:2f:83:5e:02: 02:f1:05:86:39:45:f6:79:2e:74:6e:d1:de:e6:86:39:c1:55: 0e:3a:85:c1:3c:8a:48:1f:9f:6e:3a:c6:db:92:db:af:e0:8d: 8e:bb:5d:c0:38:35:a5:1a:be:a4:3e:45:f4:f4:dd:c2:c6:ef: 7f:34:c4:99:8a:56:28:76:37:15:64:f3:da:44:01:02:0e:41: 29:cb:e2:f4:58:54:2c:d5:5c:a0:93:39:de:74:e2:a4:89:02: 5a:59:dc:02:e5:f2:72:5d:af:3e:30:10:5a:48:4c:74:3f:fd: a5:3c:58:c1:36:5a:6b:11:4f:7d:45:1c:11:c5:1b:04:f0:0d: bb:7b:21:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AA7PVUojKVICbMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NzM0MmYxYTItNzk5YS00ZjllLWEzYzQtMjdlZDM1YjQ3Y2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwE/54wP27hI846O+5S9p/Am9POjC3SZZajz X+d0UnYn+lWFWThpiwyyYRUsOSOxEogSlwXGRZrQgzPngl42Y3eSW1xVl3Clujcy m8+Pu6/YvOOZr9EyAOz5pKL//XvBKzE4PbnAbYFDyrGzobwyQpSn/9ZPNBTunPtz w86AGstImOyuyu7x6qVQfy7pUxxp7am7s0siWyE8Zds8Nob7iBqyfYKk+gqliQCu iBYqBStfxiorkF0D93qXu22cl6Bl3R1cb03XUDUx4q9b9TjI2wRqiqaNlYREo+LB WmBKhG/0ZZhSbMdxbFDOdgMeoR0ZIb18qHUNr9xD6J++0JPWDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3Nh0On70Tpk1HEQxI08fVAQXk9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTU2NzRmYzItZDEwZS0z ZDVmLWJhMTgtM2YwMzMyZWNmZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBgKYaXUA9CNNOJnQLuVQVmvR4TV203V2pRrDDoB+o9rIkZ8DdHZWQi 8CuL7aiHfwmvrMkFX425iN0xLvqR1bfSAUlZDwdt6/3yaHukPIe/R69YWs/U9ssK x8OZP9/dkDmWF9tKdb5YtZfCBv50Id58xiwkZWmxK26yL4NeAgLxBYY5RfZ5LnRu 0d7mhjnBVQ46hcE8ikgfn246xtuS26/gjY67XcA4NaUavqQ+RfT03cLG7380xJmK Vih2NxVk89pEAQIOQSnL4vRYVCzVXKCTOd504qSJAlpZ3ALl8nJdrz4wEFpITHQ/ /aU8WME2WmsRT31FHBHFGwTwDbt7IWM= -----END CERTIFICATE-----Generated at Thu Mar 26 11:37:48 2026 by rpki-client