$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98a0d55d-cb86-303d-992b-17a32f32d1f2.roa File: 98a0d55d-cb86-303d-992b-17a32f32d1f2.roa (raw, json) Hash identifier: Q8wtNJfOv/xOVkGCDXTWu3wAd40rKS2wWI+HLheQx0Y= Subject key identifier: 22:72:5D:76:B8:82:C6:FC:33:D6:CC:7B:CB:DE:5B:F0:72:DA:BB:99 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D46B11F82F18CAA2C5F7469A0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98a0d55d-cb86-303d-992b-17a32f32d1f2.roa Signing time: Tue 24 Mar 2026 15:45:02 +0000 ROA not before: Tue 24 Mar 2026 15:45:02 +0000 ROA not after: Mon 22 Jun 2026 15:45:02 +0000 asID: 396591 IP address blocks: 192.42.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:b1:1f:82:f1:8c:aa:2c:5f:74:69:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 24 15:45:02 2026 GMT Not After : Jun 22 15:45:02 2026 GMT Subject: CN=c7bfc176-145c-4cd5-aad9-a7d7098c2e03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c2:0b:e5:b0:99:f2:16:48:d8:70:3e:fe:45: 17:18:5e:14:e5:2c:8a:91:28:66:35:84:44:c5:12: 7b:31:55:49:64:7b:7b:1b:21:b1:52:d1:39:59:48: ce:ac:3e:38:84:23:05:27:a4:91:64:7c:be:99:0b: a8:d7:47:72:08:c0:f4:af:18:7d:ef:31:70:4a:5c: a2:a9:5b:f7:df:ef:2e:ca:93:a5:fb:5c:be:33:76: b7:4a:b0:c7:13:89:5b:68:b9:4b:d9:cf:a6:4d:18: ad:b5:57:d5:03:0f:70:79:69:75:83:1d:23:a3:3f: 3a:23:05:fd:5a:fe:ab:f2:66:8c:00:3f:f6:cd:1f: 8b:35:23:4f:3f:25:bf:8e:68:43:c9:d6:ed:c6:0d: d7:40:87:0b:ad:b2:aa:33:e7:f5:ac:45:7d:2d:68: af:64:59:02:75:57:d1:1d:86:fa:4d:d7:23:5a:74: 09:f1:6e:0b:81:66:a7:cb:d5:86:a0:d6:19:fa:69: c3:c5:d8:f1:3a:b7:e8:1b:7b:4c:27:d9:62:05:93: e9:73:91:44:8c:2e:f6:21:24:4f:b8:02:7c:d6:65: 90:9e:5b:00:d3:4b:54:90:14:7d:79:92:a8:df:8d: 38:45:45:69:7b:f6:33:c9:09:b7:ee:81:3c:48:fb: 5e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:72:5D:76:B8:82:C6:FC:33:D6:CC:7B:CB:DE:5B:F0:72:DA:BB:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98a0d55d-cb86-303d-992b-17a32f32d1f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:7a:7f:e3:cf:42:6f:41:d5:ad:da:51:e1:b0:2c:c2:97:67: 8b:b6:8a:66:4c:a6:e6:69:79:dc:df:c3:11:c9:3f:89:d8:15: f5:8b:4b:1c:a0:36:7b:17:f2:d0:ca:26:ba:4b:f4:aa:b7:c1: a3:88:6a:b7:dd:1c:47:15:e1:3a:5c:44:a8:29:1d:70:4a:e2: 67:ab:e5:d6:12:0d:03:9b:e3:77:cc:ea:4b:1b:8f:e9:2a:88: 52:b8:be:19:af:01:bc:9e:ef:e1:21:f1:39:b8:67:11:01:12: 50:be:41:cb:47:b7:59:e0:ad:06:74:ea:cb:ca:cd:22:8c:29: 89:a3:9a:1f:b4:f5:3c:24:b2:bb:95:cf:33:17:ef:08:a3:25: 86:e3:c1:36:21:6f:f0:42:2d:10:5a:63:91:ff:89:52:65:fb: c2:15:36:33:7d:a6:2b:7c:9b:a2:a9:45:b8:b4:0a:65:a9:50: 28:6a:e3:0d:53:1e:85:85:25:a8:2d:12:d6:6b:a8:d0:66:cf: aa:db:00:b7:6e:c7:ae:c5:18:86:07:60:56:2c:36:1e:43:31: 79:39:34:37:df:aa:1d:22:9b:66:16:67:aa:a5:fa:30:f6:b9: 79:3b:9e:3d:7b:fe:dc:77:18:55:2f:40:d0:d6:f0:83:17:3a: 35:c1:a4:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1GsR+C8YyqLF90aaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyNDE1NDUwMloXDTI2MDYyMjE1NDUwMlowLzEtMCsGA1UEAxMk YzdiZmMxNzYtMTQ1Yy00Y2Q1LWFhZDktYTdkNzA5OGMyZTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8IL5bCZ8hZI2HA+/kUXGF4U5SyKkShmNYRE xRJ7MVVJZHt7GyGxUtE5WUjOrD44hCMFJ6SRZHy+mQuo10dyCMD0rxh97zFwSlyi qVv33+8uypOl+1y+M3a3SrDHE4lbaLlL2c+mTRittVfVAw9weWl1gx0joz86IwX9 Wv6r8maMAD/2zR+LNSNPPyW/jmhDydbtxg3XQIcLrbKqM+f1rEV9LWivZFkCdVfR HYb6TdcjWnQJ8W4LgWany9WGoNYZ+mnDxdjxOrfoG3tMJ9liBZPpc5FEjC72ISRP uAJ81mWQnlsA00tUkBR9eZKo3404RUVpe/YzyQm37oE8SPteMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJyXXa4gsb8M9bMe8veW/By2ruZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOThhMGQ1NWQtY2I4Ni0z MDNkLTk5MmItMTdhMzJmMzJkMWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCquMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJ6f+PPQm9B1a3aUeGwLMKXZ4u2imZMpuZpedzfwxHJP4nYFfWLSxyg NnsX8tDKJrpL9Kq3waOIarfdHEcV4TpcRKgpHXBK4mer5dYSDQOb43fM6ksbj+kq iFK4vhmvAbye7+Eh8Tm4ZxEBElC+QctHt1ngrQZ06svKzSKMKYmjmh+09TwksruV zzMX7wijJYbjwTYhb/BCLRBaY5H/iVJl+8IVNjN9pit8m6KpRbi0CmWpUChq4w1T HoWFJagtEtZrqNBmz6rbALdux67FGIYHYFYsNh5DMXk5NDffqh0im2YWZ6ql+jD2 uXk7nj17/tx3GFUvQNDW8IMXOjXBpEA= -----END CERTIFICATE-----Generated at Thu Mar 26 11:07:24 2026 by rpki-client