$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff1ca7d5-436c-390b-86cc-126186f444fd.roa File: ff1ca7d5-436c-390b-86cc-126186f444fd.roa (raw, json) Hash identifier: fVJ3Cof7RcLdcwRuW/T0/UT4PJgIXxM1/m7ODGYIw7A= Subject key identifier: A6:BB:58:08:BC:97:49:26:6A:25:3D:16:AB:9D:3B:C4:CD:EE:43:BB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D3E0011E0D8ED65B5677F8300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff1ca7d5-436c-390b-86cc-126186f444fd.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 22547 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:11:e0:d8:ed:65:b5:67:7f:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=1e29d1b4-4048-42cc-80d5-2f2e95bda911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1a:68:46:8d:a7:b7:aa:b3:82:ca:40:1d:9b: a3:60:27:67:c8:ab:60:7b:e0:63:82:f9:d7:2c:1d: bd:2f:5d:53:16:a0:86:bc:ca:98:8a:e5:f0:22:cf: a2:3f:d2:c7:32:95:c1:b0:79:88:7e:f2:12:5d:a9: 62:c2:12:e9:0d:0a:0a:a2:ca:d5:21:ba:60:8c:70: 30:2f:85:16:64:23:be:55:90:f1:ca:69:3b:37:28: f7:10:fd:f4:ff:79:fe:47:87:9d:eb:0d:26:d2:1a: fe:73:c7:0b:1a:40:62:db:45:c1:84:b1:87:70:85: 16:89:ee:cd:5f:25:c0:78:0d:d4:9b:af:86:68:32: 08:5e:50:a1:c6:8f:e9:9d:d7:77:14:56:e9:79:0c: af:30:8f:b7:38:a5:bb:b9:d9:f9:f0:c4:a7:69:23: 7f:48:3e:bc:d6:e4:c0:05:7b:a8:ca:a5:7a:6b:4c: ea:e4:64:06:6a:85:a7:ba:e1:8d:68:14:82:90:05: c8:a1:e0:53:be:be:96:0c:9f:09:3b:81:cd:af:4c: b6:da:71:fa:d4:3f:06:48:66:ad:c3:40:94:03:47: dc:e3:31:42:43:8d:ec:4a:2b:9e:33:cb:81:49:9e: a0:43:a1:3c:bb:82:5e:01:53:d6:c2:71:cf:a1:0b: db:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BB:58:08:BC:97:49:26:6A:25:3D:16:AB:9D:3B:C4:CD:EE:43:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff1ca7d5-436c-390b-86cc-126186f444fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:26:d1:a4:fd:e2:66:ee:25:b8:94:ef:20:a4:b9:7a:0c:8e: 5f:4b:f3:fa:74:d8:8b:96:28:9d:9e:47:cb:51:e5:07:f5:ee: da:32:45:bb:29:68:aa:88:50:9e:fe:7e:29:92:0b:e9:da:76: 36:6f:a2:01:b4:c3:27:56:05:6d:5c:4c:db:80:d9:ad:4c:83: a0:be:fc:93:8e:14:87:31:e7:ae:68:0e:fc:d0:dd:40:02:93: 32:2d:bf:7d:11:b0:e8:57:a3:93:cb:60:d2:d0:45:03:d1:19: c8:ec:d2:2e:fa:93:48:c3:bc:6e:c3:f2:a7:20:27:db:1f:27: e7:52:f7:2b:3b:b2:6f:f3:40:c6:6a:7c:4e:84:32:78:a5:18: 5d:48:8d:4b:a8:2e:51:54:ad:07:b2:25:52:af:e9:41:f6:ad: 29:a3:4f:8b:83:47:65:f0:6b:c5:1c:c4:32:14:70:2a:38:58: 28:8c:db:ef:61:ed:de:9f:ea:04:1d:a1:cf:9c:96:2b:dd:52: 71:27:2a:76:72:a0:df:3b:70:9d:15:2c:45:cc:0e:15:80:f4: be:db:35:41:18:c8:18:e3:bc:2a:78:fa:17:c4:c8:86:0d:81: 47:ab:b2:aa:5d:3a:fb:0e:54:92:d8:9b:80:bb:8e:d5:20:36: 22:24:56:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+ABHg2O1ltWd/gwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MWUyOWQxYjQtNDA0OC00MmNjLTgwZDUtMmYyZTk1YmRhOTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRpoRo2nt6qzgspAHZujYCdnyKtge+BjgvnX LB29L11TFqCGvMqYiuXwIs+iP9LHMpXBsHmIfvISXaliwhLpDQoKosrVIbpgjHAw L4UWZCO+VZDxymk7Nyj3EP30/3n+R4ed6w0m0hr+c8cLGkBi20XBhLGHcIUWie7N XyXAeA3Um6+GaDIIXlChxo/pndd3FFbpeQyvMI+3OKW7udn58MSnaSN/SD681uTA BXuoyqV6a0zq5GQGaoWnuuGNaBSCkAXIoeBTvr6WDJ8JO4HNr0y22nH61D8GSGat w0CUA0fc4zFCQ43sSiueM8uBSZ6gQ6E8u4JeAVPWwnHPoQvbsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKa7WAi8l0kmaiU9FqudO8TN7kO7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmYxY2E3ZDUtNDM2Yy0z OTBiLTg2Y2MtMTI2MTg2ZjQ0NGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMm0aT94mbuJbiU7yCkuXoMjl9L8/p02IuWKJ2eR8tR5Qf17toyRbsp aKqIUJ7+fimSC+nadjZvogG0wydWBW1cTNuA2a1Mg6C+/JOOFIcx565oDvzQ3UAC kzItv30RsOhXo5PLYNLQRQPRGcjs0i76k0jDvG7D8qcgJ9sfJ+dS9ys7sm/zQMZq fE6EMnilGF1IjUuoLlFUrQeyJVKv6UH2rSmjT4uDR2Xwa8UcxDIUcCo4WCiM2+9h 7d6f6gQdoc+clivdUnEnKnZyoN87cJ0VLEXMDhWA9L7bNUEYyBjjvCp4+hfEyIYN gUersqpdOvsOVJLYm4C7jtUgNiIkVsE= -----END CERTIFICATE-----Generated at Thu Mar 26 14:29:50 2026 by rpki-client