$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc4ec9ef-2e1b-3b88-b703-cd491c48e71d.roa File: bc4ec9ef-2e1b-3b88-b703-cd491c48e71d.roa (raw, json) Hash identifier: XAqRkCxzop1m+TPR6QDVZIdTYCWkCXc2aa8Vo8D6o2g= Subject key identifier: 8D:9F:42:C8:67:B7:08:46:D4:D1:3A:DD:83:67:88:24:2E:E3:F6:7C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F49869395CC1363A5406682E0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc4ec9ef-2e1b-3b88-b703-cd491c48e71d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396608 IP address blocks: 192.42.173.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:93:95:cc:13:63:a5:40:66:82:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4ba49f7e-3aef-47c6-9bc7-d9d32a1b867c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e3:2d:51:c6:00:cb:d7:42:04:78:7a:35:09: fc:20:3f:62:fe:28:3f:58:ee:a1:a5:c2:08:28:28: d2:8d:48:b4:2d:df:0c:c7:c0:d8:b8:7b:3e:8e:12: f1:c9:14:74:1a:e4:18:df:ce:69:91:f9:8e:06:ca: 76:c1:45:50:0f:b8:6d:5a:67:ac:09:2b:ae:86:b6: 44:3e:f0:81:c5:c7:8a:e1:c6:d1:32:a2:4b:73:d9: 6d:93:d0:8e:0d:ea:ce:bf:e8:37:37:44:9b:84:86: fe:f5:1b:a0:73:bc:30:3b:c5:30:25:a4:04:e8:85: e1:72:af:a4:12:28:a8:fc:f2:f9:aa:62:b9:a2:c9: 41:43:7e:98:06:82:50:3a:5c:6b:d5:cb:ca:d6:ff: ab:39:91:37:97:fc:25:cc:2f:6f:24:f4:a0:15:1b: 2d:83:28:bd:b6:13:b6:77:4c:56:59:d5:f2:40:d4: 1a:59:cd:47:6c:a8:fa:44:7c:b3:12:13:aa:cb:3c: cf:64:29:e4:36:22:b9:81:49:8c:d4:78:c9:4e:b3: da:fb:89:63:33:4c:81:ce:55:0d:fd:f3:f7:97:f0: 89:69:ce:55:5d:9f:ca:f7:5f:04:74:f8:8a:9b:87: 01:bf:b3:b1:72:a0:fc:a1:2f:af:69:fa:95:4b:87: 0c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:9F:42:C8:67:B7:08:46:D4:D1:3A:DD:83:67:88:24:2E:E3:F6:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc4ec9ef-2e1b-3b88-b703-cd491c48e71d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.173.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:d3:5c:38:29:7c:9f:2a:3e:b9:57:42:84:50:ae:67:a0:17: a7:d5:aa:f7:1a:b7:70:50:65:56:a9:df:4e:68:15:e8:19:7f: 70:2a:09:83:67:31:7a:83:39:f6:03:b2:a3:78:cc:17:93:08: 5b:37:6c:59:4e:1a:50:8d:57:3e:b8:d2:bc:34:7c:e1:67:84: 93:2d:4c:96:36:0f:96:90:fa:1e:8c:05:c8:ec:5d:6c:97:be: 4c:0c:da:97:9e:4c:a1:68:97:ed:cf:60:d8:4f:6a:b4:81:24: 23:2f:21:b0:a4:36:e0:2f:5f:3f:b7:f5:85:54:5d:b9:b3:a0: 0f:a1:03:0e:27:68:69:4a:b3:87:93:87:28:22:da:fe:fb:c1: 07:b5:7b:6a:36:f0:24:6f:8f:2f:09:10:df:b6:5d:85:af:fe: 60:3d:41:0f:d2:42:4a:e5:cc:33:6c:1a:3f:d7:16:27:92:e9: ad:48:de:f5:b7:8d:a2:55:eb:2a:aa:ba:d8:34:e6:65:b7:de: 55:38:e3:bb:17:42:6e:a9:8b:b5:6e:4c:40:c2:10:71:30:20: 19:fe:07:3c:f2:67:87:47:90:f2:0c:51:59:1e:79:9a:1f:c1: 85:bc:1f:fd:1e:35:fd:4c:1f:27:7d:94:ae:6c:18:a6:ad:7c: f3:f9:c1:e3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JhpOVzBNjpUBmguAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGJhNDlmN2UtM2FlZi00N2M2LTliYzctZDlkMzJhMWI4NjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+MtUcYAy9dCBHh6NQn8ID9i/ig/WO6hpcII KCjSjUi0Ld8Mx8DYuHs+jhLxyRR0GuQY385pkfmOBsp2wUVQD7htWmesCSuuhrZE PvCBxceK4cbRMqJLc9ltk9CODerOv+g3N0SbhIb+9Rugc7wwO8UwJaQE6IXhcq+k Eiio/PL5qmK5oslBQ36YBoJQOlxr1cvK1v+rOZE3l/wlzC9vJPSgFRstgyi9thO2 d0xWWdXyQNQaWc1HbKj6RHyzEhOqyzzPZCnkNiK5gUmM1HjJTrPa+4ljM0yBzlUN /fP3l/CJac5VXZ/K918EdPiKm4cBv7OxcqD8oS+vafqVS4cMFwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI2fQshntwhG1NE63YNniCQu4/Z8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmM0ZWM5ZWYtMmUxYi0z Yjg4LWI3MDMtY2Q0OTFjNDhlNzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAj01w4KXyfKj65V0KEUK5noBen1ar3GrdwUGVWqd9OaBXoGX9wKgmD ZzF6gzn2A7KjeMwXkwhbN2xZThpQjVc+uNK8NHzhZ4STLUyWNg+WkPoejAXI7F1s l75MDNqXnkyhaJftz2DYT2q0gSQjLyGwpDbgL18/t/WFVF25s6APoQMOJ2hpSrOH k4coItr++8EHtXtqNvAkb48vCRDftl2Fr/5gPUEP0kJK5cwzbBo/1xYnkumtSN71 t42iVesqqrrYNOZlt95VOOO7F0JuqYu1bkxAwhBxMCAZ/gc88meHR5DyDFFZHnma H8GFvB/9HjX9TB8nfZSubBimrXzz+cHj -----END CERTIFICATE-----Generated at Sun Sep 27 10:26:39 2026 by rpki-client