$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb06b0e1-2d95-35ee-99a6-a67672c85e82.roa File: cb06b0e1-2d95-35ee-99a6-a67672c85e82.roa (raw, json) Hash identifier: w3mL8vD4tsh+pfNyc3Bs3L0+Nqg08QWiMDIkGTqx0wY= Subject key identifier: A0:83:D0:89:69:CD:45:3A:58:B2:A0:A8:C8:B6:A1:A2:BF:CE:C1:99 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F43DD6E461E142530D2665180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb06b0e1-2d95-35ee-99a6-a67672c85e82.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 396551 IP address blocks: 192.42.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:6e:46:1e:14:25:30:d2:66:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=bacb423c-e298-4a10-b5ea-25c9ac716b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d5:d1:fe:ff:6b:ca:7e:5f:d4:7d:4e:fa:dc: d6:8a:60:02:ea:9b:a8:7d:02:a1:51:33:f7:f1:72: d4:96:70:3c:28:e8:55:cf:40:9b:4b:7a:bb:e4:2f: 43:a5:41:08:ab:e4:93:a0:e5:b5:48:32:09:fc:ce: e2:4e:80:9f:2c:41:a9:de:fe:03:6b:77:23:be:27: 3b:46:53:75:d6:b8:cb:f7:84:43:48:03:39:27:27: 35:0e:ae:85:e4:01:f6:b8:10:dd:aa:b9:a7:d5:86: b7:42:f9:53:03:0e:15:e7:80:22:42:d2:22:e5:4f: 0e:9a:ff:1c:7f:c2:5f:75:ea:e8:7d:83:8d:4b:05: 42:42:b6:3c:cb:47:51:1b:d4:68:fe:03:b4:c2:fa: 05:b0:e3:ed:f4:a2:07:00:33:62:28:b6:ae:59:d5: 9d:f4:29:de:b5:dd:68:57:6c:40:27:59:b7:92:d8: 20:11:fd:da:d3:94:d4:73:ff:6c:6c:60:d5:96:fa: 99:b7:f0:b8:7d:2a:65:37:35:50:33:87:19:40:4b: 90:e1:71:25:5f:ca:16:a4:2f:c1:40:69:6d:9d:ff: 72:58:b5:e3:80:f2:58:55:f8:bc:8e:1d:47:4e:b3: d9:24:b7:24:bc:69:41:8d:ea:79:ca:45:54:47:b4: 2f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:83:D0:89:69:CD:45:3A:58:B2:A0:A8:C8:B6:A1:A2:BF:CE:C1:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb06b0e1-2d95-35ee-99a6-a67672c85e82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:8a:68:c7:c4:ce:48:3a:37:a1:f2:4b:cb:e9:98:da:d3:61: 36:37:0d:44:b4:33:37:d3:fc:15:1c:7d:bd:53:a2:7d:1f:cf: c4:83:00:a4:82:2d:b2:13:15:cb:90:1b:28:00:aa:f6:00:eb: af:b2:4a:23:21:76:3b:bd:e7:cc:44:ab:49:8c:3a:3d:ec:3f: 37:f8:1a:6c:a3:96:43:6f:7a:5c:ab:14:7b:66:bb:4d:4a:b2: 82:3e:02:09:77:f6:32:3c:27:78:44:c7:c8:22:4c:51:eb:7a: ff:e1:90:66:12:bf:d6:8a:38:c3:22:cb:3b:12:f2:64:26:8a: 08:02:fd:e9:5f:22:6d:29:8b:45:01:0e:ab:7d:36:79:78:98: d4:15:e0:e3:9d:5a:b8:de:67:ab:e2:4c:10:a9:c5:5e:51:ee: 71:a5:07:b2:3b:48:87:ca:a3:4a:6d:ce:7d:ea:b2:22:c9:32: 15:5e:f3:47:56:6b:a5:4b:54:1f:7f:1f:a9:1f:db:9a:b9:ba: 4c:33:f7:c6:03:e1:93:7e:af:4c:88:92:56:ad:ee:09:53:f6: cf:76:ec:ad:88:63:20:e5:92:a3:56:4b:61:0e:d1:07:9a:4b: 61:7f:ba:2f:4d:8f:c7:44:1f:bd:f3:66:89:bf:8a:76:92:e5: e2:e4:04:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3W5GHhQlMNJmUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk YmFjYjQyM2MtZTI5OC00YTEwLWI1ZWEtMjVjOWFjNzE2YjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNXR/v9ryn5f1H1O+tzWimAC6puofQKhUTP3 8XLUlnA8KOhVz0CbS3q75C9DpUEIq+SToOW1SDIJ/M7iToCfLEGp3v4Da3cjvic7 RlN11rjL94RDSAM5Jyc1Dq6F5AH2uBDdqrmn1Ya3QvlTAw4V54AiQtIi5U8Omv8c f8JfderofYONSwVCQrY8y0dRG9Ro/gO0wvoFsOPt9KIHADNiKLauWdWd9Cnetd1o V2xAJ1m3ktggEf3a05TUc/9sbGDVlvqZt/C4fSplNzVQM4cZQEuQ4XElX8oWpC/B QGltnf9yWLXjgPJYVfi8jh1HTrPZJLckvGlBjep5ykVUR7QvOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCD0IlpzUU6WLKgqMi2oaK/zsGZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2IwNmIwZTEtMmQ5NS0z NWVlLTk5YTYtYTY3NjcyYzg1ZTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCpdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKKaMfEzkg6N6HyS8vpmNrTYTY3DUS0MzfT/BUcfb1Ton0fz8SDAKSC LbITFcuQGygAqvYA66+ySiMhdju958xEq0mMOj3sPzf4GmyjlkNvelyrFHtmu01K soI+Agl39jI8J3hEx8giTFHrev/hkGYSv9aKOMMiyzsS8mQmiggC/elfIm0pi0UB Dqt9Nnl4mNQV4OOdWrjeZ6viTBCpxV5R7nGlB7I7SIfKo0ptzn3qsiLJMhVe80dW a6VLVB9/H6kf25q5ukwz98YD4ZN+r0yIklat7glT9s927K2IYyDlkqNWS2EO0Qea S2F/ui9Nj8dEH73zZom/inaS5eLkBJk= -----END CERTIFICATE-----Generated at Thu Sep 24 12:35:07 2026 by rpki-client