$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5c7b0ca-6aa5-342c-9575-b35b1c869492.roa File: a5c7b0ca-6aa5-342c-9575-b35b1c869492.roa (raw, json) Hash identifier: JXaVRwNB2Iq+KM+vmfc8QLGXcPMYB9MrUBX3r1cWVtw= Subject key identifier: 28:44:23:6D:52:47:E2:F3:73:CB:3E:BA:D9:B0:10:1E:0A:FB:91:20 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D2A74E56AAA6ACAE77277EE80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5c7b0ca-6aa5-342c-9575-b35b1c869492.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 396616 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:e5:6a:aa:6a:ca:e7:72:77:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=78ccbd47-7767-4ad1-84af-b9804bd75ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e7:4d:66:22:c6:51:66:d4:fb:2c:de:14:78: 90:fc:ba:ac:e0:ac:8c:09:20:5f:66:78:66:58:f6: 77:e6:3c:e6:f8:dd:7c:32:df:a5:f9:02:75:8d:b7: 4f:c5:4e:9f:25:37:93:9a:5a:ae:c5:2f:6b:ca:dd: 5f:75:1e:3c:ee:28:92:53:a1:cb:df:0f:86:1a:d0: 86:03:d6:03:b9:5c:0b:d5:40:10:1c:9f:88:e5:a1: 3a:20:b3:71:f4:84:b5:85:88:a4:eb:6d:09:93:60: 21:77:7e:a2:c4:57:4c:f7:a7:70:6d:3e:d6:05:c3: c0:ff:4b:7a:e5:16:a5:56:34:c2:d9:0d:08:57:fb: 7d:e4:a2:ea:e9:c9:81:1b:95:23:ed:40:55:4d:2a: 12:3f:88:7c:19:87:51:7b:6d:71:5b:92:8b:5e:35: b2:ec:6b:ba:2d:ed:71:68:7d:68:3b:f8:67:8c:dd: 13:a3:a8:0e:98:8d:5d:70:cd:78:70:ae:9e:7d:e2: fd:d7:d7:74:44:24:aa:d9:54:16:d3:d0:39:66:62: 24:32:f6:d6:0c:a1:01:de:f2:48:5a:b7:14:16:b1: 13:28:59:a5:8d:58:62:1f:3e:cd:dc:81:57:a8:63: dc:88:4e:4c:3c:35:0f:03:ac:65:ae:a5:aa:66:59: fe:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:44:23:6D:52:47:E2:F3:73:CB:3E:BA:D9:B0:10:1E:0A:FB:91:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5c7b0ca-6aa5-342c-9575-b35b1c869492.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:a2:16:39:89:9c:ad:f8:08:c4:81:32:06:34:9b:1f:cd:2e: 58:f7:d8:da:27:04:ce:b1:f4:b1:00:4a:bf:97:89:fc:f6:05: 41:3c:ab:26:07:fe:d2:93:95:98:1a:d7:07:24:a2:14:ba:f0: 02:22:4e:5b:13:7c:00:90:11:97:ed:ef:c2:11:2b:60:5f:35: 3d:26:e5:de:6c:36:b8:e0:ff:34:c8:22:e8:b0:23:2e:1f:60: 76:18:62:a9:bd:51:50:41:b8:43:26:75:21:25:a6:c5:44:7a: 09:1b:dd:bb:1a:f5:de:80:e2:5f:3b:67:1e:83:5c:35:71:ad: f7:31:e3:aa:8d:35:8a:29:f9:b4:06:39:9a:70:c6:59:54:60: d7:a9:5c:9d:ba:e5:4c:d8:a1:55:59:94:da:74:90:6f:b1:ab: be:26:df:97:ba:b7:13:cd:fd:55:60:7d:53:02:a5:f6:3b:aa: ae:dc:fc:9e:2e:c9:d0:2a:b7:95:c6:3e:28:51:33:72:ee:af: 35:40:00:c5:05:70:10:b2:cd:cc:ac:11:8b:ea:73:93:24:01: 3c:ea:bc:06:c7:70:55:c8:e8:33:d3:f2:71:07:97:a3:86:9f: 1d:17:08:fc:34:2b:5d:f2:8a:ef:13:81:d9:c5:a5:15:61:e0: 09:85:27:a3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0qdOVqqmrK53J37oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk NzhjY2JkNDctNzc2Ny00YWQxLTg0YWYtYjk4MDRiZDc1ZWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoudNZiLGUWbU+yzeFHiQ/Lqs4KyMCSBfZnhm WPZ35jzm+N18Mt+l+QJ1jbdPxU6fJTeTmlquxS9ryt1fdR487iiSU6HL3w+GGtCG A9YDuVwL1UAQHJ+I5aE6ILNx9IS1hYik620Jk2Ahd36ixFdM96dwbT7WBcPA/0t6 5RalVjTC2Q0IV/t95KLq6cmBG5Uj7UBVTSoSP4h8GYdRe21xW5KLXjWy7Gu6Le1x aH1oO/hnjN0To6gOmI1dcM14cK6efeL919d0RCSq2VQW09A5ZmIkMvbWDKEB3vJI WrcUFrETKFmljVhiHz7N3IFXqGPciE5MPDUPA6xlrqWqZln+nQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFChEI21SR+Lzc8s+utmwEB4K+5EgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTVjN2IwY2EtNmFhNS0z NDJjLTk1NzUtYjM1YjFjODY5NDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAeohY5iZyt+AjEgTIGNJsfzS5Y99jaJwTOsfSxAEq/l4n89gVBPKsm B/7Sk5WYGtcHJKIUuvACIk5bE3wAkBGX7e/CEStgXzU9JuXebDa44P80yCLosCMu H2B2GGKpvVFQQbhDJnUhJabFRHoJG927GvXegOJfO2ceg1w1ca33MeOqjTWKKfm0 BjmacMZZVGDXqVyduuVM2KFVWZTadJBvsau+Jt+XurcTzf1VYH1TAqX2O6qu3Pye LsnQKreVxj4oUTNy7q81QADFBXAQss3MrBGL6nOTJAE86rwGx3BVyOgz0/JxB5ej hp8dFwj8NCtd8orvE4HZxaUVYeAJhSej -----END CERTIFICATE-----Generated at Thu Mar 26 10:18:18 2026 by rpki-client