$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4ec601f-8527-35a3-9ff7-59dd8e395eb1.roa File: b4ec601f-8527-35a3-9ff7-59dd8e395eb1.roa (raw, json) Hash identifier: xXbcvzoL/MpPhoqvrtOwOb8mnoZWj1xtJLMyeugJngc= Subject key identifier: F5:0E:D1:4E:CF:17:B0:32:5A:87:08:12:12:51:D1:BD:34:0A:2A:44 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D46B1217EE95254D0EC1F2980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4ec601f-8527-35a3-9ff7-59dd8e395eb1.roa Signing time: Tue 24 Mar 2026 15:45:03 +0000 ROA not before: Tue 24 Mar 2026 15:45:03 +0000 ROA not after: Mon 22 Jun 2026 15:45:03 +0000 asID: 396606 IP address blocks: 192.42.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:b1:21:7e:e9:52:54:d0:ec:1f:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 24 15:45:03 2026 GMT Not After : Jun 22 15:45:03 2026 GMT Subject: CN=7caed53d-c4fb-462c-aa1c-48a1f7abfaad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:23:7b:da:12:c7:20:a6:e4:6c:23:24:09:75: 0c:78:15:7c:ae:71:a9:6e:34:6b:e9:06:52:2e:3e: 39:14:07:7e:74:a2:47:9f:6b:8d:9a:43:61:0a:75: a9:ef:85:6a:dd:af:11:69:1f:36:60:65:c2:0a:ab: cc:0e:f2:17:be:01:49:2e:63:2e:21:6f:20:d3:21: f1:39:ab:49:04:d8:4e:24:78:db:93:8f:e2:bb:6c: 0c:6f:77:f5:57:19:2e:7a:d5:47:45:cb:07:20:af: 5d:26:15:a3:20:31:7b:8f:8c:af:7e:76:48:8a:1d: f9:c7:0c:40:91:21:81:10:36:f1:98:7e:d4:3b:a0: ca:65:f4:8d:63:f2:fd:c7:be:69:8a:20:2b:a7:38: 3e:ae:d0:8f:6b:82:3b:72:5a:1d:ae:e9:e8:ae:45: 4c:6b:2a:02:b8:41:41:6d:f0:4c:52:61:87:12:d5: f6:aa:a8:1e:59:f8:38:57:18:f4:ad:f7:0d:c0:a5: ca:af:35:45:6c:1a:50:f3:f4:ba:ee:8e:34:4b:a7: b3:89:18:c8:83:c4:89:9d:12:97:b6:8f:60:b4:71: 00:a1:0b:fb:0c:89:c8:45:93:4a:40:07:40:36:c9: cd:3d:44:f0:f8:d2:9e:28:08:88:51:a0:62:70:d1: 39:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:0E:D1:4E:CF:17:B0:32:5A:87:08:12:12:51:D1:BD:34:0A:2A:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4ec601f-8527-35a3-9ff7-59dd8e395eb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:29:c4:21:02:48:56:4c:b1:34:3d:72:9e:ee:a7:7b:6b:19: eb:92:42:88:6c:f0:b8:ec:78:02:b6:80:1b:a3:05:4f:14:fc: b7:b2:7b:2d:c4:b3:91:d3:ce:8d:6d:03:25:b1:de:29:c8:bb: 1d:b6:ed:18:0b:59:58:c2:46:40:74:3f:cd:0b:6b:b4:e5:55: a8:d8:38:ec:6d:22:f5:7d:9e:63:9d:65:e9:54:f6:3e:01:3a: f6:f4:4d:71:57:74:b9:4c:8e:10:6d:e6:67:99:7d:94:45:9f: 9b:1e:66:02:fe:a5:24:c8:5f:03:34:07:22:23:60:f4:8d:1a: 70:58:20:33:3c:5b:cb:bc:43:fa:53:22:0f:89:39:c1:86:2e: cd:37:31:94:f6:b0:bc:66:9a:cc:ce:38:96:e4:09:12:16:40: 2d:8b:fd:14:74:b4:4a:1e:9c:63:29:fa:54:ac:92:fd:e8:62: f3:d5:09:18:04:84:54:33:48:88:15:ab:77:d1:f3:33:1a:70: 99:24:3c:de:aa:7a:af:e6:d1:e1:66:d1:ec:c2:8e:ba:e0:6d: f0:7d:a6:13:8d:ad:47:38:73:03:83:9c:dc:7f:e1:ab:bc:f5: 39:fe:d6:02:8e:e7:7d:00:d2:88:54:5c:0c:9c:2b:88:3f:66: e3:de:1a:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1GsSF+6VJU0OwfKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyNDE1NDUwM1oXDTI2MDYyMjE1NDUwM1owLzEtMCsGA1UEAxMk N2NhZWQ1M2QtYzRmYi00NjJjLWFhMWMtNDhhMWY3YWJmYWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyN72hLHIKbkbCMkCXUMeBV8rnGpbjRr6QZS Lj45FAd+dKJHn2uNmkNhCnWp74Vq3a8RaR82YGXCCqvMDvIXvgFJLmMuIW8g0yHx OatJBNhOJHjbk4/iu2wMb3f1VxkuetVHRcsHIK9dJhWjIDF7j4yvfnZIih35xwxA kSGBEDbxmH7UO6DKZfSNY/L9x75piiArpzg+rtCPa4I7clodrunorkVMayoCuEFB bfBMUmGHEtX2qqgeWfg4Vxj0rfcNwKXKrzVFbBpQ8/S67o40S6eziRjIg8SJnRKX to9gtHEAoQv7DInIRZNKQAdANsnNPUTw+NKeKAiIUaBicNE59QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUO0U7PF7AyWocIEhJR0b00CipEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjRlYzYwMWYtODUyNy0z NWEzLTlmZjctNTlkZDhlMzk1ZWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCquMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEpxCECSFZMsTQ9cp7up3trGeuSQohs8LjseAK2gBujBU8U/Leyey3E s5HTzo1tAyWx3inIux227RgLWVjCRkB0P80La7TlVajYOOxtIvV9nmOdZelU9j4B Ovb0TXFXdLlMjhBt5meZfZRFn5seZgL+pSTIXwM0ByIjYPSNGnBYIDM8W8u8Q/pT Ig+JOcGGLs03MZT2sLxmmszOOJbkCRIWQC2L/RR0tEoenGMp+lSskv3oYvPVCRgE hFQzSIgVq3fR8zMacJkkPN6qeq/m0eFm0ezCjrrgbfB9phONrUc4cwODnNx/4au8 9Tn+1gKO530A0ohUXAycK4g/ZuPeGs0= -----END CERTIFICATE-----Generated at Thu Mar 26 13:42:06 2026 by rpki-client