$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f9f977e-85fd-35ab-9bf6-be8f82f749a6.roa File: 9f9f977e-85fd-35ab-9bf6-be8f82f749a6.roa (raw, json) Hash identifier: 8GuKKCCH/x9Szb6/CTPPOFSD2ZLm50Z+jWzNUxXy1c8= Subject key identifier: 17:29:3C:8B:E7:AF:85:05:6F:43:FC:AF:1A:6A:67:C4:33:CA:A2:39 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1707EC4AE621976E8C95CAC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f9f977e-85fd-35ab-9bf6-be8f82f749a6.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 397193 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:ec:4a:e6:21:97:6e:8c:95:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=21feae0e-9973-4c50-91e4-a7d135a8ec08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ab:27:30:d2:01:3b:b9:69:da:de:77:ea:09: 6b:af:b8:0e:25:55:0a:5f:1e:78:88:a0:e7:ce:67: 92:54:33:33:af:d7:52:80:77:9c:22:86:52:36:62: b1:1d:d1:2d:f5:c9:24:10:0c:b1:80:3c:fc:f2:2d: dc:c7:13:af:4e:db:e1:76:26:a9:18:30:08:5c:e3: 01:c2:89:67:f3:9b:c8:ce:58:91:16:da:7e:44:90: 55:d5:b8:ec:7f:a5:65:be:c1:24:a0:92:94:a9:a5: aa:99:1f:55:14:77:78:0c:c2:7b:ca:61:82:4e:71: dd:cc:90:86:57:55:ad:fd:64:ad:23:7d:65:4d:be: 78:ba:80:3b:9e:17:11:9e:3a:c1:9a:06:ac:f6:31: 0a:b6:68:59:5a:ce:af:23:ef:ee:f3:2a:2a:c2:d4: 9b:96:72:b0:fa:dc:38:85:10:2d:64:23:3f:ae:9f: 15:d8:af:1f:84:e9:5c:a3:8f:36:02:d5:64:05:3f: 0e:89:37:0c:e8:b8:60:bc:fd:e9:52:7d:f4:13:a9: bd:98:a2:8f:1a:d6:c2:d6:b5:2b:fa:88:ba:9f:c0: 24:e0:f3:09:bc:ca:48:c1:a9:39:5b:3a:9d:97:2c: 90:05:31:c8:20:32:89:db:3b:e0:74:30:62:a4:0f: fc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:29:3C:8B:E7:AF:85:05:6F:43:FC:AF:1A:6A:67:C4:33:CA:A2:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f9f977e-85fd-35ab-9bf6-be8f82f749a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:c5:25:31:9c:81:5d:b1:f9:93:43:27:44:c9:ed:be:bf:7c: ab:5a:35:01:25:90:4d:22:d0:4d:99:ed:09:a1:2c:46:dd:d0: 25:c2:42:b3:21:b4:4a:55:e2:66:68:89:ed:f2:bb:20:8b:3e: 39:40:44:91:8d:04:ca:a9:bb:4a:82:bb:3c:24:87:8c:38:16: 8e:21:b1:a2:96:7e:18:2d:d4:a0:71:97:6b:da:01:a4:83:b6: d5:ce:0f:04:61:8b:db:9a:0c:60:0a:96:e9:7b:b2:18:2f:97: 7f:05:bf:aa:ed:78:b7:d9:6b:80:38:25:56:27:6f:46:fc:61: 6e:92:bf:29:20:8c:65:f4:87:93:a6:27:e9:43:5a:ab:65:16: 02:d7:f4:25:4c:bc:4a:0a:b7:1a:aa:c2:42:e3:c6:94:d2:bd: e8:f7:02:f3:51:bc:45:a8:c1:b8:af:64:95:73:3a:e3:02:c7: 95:c5:5e:75:8e:d4:34:d8:8f:29:54:0a:03:d4:33:01:ab:83: 18:32:ef:7c:a9:43:99:33:d3:7b:57:1a:a3:f8:10:47:da:b1: ba:6e:a5:ad:e1:cf:cb:9a:0b:28:2a:bc:d0:10:7a:a8:e4:5e: 01:e7:b5:ec:e1:9c:6f:f9:92:02:ef:3c:9c:82:24:f6:1a:5f: 4d:04:e7:cd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0XB+xK5iGXboyVysAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk MjFmZWFlMGUtOTk3My00YzUwLTkxZTQtYTdkMTM1YThlYzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKsnMNIBO7lp2t536glrr7gOJVUKXx54iKDn zmeSVDMzr9dSgHecIoZSNmKxHdEt9ckkEAyxgDz88i3cxxOvTtvhdiapGDAIXOMB woln85vIzliRFtp+RJBV1bjsf6VlvsEkoJKUqaWqmR9VFHd4DMJ7ymGCTnHdzJCG V1Wt/WStI31lTb54uoA7nhcRnjrBmgas9jEKtmhZWs6vI+/u8yoqwtSblnKw+tw4 hRAtZCM/rp8V2K8fhOlco482AtVkBT8OiTcM6LhgvP3pUn30E6m9mKKPGtbC1rUr +oi6n8Ak4PMJvMpIwak5WzqdlyyQBTHIIDKJ2zvgdDBipA/8qwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBcpPIvnr4UFb0P8rxpqZ8QzyqI5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWY5Zjk3N2UtODVmZC0z NWFiLTliZjYtYmU4ZjgyZjc0OWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCwxSUxnIFdsfmTQydEye2+v3yrWjUBJZBNItBNme0JoSxG3dAlwkKz IbRKVeJmaInt8rsgiz45QESRjQTKqbtKgrs8JIeMOBaOIbGiln4YLdSgcZdr2gGk g7bVzg8EYYvbmgxgCpbpe7IYL5d/Bb+q7Xi32WuAOCVWJ29G/GFukr8pIIxl9IeT pifpQ1qrZRYC1/QlTLxKCrcaqsJC48aU0r3o9wLzUbxFqMG4r2SVczrjAseVxV51 jtQ02I8pVAoD1DMBq4MYMu98qUOZM9N7Vxqj+BBH2rG6bqWt4c/LmgsoKrzQEHqo 5F4B57Xs4Zxv+ZIC7zycgiT2Gl9NBOfN -----END CERTIFICATE-----Generated at Thu Mar 26 10:18:53 2026 by rpki-client