$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9585189d-d62a-3856-927d-4f7e9dd65a76.roa File: 9585189d-d62a-3856-927d-4f7e9dd65a76.roa (raw, json) Hash identifier: JnJbRtp4XnfHqWHwY8d7g34aUrxpUNTQjtBli8pM8rA= Subject key identifier: 3E:22:34:04:4E:FD:A2:9A:68:D4:6C:10:0B:E8:C3:F7:D7:84:FC:57 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1707EB96E96B4BD0C2279F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9585189d-d62a-3856-927d-4f7e9dd65a76.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 396545 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:eb:96:e9:6b:4b:d0:c2:27:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=323d1eb3-5d07-44ad-9b5a-23715daa1414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:78:8f:e9:bd:07:34:ec:5e:28:8b:e2:2a:66: 29:ef:b2:92:f1:87:ff:49:c6:2a:5c:93:4b:47:c8: cc:94:a5:5d:ff:89:e2:2e:d9:33:4d:e6:4f:24:48: 2e:8e:50:19:00:ff:af:bf:12:0f:03:9b:dd:19:a5: c2:96:1b:ba:a7:71:02:34:65:d5:80:8f:44:1d:fc: d8:88:3c:28:63:66:70:f7:b2:fb:f0:8d:69:13:60: 59:06:6f:80:e2:4a:f5:cd:c6:60:16:04:59:6d:94: 44:9b:5f:1a:83:d2:6f:4a:d6:26:53:35:69:0d:ce: 77:ed:f8:25:a0:4e:fb:e4:cf:0d:b9:4c:76:70:cd: 12:98:0b:88:56:fc:0a:94:ee:33:0d:57:6a:1f:45: cb:b7:02:8e:c5:e4:09:32:c9:48:55:6f:c4:2a:2d: 7a:93:6e:5f:b9:bf:07:3c:c5:40:90:99:0e:61:ff: ce:d1:03:11:46:75:b9:af:99:ca:64:a3:6e:5e:53: d7:dd:3b:57:2d:e8:21:5f:bb:84:92:56:84:ec:a9: 9c:82:44:4a:c5:90:db:27:cc:bc:40:3f:d8:4c:dc: 7f:e3:13:db:5d:63:22:be:18:07:aa:a4:a2:8d:a9: 92:9f:df:fd:a2:f3:d1:70:68:3f:81:32:b8:d7:11: 8d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:22:34:04:4E:FD:A2:9A:68:D4:6C:10:0B:E8:C3:F7:D7:84:FC:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9585189d-d62a-3856-927d-4f7e9dd65a76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:09:d3:81:f2:59:a0:af:7c:75:0a:6a:aa:6d:23:5c:05:0c: b1:95:5e:02:0b:06:d3:be:c0:2e:be:79:d4:52:8d:7c:21:54: 18:20:45:1d:2d:be:4c:37:bf:5d:c6:97:59:33:1a:b3:e0:61: ba:06:32:da:d3:69:58:42:e5:61:32:56:f1:69:92:13:36:af: 71:da:2e:47:4a:7c:59:84:e5:36:f3:80:e1:0e:81:64:2d:4d: 0e:b0:80:cb:1e:c0:71:ac:50:39:0d:50:8c:d2:72:b2:40:ad: 5d:73:4a:0c:35:72:3f:73:6d:be:c4:bc:db:99:9c:05:3c:08: 36:70:f4:ed:5c:dd:c8:9a:ca:a8:20:f9:ae:41:0f:cc:f2:29: d1:81:4f:64:d8:6f:a8:4e:b7:4c:7e:78:07:db:85:c9:74:e0: f9:02:5e:71:8c:96:64:69:f2:26:72:5e:95:4c:a3:d1:4c:13: 14:73:a4:65:bd:83:1b:2f:10:7a:0b:00:66:66:bc:f9:f9:a9: 99:48:79:ff:48:72:d0:05:4b:ea:20:87:e1:05:8f:22:fa:9a: ee:62:d9:96:18:d7:13:78:fb:5d:07:85:db:15:0c:75:4e:5c: eb:db:32:59:c2:4f:a4:63:9d:1c:ab:a2:a8:e2:1a:56:90:56: 18:06:cd:01 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0XB+uW6WtL0MInn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk MzIzZDFlYjMtNWQwNy00NGFkLTliNWEtMjM3MTVkYWExNDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXiP6b0HNOxeKIviKmYp77KS8Yf/ScYqXJNL R8jMlKVd/4niLtkzTeZPJEgujlAZAP+vvxIPA5vdGaXClhu6p3ECNGXVgI9EHfzY iDwoY2Zw97L78I1pE2BZBm+A4kr1zcZgFgRZbZREm18ag9JvStYmUzVpDc537fgl oE775M8NuUx2cM0SmAuIVvwKlO4zDVdqH0XLtwKOxeQJMslIVW/EKi16k25fub8H PMVAkJkOYf/O0QMRRnW5r5nKZKNuXlPX3TtXLeghX7uEklaE7KmcgkRKxZDbJ8y8 QD/YTNx/4xPbXWMivhgHqqSijamSn9/9ovPRcGg/gTK41xGNIwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFD4iNARO/aKaaNRsEAvow/fXhPxXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTU4NTE4OWQtZDYyYS0z ODU2LTkyN2QtNGY3ZTlkZDY1YTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBkCdOB8lmgr3x1CmqqbSNcBQyxlV4CCwbTvsAuvnnUUo18IVQYIEUd Lb5MN79dxpdZMxqz4GG6BjLa02lYQuVhMlbxaZITNq9x2i5HSnxZhOU284DhDoFk LU0OsIDLHsBxrFA5DVCM0nKyQK1dc0oMNXI/c22+xLzbmZwFPAg2cPTtXN3Imsqo IPmuQQ/M8inRgU9k2G+oTrdMfngH24XJdOD5Al5xjJZkafImcl6VTKPRTBMUc6Rl vYMbLxB6CwBmZrz5+amZSHn/SHLQBUvqIIfhBY8i+pruYtmWGNcTePtdB4XbFQx1 Tlzr2zJZwk+kY50cq6Ko4hpWkFYYBs0B -----END CERTIFICATE-----Generated at Thu Mar 26 13:39:57 2026 by rpki-client