$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae19a127-62a2-38bf-9f41-30bcd4da2037.roa File: ae19a127-62a2-38bf-9f41-30bcd4da2037.roa (raw, json) Hash identifier: KL8xXaCwlnbaxZfGUy1EVfqw2+AStPF28T6xTazhB3k= Subject key identifier: E9:53:5B:72:E1:36:77:F1:8E:78:2A:D4:BA:CC:33:E6:A2:AA:29:A7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D3DFFA0B327B184196DC38840 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae19a127-62a2-38bf-9f41-30bcd4da2037.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396586 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:a0:b3:27:b1:84:19:6d:c3:88:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=9500977b-4069-49da-ae6f-83606e714a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ac:3c:bf:d9:35:fe:4b:cc:1d:75:9d:1a:4d: 69:97:06:ec:ab:4c:e9:75:67:d4:0a:de:df:d5:9c: 63:17:82:69:21:70:c2:78:4b:a7:bf:d6:f9:16:dd: 14:60:5e:2c:03:64:8d:00:68:0a:9f:ec:35:ed:33: 6f:b0:aa:af:77:b5:06:31:63:d2:aa:07:f8:d0:ff: 5a:79:a7:02:b3:c9:a9:97:f4:64:42:aa:39:5a:08: 5f:6b:b6:22:8e:f6:a4:85:89:8a:f1:17:2b:e8:42: bb:fa:8b:cc:a5:1a:df:8d:59:ed:83:86:7d:d6:d2: a9:80:26:95:0f:4a:8c:25:12:73:d8:0d:f4:9f:fa: a5:67:26:2b:00:98:79:ca:91:cd:aa:59:b0:5f:5e: 82:4a:31:9d:6f:a4:ff:8a:23:80:30:ef:ef:2b:04: 81:9c:88:a5:dc:18:7c:06:da:ae:88:3e:29:19:eb: 62:94:60:bb:03:fc:5b:7e:a2:94:e7:a5:54:ab:7f: 50:d3:3d:dc:29:9a:f5:8e:e9:40:a4:c8:87:cb:d0: 56:77:5a:ec:f9:90:ff:1b:1d:e5:e3:d5:26:7b:4c: 5b:e0:fa:6a:cd:ff:95:52:8e:34:db:a2:af:82:56: 7d:42:4f:be:87:39:56:ed:8a:b1:4d:5b:57:bf:66: 01:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:53:5B:72:E1:36:77:F1:8E:78:2A:D4:BA:CC:33:E6:A2:AA:29:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae19a127-62a2-38bf-9f41-30bcd4da2037.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:35:fc:d0:9b:d0:20:5c:01:f8:d3:ae:bb:81:f5:c6:9b:19: f5:ae:42:98:66:8b:72:71:14:08:16:50:d0:ab:6d:cc:e8:1a: ea:7e:41:12:fd:20:af:02:4d:e7:6e:aa:a4:19:a1:4a:a2:a4: f7:bb:12:d9:f8:37:4c:1f:bf:85:ec:50:3c:7f:44:6f:fe:d2: 16:a5:04:5a:97:b0:7d:c6:9a:1a:49:b0:3c:98:60:dc:c1:bb: e7:fb:4e:ae:2e:cc:16:30:70:d1:24:d5:6a:d4:d6:c9:29:a0: 1c:7e:18:84:f9:f7:5f:f9:72:45:45:ce:c4:9f:73:e7:80:6d: ca:92:45:01:68:e6:ba:c0:50:fb:a4:2d:5f:ed:ca:83:a7:54: 54:2a:9e:01:ab:03:11:9e:25:0f:d6:2e:02:ed:25:8e:8f:c5: b6:19:97:55:f7:6f:55:01:b6:4b:bd:48:9d:9b:12:f8:a5:fb: 3d:55:cf:2a:98:33:7e:60:0e:ac:a7:32:89:9e:d5:bc:ff:99: 5b:6c:ea:c7:f9:09:5e:f0:47:0d:e7:3e:4b:25:0b:a0:c7:14: b2:48:4f:7d:7d:3a:cf:28:3c:ea:87:0a:7b:8b:c0:92:85:f7: b2:68:4d:95:26:cd:59:a5:fa:ed:af:28:86:50:ea:08:95:9f: 9e:4f:e9:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/6CzJ7GEGW3DiEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk OTUwMDk3N2ItNDA2OS00OWRhLWFlNmYtODM2MDZlNzE0YTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqw8v9k1/kvMHXWdGk1plwbsq0zpdWfUCt7f 1ZxjF4JpIXDCeEunv9b5Ft0UYF4sA2SNAGgKn+w17TNvsKqvd7UGMWPSqgf40P9a eacCs8mpl/RkQqo5Wghfa7YijvakhYmK8Rcr6EK7+ovMpRrfjVntg4Z91tKpgCaV D0qMJRJz2A30n/qlZyYrAJh5ypHNqlmwX16CSjGdb6T/iiOAMO/vKwSBnIil3Bh8 BtquiD4pGetilGC7A/xbfqKU56VUq39Q0z3cKZr1julApMiHy9BWd1rs+ZD/Gx3l 49Ume0xb4Ppqzf+VUo4026KvglZ9Qk++hzlW7YqxTVtXv2YBMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlTW3LhNnfxjngq1LrMM+aiqimnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWUxOWExMjctNjJhMi0z OGJmLTlmNDEtMzBiY2Q0ZGEyMDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEY1/NCb0CBcAfjTrruB9cabGfWuQphmi3JxFAgWUNCrbczoGup+QRL9 IK8CTeduqqQZoUqipPe7Etn4N0wfv4XsUDx/RG/+0halBFqXsH3GmhpJsDyYYNzB u+f7Tq4uzBYwcNEk1WrU1skpoBx+GIT591/5ckVFzsSfc+eAbcqSRQFo5rrAUPuk LV/tyoOnVFQqngGrAxGeJQ/WLgLtJY6PxbYZl1X3b1UBtku9SJ2bEvil+z1VzyqY M35gDqynMome1bz/mVts6sf5CV7wRw3nPkslC6DHFLJIT319Os8oPOqHCnuLwJKF 97JoTZUmzVml+u2vKIZQ6giVn55P6UQ= -----END CERTIFICATE-----Generated at Thu Mar 26 16:22:47 2026 by rpki-client