$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2ddbab7-20bf-3184-9fa8-fc65f48b5769.roa File: f2ddbab7-20bf-3184-9fa8-fc65f48b5769.roa (raw, json) Hash identifier: dwi+XrsevR+LPrLwiOq5X31kHehQnejlPaWdPk6MBHk= Subject key identifier: 12:4F:AF:06:5E:BA:5D:30:43:EE:97:13:D6:40:F1:94:AF:C3:B6:7A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F6292C7C50DCB02F9E538E340 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2ddbab7-20bf-3184-9fa8-fc65f48b5769.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 36626 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:c7:c5:0d:cb:02:f9:e5:38:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=3a0316db-c71c-435c-bb57-bf7d35d6310d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:07:d4:1f:92:54:32:e3:44:6a:d8:33:88:3d: ec:0e:10:10:0a:1a:4c:88:19:c7:b9:7b:42:4f:b6: a3:67:5c:06:fa:22:8c:74:c1:6a:57:1b:dc:7a:ee: c4:72:7c:09:4a:61:44:a7:e8:19:22:b1:32:98:e7: 61:09:f8:ee:51:c6:03:c5:c6:40:39:4f:20:69:6d: 76:53:42:a9:54:10:df:de:12:17:cd:2d:bb:ee:9b: 61:0f:28:8c:4c:a5:d5:0a:f2:7a:d1:61:98:d1:d0: 80:e6:72:28:e4:cd:a8:01:07:c0:da:0c:d8:56:40: f2:bf:ae:f0:2e:4c:4f:50:40:b5:f5:63:25:cd:6d: d0:ba:44:23:ff:65:5f:a0:2e:ea:a9:9c:7c:2c:4a: 47:ef:89:19:fd:7c:30:36:de:ed:53:59:f6:81:df: b7:5f:71:81:96:c0:f8:25:e3:9e:0b:08:cb:c5:0b: fd:1c:02:28:f7:6e:71:a3:e0:30:08:ff:5b:ff:b2: 47:98:de:b7:8a:0a:84:0c:4a:3d:b2:09:63:bd:fd: 20:97:26:06:4f:34:2c:de:6b:7a:82:bc:ab:0b:4a: b8:38:65:54:2a:ae:ee:17:3a:02:08:48:05:46:8c: e6:15:be:2d:a8:80:21:61:3a:0f:b1:b1:01:6f:de: 97:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:4F:AF:06:5E:BA:5D:30:43:EE:97:13:D6:40:F1:94:AF:C3:B6:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2ddbab7-20bf-3184-9fa8-fc65f48b5769.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:c5:43:f3:61:cd:d3:d3:45:39:d0:9e:f6:bc:da:f5:c6:ab: 58:e6:d6:23:c2:b2:35:d8:4b:07:5c:6d:f4:74:52:f2:bb:68: 70:02:37:f0:a6:10:33:1e:9b:ca:23:21:9a:5a:e5:19:c2:a8: b2:5e:3f:8f:3b:1e:54:60:88:56:81:19:56:86:f9:43:7b:cc: ec:77:97:e0:66:66:df:19:bc:d6:f2:97:69:eb:a3:e7:25:6d: 9e:c5:c4:0d:8e:33:8f:8f:a9:62:c2:51:56:89:47:a6:b4:5b: 8d:4c:ee:67:d5:c5:0b:21:e4:17:2e:6b:09:85:3f:f2:d9:24: c6:72:2e:10:1d:5e:66:39:eb:05:11:45:97:57:a5:0a:f8:73: ab:c6:b2:92:32:46:b8:a5:27:9f:ea:fd:24:30:2c:6b:22:6d: 1e:dd:6b:bc:e2:eb:bc:91:32:a9:f2:8e:7b:45:09:57:51:ff: 2b:51:1e:d6:87:72:c2:6a:9f:f1:87:35:a5:b3:2b:fa:39:83: 7b:ce:b8:9a:0b:ba:1c:5f:3d:ea:5c:0f:48:e1:56:b6:9f:f0: e4:14:95:8b:a9:f9:80:d0:bc:10:54:74:44:e7:e1:08:4c:3d: d7:fd:02:4d:c1:e3:4b:26:29:4d:c9:ce:8b:5f:01:37:d4:83: 13:c3:c7:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iksfFDcsC+eU440AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk M2EwMzE2ZGItYzcxYy00MzVjLWJiNTctYmY3ZDM1ZDYzMTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigfUH5JUMuNEatgziD3sDhAQChpMiBnHuXtC T7ajZ1wG+iKMdMFqVxvceu7EcnwJSmFEp+gZIrEymOdhCfjuUcYDxcZAOU8gaW12 U0KpVBDf3hIXzS277pthDyiMTKXVCvJ60WGY0dCA5nIo5M2oAQfA2gzYVkDyv67w LkxPUEC19WMlzW3QukQj/2VfoC7qqZx8LEpH74kZ/XwwNt7tU1n2gd+3X3GBlsD4 JeOeCwjLxQv9HAIo925xo+AwCP9b/7JHmN63igqEDEo9sgljvf0glyYGTzQs3mt6 gryrC0q4OGVUKq7uFzoCCEgFRozmFb4tqIAhYToPsbEBb96XjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJPrwZeul0wQ+6XE9ZA8ZSvw7Z6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjJkZGJhYjctMjBiZi0z MTg0LTlmYTgtZmM2NWY0OGI1NzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALPFQ/NhzdPTRTnQnva82vXGq1jm1iPCsjXYSwdcbfR0UvK7aHACN/Cm EDMem8ojIZpa5RnCqLJeP487HlRgiFaBGVaG+UN7zOx3l+BmZt8ZvNbyl2nro+cl bZ7FxA2OM4+PqWLCUVaJR6a0W41M7mfVxQsh5BcuawmFP/LZJMZyLhAdXmY56wUR RZdXpQr4c6vGspIyRrilJ5/q/SQwLGsibR7da7zi67yRMqnyjntFCVdR/ytRHtaH csJqn/GHNaWzK/o5g3vOuJoLuhxfPepcD0jhVraf8OQUlYup+YDQvBBUdETn4QhM Pdf9Ak3B40smKU3JzotfATfUgxPDx04= -----END CERTIFICATE-----Generated at Sun Oct 4 07:52:10 2026 by rpki-client