$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de680d89-d38c-3776-bbc5-3b0499ce9e77.roa File: de680d89-d38c-3776-bbc5-3b0499ce9e77.roa (raw, json) Hash identifier: 21yS7W1Qy3mxsYwqVcPNOnpmMW6F5lOx7bW0m20akto= Subject key identifier: B9:72:A5:86:16:07:C6:DE:C9:93:79:69:AF:FF:6F:CB:A6:82:F1:35 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D46B1144B757361148635C000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de680d89-d38c-3776-bbc5-3b0499ce9e77.roa Signing time: Tue 24 Mar 2026 15:44:57 +0000 ROA not before: Tue 24 Mar 2026 15:44:57 +0000 ROA not after: Mon 22 Jun 2026 15:44:57 +0000 asID: 27544 IP address blocks: 192.42.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:b1:14:4b:75:73:61:14:86:35:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 24 15:44:57 2026 GMT Not After : Jun 22 15:44:57 2026 GMT Subject: CN=ccb3653a-2248-40c8-a618-b525a9d4eddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b0:8c:51:ad:ab:83:20:96:b8:0d:ba:5c:14: 7d:e5:e4:a7:0a:65:e8:8e:07:42:94:c8:aa:ea:22: 78:40:6f:40:6c:11:e5:c8:73:a8:7c:5d:de:31:ff: d3:5d:70:24:b5:ca:27:72:92:f7:bc:2c:91:db:89: 51:c9:9d:0c:7f:3b:95:df:51:47:4f:56:7a:ee:ba: a0:9c:34:b7:46:ce:8a:8f:76:1e:c7:10:80:8f:63: 92:a6:10:ff:9a:85:8a:14:ce:09:a8:e9:58:b3:89: 31:81:d0:b0:f7:a4:2a:e0:39:03:9c:b0:ba:30:78: 19:83:25:50:79:cf:6a:44:10:42:71:6e:df:05:70: 02:08:70:de:1d:2c:69:fc:9e:55:20:ec:8e:0a:d0: cc:92:83:1b:ed:2f:5e:a4:b0:9f:f8:f9:3d:8a:d4: 0f:9e:f1:b5:0b:07:ce:7f:99:c2:9e:97:72:5f:6a: ce:bd:a3:18:8f:bd:99:1c:57:b7:91:ac:e7:16:b1: 5e:7a:41:a6:da:67:82:dd:7a:51:a9:a6:4b:6c:15: e8:1b:c0:ae:47:3b:35:1d:e5:ad:85:7d:a2:b4:19: 6c:1d:f3:90:5d:1e:46:f8:17:76:c5:45:0d:1f:4b: 5b:cc:23:66:0d:32:69:e6:be:a7:3c:d2:f7:1c:c9: 54:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:72:A5:86:16:07:C6:DE:C9:93:79:69:AF:FF:6F:CB:A6:82:F1:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de680d89-d38c-3776-bbc5-3b0499ce9e77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:15:06:2d:d2:28:f8:b2:ab:3e:5e:c7:f8:6c:c5:31:6d:f0: bb:57:0b:dd:9e:3d:60:e8:a2:c1:e2:aa:9d:04:84:b0:f6:d9: 73:0d:bd:26:0b:86:e8:1c:27:7f:08:a8:4a:16:22:29:9b:56: 3d:58:31:41:6b:1e:4f:cc:15:03:e8:42:40:c4:9e:29:50:1a: 22:3a:28:d8:dc:77:4c:60:e3:ec:5f:f6:b4:99:91:ff:9c:d3: 62:23:66:a6:57:fb:a3:60:03:2b:0b:c9:f1:9d:3e:53:04:b4: 5b:92:f6:71:ec:ac:45:b9:40:4b:58:59:e4:02:9a:4a:f3:76: 54:9b:ae:15:9c:18:e6:f7:93:ff:9d:25:f4:c3:95:74:57:8d: 1e:1f:7d:b8:0e:3f:9c:45:6f:b8:67:14:47:67:9f:d0:61:88: 3d:2c:73:24:84:89:bc:70:9b:bc:4c:8b:6f:69:ca:0d:dd:58: b6:af:02:28:d4:65:36:ae:d1:40:7c:84:22:31:9b:1e:0b:5f: 2d:c4:83:11:79:47:8f:2d:ce:4c:14:24:5d:11:fa:c1:9d:97: 68:26:88:81:a5:61:38:49:8c:7b:51:0a:a4:c0:a4:7d:3b:26: 3e:95:f6:bc:69:da:1c:ae:b4:d8:15:8e:58:99:9f:80:10:65: d5:b5:86:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1GsRRLdXNhFIY1wAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyNDE1NDQ1N1oXDTI2MDYyMjE1NDQ1N1owLzEtMCsGA1UEAxMk Y2NiMzY1M2EtMjI0OC00MGM4LWE2MTgtYjUyNWE5ZDRlZGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLCMUa2rgyCWuA26XBR95eSnCmXojgdClMiq 6iJ4QG9AbBHlyHOofF3eMf/TXXAktconcpL3vCyR24lRyZ0MfzuV31FHT1Z67rqg nDS3Rs6Kj3YexxCAj2OSphD/moWKFM4JqOlYs4kxgdCw96Qq4DkDnLC6MHgZgyVQ ec9qRBBCcW7fBXACCHDeHSxp/J5VIOyOCtDMkoMb7S9epLCf+Pk9itQPnvG1CwfO f5nCnpdyX2rOvaMYj72ZHFe3kaznFrFeekGm2meC3XpRqaZLbBXoG8CuRzs1HeWt hX2itBlsHfOQXR5G+Bd2xUUNH0tbzCNmDTJp5r6nPNL3HMlUDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlypYYWB8beyZN5aa//b8umgvE1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGU2ODBkODktZDM4Yy0z Nzc2LWJiYzUtM2IwNDk5Y2U5ZTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCquMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKEVBi3SKPiyqz5ex/hsxTFt8LtXC92ePWDoosHiqp0EhLD22XMNvSYL hugcJ38IqEoWIimbVj1YMUFrHk/MFQPoQkDEnilQGiI6KNjcd0xg4+xf9rSZkf+c 02IjZqZX+6NgAysLyfGdPlMEtFuS9nHsrEW5QEtYWeQCmkrzdlSbrhWcGOb3k/+d JfTDlXRXjR4ffbgOP5xFb7hnFEdnn9BhiD0scySEibxwm7xMi29pyg3dWLavAijU ZTau0UB8hCIxmx4LXy3EgxF5R48tzkwUJF0R+sGdl2gmiIGlYThJjHtRCqTApH07 Jj6V9rxp2hyutNgVjliZn4AQZdW1hkM= -----END CERTIFICATE-----Generated at Thu Mar 26 15:33:56 2026 by rpki-client