$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8c87c4b-13b2-330d-b898-07edefe1f587.roa File: b8c87c4b-13b2-330d-b898-07edefe1f587.roa (raw, json) Hash identifier: TkpHDrRvw66bidovi2ndBfPauM+7RnyIZcQXLTH6N+U= Subject key identifier: 75:0A:83:A2:1F:36:D4:D5:F1:10:03:E0:9A:C9:15:D7:4F:BA:31:EE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D3E0010244EC98E54DDC6F2C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8c87c4b-13b2-330d-b898-07edefe1f587.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 40717 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:10:24:4e:c9:8e:54:dd:c6:f2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=1c4fc515-ea1b-452a-99e8-9d016121f273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:77:76:52:5b:9d:c7:9e:c3:dd:ce:cf:80:69: ac:ef:79:ba:5c:96:12:ba:db:d7:0e:51:14:38:b9: 08:29:02:af:65:fb:e3:ae:c5:83:98:2c:59:f5:ad: 6d:cb:79:4b:e9:a3:d7:93:ec:3b:5c:ee:33:fe:f9: 02:79:a4:f8:8c:4e:26:ab:9b:06:92:18:08:2b:9c: 75:f6:15:06:93:19:10:6f:b4:e3:5e:39:c7:c2:92: 0b:52:ca:ec:79:78:e2:f3:5d:d9:6d:b3:f0:50:4f: ac:ad:cd:2b:07:7a:67:59:c5:4f:9c:65:08:10:67: 4e:cd:19:1b:2c:6c:7b:d6:ea:fb:4e:b2:1d:51:38: e0:f5:28:c0:11:c1:f0:cd:2c:2d:0b:55:8d:23:4a: f3:c1:98:56:90:ae:3b:ed:60:05:b2:f4:d9:07:2d: cc:b6:8d:ef:f5:33:3d:18:6e:78:f3:69:d4:d6:0b: cd:62:05:37:ca:5e:5a:dc:b6:89:c7:d7:f8:07:3e: 89:ea:af:25:9a:3b:f2:4c:f3:33:ae:4c:74:08:79: 6c:56:0f:f5:dc:63:11:ce:c3:45:ba:45:7b:6a:13: 1f:a6:c6:40:6d:ea:55:ee:8d:0b:29:3e:f7:20:3e: 47:78:18:81:8c:b4:ed:aa:e0:47:c9:d7:04:e8:fd: 87:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:0A:83:A2:1F:36:D4:D5:F1:10:03:E0:9A:C9:15:D7:4F:BA:31:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8c87c4b-13b2-330d-b898-07edefe1f587.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:3c:e9:54:26:9b:fa:86:06:bc:fc:bc:4d:d6:24:45:db:f5: 9e:93:94:45:bf:a4:f7:1b:7e:9d:0e:cf:96:a1:42:ff:13:a8: d3:e1:6c:bf:a7:c6:6b:20:92:17:3d:80:3a:b2:a8:ad:7e:f2: a0:50:b7:8f:48:d2:7d:d8:28:8a:92:fa:c9:35:87:ab:14:c9: 60:60:c7:85:16:d7:8a:22:ff:09:11:1b:07:c5:71:fa:36:0d: f9:b2:03:1d:5c:60:14:47:76:80:98:4d:77:94:c4:91:f4:2e: bb:28:d7:40:f2:eb:66:32:e6:73:2a:52:8b:dd:24:f3:ae:5c: fa:32:5e:49:9d:42:f1:33:e1:55:b4:4c:f4:bd:e7:60:55:fe: 78:c4:ab:c2:8b:1f:46:c5:82:b7:23:1e:b6:d7:08:29:54:bc: c9:7a:09:8e:b6:a9:fe:b1:7a:43:a0:36:95:db:27:1e:f3:55: ab:9f:1b:82:55:33:83:a8:08:78:da:e3:bc:c4:20:f0:fd:db: 90:a4:b7:0a:c3:c0:90:a1:5f:05:eb:53:66:eb:0a:2b:bd:bb: 11:5f:94:f3:8c:dc:80:21:b0:94:72:49:8b:30:e5:ad:fd:da: 85:97:08:63:5c:fd:44:68:3c:c0:de:23:e8:ef:86:62:4c:13: 3c:b4:28:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+ABAkTsmOVN3G8sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MWM0ZmM1MTUtZWExYi00NTJhLTk5ZTgtOWQwMTYxMjFmMjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnd2Uludx57D3c7PgGms73m6XJYSutvXDlEU OLkIKQKvZfvjrsWDmCxZ9a1ty3lL6aPXk+w7XO4z/vkCeaT4jE4mq5sGkhgIK5x1 9hUGkxkQb7TjXjnHwpILUsrseXji813ZbbPwUE+src0rB3pnWcVPnGUIEGdOzRkb LGx71ur7TrIdUTjg9SjAEcHwzSwtC1WNI0rzwZhWkK477WAFsvTZBy3Mto3v9TM9 GG5482nU1gvNYgU3yl5a3LaJx9f4Bz6J6q8lmjvyTPMzrkx0CHlsVg/13GMRzsNF ukV7ahMfpsZAbepV7o0LKT73ID5HeBiBjLTtquBHydcE6P2HhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUKg6IfNtTV8RAD4JrJFddPujHuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjhjODdjNGItMTNiMi0z MzBkLWI4OTgtMDdlZGVmZTFmNTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQ86VQmm/qGBrz8vE3WJEXb9Z6TlEW/pPcbfp0Oz5ahQv8TqNPhbL+n xmsgkhc9gDqyqK1+8qBQt49I0n3YKIqS+sk1h6sUyWBgx4UW14oi/wkRGwfFcfo2 DfmyAx1cYBRHdoCYTXeUxJH0Lrso10Dy62Yy5nMqUovdJPOuXPoyXkmdQvEz4VW0 TPS952BV/njEq8KLH0bFgrcjHrbXCClUvMl6CY62qf6xekOgNpXbJx7zVaufG4JV M4OoCHja47zEIPD925CktwrDwJChXwXrU2brCiu9uxFflPOM3IAhsJRySYsw5a39 2oWXCGNc/URoPMDeI+jvhmJMEzy0KGw= -----END CERTIFICATE-----Generated at Thu Mar 26 12:43:55 2026 by rpki-client