$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b9e0c09-99e5-3396-84b2-a14705e98070.roa File: 9b9e0c09-99e5-3396-84b2-a14705e98070.roa (raw, json) Hash identifier: 7msog4yUNlNoWRpeDnrfdQ4XP7s2i3Hp8yyQ1Y3J7ro= Subject key identifier: CE:9A:39:B9:95:D8:08:17:8D:BB:9C:CA:5D:E4:F2:92:24:79:AD:1B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1707EAA8674EC4E5DD4C1D80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b9e0c09-99e5-3396-84b2-a14705e98070.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 397202 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:ea:a8:67:4e:c4:e5:dd:4c:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=564c0da7-55e6-4612-93af-b5fa3f753f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b3:f4:bb:5b:c4:e6:a8:76:2a:ee:9e:cc:c1: 59:78:9e:95:28:04:19:a3:cf:06:50:f1:4d:44:41: 89:d1:12:77:cb:c1:30:c1:2b:0c:22:38:69:09:d0: 16:da:f8:ea:4e:74:41:a7:ca:32:0d:74:ab:9c:20: 77:39:18:b2:1b:e6:d1:bc:ac:a4:eb:78:d9:b6:c6: 15:9c:41:2b:da:37:6e:14:db:6c:89:80:c0:75:ab: 09:32:25:7a:4a:89:72:76:30:90:35:e8:0a:96:c1: 6b:1e:0b:8a:6d:65:b9:ff:49:e7:6e:e1:6f:1a:0f: c4:46:20:df:29:16:45:71:e4:c3:d8:11:93:1f:f6: e5:4f:b7:02:57:30:3a:62:8e:69:37:3f:55:d1:08: 59:ad:be:33:23:bb:78:ce:24:36:ce:96:3d:10:78: c8:ec:5e:91:00:f2:94:ab:a3:eb:c9:f4:c1:45:d5: 6c:2f:da:41:9b:15:7e:f0:f7:9d:0e:5e:8b:b9:aa: f5:8d:07:c8:d8:8a:57:4d:af:bd:ce:69:0a:f3:9d: 08:e3:3b:e1:e2:c7:b6:79:c2:cd:a3:66:40:5e:9c: ff:c6:fb:3f:3f:2b:95:92:df:b7:fa:b1:11:f1:4a: 84:cb:aa:75:46:14:f9:b8:3c:72:d4:83:c3:9c:db: 96:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9A:39:B9:95:D8:08:17:8D:BB:9C:CA:5D:E4:F2:92:24:79:AD:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b9e0c09-99e5-3396-84b2-a14705e98070.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:87:a3:93:f6:a0:38:d4:91:ed:7a:19:dd:f8:5e:86:a8:22: 2b:a5:0b:30:ad:e2:89:a0:79:4e:2b:98:52:e5:8d:4a:8e:5f: bd:b9:ed:6d:47:ca:14:04:58:00:1d:ce:85:de:be:4c:6b:11: 65:3c:5b:39:d9:65:6e:f8:24:51:d4:48:c9:c8:98:05:63:d7: f8:81:04:39:e4:5b:da:1d:d6:1e:cb:8f:44:82:e8:64:41:e4: 55:c1:c8:25:96:de:7c:7a:43:1a:0a:2b:5c:48:dd:d4:15:a8: f4:7a:c8:0a:2d:64:83:b0:1f:d1:e6:df:97:1b:d8:eb:8f:d9: f7:67:7b:eb:60:81:90:b3:93:86:c5:c6:bd:9d:f2:85:5f:cb: 72:11:b1:26:02:f6:03:22:eb:70:47:45:b9:6b:cf:92:fc:c9: 67:8e:b9:5f:26:c7:a2:b6:78:5d:5d:f3:dd:6b:35:e5:c2:69: 88:0b:6c:7c:65:f6:5c:23:97:42:27:aa:89:f9:77:7b:38:81: bd:a5:5f:66:53:c8:8e:61:f5:be:25:12:96:85:20:3b:b9:9f: 41:3c:84:41:69:46:85:67:21:de:51:db:f4:84:41:91:40:1c: e3:e4:27:2b:36:74:8b:da:88:64:d1:7b:71:cc:1c:d3:05:d1: c7:4c:88:d8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0XB+qoZ07E5d1MHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk NTY0YzBkYTctNTVlNi00NjEyLTkzYWYtYjVmYTNmNzUzZjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLP0u1vE5qh2Ku6ezMFZeJ6VKAQZo88GUPFN REGJ0RJ3y8EwwSsMIjhpCdAW2vjqTnRBp8oyDXSrnCB3ORiyG+bRvKyk63jZtsYV nEEr2jduFNtsiYDAdasJMiV6SolydjCQNegKlsFrHguKbWW5/0nnbuFvGg/ERiDf KRZFceTD2BGTH/blT7cCVzA6Yo5pNz9V0QhZrb4zI7t4ziQ2zpY9EHjI7F6RAPKU q6PryfTBRdVsL9pBmxV+8PedDl6Luar1jQfI2IpXTa+9zmkK850I4zvh4se2ecLN o2ZAXpz/xvs/PyuVkt+3+rER8UqEy6p1RhT5uDxy1IPDnNuWRQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM6aObmV2AgXjbucyl3k8pIkea0bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWI5ZTBjMDktOTllNS0z Mzk2LTg0YjItYTE0NzA1ZTk4MDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBzh6OT9qA41JHtehnd+F6GqCIrpQswreKJoHlOK5hS5Y1Kjl+9ue1t R8oUBFgAHc6F3r5MaxFlPFs52WVu+CRR1EjJyJgFY9f4gQQ55FvaHdYey49Eguhk QeRVwcgllt58ekMaCitcSN3UFaj0esgKLWSDsB/R5t+XG9jrj9n3Z3vrYIGQs5OG xca9nfKFX8tyEbEmAvYDIutwR0W5a8+S/MlnjrlfJseitnhdXfPdazXlwmmIC2x8 ZfZcI5dCJ6qJ+Xd7OIG9pV9mU8iOYfW+JRKWhSA7uZ9BPIRBaUaFZyHeUdv0hEGR QBzj5CcrNnSL2ohk0XtxzBzTBdHHTIjY -----END CERTIFICATE-----Generated at Thu Mar 26 15:47:47 2026 by rpki-client