$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4955b66-1f82-3a27-923a-8de3c8cae499.roa File: f4955b66-1f82-3a27-923a-8de3c8cae499.roa (raw, json) Hash identifier: FVVfowrTg3XOomjAJYjF8unoxvvvNtxyItrBf4mhKFI= Subject key identifier: 54:AD:3F:50:51:31:93:82:C8:EC:51:77:8E:2B:1B:10:69:B7:AE:C4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D46B1134FF10D137E00BBA080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4955b66-1f82-3a27-923a-8de3c8cae499.roa Signing time: Tue 24 Mar 2026 15:44:57 +0000 ROA not before: Tue 24 Mar 2026 15:44:57 +0000 ROA not after: Mon 22 Jun 2026 15:44:57 +0000 asID: 36632 IP address blocks: 192.42.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:b1:13:4f:f1:0d:13:7e:00:bb:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 24 15:44:57 2026 GMT Not After : Jun 22 15:44:57 2026 GMT Subject: CN=b7181f6f-9d00-40bc-94ac-8406983e1bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:bc:f0:ef:67:86:d6:c8:76:ea:7a:09:52:47: e0:6c:af:92:8f:d9:af:f4:ae:bc:c9:61:e4:2b:d0: b4:ee:2a:ff:54:1e:fc:fd:5c:7d:e9:5e:db:f0:41: c1:f1:75:c0:3b:f6:0b:3d:9b:40:91:4c:26:d3:31: a7:36:03:06:21:cf:b3:0c:6a:e2:81:13:2d:6b:cc: 17:c2:5d:7d:1e:9b:fa:6b:75:f7:86:59:76:ef:1e: c1:21:05:9d:8c:90:41:40:e7:09:5c:41:e8:e2:ac: 5b:35:a7:e7:26:80:07:ad:81:29:a7:b3:55:a3:b4: 14:2e:0e:c9:0f:da:3d:5f:1a:03:5d:03:7a:4b:7b: 9d:ec:87:f5:d0:33:90:99:d7:4b:86:1b:2d:12:b1: c6:cd:ac:34:42:12:1d:b0:b5:2c:b0:89:99:99:a5: df:52:aa:0b:44:2e:ae:ae:bc:4f:2b:cd:97:5f:9d: 64:66:0a:cc:ad:e7:51:45:7d:c5:5d:d4:28:76:cf: 1e:8d:01:7e:e9:66:ea:1b:ce:f9:f8:37:2c:40:ad: 68:70:8b:e6:3c:5a:23:d0:03:9f:7a:75:d1:78:04: a6:c7:0a:9c:57:05:6a:d7:52:a5:c1:0f:96:77:79: dd:9f:2b:8d:34:84:f9:07:fc:55:2f:21:89:e6:05: d4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:AD:3F:50:51:31:93:82:C8:EC:51:77:8E:2B:1B:10:69:B7:AE:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4955b66-1f82-3a27-923a-8de3c8cae499.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:a9:36:a1:b0:60:c8:23:54:2e:40:91:e0:94:f7:48:b3:aa: 99:9d:d3:cf:41:b0:71:59:63:ae:bd:a4:98:b2:2b:c0:0b:fc: 09:73:03:46:e6:9f:b1:9f:bd:00:29:11:4d:0d:5c:09:39:18: f6:34:8e:f1:9a:9f:c6:e7:e4:22:3c:ad:a5:be:93:4a:f3:25: e7:46:5b:82:2e:5e:d7:03:a8:53:0d:f1:67:5e:c6:d5:9c:47: f9:ec:20:c5:79:ba:14:32:62:53:00:06:d8:0e:28:8d:2e:fc: 69:df:38:dd:d1:28:7c:66:e3:fc:ab:cb:95:3d:bb:6c:f3:24: c1:51:c6:a6:48:56:24:00:f8:88:04:4f:b8:3d:0c:96:bf:95: 34:bd:07:18:b9:8a:62:a4:fb:fb:f5:bc:95:13:da:57:ea:d3: c5:14:54:b4:0d:09:e7:65:55:9c:5a:69:3a:60:fd:7f:67:97: 67:88:15:19:d7:a9:f8:29:a2:d1:76:0a:8c:72:7c:5d:75:04: 8e:34:a9:de:a1:0b:a9:79:0d:fd:39:74:f2:13:c2:41:c8:c4: ec:59:1b:0f:d7:3f:94:72:3c:f3:5a:69:e0:dc:3d:d5:b7:74: 09:20:ba:23:6f:f0:dc:eb:8c:c4:1f:ce:80:55:f2:fa:6b:79: 10:69:d0:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1GsRNP8Q0TfgC7oIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyNDE1NDQ1N1oXDTI2MDYyMjE1NDQ1N1owLzEtMCsGA1UEAxMk YjcxODFmNmYtOWQwMC00MGJjLTk0YWMtODQwNjk4M2UxYmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrzw72eG1sh26noJUkfgbK+Sj9mv9K68yWHk K9C07ir/VB78/Vx96V7b8EHB8XXAO/YLPZtAkUwm0zGnNgMGIc+zDGrigRMta8wX wl19Hpv6a3X3hll27x7BIQWdjJBBQOcJXEHo4qxbNafnJoAHrYEpp7NVo7QULg7J D9o9XxoDXQN6S3ud7If10DOQmddLhhstErHGzaw0QhIdsLUssImZmaXfUqoLRC6u rrxPK82XX51kZgrMredRRX3FXdQods8ejQF+6WbqG875+DcsQK1ocIvmPFoj0AOf enXReASmxwqcVwVq11KlwQ+Wd3ndnyuNNIT5B/xVLyGJ5gXUaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFStP1BRMZOCyOxRd44rGxBpt67EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjQ5NTViNjYtMWY4Mi0z YTI3LTkyM2EtOGRlM2M4Y2FlNDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCquMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGpNqGwYMgjVC5AkeCU90izqpmd089BsHFZY669pJiyK8AL/AlzA0bm n7GfvQApEU0NXAk5GPY0jvGan8bn5CI8raW+k0rzJedGW4IuXtcDqFMN8WdextWc R/nsIMV5uhQyYlMABtgOKI0u/GnfON3RKHxm4/yry5U9u2zzJMFRxqZIViQA+IgE T7g9DJa/lTS9Bxi5imKk+/v1vJUT2lfq08UUVLQNCedlVZxaaTpg/X9nl2eIFRnX qfgpotF2CoxyfF11BI40qd6hC6l5Df05dPITwkHIxOxZGw/XP5RyPPNaaeDcPdW3 dAkguiNv8NzrjMQfzoBV8vpreRBp0KQ= -----END CERTIFICATE-----Generated at Thu Mar 26 08:39:27 2026 by rpki-client