$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f0da3b92-b1d4-382f-8c26-8f583a487c32.roa File: f0da3b92-b1d4-382f-8c26-8f583a487c32.roa (raw, json) Hash identifier: UyFiMCa1eu5FEkNgjhQnFDQkW75k2CvWwL95FrVw0xo= Subject key identifier: 02:17:D6:BF:94:40:A4:43:09:4D:EB:B6:65:76:32:8C:29:F9:7A:EE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D3DFF93B2AD1A2CDF82B7FA80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f0da3b92-b1d4-382f-8c26-8f583a487c32.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396616 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:93:b2:ad:1a:2c:df:82:b7:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=a69b372e-3faf-4e17-a797-b2cab62f372b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d0:9e:ae:b1:e3:1e:3e:ae:30:3f:45:4b:98: be:6a:05:e8:f2:e7:77:90:d0:89:a8:90:b9:a0:0b: 17:cb:ef:d4:30:f1:57:16:bb:88:b9:7f:3a:10:4d: 5c:8e:f9:d7:af:11:61:bb:06:45:41:ce:6d:7f:d9: f4:db:88:72:05:f5:38:29:03:f6:e8:f2:37:c9:fd: fd:b2:94:c2:a8:27:2c:89:3b:32:f4:45:03:2f:3e: 31:54:ab:72:5d:c9:05:85:65:e7:18:49:23:87:e3: 19:7b:e4:16:96:fd:f0:ce:b6:4f:14:af:cf:39:76: be:f6:d8:cf:06:72:26:91:4e:08:e7:a5:21:6f:90: f4:b6:7a:91:bd:1b:4c:92:44:a7:d2:be:67:2f:84: 9a:cc:a7:d3:35:75:3e:af:ab:98:24:d1:e9:48:e0: f8:ff:0b:62:08:33:ce:c9:8f:c1:4b:c8:9f:5d:2a: a7:be:9b:97:e0:3b:2b:98:d6:d2:59:7d:77:45:3f: 02:29:b0:99:02:7e:ad:d7:04:47:4a:47:81:92:a3: a9:0f:4e:98:d7:67:13:b1:f6:70:67:48:2e:bf:55: f5:1a:e9:17:17:28:6c:dc:4c:c6:75:43:13:4d:18: 47:26:c7:ed:eb:f1:9c:e1:8d:6c:81:a6:ca:00:65: 19:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:17:D6:BF:94:40:A4:43:09:4D:EB:B6:65:76:32:8C:29:F9:7A:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f0da3b92-b1d4-382f-8c26-8f583a487c32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:3f:c5:59:2f:73:b4:f4:79:0d:07:72:0b:35:8e:13:1e:37: 56:6f:56:39:09:06:ee:7a:5c:6a:cf:d7:6e:01:6f:4a:33:43: 1a:09:64:d8:31:ce:cd:a6:6f:bd:a7:bf:89:31:81:28:cb:da: 1f:b5:68:82:13:b5:3a:eb:1d:76:a3:07:06:83:b1:1f:0c:f0: 0c:cc:96:b7:4d:d7:c6:7f:ad:ba:d1:67:f3:3f:ef:6f:c5:97: 38:ef:00:14:62:f9:ca:cf:73:31:cd:31:f9:03:2f:52:59:9b: a8:ef:26:f4:c5:05:50:c2:b3:32:29:0d:57:e1:ae:de:ac:f7: 30:72:e3:ac:42:42:34:1b:76:4a:96:b1:d2:c6:8b:be:f0:e7: 61:a1:af:2c:cb:5b:d8:c9:64:da:f4:a0:9e:9e:5e:6e:60:6c: 84:c8:ef:af:d5:84:d6:bf:4b:b6:3b:2a:d1:26:e8:d0:d8:6b: 60:c0:94:36:28:df:47:19:31:02:29:01:ef:47:e3:fb:77:b1: f2:01:56:10:92:18:e9:9c:e6:1f:02:be:82:2d:ed:da:30:93: be:95:18:24:39:d9:83:67:76:8e:11:1a:de:c5:9e:d7:97:99: f7:ec:18:14:8b:9c:ad:da:02:8a:74:73:cd:45:e5:05:35:d0: 36:54:f4:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/5OyrRos34K3+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YTY5YjM3MmUtM2ZhZi00ZTE3LWE3OTctYjJjYWI2MmYzNzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodCerrHjHj6uMD9FS5i+agXo8ud3kNCJqJC5 oAsXy+/UMPFXFruIuX86EE1cjvnXrxFhuwZFQc5tf9n024hyBfU4KQP26PI3yf39 spTCqCcsiTsy9EUDLz4xVKtyXckFhWXnGEkjh+MZe+QWlv3wzrZPFK/POXa+9tjP BnImkU4I56Uhb5D0tnqRvRtMkkSn0r5nL4SazKfTNXU+r6uYJNHpSOD4/wtiCDPO yY/BS8ifXSqnvpuX4DsrmNbSWX13RT8CKbCZAn6t1wRHSkeBkqOpD06Y12cTsfZw Z0guv1X1GukXFyhs3EzGdUMTTRhHJsft6/Gc4Y1sgabKAGUZLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIX1r+UQKRDCU3rtmV2Mowp+XruMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjBkYTNiOTItYjFkNC0z ODJmLThjMjYtOGY1ODNhNDg3YzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEo/xVkvc7T0eQ0Hcgs1jhMeN1ZvVjkJBu56XGrP124Bb0ozQxoJZNgx zs2mb72nv4kxgSjL2h+1aIITtTrrHXajBwaDsR8M8AzMlrdN18Z/rbrRZ/M/72/F lzjvABRi+crPczHNMfkDL1JZm6jvJvTFBVDCszIpDVfhrt6s9zBy46xCQjQbdkqW sdLGi77w52GhryzLW9jJZNr0oJ6eXm5gbITI76/VhNa/S7Y7KtEm6NDYa2DAlDYo 30cZMQIpAe9H4/t3sfIBVhCSGOmc5h8CvoIt7dowk76VGCQ52YNndo4RGt7FnteX mffsGBSLnK3aAop0c81F5QU10DZU9Lk= -----END CERTIFICATE-----Generated at Thu Mar 26 16:56:23 2026 by rpki-client