$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9952d388-9269-3374-a3b5-d1aed92482dd.roa File: 9952d388-9269-3374-a3b5-d1aed92482dd.roa (raw, json) Hash identifier: HBMJspDD81P5nk8Vp7PyM+QIzL8+zQtcgHMH2gKwISc= Subject key identifier: B2:7E:6E:20:60:32:24:8B:96:9A:87:D9:8F:9C:E8:76:BC:77:41:80 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D3DFF916C75FE14C0936C4600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9952d388-9269-3374-a3b5-d1aed92482dd.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396551 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:91:6c:75:fe:14:c0:93:6c:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=aa7ec86c-c15e-4bc4-a18d-84eb3f42b1c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:61:e2:27:aa:49:f6:9e:5b:aa:88:a6:6c:56: 1a:ae:f3:4a:ab:4b:6e:d4:f4:14:0c:e0:8c:d4:d5: 9a:44:17:52:50:d3:88:b6:db:44:e5:b3:61:cc:87: 09:22:8c:aa:6d:68:70:dc:20:30:3f:4f:5e:3b:76: 91:25:04:44:57:75:45:54:a4:5e:72:54:6c:e9:a6: 20:3b:b2:15:3a:6d:b9:02:00:d1:fb:76:d0:45:c1: 3f:d0:ce:b2:a4:78:b7:a1:5c:85:dd:8d:fd:0c:17: ad:f5:d1:31:ac:6b:e6:99:4f:a9:ef:85:70:fd:66: 28:a7:38:e2:84:eb:a6:fe:68:08:56:20:67:f1:d3: d5:41:01:c4:fb:8d:ce:ac:84:f7:89:72:d9:11:f1: 78:24:66:9a:55:59:c1:5a:b3:48:2d:4b:44:62:97: d4:ee:86:e0:c4:9b:b0:b2:79:d1:08:c5:aa:44:3b: 95:8e:7d:19:dc:93:33:98:2a:0f:dc:11:ef:eb:06: c0:08:92:92:07:81:9d:f8:5e:25:10:00:c4:5e:f4: 99:e4:99:86:db:bf:65:48:92:48:8f:07:fe:da:58: d6:92:5d:21:bc:7a:e4:23:26:6a:cf:47:32:17:49: bf:fe:7c:e2:fa:47:f1:a2:c1:2d:d7:4f:c0:55:38: cb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:7E:6E:20:60:32:24:8B:96:9A:87:D9:8F:9C:E8:76:BC:77:41:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9952d388-9269-3374-a3b5-d1aed92482dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:9c:d1:b1:18:e7:ba:a5:91:8e:b6:15:d6:2b:49:5e:5b:06: 77:5d:60:f2:ed:c9:90:d5:3a:34:03:8f:03:00:b6:5d:12:cf: 11:c1:1c:7a:fd:d6:ed:f5:c2:86:0e:de:85:0a:31:29:8d:49: 86:2a:ce:f2:94:d5:71:5a:34:0f:59:68:70:77:b9:43:60:c3: 5d:0e:65:a0:f5:08:af:d3:d6:c3:98:09:9c:87:7d:e3:d7:df: 90:81:85:38:c0:c0:f2:d5:20:bc:f5:e5:c8:49:0b:ed:e9:de: ac:6b:9d:21:5d:f8:2c:3a:cb:4e:d2:67:bb:de:be:24:7d:e4: 84:e0:8f:44:69:94:2d:56:d2:30:87:a8:31:9d:98:4f:36:f5: 3a:9e:17:52:3f:3e:38:bc:35:ff:91:87:15:7a:fd:ae:87:9f: 04:b5:5b:c2:a2:ae:9e:a8:09:0d:a6:4e:4d:0c:e2:02:49:f0: 49:cf:18:20:90:52:6e:a8:7a:f4:ba:4e:ef:d0:ab:c0:ea:89: 7e:eb:03:d3:69:13:b0:e3:26:5e:2d:91:9a:40:ec:2f:c0:5d: 14:d5:1a:9e:7b:80:c7:e6:b9:f3:f2:33:99:f1:4c:b1:bf:78: 10:dd:ad:5a:aa:72:58:1d:cc:1b:72:40:7a:08:88:35:d0:cc: 84:7d:18:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/5Fsdf4UwJNsRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YWE3ZWM4NmMtYzE1ZS00YmM0LWExOGQtODRlYjNmNDJiMWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWHiJ6pJ9p5bqoimbFYarvNKq0tu1PQUDOCM 1NWaRBdSUNOItttE5bNhzIcJIoyqbWhw3CAwP09eO3aRJQREV3VFVKReclRs6aYg O7IVOm25AgDR+3bQRcE/0M6ypHi3oVyF3Y39DBet9dExrGvmmU+p74Vw/WYopzji hOum/mgIViBn8dPVQQHE+43OrIT3iXLZEfF4JGaaVVnBWrNILUtEYpfU7obgxJuw snnRCMWqRDuVjn0Z3JMzmCoP3BHv6wbACJKSB4Gd+F4lEADEXvSZ5JmG279lSJJI jwf+2ljWkl0hvHrkIyZqz0cyF0m//nzi+kfxosEt10/AVTjLswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJ+biBgMiSLlpqH2Y+c6Ha8d0GAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTk1MmQzODgtOTI2OS0z Mzc0LWEzYjUtZDFhZWQ5MjQ4MmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmc0bEY57qlkY62FdYrSV5bBnddYPLtyZDVOjQDjwMAtl0SzxHBHHr9 1u31woYO3oUKMSmNSYYqzvKU1XFaNA9ZaHB3uUNgw10OZaD1CK/T1sOYCZyHfePX 35CBhTjAwPLVILz15chJC+3p3qxrnSFd+Cw6y07SZ7veviR95ITgj0RplC1W0jCH qDGdmE829TqeF1I/Pji8Nf+RhxV6/a6HnwS1W8Kirp6oCQ2mTk0M4gJJ8EnPGCCQ Um6oevS6Tu/Qq8DqiX7rA9NpE7DjJl4tkZpA7C/AXRTVGp57gMfmufPyM5nxTLG/ eBDdrVqqclgdzBtyQHoIiDXQzIR9GGY= -----END CERTIFICATE-----Generated at Thu Mar 26 21:01:54 2026 by rpki-client