$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2ddbab7-20bf-3184-9fa8-fc65f48b5769.roa File: f2ddbab7-20bf-3184-9fa8-fc65f48b5769.roa (raw, json) Hash identifier: OOimg8WUu8+FJT8UH6U2vXvFmUeJPPE13HyvBU8/ehI= Subject key identifier: B4:09:BC:DA:F7:3B:38:36:3B:0E:CD:FB:30:95:7C:E9:E1:38:56:F2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D3DFF929DA8A1233FC06B2700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2ddbab7-20bf-3184-9fa8-fc65f48b5769.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 36626 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:92:9d:a8:a1:23:3f:c0:6b:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=7dea3933-9cf6-45e2-bb02-35fea5d5c1cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4b:9f:38:ea:02:02:90:54:63:94:c0:a3:6c: 6b:b4:7c:75:41:5a:f2:6b:30:45:c9:21:c7:a0:90: 87:9d:a2:ea:e3:ef:33:a7:5c:08:0d:52:af:ee:05: c2:e8:19:ba:4e:bb:ef:9a:b6:27:46:e5:a4:e8:36: e9:d9:5e:e1:39:5d:ac:82:fd:3e:f0:30:d3:7a:9d: d4:d3:2d:6a:d3:bf:59:42:f7:19:35:a7:d0:6a:47: 26:76:42:51:5e:ee:3c:79:84:4b:d2:8e:34:a2:6b: a0:17:d2:86:ad:0c:00:31:ca:7f:d2:12:e5:7e:40: 22:a2:2b:c3:e2:c3:9a:68:bd:76:9c:94:52:27:3f: 31:90:9b:54:7e:f5:b6:9a:3c:01:ed:f5:38:6e:56: 96:72:f1:1e:1f:30:88:74:ff:67:e0:cb:f4:ea:41: 4e:9c:58:ea:07:b7:36:01:7c:75:de:ec:f8:33:83: 4f:f2:0f:4c:4c:15:7c:11:28:c5:13:28:58:7d:e8: 6c:ab:a7:74:14:e3:29:92:2c:93:d8:e4:68:35:e2: 94:17:1f:c7:57:9c:94:7f:a2:4a:c2:90:24:1d:4f: cc:34:3d:3e:1f:48:d6:fb:d4:48:cb:db:a2:a2:7d: 90:c3:a7:97:6b:ab:71:3d:53:55:64:53:cc:e1:d2: ef:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:09:BC:DA:F7:3B:38:36:3B:0E:CD:FB:30:95:7C:E9:E1:38:56:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2ddbab7-20bf-3184-9fa8-fc65f48b5769.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:19:5c:e0:3a:c7:6e:4b:7a:67:6c:44:ae:92:e5:3c:32:44: 4e:57:c8:9a:07:3c:d9:83:56:e3:e4:02:9e:f7:3b:20:78:c4: b3:26:94:c2:31:7a:34:07:a9:e9:e9:d1:ac:12:73:d7:16:c8: 04:ad:86:59:35:cf:cc:50:96:7d:48:5d:58:8e:bb:c2:73:b8: ec:5e:95:2f:a2:98:0d:71:f8:e9:fa:9e:fa:5b:7a:0b:07:f8: dd:f8:a2:db:f4:53:c5:c8:fb:bf:c1:d4:4c:7a:fa:be:00:9a: 4e:8a:7d:38:8d:7d:51:d2:c6:1c:a8:70:66:63:e4:24:a0:70: d1:2d:b8:0e:a1:d0:6b:8b:72:cf:78:b7:44:50:c8:de:be:28: 05:25:34:2a:b5:ee:70:cc:58:cf:4a:56:7e:08:48:8d:33:c1: de:f6:7e:78:c0:ce:2f:f7:ec:90:89:e8:a8:75:c3:68:7a:62: 51:4c:25:23:5f:bb:06:30:4f:ee:55:b4:e7:e8:dd:8b:c9:24: 40:72:86:91:f4:55:f2:6e:0c:48:d6:8b:1d:c7:8f:46:ef:7a: 04:55:b3:43:54:18:66:98:52:fa:bd:f7:d9:c7:6c:ee:d4:86: fc:92:61:e1:1e:48:9a:e2:c4:0c:13:89:77:63:56:95:a7:fd: d9:97:56:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/5KdqKEjP8BrJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk N2RlYTM5MzMtOWNmNi00NWUyLWJiMDItMzVmZWE1ZDVjMWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkufOOoCApBUY5TAo2xrtHx1QVryazBFySHH oJCHnaLq4+8zp1wIDVKv7gXC6Bm6TrvvmrYnRuWk6Dbp2V7hOV2sgv0+8DDTep3U 0y1q079ZQvcZNafQakcmdkJRXu48eYRL0o40omugF9KGrQwAMcp/0hLlfkAioivD 4sOaaL12nJRSJz8xkJtUfvW2mjwB7fU4blaWcvEeHzCIdP9n4Mv06kFOnFjqB7c2 AXx13uz4M4NP8g9MTBV8ESjFEyhYfehsq6d0FOMpkiyT2ORoNeKUFx/HV5yUf6JK wpAkHU/MND0+H0jW+9RIy9uion2Qw6eXa6txPVNVZFPM4dLvcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQJvNr3Ozg2Ow7N+zCVfOnhOFbyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjJkZGJhYjctMjBiZi0z MTg0LTlmYTgtZmM2NWY0OGI1NzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMZXOA6x25LemdsRK6S5TwyRE5XyJoHPNmDVuPkAp73OyB4xLMmlMIx ejQHqenp0awSc9cWyASthlk1z8xQln1IXViOu8JzuOxelS+imA1x+On6nvpbegsH +N34otv0U8XI+7/B1Ex6+r4Amk6KfTiNfVHSxhyocGZj5CSgcNEtuA6h0GuLcs94 t0RQyN6+KAUlNCq17nDMWM9KVn4ISI0zwd72fnjAzi/37JCJ6Kh1w2h6YlFMJSNf uwYwT+5VtOfo3YvJJEByhpH0VfJuDEjWix3Hj0bvegRVs0NUGGaYUvq999nHbO7U hvySYeEeSJrixAwTiXdjVpWn/dmXVpw= -----END CERTIFICATE-----Generated at Thu Mar 26 16:31:38 2026 by rpki-client