$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0487b66a-736f-33a0-98fa-ff269acf977c.roa File: 0487b66a-736f-33a0-98fa-ff269acf977c.roa (raw, json) Hash identifier: ogvLlith+nqLA5VqPccOJsIKvO/UKdWUfaOAhRUCMlg= Subject key identifier: C4:EA:B2:44:56:7C:43:7D:B6:B2:1F:09:1D:85:2B:53:D9:23:45:F8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584CEBC23C9CC47C156816341000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0487b66a-736f-33a0-98fa-ff269acf977c.roa Signing time: Fri 20 Feb 2026 02:00:32 +0000 ROA not before: Fri 20 Feb 2026 02:00:32 +0000 ROA not after: Thu 21 May 2026 01:00:32 +0000 asID: 396572 IP address blocks: 192.12.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:eb:c2:3c:9c:c4:7c:15:68:16:34:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Feb 20 02:00:32 2026 GMT Not After : May 21 01:00:32 2026 GMT Subject: CN=d645a0b6-e1cd-4ff8-a591-37c7dcef2367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:17:7c:94:ac:65:91:07:cc:56:51:e5:6d:9c: 91:01:d4:0f:a2:8e:13:de:bd:99:02:cb:3e:f4:26: 81:84:05:c6:b8:ed:5b:85:b3:94:48:f3:cb:ac:95: d9:eb:37:1e:80:d3:bf:79:c9:0b:e5:05:74:7f:b8: b5:8f:5b:57:2a:c4:32:08:c0:80:af:df:8c:cc:de: 8a:1e:c0:06:80:df:bd:9a:60:95:bd:46:64:30:e0: bd:9b:33:9e:7b:9c:dd:e8:44:df:e4:67:69:ac:77: 4b:e8:c5:5a:80:5f:0b:51:7a:aa:83:23:7e:b0:1e: 25:ce:6e:7d:68:d6:e5:9e:b3:fc:17:a0:36:80:01: cd:26:e6:04:92:58:88:cf:12:93:76:85:dc:43:06: 0c:aa:74:92:77:6e:ec:0c:d8:d7:f8:b3:30:4a:fe: 01:cd:c0:40:5a:23:d2:d7:d9:05:80:f3:17:25:6e: 1e:ec:d4:14:09:cf:7d:24:17:48:a9:e0:bf:84:2f: 58:a8:99:06:0f:d9:31:55:48:70:2d:8c:be:3e:73: 86:ce:96:80:b5:44:2b:71:bd:1a:4b:41:31:1d:c1: 2a:04:13:44:55:37:92:82:46:d2:c6:69:bb:7b:16: 0b:62:a3:b1:91:b6:e6:89:4b:18:f2:c5:47:fe:65: f2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:EA:B2:44:56:7C:43:7D:B6:B2:1F:09:1D:85:2B:53:D9:23:45:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0487b66a-736f-33a0-98fa-ff269acf977c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.12.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:31:b0:61:c2:6b:d3:b5:e0:25:ea:8e:dc:09:39:17:f6:e7: 46:d2:c0:f5:39:d1:fc:7e:9e:8e:2d:5f:af:3a:09:1f:0c:d2: c7:7a:f0:3d:e9:90:d1:a7:d4:0b:9c:62:42:cc:e9:87:df:b4: 53:b7:d8:4e:67:12:21:5a:8e:19:00:67:0d:61:4d:22:03:eb: e1:58:43:5f:26:6d:33:67:ac:2d:46:18:49:68:0d:28:66:e6: 8b:5b:23:09:19:6e:e2:d9:5c:84:3d:35:ac:74:e7:93:c7:59: 09:e8:84:9a:e9:53:9b:8e:0c:5f:3b:eb:fb:6d:99:e6:be:a8: 56:32:c0:12:8d:6c:c6:fa:f1:40:61:c8:6e:f4:de:d0:9a:37: 2f:a2:32:72:61:1a:44:bf:e9:f2:2d:5e:dd:d0:f3:88:5c:89: a1:5e:48:9f:71:75:c8:8b:dd:57:8b:ad:e1:4a:96:84:f2:c1: 3c:05:3e:c7:40:ed:2d:e0:e1:87:04:fb:72:b3:ad:d1:d8:7c: d6:5f:eb:4d:7b:61:cd:96:fb:b2:42:c0:97:9c:45:ba:15:a5: 00:de:c4:42:83:e9:6c:77:14:c6:bd:90:b8:42:ea:c9:8e:d6: db:48:b5:47:32:29:0a:09:28:a7:2c:94:45:62:14:90:ff:18: 95:5a:49:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzrwjycxHwVaBY0EAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDIyMDAyMDAzMloXDTI2MDUyMTAxMDAzMlowLzEtMCsGA1UEAxMk ZDY0NWEwYjYtZTFjZC00ZmY4LWE1OTEtMzdjN2RjZWYyMzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhd8lKxlkQfMVlHlbZyRAdQPoo4T3r2ZAss+ 9CaBhAXGuO1bhbOUSPPLrJXZ6zcegNO/eckL5QV0f7i1j1tXKsQyCMCAr9+MzN6K HsAGgN+9mmCVvUZkMOC9mzOee5zd6ETf5GdprHdL6MVagF8LUXqqgyN+sB4lzm59 aNblnrP8F6A2gAHNJuYEkliIzxKTdoXcQwYMqnSSd27sDNjX+LMwSv4BzcBAWiPS 19kFgPMXJW4e7NQUCc99JBdIqeC/hC9YqJkGD9kxVUhwLYy+PnOGzpaAtUQrcb0a S0ExHcEqBBNEVTeSgkbSxmm7exYLYqOxkbbmiUsY8sVH/mXy9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTqskRWfEN9trIfCR2FK1PZI0X4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDQ4N2I2NmEtNzM2Zi0z M2EwLTk4ZmEtZmYyNjlhY2Y5NzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQxsGHCa9O14CXqjtwJORf250bSwPU50fx+no4tX686CR8M0sd68D3p kNGn1AucYkLM6YfftFO32E5nEiFajhkAZw1hTSID6+FYQ18mbTNnrC1GGEloDShm 5otbIwkZbuLZXIQ9Nax055PHWQnohJrpU5uODF876/ttmea+qFYywBKNbMb68UBh yG703tCaNy+iMnJhGkS/6fItXt3Q84hciaFeSJ9xdciL3VeLreFKloTywTwFPsdA 7S3g4YcE+3KzrdHYfNZf6017Yc2W+7JCwJecRboVpQDexEKD6Wx3FMa9kLhC6smO 1ttItUcyKQoJKKcslEViFJD/GJVaSZA= -----END CERTIFICATE-----Generated at Mon Mar 2 05:01:43 2026 by rpki-client