$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a49e5344-a7a5-3df7-b869-4835a0b1349b.roa File: a49e5344-a7a5-3df7-b869-4835a0b1349b.roa (raw, json) Hash identifier: pfNsXAi0sxtHRQ1VbIlAK4odSXhKoVC6jV1+x0OXZ8Y= Subject key identifier: 2D:F0:75:DA:CD:DC:C6:99:E6:E7:C3:BB:17:22:68:E7:6D:33:C3:E9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D9B855EB3503405EECD663C20 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a49e5344-a7a5-3df7-b869-4835a0b1349b.roa Signing time: Fri 24 Apr 2026 01:00:23 +0000 ROA not before: Fri 24 Apr 2026 01:00:23 +0000 ROA not after: Thu 23 Jul 2026 01:00:23 +0000 asID: 396547 IP address blocks: 192.54.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9b:85:5e:b3:50:34:05:ee:cd:66:3c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 24 01:00:23 2026 GMT Not After : Jul 23 01:00:23 2026 GMT Subject: CN=3dd14f8f-fd1b-4cf7-a4e6-d0eceff02da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:77:86:18:b0:df:8e:f7:13:bb:39:a5:22:e1: 96:d3:11:9a:a3:f9:1a:3b:3f:65:7d:3c:11:aa:ed: e1:dd:c4:70:d1:79:aa:13:c4:57:89:58:d4:68:e0: ce:03:39:97:d3:e5:45:f7:27:7d:53:1e:c9:61:30: bf:57:69:05:1f:82:95:f9:34:f6:6f:cb:5b:1f:bd: dc:04:a5:f2:58:25:02:fe:4f:2b:57:5e:28:6b:4c: 29:cb:54:ee:a8:78:cb:f4:c4:72:b3:e8:0d:c1:19: bf:a9:8e:f5:c8:a3:66:f1:ee:e1:e8:36:ed:ea:10: 29:13:fc:24:24:32:c1:fb:87:be:6f:f0:23:6d:75: 45:a1:68:6e:9a:92:ee:56:80:35:6c:64:80:1f:4d: 80:af:06:4c:85:a5:2d:2a:65:15:12:f0:a1:09:2e: a1:92:7a:14:85:3a:d2:f2:ce:3b:74:98:d3:bd:6f: f0:14:c2:ca:ba:e0:fc:25:b9:a5:b7:66:f0:fb:8f: 1f:c4:33:9a:8a:eb:68:45:c0:b1:b3:84:ce:40:c1: 07:8a:be:af:01:02:7e:53:da:9d:75:05:e8:92:71: c0:6e:54:2b:fd:44:fa:6c:d1:77:ed:97:ee:18:95: a6:e1:68:31:74:6d:ba:4e:97:6a:50:64:2b:c0:47: 3f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F0:75:DA:CD:DC:C6:99:E6:E7:C3:BB:17:22:68:E7:6D:33:C3:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a49e5344-a7a5-3df7-b869-4835a0b1349b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.54.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:eb:c0:0e:a5:22:a9:77:12:db:8a:2c:8c:e8:83:d3:55:49: 56:c6:fe:68:17:8e:62:b3:ec:44:7c:d9:bc:10:14:f4:ab:cf: 34:52:51:d1:03:2c:06:60:93:f2:93:72:be:c1:33:dd:02:86: cd:7e:35:d5:0b:7a:33:66:40:7b:12:f6:f2:5e:7c:42:81:53: cf:42:f4:e5:a0:cb:48:f8:37:e6:89:50:21:93:71:13:63:9e: 1a:23:4d:5c:d3:eb:37:71:d4:92:c1:6e:59:6f:08:24:77:f1: 1d:15:cc:10:b0:bf:0a:9c:88:be:79:c3:7f:7c:d9:c1:48:43: df:9f:46:87:37:3f:1f:59:60:bc:1f:50:44:38:be:a0:fc:48: f1:b5:c2:12:5c:88:b8:0a:26:d4:09:bb:30:00:8c:2a:4d:4f: da:02:2f:99:50:33:d1:46:14:7a:51:cf:c7:6e:d8:cb:95:26: c9:fe:bb:28:e9:7e:9d:00:c3:ee:00:e5:fb:45:9a:ba:d5:e6: f6:6d:18:a3:7c:66:3d:63:3e:cf:67:ca:a3:9f:aa:2d:47:5a: ee:f4:b2:05:c8:03:1a:db:a7:94:de:5e:76:c3:70:5e:98:00: 28:c4:ef:46:2a:41:0b:2c:01:0b:23:b9:b3:0b:bb:69:7f:1b: e9:8a:44:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2bhV6zUDQF7s1mPCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQyNDAxMDAyM1oXDTI2MDcyMzAxMDAyM1owLzEtMCsGA1UEAxMk M2RkMTRmOGYtZmQxYi00Y2Y3LWE0ZTYtZDBlY2VmZjAyZGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3eGGLDfjvcTuzmlIuGW0xGao/kaOz9lfTwR qu3h3cRw0XmqE8RXiVjUaODOAzmX0+VF9yd9Ux7JYTC/V2kFH4KV+TT2b8tbH73c BKXyWCUC/k8rV14oa0wpy1TuqHjL9MRys+gNwRm/qY71yKNm8e7h6Dbt6hApE/wk JDLB+4e+b/AjbXVFoWhumpLuVoA1bGSAH02ArwZMhaUtKmUVEvChCS6hknoUhTrS 8s47dJjTvW/wFMLKuuD8Jbmlt2bw+48fxDOaiutoRcCxs4TOQMEHir6vAQJ+U9qd dQXoknHAblQr/UT6bNF37ZfuGJWm4WgxdG26TpdqUGQrwEc/aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3wddrN3MaZ5ufDuxciaOdtM8PpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTQ5ZTUzNDQtYTdhNS0z ZGY3LWI4NjktNDgzNWEwYjEzNDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTrwA6lIql3EtuKLIzog9NVSVbG/mgXjmKz7ER82bwQFPSrzzRSUdED LAZgk/KTcr7BM90Chs1+NdULejNmQHsS9vJefEKBU89C9OWgy0j4N+aJUCGTcRNj nhojTVzT6zdx1JLBbllvCCR38R0VzBCwvwqciL55w3982cFIQ9+fRoc3Px9ZYLwf UEQ4vqD8SPG1whJciLgKJtQJuzAAjCpNT9oCL5lQM9FGFHpRz8du2MuVJsn+uyjp fp0Aw+4A5ftFmrrV5vZtGKN8Zj1jPs9nyqOfqi1HWu70sgXIAxrbp5TeXnbDcF6Y ACjE70YqQQssAQsjubMLu2l/G+mKRCo= -----END CERTIFICATE-----Generated at Wed May 13 09:31:03 2026 by rpki-client