$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f82e725c-cf57-3293-a86e-644c00c65cb0.roa File: f82e725c-cf57-3293-a86e-644c00c65cb0.roa (raw, json) Hash identifier: ffvHDv5e0/vZNX037Pl5LBhOmoD52ZpD/Ak53ncVs2o= Subject key identifier: D6:E2:6A:2B:44:47:AE:FA:18:C0:54:B5:42:B2:96:7F:68:21:1D:7B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D3DFF941071B48DBB676E7600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f82e725c-cf57-3293-a86e-644c00c65cb0.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 36631 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:94:10:71:b4:8d:bb:67:6e:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=9c5a74e5-3522-46dc-9eee-d7256734021b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d5:55:0d:ee:88:d2:64:40:3a:67:b1:3f:a6: 18:98:ca:2d:81:24:af:11:67:8c:a9:4b:a7:d4:3c: 13:0a:a8:d3:6e:68:83:c4:a4:fd:25:5e:b2:da:22: 58:76:ed:b4:df:ce:e8:9f:c7:c6:95:65:7c:a6:2e: 21:9e:4d:d6:25:c1:bb:30:c9:9a:7f:6c:90:52:34: 0b:d5:cd:fd:74:92:96:e0:31:2b:3b:ac:46:36:24: 60:d3:2d:9b:af:5f:9e:8f:a8:9c:6c:0c:34:f8:bd: 15:b6:1c:71:5b:e4:c7:1e:df:89:c9:8f:4e:da:b8: 0a:27:d3:79:2d:d2:d1:48:17:79:6d:ba:d2:ac:76: 11:18:b5:64:6a:b2:9d:59:0f:f0:1f:9a:81:be:ca: 68:1f:72:ce:22:79:7b:d9:61:cb:ea:62:b8:d0:8b: 42:6c:23:cb:93:1c:6a:ae:be:43:85:d9:85:cd:b2: 47:a0:96:92:d6:24:f2:41:3a:31:ae:9a:f7:35:a1: 60:d3:02:47:79:ab:c1:e9:ad:f7:85:b1:e2:01:58: 1d:59:1f:76:10:7c:d1:c6:5b:bd:3a:3c:66:24:37: 52:2c:08:58:e8:b0:83:40:41:e8:c0:54:9f:7c:56: 7b:a3:15:ce:4d:b1:13:2c:28:fe:30:a1:65:ad:b3: 62:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E2:6A:2B:44:47:AE:FA:18:C0:54:B5:42:B2:96:7F:68:21:1D:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f82e725c-cf57-3293-a86e-644c00c65cb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:54:7a:b8:d5:12:bb:ca:45:a2:7a:98:94:75:25:62:65:1f: 4e:9b:00:ca:6b:00:cd:f7:01:5f:56:04:36:c0:1f:a0:ed:45: 63:55:17:41:65:93:1e:48:40:44:0d:9a:ea:92:be:4c:58:25: cc:9f:f9:c8:e7:1a:d0:4c:63:73:45:56:5b:a7:da:66:12:3b: 14:63:9d:ed:5f:c1:b6:09:f9:a4:62:a4:7f:f1:ca:8c:96:a4: 24:9e:49:cf:6e:f2:97:93:4e:87:76:3a:46:dc:85:ec:f8:09: 3d:50:37:3d:b7:3e:65:57:b3:08:5a:26:e2:23:01:11:be:09: 0c:da:19:20:6c:46:0b:af:aa:bc:e2:3d:69:b0:77:26:dd:7f: 6a:35:b0:14:e0:93:ac:47:ab:5a:d9:e7:2c:a3:f9:23:31:40: ed:80:cf:41:84:ff:91:51:3b:62:af:cc:13:e5:ab:02:d2:2b: fc:d3:ca:d8:2c:0e:d4:80:02:1a:81:94:b0:a1:f2:68:43:3f: 4c:bb:fd:8a:05:5d:02:b3:e9:74:2b:98:43:4f:34:22:02:dd: 71:d9:a2:d5:72:fd:cf:6e:5c:a4:24:6c:86:f6:17:bc:59:08: 62:b8:aa:9b:cb:99:9e:73:66:a6:2a:46:9c:28:94:e3:e9:06: 77:27:c9:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/5QQcbSNu2dudgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk OWM1YTc0ZTUtMzUyMi00NmRjLTllZWUtZDcyNTY3MzQwMjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNVVDe6I0mRAOmexP6YYmMotgSSvEWeMqUun 1DwTCqjTbmiDxKT9JV6y2iJYdu20387on8fGlWV8pi4hnk3WJcG7MMmaf2yQUjQL 1c39dJKW4DErO6xGNiRg0y2br1+ej6icbAw0+L0VthxxW+THHt+JyY9O2rgKJ9N5 LdLRSBd5bbrSrHYRGLVkarKdWQ/wH5qBvspoH3LOInl72WHL6mK40ItCbCPLkxxq rr5DhdmFzbJHoJaS1iTyQToxrpr3NaFg0wJHeavB6a33hbHiAVgdWR92EHzRxlu9 OjxmJDdSLAhY6LCDQEHowFSffFZ7oxXOTbETLCj+MKFlrbNi4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbiaitER676GMBUtUKyln9oIR17MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjgyZTcyNWMtY2Y1Ny0z MjkzLWE4NmUtNjQ0YzAwYzY1Y2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJUerjVErvKRaJ6mJR1JWJlH06bAMprAM33AV9WBDbAH6DtRWNVF0Fl kx5IQEQNmuqSvkxYJcyf+cjnGtBMY3NFVlun2mYSOxRjne1fwbYJ+aRipH/xyoyW pCSeSc9u8peTTod2Okbchez4CT1QNz23PmVXswhaJuIjARG+CQzaGSBsRguvqrzi PWmwdybdf2o1sBTgk6xHq1rZ5yyj+SMxQO2Az0GE/5FRO2KvzBPlqwLSK/zTytgs DtSAAhqBlLCh8mhDP0y7/YoFXQKz6XQrmENPNCIC3XHZotVy/c9uXKQkbIb2F7xZ CGK4qpvLmZ5zZqYqRpwolOPpBncnycs= -----END CERTIFICATE-----Generated at Thu Mar 26 16:56:22 2026 by rpki-client