$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb128d41-ac44-3d08-87ea-0e0269de4f24.roa File: bb128d41-ac44-3d08-87ea-0e0269de4f24.roa (raw, json) Hash identifier: CVtARUKgI5B8hrXG0wkeA430So/1qCoj4q+yYgLlIcc= Subject key identifier: FC:9C:5B:28:76:D1:DB:97:8C:66:A6:EF:5D:C0:7D:A3:79:A2:1E:E8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D3DFF905E7CCD5FDCBCD59180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb128d41-ac44-3d08-87ea-0e0269de4f24.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396544 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:90:5e:7c:cd:5f:dc:bc:d5:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=e8ee9594-62c0-4e3b-8dc9-b75150c89f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b9:c9:e1:7f:7a:1b:0b:75:42:e9:b5:67:1a: 90:52:f7:8c:6a:e9:a4:af:9b:8f:9d:50:a2:46:e9: cd:a1:7d:80:fd:5e:6d:2d:2c:c0:1c:85:5f:cd:96: 3c:b6:b3:da:0d:1a:83:3d:ff:5f:17:f5:48:47:c2: a3:ec:99:41:5c:4e:ef:f0:ae:0c:81:e1:46:69:de: 6c:38:47:54:a2:b9:72:b0:94:7f:84:9d:2d:a4:28: 66:91:03:44:ad:c9:65:31:26:c3:5f:ed:78:fd:c6: 63:a1:8d:cc:f3:2d:f8:70:97:dc:b6:0a:fa:b6:10: 45:aa:84:c0:65:cf:01:48:89:ba:d6:e8:8a:e8:25: cc:89:4a:f1:d0:36:86:33:10:dd:6a:47:39:2f:60: 20:69:6a:01:69:43:71:40:8e:4e:4b:71:e4:df:97: ed:ec:2f:69:4c:d4:62:b8:f2:4c:42:2f:ea:2e:bb: 4f:b2:e4:cc:b8:9c:44:b9:90:0f:dc:b1:03:37:d5: c2:99:95:53:e5:a1:0e:c2:6b:7f:97:99:bd:eb:60: d4:1a:9b:d8:92:f5:0e:24:2f:c2:c3:d7:05:01:16: 98:4f:e3:ba:3e:6a:b6:4e:0f:71:c6:42:c7:5c:05: d6:74:f7:04:53:13:63:c4:e7:c0:dc:d0:b3:2d:85: c6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:9C:5B:28:76:D1:DB:97:8C:66:A6:EF:5D:C0:7D:A3:79:A2:1E:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb128d41-ac44-3d08-87ea-0e0269de4f24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:b7:e2:0c:00:3b:18:7f:c8:05:53:02:ba:84:e1:ce:82:f3: 81:b1:9c:13:1f:75:d2:21:9b:6c:40:73:7e:ec:ff:0b:7a:47: 0b:ab:75:2d:64:dc:f7:23:73:76:1f:52:1b:6f:1d:d2:e9:24: 8e:06:db:37:b2:b4:a9:03:5d:79:4c:52:ed:1b:30:c3:e1:17: ab:d5:65:1b:73:3b:ee:b2:30:ef:e9:75:a9:77:1b:78:91:f0: 69:45:4c:45:8e:43:17:e0:b7:8a:37:30:2a:12:01:82:f5:ca: 30:f6:7f:3f:33:7a:b4:da:7a:03:12:08:ff:4d:b5:bf:77:00: 16:a7:9c:b4:32:a0:c1:28:10:78:2e:57:d3:6f:45:68:e5:d6: e2:df:63:12:ad:cb:ca:8e:e7:b3:28:38:0e:05:89:42:80:b5: 31:d9:19:ca:d3:a8:a7:fe:9c:b9:57:73:b5:02:ce:e5:60:d6: a1:7c:85:d4:88:f2:aa:88:e6:49:25:d9:77:6f:e3:6d:ac:e5: 11:9c:f3:dd:c2:5d:9d:f3:74:f4:08:42:04:29:38:c5:df:ba: 96:d4:fc:64:f8:70:56:f1:de:f5:e3:21:62:25:82:95:e1:fb: b1:f6:61:11:38:ca:81:26:3c:d0:d4:e1:dd:3c:c8:59:48:d1: 30:50:23:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/5BefM1f3LzVkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZThlZTk1OTQtNjJjMC00ZTNiLThkYzktYjc1MTUwYzg5ZjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLnJ4X96Gwt1Qum1ZxqQUveMaumkr5uPnVCi RunNoX2A/V5tLSzAHIVfzZY8trPaDRqDPf9fF/VIR8Kj7JlBXE7v8K4MgeFGad5s OEdUorlysJR/hJ0tpChmkQNErcllMSbDX+14/cZjoY3M8y34cJfctgr6thBFqoTA Zc8BSIm61uiK6CXMiUrx0DaGMxDdakc5L2AgaWoBaUNxQI5OS3Hk35ft7C9pTNRi uPJMQi/qLrtPsuTMuJxEuZAP3LEDN9XCmZVT5aEOwmt/l5m962DUGpvYkvUOJC/C w9cFARaYT+O6Pmq2Tg9xxkLHXAXWdPcEUxNjxOfA3NCzLYXGfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPycWyh20duXjGam713AfaN5oh7oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmIxMjhkNDEtYWM0NC0z ZDA4LTg3ZWEtMGUwMjY5ZGU0ZjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADu34gwAOxh/yAVTArqE4c6C84GxnBMfddIhm2xAc37s/wt6RwurdS1k 3Pcjc3YfUhtvHdLpJI4G2zeytKkDXXlMUu0bMMPhF6vVZRtzO+6yMO/pdal3G3iR 8GlFTEWOQxfgt4o3MCoSAYL1yjD2fz8zerTaegMSCP9Ntb93ABannLQyoMEoEHgu V9NvRWjl1uLfYxKty8qO57MoOA4FiUKAtTHZGcrTqKf+nLlXc7UCzuVg1qF8hdSI 8qqI5kkl2Xdv422s5RGc893CXZ3zdPQIQgQpOMXfupbU/GT4cFbx3vXjIWIlgpXh +7H2YRE4yoEmPNDU4d08yFlI0TBQI5k= -----END CERTIFICATE-----Generated at Thu Mar 26 17:22:17 2026 by rpki-client