$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aced272d-c583-305e-a5c9-431696641c32.roa File: aced272d-c583-305e-a5c9-431696641c32.roa (raw, json) Hash identifier: xYcAMAS8uHb/iTWDDruU8lDSay9SYAxAelg2mCzfV+s= Subject key identifier: C2:E9:80:09:5E:A1:84:5E:D3:46:BB:79:CE:86:8E:72:D2:92:4F:B6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E66DA4120F885DE0F49442840 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aced272d-c583-305e-a5c9-431696641c32.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 397203 IP address blocks: 192.42.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:41:20:f8:85:de:0f:49:44:28:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=1a698076-eddf-45f6-b8b8-c6bfa274c529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:64:de:fd:8d:79:8a:2b:a6:77:93:b5:de:46: ba:ff:c6:dc:4b:c8:c9:45:b9:c1:c1:eb:b0:90:20: 1a:fe:1b:a0:05:3a:3f:63:d2:37:1b:ee:b2:6e:f1: 0a:db:f2:bb:51:6f:d6:df:c7:39:df:96:7e:5e:3e: 73:19:3f:07:50:e4:fd:35:4c:85:95:fa:a9:62:2a: 7b:2c:7b:05:e6:81:8f:e8:1b:62:75:2b:d2:eb:d0: d7:39:c9:25:26:42:d1:28:5f:91:0c:d1:fa:43:d0: f0:0b:1c:8b:e9:56:87:76:96:b2:ef:ce:b3:71:89: 9e:c0:48:3b:a3:03:a3:44:0c:cc:83:c4:46:d5:77: 8e:e9:e6:25:ff:b4:c9:ae:43:a4:8e:90:c8:ce:d3: 34:85:a2:41:02:1a:09:54:36:90:5d:10:82:49:86: 64:67:50:e2:43:40:1e:f5:21:e7:5a:74:cb:b2:6a: db:9e:b1:b6:9c:4d:2f:ce:98:f0:c8:f0:d9:5c:5d: b8:9a:3f:c0:ee:48:aa:f3:40:1a:bd:f5:a3:38:92: b8:d0:42:3f:de:56:f6:75:ba:c9:b7:48:0f:e6:84: fe:0b:fd:67:8e:c1:b4:34:d5:26:8f:9d:5a:aa:9d: 6e:f4:52:b4:46:fa:61:2b:23:55:36:56:bf:81:01: d4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E9:80:09:5E:A1:84:5E:D3:46:BB:79:CE:86:8E:72:D2:92:4F:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aced272d-c583-305e-a5c9-431696641c32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:2e:94:c7:58:01:71:1b:cf:24:c8:2c:0f:af:f5:42:af:47: 9f:8d:33:37:2e:cc:bc:84:29:e3:98:72:ec:de:84:a5:95:2a: f8:d2:66:99:a8:c2:9f:bb:45:c5:0e:5b:14:6a:ce:aa:25:e2: 6a:53:65:64:70:29:4d:24:b1:4f:5e:50:df:63:f8:0c:8e:f4: 55:9b:55:ea:79:65:f1:ce:f1:9e:56:c2:b0:ec:71:c9:38:54: ab:fb:97:20:8f:bc:f7:d8:86:1f:84:1e:f6:f1:01:f6:20:2c: c6:2d:73:f2:9c:57:6b:b5:8e:38:46:2a:12:4e:6d:32:46:76: 60:a8:6e:73:24:45:cd:22:58:7d:72:3e:70:6c:97:b1:11:2f: 10:01:2e:31:16:d7:a8:99:5b:c7:51:24:14:b4:e1:d0:69:32: 2e:fc:f6:3c:9a:51:66:58:31:14:65:0d:02:ff:a9:45:6c:4c: b8:c3:db:2c:0b:42:00:1d:06:6b:08:07:49:af:c9:ec:4c:bb: d0:a5:0f:ab:a1:d9:96:94:2e:fd:0f:86:b1:43:cd:1c:d0:c1: 7a:77:48:94:ae:06:d4:51:12:e3:c4:30:30:aa:4d:d3:3e:87: e2:1f:fa:5e:f0:da:c4:8f:a2:a3:e8:7a:50:49:3d:56:d6:2f: c3:4e:5e:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2kEg+IXeD0lEKEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk MWE2OTgwNzYtZWRkZi00NWY2LWI4YjgtYzZiZmEyNzRjNTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmTe/Y15iiumd5O13ka6/8bcS8jJRbnBweuw kCAa/hugBTo/Y9I3G+6ybvEK2/K7UW/W38c535Z+Xj5zGT8HUOT9NUyFlfqpYip7 LHsF5oGP6BtidSvS69DXOcklJkLRKF+RDNH6Q9DwCxyL6VaHdpay786zcYmewEg7 owOjRAzMg8RG1XeO6eYl/7TJrkOkjpDIztM0haJBAhoJVDaQXRCCSYZkZ1DiQ0Ae 9SHnWnTLsmrbnrG2nE0vzpjwyPDZXF24mj/A7kiq80AavfWjOJK40EI/3lb2dbrJ t0gP5oT+C/1njsG0NNUmj51aqp1u9FK0RvphKyNVNla/gQHUYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLpgAleoYRe00a7ec6GjnLSkk+2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWNlZDI3MmQtYzU4My0z MDVlLWE1YzktNDMxNjk2NjQxYzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsulMdYAXEbzyTILA+v9UKvR5+NMzcuzLyEKeOYcuzehKWVKvjSZpmo wp+7RcUOWxRqzqol4mpTZWRwKU0ksU9eUN9j+AyO9FWbVep5ZfHO8Z5WwrDscck4 VKv7lyCPvPfYhh+EHvbxAfYgLMYtc/KcV2u1jjhGKhJObTJGdmCobnMkRc0iWH1y PnBsl7ERLxABLjEW16iZW8dRJBS04dBpMi789jyaUWZYMRRlDQL/qUVsTLjD2ywL QgAdBmsIB0mvyexMu9ClD6uh2ZaULv0PhrFDzRzQwXp3SJSuBtRREuPEMDCqTdM+ h+If+l7w2sSPoqPoelBJPVbWL8NOXnk= -----END CERTIFICATE-----Generated at Fri Jul 24 16:33:25 2026 by rpki-client