$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cff583a2-eaff-39ed-a0d3-24bb34e39550.roa File: cff583a2-eaff-39ed-a0d3-24bb34e39550.roa (raw, json) Hash identifier: MlVPyEaH6aWmA/TcCChhpjV0P+pLxsRo76mxEfxOhhM= Subject key identifier: 9F:BA:D2:19:D1:3E:5E:5A:F9:96:56:44:DA:93:92:AE:71:25:66:9F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1707C52A8181F554B2600880 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cff583a2-eaff-39ed-a0d3-24bb34e39550.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 20172 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:c5:2a:81:81:f5:54:b2:60:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=17b7e97a-d4f7-4af7-9040-865988fd0fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9e:17:75:19:d3:1f:84:c0:a0:f5:a4:fc:ee: 2b:0b:9a:a5:fe:f1:aa:fe:d3:35:5f:28:9f:d8:55: a7:d1:1e:33:e5:c1:12:ee:f3:82:1d:7d:10:37:70: 98:d3:4e:de:fe:e0:0d:be:d8:87:ac:3e:2d:83:74: 7a:12:58:90:33:74:84:6d:e8:fc:b6:fe:bf:d5:a4: d1:a8:7b:6e:b6:a4:06:e0:e5:b4:b0:7a:11:18:84: db:3e:f3:80:4f:b8:84:8a:83:01:c1:4d:6a:13:fa: 80:e0:e6:33:22:97:95:41:0f:4f:1f:38:ca:89:c9: d7:a4:49:aa:3b:dd:51:90:98:96:0f:f0:32:5d:be: e0:9b:5f:1b:9b:dc:20:b8:06:3e:97:50:94:33:84: 7e:78:00:13:a7:bb:ff:77:95:0f:b7:9a:55:fc:51: eb:c5:70:b9:64:53:82:d5:0d:ff:c5:79:b5:2a:80: d0:fb:21:fe:8d:1a:e3:f9:f5:92:37:c3:0d:fa:04: d1:bb:f4:ed:5c:47:61:60:42:11:5a:d2:ba:66:23: 71:78:be:a5:9b:b1:81:38:60:75:39:90:ea:4c:50: 2e:8d:e5:db:37:73:97:80:ba:87:ae:77:15:d8:c6: 20:a4:49:f5:95:56:47:f9:1c:a4:a4:2c:de:c2:8c: c1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BA:D2:19:D1:3E:5E:5A:F9:96:56:44:DA:93:92:AE:71:25:66:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cff583a2-eaff-39ed-a0d3-24bb34e39550.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:62:a6:ab:64:da:b4:b0:5c:82:bf:b0:8b:09:a6:68:81:a6: e9:c7:c7:5c:c5:10:f7:22:5b:b8:94:3f:7b:f5:54:08:92:e1: ca:93:6d:b9:85:7e:69:58:61:9c:81:82:56:e7:b4:a1:f2:0d: 61:02:7b:e5:aa:3e:f7:97:fa:0c:a5:68:a8:77:df:a7:35:fe: 9b:5e:6b:d8:8b:99:cd:19:ad:25:4e:3e:02:a7:13:5c:87:42: a7:0a:ae:94:c3:36:76:38:de:13:a2:4e:67:aa:5b:35:7e:a4: 6c:2a:77:84:11:c3:3d:d5:ee:cc:ef:8f:08:dd:ff:af:92:a7: b5:41:b0:e8:5f:1d:3b:7d:55:56:f8:fe:77:14:2f:c9:d7:a9: 82:2d:13:6c:66:11:25:da:99:48:19:1a:71:bb:eb:8f:9e:52: 1a:dd:f3:40:f6:56:a4:ff:f9:10:09:ac:7f:96:07:8d:d2:1a: 19:b5:2c:2c:79:6c:4e:20:3f:77:d9:57:b2:2c:84:08:27:24: 46:d4:1a:57:b5:c0:db:90:ff:aa:24:1e:c8:0b:09:b8:fc:e5: 48:c8:5b:0b:4f:cf:85:6d:ed:2d:18:7f:f3:99:51:61:d9:da: 1c:0f:1b:d1:02:81:d0:40:1c:8d:36:02:55:6a:c5:a4:f1:94: 8b:3f:aa:d7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0XB8UqgYH1VLJgCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk MTdiN2U5N2EtZDRmNy00YWY3LTkwNDAtODY1OTg4ZmQwZmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp4XdRnTH4TAoPWk/O4rC5ql/vGq/tM1Xyif 2FWn0R4z5cES7vOCHX0QN3CY007e/uANvtiHrD4tg3R6EliQM3SEbej8tv6/1aTR qHtutqQG4OW0sHoRGITbPvOAT7iEioMBwU1qE/qA4OYzIpeVQQ9PHzjKicnXpEmq O91RkJiWD/AyXb7gm18bm9wguAY+l1CUM4R+eAATp7v/d5UPt5pV/FHrxXC5ZFOC 1Q3/xXm1KoDQ+yH+jRrj+fWSN8MN+gTRu/TtXEdhYEIRWtK6ZiNxeL6lm7GBOGB1 OZDqTFAujeXbN3OXgLqHrncV2MYgpEn1lVZH+RykpCzewozBFwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ+60hnRPl5a+ZZWRNqTkq5xJWafMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2ZmNTgzYTItZWFmZi0z OWVkLWEwZDMtMjRiYjM0ZTM5NTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA9YqarZNq0sFyCv7CLCaZogabpx8dcxRD3Ilu4lD979VQIkuHKk225 hX5pWGGcgYJW57Sh8g1hAnvlqj73l/oMpWiod9+nNf6bXmvYi5nNGa0lTj4CpxNc h0KnCq6UwzZ2ON4Tok5nqls1fqRsKneEEcM91e7M748I3f+vkqe1QbDoXx07fVVW +P53FC/J16mCLRNsZhEl2plIGRpxu+uPnlIa3fNA9lak//kQCax/lgeN0hoZtSws eWxOID932VeyLIQIJyRG1BpXtcDbkP+qJB7ICwm4/OVIyFsLT8+Fbe0tGH/zmVFh 2docDxvRAoHQQByNNgJVasWk8ZSLP6rX -----END CERTIFICATE-----Generated at Thu Mar 26 15:44:50 2026 by rpki-client