$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa2329a3-e38d-31ce-bf41-ce776461b6f0.roa File: aa2329a3-e38d-31ce-bf41-ce776461b6f0.roa (raw, json) Hash identifier: s4AlyCK/Yp1E7t7cCcenPFlHeQfzwCk3pj00qUFgJJA= Subject key identifier: 35:B3:58:62:73:88:A1:8A:2E:3B:9D:E0:7A:53:A9:16:91:89:A3:F4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F49868E38216D559EB6EB8940 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa2329a3-e38d-31ce-bf41-ce776461b6f0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396610 IP address blocks: 192.42.173.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:8e:38:21:6d:55:9e:b6:eb:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=602ce875-9533-4309-bec9-ba3da8ea54ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:28:bd:9b:ad:a6:50:4d:99:a8:12:1a:38:d5: 80:c9:0b:82:89:37:bf:bd:de:b7:df:53:fc:2b:a5: e0:f3:51:c8:de:f9:65:72:98:23:cd:7d:28:b0:0d: 1d:64:28:f0:fb:97:49:79:c1:67:c5:da:7a:f7:77: 28:0e:88:3a:37:92:d1:14:06:e8:94:c1:f9:7a:a5: 5e:89:36:81:43:25:26:74:0f:83:3c:9e:c5:29:54: 02:19:a7:7f:42:8a:56:f2:f0:bb:c9:97:b9:a9:de: 63:4c:13:c2:47:b7:0c:cd:03:51:2d:2f:b1:93:e0: 92:b0:99:f9:ac:0f:a9:1f:cc:4f:76:2f:81:bc:fa: ac:2b:ec:5f:03:ae:69:3f:ad:68:9b:e2:66:ef:5f: fc:d8:5e:19:ef:5f:40:8d:e9:e3:22:17:11:84:d0: 65:1f:23:14:5a:57:2e:c7:50:68:be:12:d7:9e:05: db:67:b6:9a:f2:e4:45:07:b3:11:02:58:d3:fb:70: 65:86:4b:44:5d:26:36:37:b4:a0:78:74:75:21:f1: 6a:e8:d2:8e:72:fe:a4:9f:0f:1a:be:03:59:c3:9b: 23:3c:50:6b:2a:76:9e:f5:a4:e9:7e:4d:6e:9e:08: 2c:73:1b:2a:50:15:d4:1f:64:52:84:78:79:0d:4e: 6b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B3:58:62:73:88:A1:8A:2E:3B:9D:E0:7A:53:A9:16:91:89:A3:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa2329a3-e38d-31ce-bf41-ce776461b6f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.173.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:1d:eb:ac:eb:63:8d:30:6f:b3:7b:09:cf:af:84:73:3e:b3: b5:72:d8:11:0b:91:71:72:80:d3:28:fa:a9:4e:74:95:79:4f: 65:9b:2f:57:69:d4:3e:bc:61:1f:68:09:6f:96:30:91:93:6a: 6a:e0:dd:4d:58:fa:44:98:51:43:cf:66:c9:2b:d2:a0:dd:cb: 2f:28:4f:19:52:b7:4a:9a:7d:b4:b9:87:ab:61:f1:d2:7e:a7: 79:e2:fd:51:60:64:48:6b:16:04:3a:01:d3:28:da:ae:8f:7a: 2e:86:58:c1:d1:06:a4:b4:38:fb:a5:f8:05:1c:87:c6:6a:ce: f5:ce:47:7a:66:c1:14:de:66:3b:75:d8:0d:fe:f4:c7:33:50: 6d:0f:c7:de:0f:1d:14:50:4d:c6:9c:12:33:09:17:cd:b7:8b: dc:21:01:19:82:73:d9:0d:11:c3:c5:22:e5:bc:16:3a:5a:b6: 43:b1:af:a8:a0:04:d0:92:36:05:e8:cc:0f:51:a6:89:24:8e: 95:70:7d:0d:f7:1d:23:31:dd:e9:6a:eb:40:35:29:92:40:ab: 69:4f:08:ba:d5:67:df:ad:00:1d:89:07:3a:7a:e5:3b:01:bc: 7d:c3:3a:e4:8d:6e:ba:db:da:a4:71:53:4f:14:ef:8d:b1:ae: c9:38:b1:ad -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jho44IW1VnrbriUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjAyY2U4NzUtOTUzMy00MzA5LWJlYzktYmEzZGE4ZWE1NGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSi9m62mUE2ZqBIaONWAyQuCiTe/vd6331P8 K6Xg81HI3vllcpgjzX0osA0dZCjw+5dJecFnxdp693coDog6N5LRFAbolMH5eqVe iTaBQyUmdA+DPJ7FKVQCGad/QopW8vC7yZe5qd5jTBPCR7cMzQNRLS+xk+CSsJn5 rA+pH8xPdi+BvPqsK+xfA65pP61om+Jm71/82F4Z719AjenjIhcRhNBlHyMUWlcu x1BovhLXngXbZ7aa8uRFB7MRAljT+3BlhktEXSY2N7SgeHR1IfFq6NKOcv6knw8a vgNZw5sjPFBrKnae9aTpfk1unggscxsqUBXUH2RShHh5DU5rbwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDWzWGJziKGKLjud4HpTqRaRiaP0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWEyMzI5YTMtZTM4ZC0z MWNlLWJmNDEtY2U3NzY0NjFiNmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB8Heus62ONMG+zewnPr4RzPrO1ctgRC5FxcoDTKPqpTnSVeU9lmy9X adQ+vGEfaAlvljCRk2pq4N1NWPpEmFFDz2bJK9Kg3csvKE8ZUrdKmn20uYerYfHS fqd54v1RYGRIaxYEOgHTKNquj3ouhljB0QaktDj7pfgFHIfGas71zkd6ZsEU3mY7 ddgN/vTHM1BtD8feDx0UUE3GnBIzCRfNt4vcIQEZgnPZDRHDxSLlvBY6WrZDsa+o oATQkjYF6MwPUaaJJI6VcH0N9x0jMd3pautANSmSQKtpTwi61WffrQAdiQc6euU7 Abx9wzrkjW6629qkcVNPFO+Nsa7JOLGt -----END CERTIFICATE-----Generated at Sun Sep 27 19:03:21 2026 by rpki-client