$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf863f51-8f19-3e79-b80a-78cdaf142288.roa File: cf863f51-8f19-3e79-b80a-78cdaf142288.roa (raw, json) Hash identifier: R1rwUIozZasbxKN7NFya/o48bJcCVlMt3V/8HAlVQLo= Subject key identifier: 65:23:C5:80:2B:06:B6:57:F8:AE:1B:CD:08:B5:F1:95:41:EC:7E:57 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F225D1C028913B79404A49340 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf863f51-8f19-3e79-b80a-78cdaf142288.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 396546 IP address blocks: 192.42.176.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5d:1c:02:89:13:b7:94:04:a4:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=ce30c55c-c0f4-4902-bc6f-ffa6432b5578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f4:08:45:f7:ab:1d:fa:fd:69:b1:bf:1f:f3: eb:c7:2a:bb:bd:ea:9b:70:28:54:15:48:4a:18:d0: 77:3a:64:38:a5:9f:ae:b2:cc:90:1f:0b:6d:72:5c: ef:fb:a9:05:b4:19:1d:7c:ed:70:94:a9:79:4d:a1: 6a:12:d9:16:ac:76:27:00:f1:0a:a1:cb:f5:ee:74: 0a:06:f1:42:34:96:be:52:d4:6b:19:f9:2c:dd:8e: 86:19:ff:a1:28:cc:2c:e9:86:28:4c:73:75:c5:d9: fb:3f:6a:ad:83:4a:f7:65:91:3a:57:45:e9:6a:9f: d6:be:53:06:02:97:83:dd:61:84:96:27:fb:1d:4e: 1a:e2:1f:9b:a1:49:c5:67:b7:99:6f:9a:a5:0f:45: ae:99:53:68:41:95:47:59:f3:13:01:d3:31:24:a3: 34:7f:bc:4f:3d:c8:4c:00:6a:84:dd:10:da:5d:71: af:04:86:f1:64:f2:01:22:9f:48:7e:ba:2d:ab:57: 3b:b1:76:15:0c:c7:73:93:b9:e1:37:e6:98:60:97: ee:b8:77:2f:d0:1a:33:4a:85:fc:aa:ca:42:3e:e3: 59:7c:7e:0c:fe:b8:81:39:13:e8:8f:dd:28:da:d1: 4b:aa:82:35:53:5e:be:a3:ab:6f:ae:a6:d1:85:c0: d1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:23:C5:80:2B:06:B6:57:F8:AE:1B:CD:08:B5:F1:95:41:EC:7E:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf863f51-8f19-3e79-b80a-78cdaf142288.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.176.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:dd:40:06:99:7a:ab:16:34:ea:d5:13:3b:4f:43:42:27:cd: 5b:47:86:d6:98:0e:45:ef:94:dc:be:08:c8:a9:b3:fa:85:da: 48:84:cd:e4:6f:d8:84:83:e0:f4:d6:dc:92:cb:ec:c4:17:67: 8a:3b:e0:22:33:a0:6f:60:03:71:b2:a6:f6:ee:31:91:bd:71: 29:b5:3d:dd:3d:78:76:b2:97:35:d9:c2:0e:db:d3:32:ae:56: d7:03:3e:c4:90:fe:09:2c:db:49:d7:e3:7a:02:b0:c6:de:23: c8:64:54:3e:c3:3a:28:28:0f:de:d4:77:b4:d1:cd:03:3e:4c: 5e:66:ad:5e:0c:33:88:e7:d8:dd:fb:3f:24:c9:9b:e8:e0:0d: 38:3d:82:85:73:20:b5:6a:dc:da:5b:0e:f5:f1:79:b6:71:fe: f2:0d:d5:28:44:fc:13:3b:33:d8:03:63:dc:ae:18:20:c3:9d: 17:0e:3a:7a:cd:d1:10:4a:6f:d1:0c:a5:d5:e6:7c:7b:55:a7: 1a:a3:7e:6f:f1:7d:30:4a:36:47:f1:f3:d9:26:81:eb:14:8f: ce:28:a7:2d:83:f7:7f:6f:1a:32:b4:86:48:e6:24:4d:ab:28: 50:d7:da:c4:bf:34:0b:72:ad:90:51:60:3d:da:7f:4e:f4:97: fb:d5:ed:a6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8iXRwCiRO3lASkk0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk Y2UzMGM1NWMtYzBmNC00OTAyLWJjNmYtZmZhNjQzMmI1NTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPQIRferHfr9abG/H/Prxyq7veqbcChUFUhK GNB3OmQ4pZ+ussyQHwttclzv+6kFtBkdfO1wlKl5TaFqEtkWrHYnAPEKocv17nQK BvFCNJa+UtRrGfks3Y6GGf+hKMws6YYoTHN1xdn7P2qtg0r3ZZE6V0Xpap/WvlMG ApeD3WGElif7HU4a4h+boUnFZ7eZb5qlD0WumVNoQZVHWfMTAdMxJKM0f7xPPchM AGqE3RDaXXGvBIbxZPIBIp9Ifrotq1c7sXYVDMdzk7nhN+aYYJfuuHcv0BozSoX8 qspCPuNZfH4M/riBORPoj90o2tFLqoI1U16+o6tvrqbRhcDRNwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGUjxYArBrZX+K4bzQi18ZVB7H5XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2Y4NjNmNTEtOGYxOS0z ZTc5LWI4MGEtNzhjZGFmMTQyMjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqwHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA23UAGmXqrFjTq1RM7T0NCJ81bR4bWmA5F75TcvgjIqbP6hdpIhM3k b9iEg+D01tySy+zEF2eKO+AiM6BvYANxsqb27jGRvXEptT3dPXh2spc12cIO29My rlbXAz7EkP4JLNtJ1+N6ArDG3iPIZFQ+wzooKA/e1He00c0DPkxeZq1eDDOI59jd +z8kyZvo4A04PYKFcyC1atzaWw718Xm2cf7yDdUoRPwTOzPYA2Pcrhggw50XDjp6 zdEQSm/RDKXV5nx7Vacao35v8X0wSjZH8fPZJoHrFI/OKKctg/d/bxoytIZI5iRN qyhQ19rEvzQLcq2QUWA92n9O9Jf71e2m -----END CERTIFICATE-----Generated at Sat Sep 26 07:36:41 2026 by rpki-client