$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e28d0fc6-e42d-3739-b82e-dc8e7a6bf444.roa File: e28d0fc6-e42d-3739-b82e-dc8e7a6bf444.roa (raw, json) Hash identifier: ZHEMVw9qc3B0fupGV0E58hWkrs+9pK7tyuUbv+O85Y4= Subject key identifier: 12:89:32:52:B1:60:46:01:CA:16:7B:4F:F4:6C:2A:FE:08:11:0E:5D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1707BC47DD95105A66A50800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e28d0fc6-e42d-3739-b82e-dc8e7a6bf444.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 36618 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:bc:47:dd:95:10:5a:66:a5:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=37a793ef-e750-4e14-b240-6890de0c9b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4c:5c:bb:ed:8e:6b:ba:02:23:85:b2:8d:11: 9e:58:bb:46:41:9c:6f:15:1c:66:e7:08:18:76:68: e0:82:6a:25:f0:67:ed:d7:04:a5:6e:f0:fb:47:59: 78:41:02:3a:cf:48:11:fa:1e:3f:7f:97:5d:da:fc: 6c:61:97:66:ad:a6:33:80:d2:fc:9b:b5:ea:a9:55: 98:cc:2e:a4:c9:40:d9:33:ec:a6:b2:22:00:25:c8: ab:a9:a2:2e:07:32:0f:de:fa:59:63:cb:11:cc:cd: 9a:3e:2b:a8:fa:bc:ba:80:9a:47:4d:57:9b:28:8d: a3:c9:32:c3:7d:3f:57:94:96:ee:32:99:62:d1:08: f5:fa:c2:58:66:a4:5a:a6:ba:59:f0:1b:68:62:40: b1:26:f0:a8:52:df:40:c4:c8:05:1f:c0:26:ec:30: ea:e6:c7:cb:6a:73:02:21:1f:c2:77:24:cd:7e:1b: bd:69:14:fe:c9:9f:42:a8:e0:01:d8:be:28:f0:69: b4:f1:cf:8c:db:37:a5:eb:62:82:e5:39:61:c1:7d: 6f:a2:b2:92:fd:d0:03:8b:de:9b:1b:c9:df:49:e9: 6c:70:e7:1c:59:96:bd:c4:18:70:c5:77:ed:a5:53: 61:99:5c:6a:11:01:d4:72:a8:1f:f0:97:67:86:40: 23:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:89:32:52:B1:60:46:01:CA:16:7B:4F:F4:6C:2A:FE:08:11:0E:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e28d0fc6-e42d-3739-b82e-dc8e7a6bf444.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:20:f3:5b:b3:69:d1:15:54:11:55:ef:ed:d9:0a:ce:6e:f5: 7e:64:ca:53:ae:47:e1:2b:2f:fe:36:b5:b7:3c:4f:8d:4e:c0: c7:4f:53:1c:ea:95:71:53:3e:9f:56:3b:74:cf:10:45:70:fb: d7:aa:6b:a8:a5:c6:8b:99:a4:38:b3:35:36:d3:c0:3c:c3:a1: 1d:a1:19:c2:a4:9c:f1:86:7d:89:cb:e2:ca:e8:d9:9f:7c:4a: 99:55:a8:e8:e4:9a:12:eb:5d:8b:a3:a4:fb:03:62:a6:9a:05: 50:6c:66:8e:ce:ed:fe:9e:5c:8f:fc:98:39:72:f8:f4:46:31: 45:26:1c:53:08:76:46:a4:4c:f0:10:7c:8f:b7:a8:29:62:7b: e7:4d:4f:97:57:be:3e:e8:90:ba:7f:55:2b:7a:44:e7:25:c7: ed:2d:3a:c6:fb:66:8f:81:99:01:87:36:82:31:d6:e7:ee:e9: 7d:92:28:ff:1e:63:6e:a9:70:a9:e5:70:40:66:19:18:e7:f8: e5:7f:21:a3:61:d2:6e:3e:5c:ba:63:6b:23:9d:34:e6:0b:1e: 64:22:53:0a:28:49:65:e8:62:0d:0d:d0:66:b9:2a:73:b4:c9: 51:d2:1a:53:f5:02:0d:4b:01:59:a7:36:d2:8d:92:f7:ad:2b: f5:52:e8:24 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0XB7xH3ZUQWmalCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk MzdhNzkzZWYtZTc1MC00ZTE0LWIyNDAtNjg5MGRlMGM5YjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0xcu+2Oa7oCI4WyjRGeWLtGQZxvFRxm5wgY dmjggmol8Gft1wSlbvD7R1l4QQI6z0gR+h4/f5dd2vxsYZdmraYzgNL8m7XqqVWY zC6kyUDZM+ymsiIAJcirqaIuBzIP3vpZY8sRzM2aPiuo+ry6gJpHTVebKI2jyTLD fT9XlJbuMpli0Qj1+sJYZqRaprpZ8BtoYkCxJvCoUt9AxMgFH8Am7DDq5sfLanMC IR/CdyTNfhu9aRT+yZ9CqOAB2L4o8Gm08c+M2zel62KC5TlhwX1vorKS/dADi96b G8nfSelscOccWZa9xBhwxXftpVNhmVxqEQHUcqgf8JdnhkAjiwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBKJMlKxYEYByhZ7T/RsKv4IEQ5dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTI4ZDBmYzYtZTQyZC0z NzM5LWI4MmUtZGM4ZTdhNmJmNDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBHIPNbs2nRFVQRVe/t2QrObvV+ZMpTrkfhKy/+NrW3PE+NTsDHT1Mc 6pVxUz6fVjt0zxBFcPvXqmuopcaLmaQ4szU208A8w6EdoRnCpJzxhn2Jy+LK6Nmf fEqZVajo5JoS612Lo6T7A2KmmgVQbGaOzu3+nlyP/Jg5cvj0RjFFJhxTCHZGpEzw EHyPt6gpYnvnTU+XV74+6JC6f1UrekTnJcftLTrG+2aPgZkBhzaCMdbn7ul9kij/ HmNuqXCp5XBAZhkY5/jlfyGjYdJuPly6Y2sjnTTmCx5kIlMKKEll6GINDdBmuSpz tMlR0hpT9QINSwFZpzbSjZL3rSv1Uugk -----END CERTIFICATE-----Generated at Thu Mar 26 09:58:01 2026 by rpki-client