$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aafb3f5c-ccba-3ea1-866c-1c67ab57ba5c.roa File: aafb3f5c-ccba-3ea1-866c-1c67ab57ba5c.roa (raw, json) Hash identifier: M1GP7ANOBMpkkaTVueLvFRUrHFDqNYTFkUT2vIW0ZZY= Subject key identifier: A9:A5:84:1E:10:C1:5F:78:A0:9D:5D:C2:9D:72:9A:16:27:24:1A:4F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1707EA123C516C281FA13580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aafb3f5c-ccba-3ea1-866c-1c67ab57ba5c.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 397197 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:ea:12:3c:51:6c:28:1f:a1:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=370098b4-fd3a-4913-801d-de70da9577be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:47:19:9f:10:68:3f:01:f2:50:41:e2:70:11: 0c:ce:cb:3b:f8:a8:26:4c:c7:df:65:42:dc:fb:93: b8:f3:fd:6c:97:62:9d:49:74:e1:b5:25:12:f4:60: 75:81:fe:1d:96:db:55:52:d7:39:a6:03:0a:a3:e9: 67:43:6d:1b:26:bf:e8:72:13:46:be:c4:74:99:e9: 02:fb:d8:75:59:80:48:d8:30:39:3f:af:c5:92:e3: bb:a1:0d:cd:38:e5:5e:8d:93:a7:42:92:76:93:64: 37:4e:67:6c:d1:d0:33:ea:da:b2:f0:f0:72:8d:24: 36:18:f3:5e:77:33:78:8b:5b:4e:bd:c3:cd:a5:05: 17:d6:11:89:64:04:c2:78:53:dc:0a:3f:3a:c3:7e: 18:90:7a:a1:2e:63:30:51:f2:58:df:3a:a2:fa:7f: 05:86:3f:23:8c:c7:61:b6:13:cb:c3:86:a8:4b:27: 62:fd:74:12:62:51:62:c6:d8:4e:74:09:6e:d3:c4: 0a:ee:51:95:2d:ce:0e:94:6d:92:8b:00:38:13:e0: c1:98:dd:7f:9c:02:b5:34:32:9c:3c:ff:9e:86:e4: 22:ee:1e:04:eb:67:2c:04:ff:0e:93:fd:d5:28:8d: ce:3b:94:09:e3:c1:cf:d1:5c:7b:ea:da:4c:70:60: ce:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A5:84:1E:10:C1:5F:78:A0:9D:5D:C2:9D:72:9A:16:27:24:1A:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aafb3f5c-ccba-3ea1-866c-1c67ab57ba5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:1a:a4:89:94:b1:eb:a0:5e:08:32:b7:12:9f:df:7d:99:e5: 5c:c3:2a:65:54:bb:cf:f0:9f:72:00:02:a3:d9:37:43:3d:c6: 50:e0:91:56:33:08:67:3e:d7:1f:f7:ce:c2:f7:35:ae:a3:dd: 81:5c:0c:a4:06:63:1e:ae:4c:a7:41:d2:a3:68:42:88:70:a5: 47:97:ab:9f:83:fc:13:69:27:3b:a9:c2:0d:fd:aa:bf:14:0c: f3:42:1d:9c:fc:69:68:42:80:e1:42:46:e5:d5:b0:1c:1f:2b: 05:4c:8b:af:4b:02:43:66:9f:cd:0d:25:e6:61:f5:1a:c0:30: a8:cb:09:b2:b0:e2:7c:5a:5e:97:0f:60:1c:27:06:a1:b4:5b: 7c:b1:b4:3f:49:82:a8:93:8f:c7:3f:dd:ef:4e:a9:74:9a:6a: 9c:31:b9:84:c4:f2:a5:77:66:65:92:cb:de:cd:8e:93:f8:0b: 69:0a:61:dc:8b:6a:e8:0c:a0:4c:6e:ea:b6:4f:43:69:f3:6e: 12:84:ef:5f:bc:a8:b8:84:e0:ff:02:ee:74:ac:3c:a3:52:0f: f8:44:c2:93:28:da:72:fd:d6:67:b1:94:05:25:6f:b2:c7:58: 0f:a3:1b:5d:77:43:b5:1e:52:66:d7:d0:8b:b6:42:70:30:de: bf:7b:2f:40 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0XB+oSPFFsKB+hNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk MzcwMDk4YjQtZmQzYS00OTEzLTgwMWQtZGU3MGRhOTU3N2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kcZnxBoPwHyUEHicBEMzss7+KgmTMffZULc +5O48/1sl2KdSXThtSUS9GB1gf4dlttVUtc5pgMKo+lnQ20bJr/ochNGvsR0mekC +9h1WYBI2DA5P6/FkuO7oQ3NOOVejZOnQpJ2k2Q3Tmds0dAz6tqy8PByjSQ2GPNe dzN4i1tOvcPNpQUX1hGJZATCeFPcCj86w34YkHqhLmMwUfJY3zqi+n8Fhj8jjMdh thPLw4aoSydi/XQSYlFixthOdAlu08QK7lGVLc4OlG2SiwA4E+DBmN1/nAK1NDKc PP+ehuQi7h4E62csBP8Ok/3VKI3OO5QJ48HP0Vx76tpMcGDOLQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKmlhB4QwV94oJ1dwp1ymhYnJBpPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWFmYjNmNWMtY2NiYS0z ZWExLTg2NmMtMWM2N2FiNTdiYTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQABGqSJlLHroF4IMrcSn999meVcwyplVLvP8J9yAAKj2TdDPcZQ4JFW MwhnPtcf987C9zWuo92BXAykBmMerkynQdKjaEKIcKVHl6ufg/wTaSc7qcIN/aq/ FAzzQh2c/GloQoDhQkbl1bAcHysFTIuvSwJDZp/NDSXmYfUawDCoywmysOJ8Wl6X D2AcJwahtFt8sbQ/SYKok4/HP93vTql0mmqcMbmExPKld2ZlksvezY6T+AtpCmHc i2roDKBMbuq2T0Np824ShO9fvKi4hOD/Au50rDyjUg/4RMKTKNpy/dZnsZQFJW+y x1gPoxtdd0O1HlJm19CLtkJwMN6/ey9A -----END CERTIFICATE-----Generated at Thu Mar 26 15:20:06 2026 by rpki-client