$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b2d8a050-0730-3fa9-a975-e2e79357ae2a.roa File: b2d8a050-0730-3fa9-a975-e2e79357ae2a.roa (raw, json) Hash identifier: lByMFKRzNe1Q7YTHd9Buzqi3RqQot3ncr4Pont/Dp1w= Subject key identifier: CD:F2:71:57:63:E7:C0:CC:79:E2:06:D1:76:B9:AC:3B:64:AF:8D:D4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D46B11A2B3C7D6AA7061D7D40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b2d8a050-0730-3fa9-a975-e2e79357ae2a.roa Signing time: Tue 24 Mar 2026 15:45:00 +0000 ROA not before: Tue 24 Mar 2026 15:45:00 +0000 ROA not after: Mon 22 Jun 2026 15:45:00 +0000 asID: 397208 IP address blocks: 192.42.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:b1:1a:2b:3c:7d:6a:a7:06:1d:7d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 24 15:45:00 2026 GMT Not After : Jun 22 15:45:00 2026 GMT Subject: CN=df6b796b-681e-44c8-a2ed-f8642da3cf89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a6:7c:92:b6:79:df:76:55:c7:f3:67:e3:57: 8f:d0:af:31:6e:cd:03:d3:5b:22:22:07:f4:04:97: c5:09:b5:fe:c4:ac:14:62:47:07:0e:89:bb:bb:c0: 39:4b:c2:bc:72:bd:6b:a1:1b:62:2c:42:dc:50:2c: 6d:17:7e:61:8f:24:18:5c:77:2e:01:6a:cf:49:ef: b9:47:2d:2b:e9:8a:06:18:01:56:34:1c:c7:f4:ca: 4a:ba:0c:4b:ac:eb:71:26:e3:7d:93:e5:d8:c3:a0: dc:44:16:29:f5:0f:52:6e:1f:09:ce:a8:5f:1e:1e: 75:f4:6e:9f:42:52:cc:b5:ce:6b:c7:c5:f6:90:c4: d8:0b:86:a7:a5:1e:24:8e:8c:f1:fb:87:8f:e8:26: 63:c8:5b:09:b7:b3:c5:94:19:f7:16:4e:66:17:04: 8f:10:0f:d0:a5:d4:8f:6b:a3:23:c4:8d:bc:03:02: 8e:d1:b9:ef:bd:da:20:84:95:de:02:74:26:4f:c7: 44:52:b9:e3:fa:a3:57:e0:52:04:c8:13:66:87:89: c9:11:a1:95:02:a4:b7:98:ef:7a:57:01:3c:cc:0e: ed:b6:b8:f1:b9:ad:ba:13:b2:94:01:86:ec:a1:44: b7:46:a8:14:c8:f3:ba:43:11:d9:56:99:b4:ac:59: e8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F2:71:57:63:E7:C0:CC:79:E2:06:D1:76:B9:AC:3B:64:AF:8D:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b2d8a050-0730-3fa9-a975-e2e79357ae2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:0b:dc:8e:02:1d:1d:47:dd:dc:52:77:1d:15:8a:31:0a:24: 81:01:f2:25:5e:ba:f1:a1:b9:9c:cd:37:7b:e8:86:84:f5:26: 21:8c:47:ac:f5:40:da:d6:50:87:ca:89:da:d7:41:7c:65:e7: 29:0f:00:f6:5f:f0:c5:38:cf:6a:d9:7c:cb:f8:65:3f:22:5e: 3a:12:e6:98:84:64:22:b1:99:84:b7:db:6b:6e:83:c0:ae:af: a6:cb:bf:b7:e6:2d:d3:41:56:69:3f:a3:ac:5f:be:6d:96:54: b7:cb:06:37:f3:e0:49:93:dc:b7:66:75:fa:30:34:e4:f3:2a: 1f:57:81:dd:7a:2d:76:8c:8c:b3:9b:13:a6:af:e0:12:a9:8d: 0d:86:a9:65:b8:a4:4d:c5:a8:86:a6:4f:55:f3:e0:9d:07:ef: c2:24:40:45:f7:9a:79:49:6c:41:af:d5:25:3a:ec:1e:d7:fe: 27:03:3b:0f:08:c1:8f:89:06:3c:25:51:ce:cf:bf:45:09:53: a1:e7:c0:fd:08:03:04:ac:49:66:a3:a2:80:ff:08:4e:f4:1f: e7:d8:7c:1c:45:ca:be:93:36:c1:97:2f:99:e7:eb:9f:04:f6: 60:d1:a2:57:96:27:11:c4:78:23:fa:c2:3b:1f:85:67:99:cb: 4a:8f:1b:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1GsRorPH1qpwYdfUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyNDE1NDUwMFoXDTI2MDYyMjE1NDUwMFowLzEtMCsGA1UEAxMk ZGY2Yjc5NmItNjgxZS00NGM4LWEyZWQtZjg2NDJkYTNjZjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqZ8krZ533ZVx/Nn41eP0K8xbs0D01siIgf0 BJfFCbX+xKwUYkcHDom7u8A5S8K8cr1roRtiLELcUCxtF35hjyQYXHcuAWrPSe+5 Ry0r6YoGGAFWNBzH9MpKugxLrOtxJuN9k+XYw6DcRBYp9Q9Sbh8JzqhfHh519G6f QlLMtc5rx8X2kMTYC4anpR4kjozx+4eP6CZjyFsJt7PFlBn3Fk5mFwSPEA/QpdSP a6MjxI28AwKO0bnvvdoghJXeAnQmT8dEUrnj+qNX4FIEyBNmh4nJEaGVAqS3mO96 VwE8zA7ttrjxua26E7KUAYbsoUS3RqgUyPO6QxHZVpm0rFnowwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3ycVdj58DMeeIG0Xa5rDtkr43UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjJkOGEwNTAtMDczMC0z ZmE5LWE5NzUtZTJlNzkzNTdhZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCquMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0L3I4CHR1H3dxSdx0VijEKJIEB8iVeuvGhuZzNN3vohoT1JiGMR6z1 QNrWUIfKidrXQXxl5ykPAPZf8MU4z2rZfMv4ZT8iXjoS5piEZCKxmYS322tug8Cu r6bLv7fmLdNBVmk/o6xfvm2WVLfLBjfz4EmT3LdmdfowNOTzKh9Xgd16LXaMjLOb E6av4BKpjQ2GqWW4pE3FqIamT1Xz4J0H78IkQEX3mnlJbEGv1SU67B7X/icDOw8I wY+JBjwlUc7Pv0UJU6HnwP0IAwSsSWajooD/CE70H+fYfBxFyr6TNsGXL5nn658E 9mDRoleWJxHEeCP6wjsfhWeZy0qPG+M= -----END CERTIFICATE-----Generated at Thu Mar 26 09:42:46 2026 by rpki-client