$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bdb13e44-6055-33a9-b78b-6fb02a681a17.roa File: bdb13e44-6055-33a9-b78b-6fb02a681a17.roa (raw, json) Hash identifier: 2+8cHm+DnhTPDZrBurPl3iJG7g48Qe/NRTHERe99yC4= Subject key identifier: 3C:2B:7E:27:A6:9F:27:63:19:92:C9:87:4F:A4:69:EF:0D:C6:61:C4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D3E00184D0999AD2CFFE4D700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bdb13e44-6055-33a9-b78b-6fb02a681a17.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396546 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:18:4d:09:99:ad:2c:ff:e4:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=448750ec-f279-4a9d-9ed9-430191650ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a6:cf:f9:fb:d1:85:a5:4a:13:49:89:f9:a3: 79:c2:4a:b0:09:ca:e1:58:d6:45:09:08:44:ef:3e: da:24:ae:f4:e2:cb:64:66:b9:26:54:f9:8a:ae:f6: 15:0b:a3:23:f7:7e:8f:95:7c:1a:22:3b:51:b7:08: 6d:94:a9:46:06:c4:f7:e0:1c:f0:50:78:b3:b3:17: d0:ed:87:b1:e4:a6:ba:69:5b:f6:ea:96:92:b1:b2: 9e:4b:c7:d3:24:8d:4b:4f:8b:79:8a:ec:7a:1d:d1: 65:2f:be:5c:a0:f5:c0:5b:66:13:28:e5:70:e5:5b: 2a:08:e9:c1:7a:12:b1:c8:4f:52:eb:05:79:d8:d6: c3:59:59:8e:20:be:58:a7:65:a2:bf:52:96:bc:a7: b1:22:00:64:af:4e:10:a4:24:b2:e0:9d:c3:86:f9: a7:d1:52:3c:d0:94:de:75:e2:d6:18:f1:77:16:f3: 65:25:ab:3b:2a:c6:04:79:ba:6b:0b:5f:e6:ef:79: 4a:c6:f5:08:ad:f0:23:ec:ad:94:47:c0:5a:ba:94: 0b:7a:e2:ab:70:35:d9:76:ae:cc:cf:c8:16:64:a7: b9:00:52:b2:67:b5:4d:32:6b:a1:c7:09:33:9f:9e: c6:28:98:91:9b:6a:5f:01:ed:a1:64:0a:50:7d:c7: 6a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:2B:7E:27:A6:9F:27:63:19:92:C9:87:4F:A4:69:EF:0D:C6:61:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bdb13e44-6055-33a9-b78b-6fb02a681a17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:ed:dc:b6:10:86:ee:1d:f6:f1:b2:ab:10:82:a5:63:32:52: 80:15:b6:3a:92:c9:5e:7b:88:d7:67:7c:81:cb:85:bc:08:fe: 56:f6:dd:5b:9c:3e:9b:a4:da:82:17:b7:dd:40:26:d2:06:bf: 6d:24:e3:9a:21:04:cd:d4:4a:28:d3:30:96:a5:e7:15:d3:57: 48:5f:0b:ff:d9:49:10:f0:88:7c:03:d9:7a:9e:a2:ed:e8:ca: 78:9b:dc:71:c7:42:6f:53:3a:23:ac:92:0d:d4:b9:27:69:f2: a9:f7:13:48:2f:29:80:62:32:43:b0:56:ad:cc:1f:2b:ec:60: 8b:63:ec:72:a7:34:18:ab:23:8f:5e:3a:51:4c:c4:37:96:ed: c9:b1:d2:2f:35:88:37:d2:33:b1:a7:53:e5:4a:8e:ef:8c:50: 96:e2:3c:bf:5f:ea:57:0e:bf:5c:c8:e0:2b:cf:b5:cb:1a:85: 70:ed:67:ac:3d:f3:e2:7a:b6:00:01:9b:5a:bd:b8:6c:f3:73: 68:33:a4:ef:b1:c5:57:c3:33:26:c2:8d:f6:61:a0:e0:09:52: 45:cb:ac:69:87:67:41:83:ad:b9:06:61:1c:86:fd:c8:39:7b: bf:17:04:9f:64:bb:90:a4:6c:93:58:5f:73:6f:b1:8d:2f:38: 59:c8:80:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+ABhNCZmtLP/k1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NDQ4NzUwZWMtZjI3OS00YTlkLTllZDktNDMwMTkxNjUwZWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKbP+fvRhaVKE0mJ+aN5wkqwCcrhWNZFCQhE 7z7aJK704stkZrkmVPmKrvYVC6Mj936PlXwaIjtRtwhtlKlGBsT34BzwUHizsxfQ 7Yex5Ka6aVv26paSsbKeS8fTJI1LT4t5iux6HdFlL75coPXAW2YTKOVw5VsqCOnB ehKxyE9S6wV52NbDWVmOIL5Yp2Wiv1KWvKexIgBkr04QpCSy4J3Dhvmn0VI80JTe deLWGPF3FvNlJas7KsYEebprC1/m73lKxvUIrfAj7K2UR8BaupQLeuKrcDXZdq7M z8gWZKe5AFKyZ7VNMmuhxwkzn57GKJiRm2pfAe2hZApQfcdqHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwrfiemnydjGZLJh0+kae8NxmHEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmRiMTNlNDQtNjA1NS0z M2E5LWI3OGItNmZiMDJhNjgxYTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7t3LYQhu4d9vGyqxCCpWMyUoAVtjqSyV57iNdnfIHLhbwI/lb23Vuc Ppuk2oIXt91AJtIGv20k45ohBM3USijTMJal5xXTV0hfC//ZSRDwiHwD2Xqeou3o ynib3HHHQm9TOiOskg3UuSdp8qn3E0gvKYBiMkOwVq3MHyvsYItj7HKnNBirI49e OlFMxDeW7cmx0i81iDfSM7GnU+VKju+MUJbiPL9f6lcOv1zI4CvPtcsahXDtZ6w9 8+J6tgABm1q9uGzzc2gzpO+xxVfDMybCjfZhoOAJUkXLrGmHZ0GDrbkGYRyG/cg5 e78XBJ9ku5CkbJNYX3NvsY0vOFnIgIc= -----END CERTIFICATE-----Generated at Thu Mar 26 13:58:41 2026 by rpki-client