$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba097dde-442b-3ae4-95b0-305919764851.roa File: ba097dde-442b-3ae4-95b0-305919764851.roa (raw, json) Hash identifier: 58iOoik7NcZuzeZjhHqNw3es3HyxlUn70so1nH4lKCo= Subject key identifier: C5:AC:66:40:B5:76:C8:D7:D6:AB:E0:0C:42:CD:40:94:8D:24:0C:C0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D2A74F8106532F92209576380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba097dde-442b-3ae4-95b0-305919764851.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 397209 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:f8:10:65:32:f9:22:09:57:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=69ab22e7-c387-4ca4-a828-a22e7641a786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e0:75:e4:16:8c:ed:ff:13:2e:15:cf:2c:5d: ee:cf:12:23:be:56:b8:f0:ad:a8:c7:1c:05:8a:ac: ab:e1:0e:96:16:bb:c1:81:7f:b6:01:0f:fd:0f:9a: 85:2c:71:d3:51:91:c8:a0:77:2e:d7:6f:24:41:22: 75:af:9e:1a:cf:70:df:e7:d7:a2:5c:13:d0:1d:33: b5:e8:cf:99:75:99:14:f9:c8:07:30:1e:c2:88:e7: e6:ec:3e:85:0a:2c:ee:a8:31:f4:e8:72:f7:ec:a2: f9:f0:0e:85:a5:90:47:ec:ed:5f:56:f4:69:44:32: 72:6e:5c:89:57:ce:86:95:4a:5f:6e:d7:c0:98:29: 7f:2d:c7:82:1e:62:30:e8:31:b8:78:79:16:c6:9e: 3b:f8:cf:8c:ba:e6:93:4c:ea:5f:c2:e1:fc:dc:b0: 5b:05:59:08:56:f6:d7:fd:54:38:f5:f3:50:eb:a6: cf:f1:db:88:ba:0d:4c:46:18:b8:32:8d:b4:6f:1a: b7:f5:7e:c7:19:7f:10:22:88:99:c4:d7:7a:7f:23: 72:92:8b:34:77:be:b8:82:cc:dc:77:99:13:e0:88: 68:b0:79:d4:d3:9c:39:ac:40:27:ac:23:fb:6a:d9: 74:1a:2d:74:ed:8e:47:f5:84:04:82:9f:c1:4f:43: 43:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AC:66:40:B5:76:C8:D7:D6:AB:E0:0C:42:CD:40:94:8D:24:0C:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba097dde-442b-3ae4-95b0-305919764851.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:41:79:b7:b3:fc:a2:c5:59:9a:ec:6a:73:1c:47:3b:ab:fa: b4:1b:53:e2:b5:f8:c0:8e:68:25:51:70:e6:3d:83:de:76:bf: 41:7c:b3:82:c1:a1:c3:30:d6:d5:5d:fc:d7:fa:55:86:02:90: 00:ae:33:57:22:45:4e:5b:11:b4:bb:6e:e4:d3:d9:9c:6e:e9: 60:87:2c:e1:08:9d:6d:40:5e:a6:b5:b2:40:0e:3a:46:ee:65: d2:8d:80:7a:b4:b7:50:e3:d9:84:11:01:5b:6f:ad:4b:94:94: d9:d8:ba:d8:c2:13:f3:be:53:11:4c:8b:bf:98:ab:38:41:bf: 5c:37:75:59:09:bd:21:07:b6:71:37:2a:0a:f8:1b:c3:eb:6c: fb:0a:0c:6f:c8:7d:96:e9:f9:4c:03:3a:7d:51:b1:86:19:eb: 3f:23:98:b7:5c:66:d6:cd:0c:a7:57:f7:91:1a:f0:1c:e2:2e: ce:fe:4e:bd:18:70:4e:bc:45:5c:7f:bb:e6:4d:72:23:03:71: e5:c7:14:57:aa:6e:3e:2b:85:44:cc:e1:18:7c:e4:d2:3c:4b: aa:73:20:e1:1a:cf:95:bd:ff:c2:23:d6:d5:b7:ae:d6:b8:b8: 25:b8:9a:ac:37:df:f7:70:c1:4d:ba:09:05:63:55:cf:15:e9: 00:cf:77:97 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0qdPgQZTL5IglXY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk NjlhYjIyZTctYzM4Ny00Y2E0LWE4MjgtYTIyZTc2NDFhNzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluB15BaM7f8TLhXPLF3uzxIjvla48K2oxxwF iqyr4Q6WFrvBgX+2AQ/9D5qFLHHTUZHIoHcu128kQSJ1r54az3Df59eiXBPQHTO1 6M+ZdZkU+cgHMB7CiOfm7D6FCizuqDH06HL37KL58A6FpZBH7O1fVvRpRDJyblyJ V86GlUpfbtfAmCl/LceCHmIw6DG4eHkWxp47+M+MuuaTTOpfwuH83LBbBVkIVvbX /VQ49fNQ66bP8duIug1MRhi4Mo20bxq39X7HGX8QIoiZxNd6fyNykos0d764gszc d5kT4IhosHnU05w5rEAnrCP7atl0Gi107Y5H9YQEgp/BT0NDGQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMWsZkC1dsjX1qvgDELNQJSNJAzAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmEwOTdkZGUtNDQyYi0z YWU0LTk1YjAtMzA1OTE5NzY0ODUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCcQXm3s/yixVma7GpzHEc7q/q0G1PitfjAjmglUXDmPYPedr9BfLOC waHDMNbVXfzX+lWGApAArjNXIkVOWxG0u27k09mcbulghyzhCJ1tQF6mtbJADjpG 7mXSjYB6tLdQ49mEEQFbb61LlJTZ2LrYwhPzvlMRTIu/mKs4Qb9cN3VZCb0hB7Zx NyoK+BvD62z7CgxvyH2W6flMAzp9UbGGGes/I5i3XGbWzQynV/eRGvAc4i7O/k69 GHBOvEVcf7vmTXIjA3HlxxRXqm4+K4VEzOEYfOTSPEuqcyDhGs+Vvf/CI9bVt67W uLgluJqsN9/3cMFNugkFY1XPFekAz3eX -----END CERTIFICATE-----Generated at Thu Mar 26 17:11:27 2026 by rpki-client