$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf09854e-4b86-3725-b4da-1d34f6ac54eb.roa File: cf09854e-4b86-3725-b4da-1d34f6ac54eb.roa (raw, json) Hash identifier: zqukz1/dVeQH5/BZWlejyqwJuc+7sIJKluaPzSAiwQI= Subject key identifier: B3:A2:12:1E:B7:D9:9B:4F:0B:43:A5:6B:98:C7:62:84:5D:D9:A9:F6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D2A74E4E207D75605AC080C80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf09854e-4b86-3725-b4da-1d34f6ac54eb.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 396600 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:e4:e2:07:d7:56:05:ac:08:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=a519e040-c269-4462-b698-772730988a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:14:29:00:a0:13:e7:23:44:c3:78:48:0e:b1: 47:aa:cc:d0:d2:01:0a:ca:6b:4d:59:cb:86:46:9f: 34:6a:62:34:80:dc:1b:d0:82:e5:07:a5:e0:e9:5a: 47:3a:bb:ad:d8:45:05:2e:f4:2c:ec:b7:a8:f3:cb: dd:36:ba:09:1a:65:c4:56:9e:36:59:52:00:3d:63: 2e:63:ea:52:24:5c:eb:49:77:43:8c:5a:5c:49:26: 1f:09:68:5a:d3:fd:0a:93:66:bd:52:57:3b:bf:80: 0a:39:af:3f:f6:fa:f8:87:10:22:c9:aa:c5:03:38: 6b:47:03:eb:cf:ee:12:3e:94:3a:d4:5b:a6:b4:9f: 52:d4:74:30:87:97:90:37:c2:80:b4:d9:74:ff:d5: ae:2f:a7:84:4a:c4:66:2c:0b:de:69:92:29:c5:8f: 75:4f:2c:20:72:54:2a:40:1e:43:08:d5:2b:ab:fe: 5a:a0:c7:e4:f8:fd:58:e7:ee:f6:3f:6e:77:cc:e8: f7:96:5b:df:c0:b9:52:09:ba:13:4b:b2:75:e5:3a: 91:08:a3:ee:de:11:6a:af:b7:b5:62:dd:fd:5f:7a: 1e:c5:e8:19:70:ce:bf:7a:be:10:82:9e:05:a0:60: 08:44:ce:6e:61:9f:27:6c:d5:66:2a:64:3d:36:6d: b5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A2:12:1E:B7:D9:9B:4F:0B:43:A5:6B:98:C7:62:84:5D:D9:A9:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf09854e-4b86-3725-b4da-1d34f6ac54eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:bf:2a:b3:1e:9f:7f:12:06:10:95:17:d5:3d:e2:6a:0e:1c: ab:59:60:c5:52:97:8c:d2:28:a4:47:09:17:ab:7a:d1:dc:25: dd:54:73:12:f6:21:02:82:08:fc:85:91:81:37:29:d7:60:2c: f4:24:aa:9d:af:92:c6:59:51:0b:61:df:b2:3d:ad:a4:ea:f6: 28:6f:cc:dc:fd:f8:b3:b9:6d:43:27:20:64:1c:34:d7:a8:af: 3b:6f:68:be:c2:5f:1f:1f:6d:4c:9b:58:9d:a8:90:53:71:96: 6f:e6:92:31:5d:78:31:11:47:23:c1:4e:eb:77:30:79:06:c8: df:2d:c7:69:35:cb:45:45:17:ab:bd:40:88:10:80:38:f1:a2: fd:86:0a:e3:d5:b3:6f:1c:0d:83:2f:23:90:86:2c:35:1b:1a: 31:1b:77:77:81:89:25:68:3d:79:03:b8:e8:be:e3:87:ec:2d: 87:1e:18:44:a5:cf:14:d9:54:28:ae:ae:cd:cb:a1:5a:75:75: d8:fd:9c:7a:71:d8:c4:21:96:5a:78:71:97:c7:2c:24:f0:4f: ba:ea:91:8f:70:6d:7f:66:3d:08:97:3a:a7:3e:88:eb:6f:95: 89:51:ac:bb:63:06:c5:b4:89:3a:07:4d:d8:76:91:95:d6:52: 10:16:bd:9a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0qdOTiB9dWBawIDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk YTUxOWUwNDAtYzI2OS00NDYyLWI2OTgtNzcyNzMwOTg4YTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RQpAKAT5yNEw3hIDrFHqszQ0gEKymtNWcuG Rp80amI0gNwb0ILlB6Xg6VpHOrut2EUFLvQs7Leo88vdNroJGmXEVp42WVIAPWMu Y+pSJFzrSXdDjFpcSSYfCWha0/0Kk2a9Ulc7v4AKOa8/9vr4hxAiyarFAzhrRwPr z+4SPpQ61FumtJ9S1HQwh5eQN8KAtNl0/9WuL6eESsRmLAveaZIpxY91TywgclQq QB5DCNUrq/5aoMfk+P1Y5+72P253zOj3llvfwLlSCboTS7J15TqRCKPu3hFqr7e1 Yt39X3oexegZcM6/er4Qgp4FoGAIRM5uYZ8nbNVmKmQ9Nm21owIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLOiEh632ZtPC0Ola5jHYoRd2an2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2YwOTg1NGUtNGI4Ni0z NzI1LWI0ZGEtMWQzNGY2YWM1NGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCGvyqzHp9/EgYQlRfVPeJqDhyrWWDFUpeM0iikRwkXq3rR3CXdVHMS 9iECggj8hZGBNynXYCz0JKqdr5LGWVELYd+yPa2k6vYob8zc/fizuW1DJyBkHDTX qK87b2i+wl8fH21Mm1idqJBTcZZv5pIxXXgxEUcjwU7rdzB5BsjfLcdpNctFRRer vUCIEIA48aL9hgrj1bNvHA2DLyOQhiw1GxoxG3d3gYklaD15A7jovuOH7C2HHhhE pc8U2VQorq7Ny6FadXXY/Zx6cdjEIZZaeHGXxywk8E+66pGPcG1/Zj0IlzqnPojr b5WJUay7YwbFtIk6B03YdpGV1lIQFr2a -----END CERTIFICATE-----Generated at Thu Mar 26 14:30:43 2026 by rpki-client