$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6dd87e4-f7b6-3895-939e-87f3e5b59032.roa File: c6dd87e4-f7b6-3895-939e-87f3e5b59032.roa (raw, json) Hash identifier: +qNNM1GW+xraUAnkj9NiM6qPTOOoQDMvBErJFGOjUA8= Subject key identifier: FD:CC:F5:92:2C:0D:05:60:9E:35:C2:CA:B8:0A:E7:86:06:CD:2E:22 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D3E00168B1423F639B1B3D6E0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6dd87e4-f7b6-3895-939e-87f3e5b59032.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396678 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:16:8b:14:23:f6:39:b1:b3:d6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=dcbb427f-6728-4584-b33f-f12c4f947c2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5e:05:19:e8:41:a1:71:50:b2:93:0f:8c:0b: 7c:2b:9c:d3:4c:57:fb:85:01:06:03:2e:85:4b:31: dc:cd:07:bd:ad:1f:af:82:57:e4:4a:b7:7d:14:15: d9:a9:81:6d:82:92:d0:41:c3:b4:b9:67:57:50:05: c8:fa:71:e0:f4:cd:27:61:b9:52:d8:40:01:d0:11: 8d:a6:07:f9:40:c6:4d:46:17:a8:f0:6e:43:e9:3c: a4:a2:6b:93:cf:28:58:50:7a:1c:57:c5:b8:03:92: 9f:52:b3:6b:9f:3b:18:af:96:be:78:86:05:f3:d6: 4f:27:7c:70:b6:60:f5:ee:48:9d:1a:74:0e:b3:94: 7d:1f:ed:37:b0:c3:86:b4:0d:0c:94:e1:79:5a:2c: 7e:fc:e3:e0:15:c3:61:75:07:47:92:ee:e5:62:3b: ca:93:4e:72:1b:7d:8c:41:72:31:c6:bb:17:9a:d8: 4e:5c:c2:a7:d3:82:bb:0a:f0:ca:17:bf:da:e9:1d: ed:50:5c:85:ad:24:59:2f:c4:5b:43:62:0a:03:29: cd:da:28:2f:74:6f:84:75:9a:39:a8:f2:67:7d:94: 5e:97:91:6c:b0:90:f4:f9:cd:25:a3:ec:35:be:74: 2d:44:28:3d:4f:dd:45:71:5c:05:21:24:3c:07:9a: 74:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:CC:F5:92:2C:0D:05:60:9E:35:C2:CA:B8:0A:E7:86:06:CD:2E:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6dd87e4-f7b6-3895-939e-87f3e5b59032.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:dc:28:88:62:81:5b:7d:93:4d:4e:71:cd:b4:2f:18:f4:5e: e1:19:ba:c4:34:a5:5e:5a:98:c6:d9:38:16:99:ea:d1:5d:16: b7:ba:32:ac:01:9b:dd:99:94:9f:15:39:6e:3e:21:8e:eb:8f: 6c:4e:da:5c:3a:e5:b3:8f:42:47:1c:44:7a:81:05:f9:7a:d0: a3:64:31:b0:08:7e:a1:38:41:2c:72:55:30:0a:e8:bb:f4:89: 59:5c:51:38:ef:ce:e4:b3:a2:9b:89:3d:af:e7:c8:d3:59:0a: 11:42:ca:b1:25:06:bb:cd:42:25:c7:2e:52:4e:27:58:d9:4f: 36:91:c2:8c:7e:34:1a:72:e0:af:2a:82:e6:87:92:ca:5e:ef: fd:22:c4:a8:68:ba:b3:72:7d:7f:3e:37:2a:02:1e:d6:3b:ec: 0e:19:43:f3:66:ae:be:66:d7:ba:81:29:39:53:59:ac:bd:24: 8d:fe:5e:28:c1:47:f6:a3:30:db:48:ef:a8:ab:7e:47:d2:2f: 42:30:da:09:8d:dc:02:c7:e5:0e:07:98:70:be:75:a9:91:98: 5c:63:6c:e2:60:c6:bc:26:c9:a5:b6:8c:23:4e:d2:c9:5e:50: e9:fa:f8:90:28:b5:cd:83:3a:f3:66:e9:bd:eb:cf:54:ad:63: 73:12:d2:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+ABaLFCP2ObGz1uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZGNiYjQyN2YtNjcyOC00NTg0LWIzM2YtZjEyYzRmOTQ3YzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV4FGehBoXFQspMPjAt8K5zTTFf7hQEGAy6F SzHczQe9rR+vglfkSrd9FBXZqYFtgpLQQcO0uWdXUAXI+nHg9M0nYblS2EAB0BGN pgf5QMZNRheo8G5D6TykomuTzyhYUHocV8W4A5KfUrNrnzsYr5a+eIYF89ZPJ3xw tmD17kidGnQOs5R9H+03sMOGtA0MlOF5Wix+/OPgFcNhdQdHku7lYjvKk05yG32M QXIxxrsXmthOXMKn04K7CvDKF7/a6R3tUFyFrSRZL8RbQ2IKAynN2igvdG+EdZo5 qPJnfZRel5FssJD0+c0lo+w1vnQtRCg9T91FcVwFISQ8B5p0GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3M9ZIsDQVgnjXCyrgK54YGzS4iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzZkZDg3ZTQtZjdiNi0z ODk1LTkzOWUtODdmM2U1YjU5MDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALXcKIhigVt9k01Occ20Lxj0XuEZusQ0pV5amMbZOBaZ6tFdFre6MqwB m92ZlJ8VOW4+IY7rj2xO2lw65bOPQkccRHqBBfl60KNkMbAIfqE4QSxyVTAK6Lv0 iVlcUTjvzuSzopuJPa/nyNNZChFCyrElBrvNQiXHLlJOJ1jZTzaRwox+NBpy4K8q guaHkspe7/0ixKhourNyfX8+NyoCHtY77A4ZQ/Nmrr5m17qBKTlTWay9JI3+XijB R/ajMNtI76irfkfSL0Iw2gmN3ALH5Q4HmHC+damRmFxjbOJgxrwmyaW2jCNO0sle UOn6+JAotc2DOvNm6b3rz1StY3MS0uI= -----END CERTIFICATE-----Generated at Thu Mar 26 16:28:47 2026 by rpki-client