$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c519eb75-bfe6-3e88-9655-eff46f478284.roa File: c519eb75-bfe6-3e88-9655-eff46f478284.roa (raw, json) Hash identifier: j0doltPp8OA/VXmbS74TpUQRlxp4/0FE2xJ6QHjq5Mk= Subject key identifier: D3:F6:CB:6D:D7:7C:5C:25:CC:FD:98:6D:28:B1:CE:02:9A:42:4F:8D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D3E0012F4C56F7685DEED9840 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c519eb75-bfe6-3e88-9655-eff46f478284.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396545 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:12:f4:c5:6f:76:85:de:ed:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=1f8612c7-ba9e-4e73-96b2-41eb76f9eb51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:56:41:e7:cb:4d:04:d3:2e:5b:e4:65:f7:11: 44:ce:fb:58:eb:1d:87:ac:3a:6d:2a:d3:db:65:80: b1:52:8d:b1:46:62:77:8a:97:88:b6:bc:c9:1f:95: a6:7e:4d:9a:a0:33:17:4c:31:78:8d:64:b0:ab:ed: a8:4c:c6:8d:87:71:db:21:43:3d:7f:f6:ea:13:1c: 66:01:93:57:7b:70:33:05:84:74:b7:e2:1b:6a:a6: 74:78:a5:d2:b0:1c:ac:93:c8:65:82:3e:bd:1a:fe: 0c:73:8f:86:70:e3:42:77:25:24:72:16:34:58:14: 7b:fd:2a:a5:c8:54:79:ba:0c:a6:94:6a:24:90:5f: a7:d7:e3:dd:cd:35:53:2d:40:29:44:e1:01:6a:9b: b2:b0:04:ea:cc:6b:8e:22:37:b7:1c:88:23:4c:fe: 2b:4c:a6:d5:1a:92:dc:30:a9:4c:ce:4e:78:69:c3: 2c:e9:81:bd:f2:77:d6:4f:7c:c6:71:24:1f:e0:f2: e9:ad:84:15:d6:98:d5:ad:f1:d9:08:18:be:f0:e7: e1:67:33:47:33:de:b9:62:6e:2f:3d:f6:24:07:a9: 8c:12:2e:b3:fc:57:32:d6:49:3b:95:83:f4:72:40: c6:e0:de:15:9c:11:8a:44:e6:54:19:86:4c:d9:f0: d3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F6:CB:6D:D7:7C:5C:25:CC:FD:98:6D:28:B1:CE:02:9A:42:4F:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c519eb75-bfe6-3e88-9655-eff46f478284.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:35:4f:a7:00:7b:24:9e:c9:b2:e7:f8:82:c4:79:e8:fa:87: aa:86:77:f6:33:31:f1:6d:ad:10:c9:80:a4:e7:34:66:05:6d: d8:05:a4:81:31:b7:c0:a2:0b:d4:70:1a:4a:23:80:cc:f5:6d: 81:07:44:25:c6:a4:1d:1a:1a:5f:aa:b7:21:16:71:72:ff:58: ad:f0:72:9e:62:e3:74:2c:39:a1:f8:91:f5:3c:9c:46:58:f6: 44:d3:94:b8:54:36:18:d6:94:ae:01:4f:85:16:77:94:4d:b1: 0f:49:70:bc:55:cd:6d:73:d9:2f:ce:7e:d7:66:ce:87:c6:43: 90:97:4b:41:e8:eb:07:06:03:35:a0:51:75:14:65:6f:b6:15: 8d:58:a3:10:f4:e5:07:c1:37:98:27:01:e1:35:d3:30:84:c4: dc:91:ce:58:0e:6f:1d:17:3e:10:5c:7c:b4:f3:7a:ca:49:e5: cc:f2:26:ed:10:0c:6b:3b:1f:81:be:32:2e:4b:19:38:ba:b3: 2d:d4:c8:71:57:30:6c:ba:d5:11:cd:1d:99:17:12:11:e2:f4: d2:9f:01:98:2e:2d:d7:a9:9a:f0:78:37:c9:ed:54:1a:c1:22: e7:1a:6a:18:93:b4:c0:e3:5e:e9:26:79:f4:7d:e1:8a:10:71: 4e:3c:5c:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+ABL0xW92hd7tmEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MWY4NjEyYzctYmE5ZS00ZTczLTk2YjItNDFlYjc2ZjllYjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1ZB58tNBNMuW+Rl9xFEzvtY6x2HrDptKtPb ZYCxUo2xRmJ3ipeItrzJH5Wmfk2aoDMXTDF4jWSwq+2oTMaNh3HbIUM9f/bqExxm AZNXe3AzBYR0t+IbaqZ0eKXSsBysk8hlgj69Gv4Mc4+GcONCdyUkchY0WBR7/Sql yFR5ugymlGokkF+n1+PdzTVTLUApROEBapuysATqzGuOIje3HIgjTP4rTKbVGpLc MKlMzk54acMs6YG98nfWT3zGcSQf4PLprYQV1pjVrfHZCBi+8OfhZzNHM965Ym4v PfYkB6mMEi6z/Fcy1kk7lYP0ckDG4N4VnBGKROZUGYZM2fDT0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNP2y23XfFwlzP2YbSixzgKaQk+NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzUxOWViNzUtYmZlNi0z ZTg4LTk2NTUtZWZmNDZmNDc4Mjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGY1T6cAeySeybLn+ILEeej6h6qGd/YzMfFtrRDJgKTnNGYFbdgFpIEx t8CiC9RwGkojgMz1bYEHRCXGpB0aGl+qtyEWcXL/WK3wcp5i43QsOaH4kfU8nEZY 9kTTlLhUNhjWlK4BT4UWd5RNsQ9JcLxVzW1z2S/OftdmzofGQ5CXS0Ho6wcGAzWg UXUUZW+2FY1YoxD05QfBN5gnAeE10zCExNyRzlgObx0XPhBcfLTzespJ5czyJu0Q DGs7H4G+Mi5LGTi6sy3UyHFXMGy61RHNHZkXEhHi9NKfAZguLdepmvB4N8ntVBrB IucaahiTtMDjXukmefR94YoQcU48XDg= -----END CERTIFICATE-----Generated at Thu Mar 26 16:43:06 2026 by rpki-client