$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da0c9105-e727-36bc-a6d6-a29b6fed4a32.roa File: da0c9105-e727-36bc-a6d6-a29b6fed4a32.roa (raw, json) Hash identifier: Zkx9cbnetSBtsLZ+wkJ0ZQ5vyhEbAbnkqkMj5ts5el4= Subject key identifier: B9:96:7C:63:77:A7:6D:A4:80:06:25:40:DE:7D:2A:06:C5:E6:B6:1D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D3E000DB2B6229E7ECF499D10 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da0c9105-e727-36bc-a6d6-a29b6fed4a32.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396563 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:0d:b2:b6:22:9e:7e:cf:49:9d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=919bef85-fc97-4dd8-98a0-34586914491c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:72:a7:7a:f5:51:36:2e:ad:4b:27:70:a3:0d: 72:21:f2:ef:e7:07:95:78:5b:ac:12:7d:3f:4a:7f: a1:94:48:83:e6:0a:4b:45:86:4d:46:fb:4c:30:c4: a8:45:e1:7b:2f:51:ca:2c:2f:c9:3d:0f:b1:2c:ec: 99:89:48:09:26:2d:34:1f:b7:0d:f4:bf:14:3f:f6: 6e:89:8e:47:d5:a7:6d:bf:03:94:78:49:a8:55:2c: 28:6c:c4:8f:01:59:8c:be:a9:78:e7:71:d2:7a:b0: b6:94:e0:66:05:55:96:fb:62:87:1d:ba:0c:41:44: 76:98:61:b3:ed:26:d8:46:32:32:ca:14:a9:1e:8c: 05:95:84:da:cf:81:27:c1:78:e9:b8:20:e9:e2:de: b6:a9:85:a0:59:f7:76:a6:fe:92:e1:49:9b:bc:0f: 64:89:27:11:69:ee:f6:29:b6:97:d7:1a:08:ee:90: 87:af:2b:16:cc:59:fc:fc:57:c0:01:b5:c6:f9:49: 64:2f:41:44:9b:d7:f2:0b:92:ac:de:64:64:e4:3e: 43:1d:6f:ee:8a:5e:2a:40:da:17:5d:66:22:c8:30: ff:d2:7e:7e:15:a8:d0:c6:29:35:d2:fc:a7:d7:b0: 20:11:67:5c:a5:48:51:00:a9:b3:c6:3e:60:b0:6c: 4e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:96:7C:63:77:A7:6D:A4:80:06:25:40:DE:7D:2A:06:C5:E6:B6:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da0c9105-e727-36bc-a6d6-a29b6fed4a32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:24:e9:2f:91:0f:8a:1c:2e:56:df:97:f7:57:fb:07:f2:28: 7e:3e:2c:1d:5f:c1:5c:ae:33:f3:1f:39:97:b3:c8:b3:5f:d1: 62:8d:92:df:2d:df:8b:23:a1:5c:ab:17:2e:fd:db:3c:f5:db: be:b3:a5:6a:3f:d2:d8:95:6c:9b:41:ee:b3:b3:78:1b:f5:1c: 28:7b:4d:02:86:68:8f:90:65:11:c2:ba:01:1c:ba:68:fb:53: 79:fc:1b:99:6e:5c:09:4a:27:f1:48:d3:04:1a:26:9a:65:65: 5d:50:5e:59:26:94:a1:d2:dc:45:64:2f:19:06:f1:60:df:04: 76:8b:33:2b:9a:a2:3a:df:1b:e4:5b:a4:d5:94:78:c5:b3:be: 6f:c2:f3:52:f9:4e:35:70:4f:8e:40:cf:df:3d:3c:c3:d7:2a: a6:b4:90:72:5d:5f:28:e1:92:7c:63:23:15:f9:c3:c2:85:69: 90:4b:17:5d:d0:cf:13:0f:4d:31:a5:15:d1:bd:11:0a:cd:42: da:9e:58:ad:d5:97:ad:05:a5:50:51:f5:d7:ca:c1:cd:f2:4e: 50:e5:6b:6c:25:86:9a:21:a6:5e:83:20:1e:95:a5:6a:c7:81: 8c:8a:9c:4b:76:29:53:51:a1:1e:1d:cc:1a:8d:47:b2:43:b2: c0:0c:dd:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AA2ytiKefs9JnRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk OTE5YmVmODUtZmM5Ny00ZGQ4LTk4YTAtMzQ1ODY5MTQ0OTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHKnevVRNi6tSydwow1yIfLv5weVeFusEn0/ Sn+hlEiD5gpLRYZNRvtMMMSoReF7L1HKLC/JPQ+xLOyZiUgJJi00H7cN9L8UP/Zu iY5H1adtvwOUeEmoVSwobMSPAVmMvql453HSerC2lOBmBVWW+2KHHboMQUR2mGGz 7SbYRjIyyhSpHowFlYTaz4EnwXjpuCDp4t62qYWgWfd2pv6S4UmbvA9kiScRae72 KbaX1xoI7pCHrysWzFn8/FfAAbXG+UlkL0FEm9fyC5Ks3mRk5D5DHW/uil4qQNoX XWYiyDD/0n5+FajQxik10vyn17AgEWdcpUhRAKmzxj5gsGxOZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmWfGN3p22kgAYlQN59KgbF5rYdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGEwYzkxMDUtZTcyNy0z NmJjLWE2ZDYtYTI5YjZmZWQ0YTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8k6S+RD4ocLlbfl/dX+wfyKH4+LB1fwVyuM/MfOZezyLNf0WKNkt8t 34sjoVyrFy792zz1276zpWo/0tiVbJtB7rOzeBv1HCh7TQKGaI+QZRHCugEcumj7 U3n8G5luXAlKJ/FI0wQaJpplZV1QXlkmlKHS3EVkLxkG8WDfBHaLMyuaojrfG+Rb pNWUeMWzvm/C81L5TjVwT45Az989PMPXKqa0kHJdXyjhknxjIxX5w8KFaZBLF13Q zxMPTTGlFdG9EQrNQtqeWK3Vl60FpVBR9dfKwc3yTlDla2wlhpohpl6DIB6VpWrH gYyKnEt2KVNRoR4dzBqNR7JDssAM3cA= -----END CERTIFICATE-----Generated at Thu Mar 26 09:10:52 2026 by rpki-client