$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aafb3f5c-ccba-3ea1-866c-1c67ab57ba5c.roa File: aafb3f5c-ccba-3ea1-866c-1c67ab57ba5c.roa (raw, json) Hash identifier: aRHw+wOWNAQ5gArsoHV+uEUq+lzbzO2cPlmK/MKfafg= Subject key identifier: 14:79:2F:BE:C7:FF:AC:D1:B0:3A:9C:E6:E3:63:15:F5:71:8A:CD:BC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4988EC2C8AF92425AA3E1400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aafb3f5c-ccba-3ea1-866c-1c67ab57ba5c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397197 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:ec:2c:8a:f9:24:25:aa:3e:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=736068a5-01f3-4153-8b53-5c043997b7f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:56:eb:dc:b4:4f:83:80:8b:05:3c:c6:45:95: 62:89:cb:d7:95:43:cc:2c:8f:88:70:ff:ed:c2:74: de:b8:2b:e0:9b:47:bd:9f:d7:10:63:ac:77:71:a8: 17:6d:b5:74:f2:96:e0:cf:46:86:ac:19:ad:fd:3b: 47:22:c9:e6:ed:f0:ea:ee:7b:fc:eb:c8:ac:f7:22: 5c:e9:b5:4d:67:33:9e:96:05:a7:6d:c2:21:8e:64: 5a:7b:48:1c:32:69:92:68:e2:3e:45:40:35:76:8e: 4d:21:60:06:1c:af:15:03:59:f4:30:2a:72:bd:3f: 35:f6:44:7b:e4:b9:ee:55:66:8c:b6:7b:8a:1d:2a: b8:1c:2f:6b:08:ce:98:2b:fa:58:01:fb:0e:c9:50: dd:d5:ae:75:23:f5:30:c9:b5:00:fa:6f:a9:e0:fc: e3:86:63:e9:d4:09:b8:47:a2:6e:f8:8f:de:bf:fc: 4f:b9:8b:b6:3b:8e:6d:ac:95:0b:10:9e:78:05:7f: 2c:ca:f7:2c:a8:4c:df:1f:5d:8e:e2:33:ea:00:88: 48:d2:35:59:56:81:a0:53:45:87:94:01:14:09:f3: 7d:eb:dc:3f:0c:83:d5:c3:ae:ce:40:70:35:76:98: a1:a0:ca:68:3d:2a:2f:1e:02:af:6a:f5:4b:66:0b: 1b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:79:2F:BE:C7:FF:AC:D1:B0:3A:9C:E6:E3:63:15:F5:71:8A:CD:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aafb3f5c-ccba-3ea1-866c-1c67ab57ba5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:2b:e2:1f:d3:74:09:9d:ba:05:c1:b3:c9:63:50:54:71:cc: 62:e1:6b:79:7b:f7:a5:02:78:c0:09:94:2c:dc:b3:38:a7:d3: 56:dc:56:e5:e6:2a:36:a5:03:6d:9b:90:64:fc:5f:b2:7e:25: 8c:f1:6d:fb:4f:fe:f8:b3:98:5a:7a:c9:bc:1f:41:19:10:6c: ac:f0:7b:5e:8d:b0:fd:89:a1:7f:b4:44:9c:4c:2a:60:50:09: 44:a8:ed:c6:8e:9d:50:bc:b8:b2:58:02:07:39:6b:0a:14:78: bd:6c:b8:a9:10:69:29:e6:2d:39:a6:7d:9d:95:fc:10:c3:04: b5:f6:52:03:26:14:6e:78:7b:88:83:87:a1:ed:1e:83:a4:f9: 13:bf:0b:be:bd:4f:8a:47:61:3f:d9:f9:38:b5:db:1a:65:ee: b9:80:c3:2b:19:cc:95:48:77:55:e7:8f:92:b3:fa:8c:52:71: 5b:34:f1:63:c2:56:e4:18:9d:51:1e:41:33:35:b6:75:af:7d: 9c:12:c3:b8:d3:ee:74:4a:b1:80:96:2d:a7:26:72:e2:3e:cc: a7:98:e1:75:cd:4b:55:74:c0:55:09:88:20:92:39:80:76:d3: a4:4f:ff:7e:ac:4c:6a:e2:e6:a9:fa:b6:e6:8e:d0:2a:1d:a6: ac:f9:05:c0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JiOwsivkkJao+FAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzM2MDY4YTUtMDFmMy00MTUzLThiNTMtNWMwNDM5OTdiN2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFbr3LRPg4CLBTzGRZViicvXlUPMLI+IcP/t wnTeuCvgm0e9n9cQY6x3cagXbbV08pbgz0aGrBmt/TtHIsnm7fDq7nv868is9yJc 6bVNZzOelgWnbcIhjmRae0gcMmmSaOI+RUA1do5NIWAGHK8VA1n0MCpyvT819kR7 5LnuVWaMtnuKHSq4HC9rCM6YK/pYAfsOyVDd1a51I/UwybUA+m+p4PzjhmPp1Am4 R6Ju+I/ev/xPuYu2O45trJULEJ54BX8syvcsqEzfH12O4jPqAIhI0jVZVoGgU0WH lAEUCfN969w/DIPVw67OQHA1dpihoMpoPSovHgKvavVLZgsbdwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBR5L77H/6zRsDqc5uNjFfVxis28MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWFmYjNmNWMtY2NiYS0z ZWExLTg2NmMtMWM2N2FiNTdiYTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQANK+If03QJnboFwbPJY1BUccxi4Wt5e/elAnjACZQs3LM4p9NW3Fbl 5io2pQNtm5Bk/F+yfiWM8W37T/74s5haesm8H0EZEGys8HtejbD9iaF/tEScTCpg UAlEqO3Gjp1QvLiyWAIHOWsKFHi9bLipEGkp5i05pn2dlfwQwwS19lIDJhRueHuI g4eh7R6DpPkTvwu+vU+KR2E/2fk4tdsaZe65gMMrGcyVSHdV54+Ss/qMUnFbNPFj wlbkGJ1RHkEzNbZ1r32cEsO40+50SrGAli2nJnLiPsynmOF1zUtVdMBVCYggkjmA dtOkT/9+rExq4uap+rbmjtAqHaas+QXA -----END CERTIFICATE-----Generated at Sun Sep 27 06:27:12 2026 by rpki-client