$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7ccdc0f-bc96-3b1e-a666-31d0197cdc55.roa File: d7ccdc0f-bc96-3b1e-a666-31d0197cdc55.roa (raw, json) Hash identifier: +aPC9E7p0B58L0r7qAX2DA0oei0/czC7fkw2yCQXeJM= Subject key identifier: 37:6A:67:13:E3:AE:BF:BF:73:E1:CE:F2:E3:BF:F7:84:11:2F:F6:8D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1707D16B164712F16054CE40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7ccdc0f-bc96-3b1e-a666-31d0197cdc55.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 396603 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:d1:6b:16:47:12:f1:60:54:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=426b8c6a-0a6c-4b96-ae6a-5a9b39e5b0e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:61:4b:ec:9d:10:36:cd:45:14:68:97:6f:f9: a0:45:26:b4:e2:de:09:7b:4d:cd:06:72:6d:ef:37: 90:8b:11:c5:8c:d8:8a:02:16:47:4a:b4:41:6d:77: 29:25:72:af:a9:2e:82:9d:dc:22:bd:9e:54:e3:88: ad:a9:e5:70:c8:81:2d:17:9e:14:9e:da:43:8f:f5: 04:ce:05:08:31:67:38:25:c1:26:ea:55:78:ed:b0: e8:14:fc:ed:fa:7d:0b:cb:a8:3a:dd:78:bc:25:2a: 95:37:2e:af:d8:e7:2c:9e:5c:38:43:54:43:86:1e: e3:af:4c:07:84:9c:2c:cd:9f:75:28:97:bb:c5:f2: cb:14:ca:ff:75:4a:a5:82:c5:a1:15:2c:9c:a7:e5: 55:e9:94:05:a3:e0:a6:50:62:37:69:78:d6:a0:36: 40:14:89:be:9d:60:0d:2b:2e:40:1c:f1:9c:2a:a2: 41:be:73:32:13:48:a2:58:64:bb:b4:ff:e0:2b:98: 63:6d:2c:02:d1:21:a5:b6:fc:0a:d7:4c:60:b2:41: 39:e0:da:fa:a0:48:43:b5:91:ee:6b:f2:3e:24:5c: 83:af:c5:f7:e2:8b:9e:05:a6:6a:3d:59:11:4f:e3: 45:cc:a6:45:b4:25:0e:42:18:45:e7:d3:97:be:55: ae:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:6A:67:13:E3:AE:BF:BF:73:E1:CE:F2:E3:BF:F7:84:11:2F:F6:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7ccdc0f-bc96-3b1e-a666-31d0197cdc55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:00:7c:fa:0d:56:b9:4a:0c:b7:ed:67:6f:6a:c2:5b:0f:94: b0:84:a5:9f:15:7a:f6:74:f6:c5:e8:f1:e4:97:46:44:f3:22: a8:1a:69:1e:13:a7:aa:83:3e:f6:5c:bc:a6:f7:df:b0:4a:c5: 1e:51:10:d9:a4:e7:66:87:d0:c1:97:d1:a6:89:49:88:32:0a: eb:9d:8e:d4:ab:09:d2:aa:41:00:d2:74:07:83:eb:3f:07:5c: 15:c6:52:ea:4a:17:dd:7c:5c:e5:c3:49:03:31:50:ca:14:e4: b2:f0:d0:b7:ac:99:01:c6:86:10:2d:68:b9:71:ef:80:33:03: 3c:c5:2b:9c:c3:aa:25:b1:91:ee:73:0d:9a:e2:85:a7:fc:02: 02:d3:69:8b:0e:cb:18:ba:c3:de:56:f6:d1:51:5d:c7:07:4e: f9:7a:e4:44:02:ac:21:4a:03:bd:48:e8:26:f1:4a:34:f2:49: 05:5e:5a:58:cc:2f:7f:a0:72:3e:61:ad:6d:de:c9:aa:60:35: 28:f8:60:1e:38:f5:81:4b:a3:c3:9c:6c:3d:8a:4f:5c:b6:e1: f7:a9:69:86:7b:f6:bc:07:0f:50:9f:bc:36:11:b2:ad:2e:0c: 84:76:cd:b8:ae:44:9e:97:f9:43:8b:33:7f:d9:d4:ec:10:46: 23:0b:e6:ea -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0XB9FrFkcS8WBUzkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk NDI2YjhjNmEtMGE2Yy00Yjk2LWFlNmEtNWE5YjM5ZTViMGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmFL7J0QNs1FFGiXb/mgRSa04t4Je03NBnJt 7zeQixHFjNiKAhZHSrRBbXcpJXKvqS6CndwivZ5U44itqeVwyIEtF54UntpDj/UE zgUIMWc4JcEm6lV47bDoFPzt+n0Ly6g63Xi8JSqVNy6v2Ocsnlw4Q1RDhh7jr0wH hJwszZ91KJe7xfLLFMr/dUqlgsWhFSycp+VV6ZQFo+CmUGI3aXjWoDZAFIm+nWAN Ky5AHPGcKqJBvnMyE0iiWGS7tP/gK5hjbSwC0SGltvwK10xgskE54Nr6oEhDtZHu a/I+JFyDr8X34oueBaZqPVkRT+NFzKZFtCUOQhhF59OXvlWuKQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDdqZxPjrr+/c+HO8uO/94QRL/aNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDdjY2RjMGYtYmM5Ni0z YjFlLWE2NjYtMzFkMDE5N2NkYzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQClAHz6DVa5Sgy37WdvasJbD5SwhKWfFXr2dPbF6PHkl0ZE8yKoGmke E6eqgz72XLym99+wSsUeURDZpOdmh9DBl9GmiUmIMgrrnY7UqwnSqkEA0nQHg+s/ B1wVxlLqShfdfFzlw0kDMVDKFOSy8NC3rJkBxoYQLWi5ce+AMwM8xSucw6olsZHu cw2a4oWn/AIC02mLDssYusPeVvbRUV3HB075euREAqwhSgO9SOgm8Uo08kkFXlpY zC9/oHI+Ya1t3smqYDUo+GAeOPWBS6PDnGw9ik9ctuH3qWmGe/a8Bw9Qn7w2EbKt LgyEds24rkSel/lDizN/2dTsEEYjC+bq -----END CERTIFICATE-----Generated at Thu Mar 26 09:05:04 2026 by rpki-client