$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d948cd7c-dd3e-3991-922a-683b9d77f25d.roa File: d948cd7c-dd3e-3991-922a-683b9d77f25d.roa (raw, json) Hash identifier: CsksT7QdN7wkbImzK32wqWhRNBv1pd3FAv3+A5awAT8= Subject key identifier: 4D:A1:10:45:78:EA:F0:B7:0D:32:56:C7:5F:B6:81:04:7B:A1:BD:F5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D3DFFA1D8F8FA73253DD38F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d948cd7c-dd3e-3991-922a-683b9d77f25d.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396550 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:a1:d8:f8:fa:73:25:3d:d3:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=84a3f885-c0bd-4318-90be-f541eda1bc14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a6:34:0c:bb:1a:34:5c:4f:9a:25:7f:ac:6a: 76:66:c5:fa:2c:72:a0:90:a0:22:39:1d:68:41:82: 8c:b0:ce:8d:fb:63:67:c9:95:b0:75:60:58:3f:d7: 5e:59:64:f2:ff:68:74:ab:ab:0d:80:35:cb:db:1b: aa:e3:69:df:24:9b:45:a4:8b:b1:51:79:32:2d:38: 97:3a:c6:14:9f:3f:b0:67:68:18:1e:13:f5:a0:93: 50:76:91:67:d4:85:3e:a3:c4:eb:3a:f1:0b:8f:8b: 41:51:a4:0f:de:df:ae:5a:a3:bb:e3:bd:97:ae:bd: cd:6a:21:e1:ca:3c:88:4a:35:a8:a3:de:12:96:81: a2:a4:df:11:ec:ff:88:87:f0:30:70:14:17:d0:5e: 62:e4:d7:36:64:4c:6a:f6:ef:e7:01:ec:eb:55:46: 0b:d9:c8:0e:c6:ce:5f:1e:02:b3:de:f5:91:fd:ba: 4e:45:8d:a1:d0:ea:35:d8:e7:30:27:d0:3c:e6:20: 90:9b:21:72:27:63:e8:04:35:64:54:26:de:28:11: da:db:a3:7b:83:42:9a:88:ad:4e:4b:3b:4d:63:87: a1:98:b7:ad:a0:70:35:5f:ed:ca:25:d0:7e:c5:70: 90:cc:ca:2b:37:e2:69:cf:54:69:77:be:3b:68:c1: 89:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A1:10:45:78:EA:F0:B7:0D:32:56:C7:5F:B6:81:04:7B:A1:BD:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d948cd7c-dd3e-3991-922a-683b9d77f25d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:02:0b:79:ba:31:d7:a0:be:14:3a:78:87:ba:e1:a1:03:15: 57:9b:25:99:b1:59:2e:4b:20:14:55:ae:94:0a:75:c9:62:5c: 73:f2:8d:4f:c2:dc:5d:c6:fb:ca:7c:ae:2f:cf:ae:46:89:f6: d3:d5:11:5a:26:90:20:b8:92:f2:09:a5:31:de:22:19:ca:89: 74:72:58:a6:13:1d:f2:6e:b6:a2:bc:e4:dd:b9:7a:37:68:d3: c3:3b:1b:9d:c1:d2:61:52:d7:9f:6d:9f:e7:3c:97:89:b5:b1: 3c:e9:7a:48:80:cc:6c:f9:3b:6f:ab:9d:09:9e:cc:49:ff:95: 7d:fd:f0:e0:8e:7c:78:1a:2e:bb:4d:21:f4:42:47:3f:a1:96: 07:17:20:37:5b:c8:bf:1d:f3:01:27:a3:d0:bb:c3:2f:11:e7: 86:0f:9e:96:30:e5:80:46:4c:ff:95:f1:58:6c:8b:78:d6:be: 62:ca:75:1d:ed:9b:fa:09:8d:c6:a9:17:c8:49:09:29:76:b9: 92:88:ad:b8:7f:1f:83:43:2b:72:68:1c:20:b9:13:50:47:99: 2c:70:62:94:8d:f2:e5:9e:ac:84:a7:85:5d:8e:b8:e4:1d:f7: a7:0b:9a:f1:01:41:19:ae:20:95:df:14:7d:70:9b:ea:73:31: b1:b1:97:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/6HY+PpzJT3Tj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ODRhM2Y4ODUtYzBiZC00MzE4LTkwYmUtZjU0MWVkYTFiYzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aY0DLsaNFxPmiV/rGp2ZsX6LHKgkKAiOR1o QYKMsM6N+2NnyZWwdWBYP9deWWTy/2h0q6sNgDXL2xuq42nfJJtFpIuxUXkyLTiX OsYUnz+wZ2gYHhP1oJNQdpFn1IU+o8TrOvELj4tBUaQP3t+uWqO7472Xrr3NaiHh yjyISjWoo94SloGipN8R7P+Ih/AwcBQX0F5i5Nc2ZExq9u/nAezrVUYL2cgOxs5f HgKz3vWR/bpORY2h0Oo12OcwJ9A85iCQmyFyJ2PoBDVkVCbeKBHa26N7g0KaiK1O SztNY4ehmLetoHA1X+3KJdB+xXCQzMorN+Jpz1Rpd747aMGJ4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2hEEV46vC3DTJWx1+2gQR7ob31MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDk0OGNkN2MtZGQzZS0z OTkxLTkyMmEtNjgzYjlkNzdmMjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGICC3m6MdegvhQ6eIe64aEDFVebJZmxWS5LIBRVrpQKdcliXHPyjU/C 3F3G+8p8ri/PrkaJ9tPVEVomkCC4kvIJpTHeIhnKiXRyWKYTHfJutqK85N25ejdo 08M7G53B0mFS159tn+c8l4m1sTzpekiAzGz5O2+rnQmezEn/lX398OCOfHgaLrtN IfRCRz+hlgcXIDdbyL8d8wEno9C7wy8R54YPnpYw5YBGTP+V8Vhsi3jWvmLKdR3t m/oJjcapF8hJCSl2uZKIrbh/H4NDK3JoHCC5E1BHmSxwYpSN8uWerISnhV2OuOQd 96cLmvEBQRmuIJXfFH1wm+pzMbGxl5o= -----END CERTIFICATE-----Generated at Thu Mar 26 13:02:55 2026 by rpki-client