$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c3ce45a-70cd-3dc5-b37d-e3d111cf7e87.roa File: 1c3ce45a-70cd-3dc5-b37d-e3d111cf7e87.roa (raw, json) Hash identifier: kPGYkqlo7bumgFl5vSJ4f7COZhw7vZpmts+xu8r/MIk= Subject key identifier: 2A:7E:21:25:CA:2B:42:F6:D3:15:9C:5A:FD:BB:86:35:08:17:A0:8A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F067274A08F64E310203E6E80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c3ce45a-70cd-3dc5-b37d-e3d111cf7e87.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 396564 IP address blocks: 192.42.177.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:74:a0:8f:64:e3:10:20:3e:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=9fdbee6c-a03b-4658-b67b-dad2bbc490f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ab:3e:9a:e4:90:44:a1:01:97:2d:74:3b:04: 5d:f1:ce:a6:3f:02:05:49:5a:5a:f7:f5:88:c1:2a: 72:8a:13:90:a4:25:e3:00:da:0d:5a:57:2a:62:55: dd:e6:23:12:15:35:ae:86:ec:60:8d:05:49:2a:75: 3e:21:77:95:f7:f0:61:1b:78:86:b4:97:96:f2:86: c7:11:71:b0:60:16:43:7e:82:0d:c4:9e:ac:60:70: 52:58:17:bc:25:d4:92:b4:27:de:dc:20:07:d5:59: 21:8a:f6:03:6b:04:15:c7:8b:fb:b3:16:6f:a7:f9: 83:e2:1e:9a:7f:19:d6:9d:c8:07:39:ef:21:14:75: e3:79:5c:25:67:c5:c8:8e:de:33:48:37:60:d1:e6: 61:f5:63:16:50:0d:38:2c:2a:b1:6d:22:4a:d4:fb: 58:54:ea:e7:d6:26:95:c7:e4:49:ef:0a:e5:6c:38: e3:4c:f6:ec:b7:66:b9:ee:cc:73:4f:58:a1:42:3f: 86:d8:60:50:ec:e7:ae:a9:d6:46:1c:ac:c7:29:93: 93:03:18:18:62:45:a8:d7:8a:34:9b:ba:ed:dd:31: 3e:7c:00:26:ea:c0:bc:5c:d9:c6:bb:50:88:25:66: 61:23:1e:4b:49:ba:1a:d1:7c:47:ae:0a:09:13:47: 55:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:7E:21:25:CA:2B:42:F6:D3:15:9C:5A:FD:BB:86:35:08:17:A0:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c3ce45a-70cd-3dc5-b37d-e3d111cf7e87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.177.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:99:4b:8a:4e:69:82:e3:31:ee:0b:3f:7c:6b:df:b4:36:5a: f2:e2:5a:b3:a5:ac:b4:b5:40:c5:b7:b5:0c:55:d1:18:b6:3c: c2:0d:45:46:07:db:50:f2:2e:d0:43:bd:70:36:e4:f0:3d:78: e6:8e:a7:51:63:94:76:98:05:de:0f:43:4f:27:b0:49:44:f2: f5:a4:41:32:e1:06:8f:2e:55:5c:29:5f:f2:8c:8a:0e:84:6f: d3:c3:a0:9c:bf:95:47:c5:37:28:1c:da:0d:4b:47:74:db:2d: c6:82:d8:eb:61:87:8c:a6:0a:31:ca:a1:a4:a8:5c:9a:85:ce: ad:7c:2b:6a:ef:c3:ff:6a:5d:c8:86:33:11:94:27:b1:a7:d5: 27:0e:59:d7:6f:a3:84:1c:09:54:aa:dd:9c:c2:a6:e8:f0:9d: 40:2d:f6:cf:e0:72:7e:65:b4:e8:be:34:5d:a5:57:03:f4:3d: 9f:03:a3:58:0d:0a:f6:00:cd:42:60:b5:e6:95:d2:96:56:7c: ee:04:b2:48:d8:a5:c9:71:71:5f:6a:cb:4d:ee:c7:a6:f9:7c: f2:90:ad:ce:6b:b5:1f:7a:ca:5d:b2:9a:b7:2e:5f:80:53:2a: 3f:e6:60:5d:49:ef:cd:3d:c2:4b:2e:a8:18:b7:c2:f0:d1:d0: 17:92:5f:7c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8GcnSgj2TjECA+boAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk OWZkYmVlNmMtYTAzYi00NjU4LWI2N2ItZGFkMmJiYzQ5MGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqs+muSQRKEBly10OwRd8c6mPwIFSVpa9/WI wSpyihOQpCXjANoNWlcqYlXd5iMSFTWuhuxgjQVJKnU+IXeV9/BhG3iGtJeW8obH EXGwYBZDfoINxJ6sYHBSWBe8JdSStCfe3CAH1VkhivYDawQVx4v7sxZvp/mD4h6a fxnWncgHOe8hFHXjeVwlZ8XIjt4zSDdg0eZh9WMWUA04LCqxbSJK1PtYVOrn1iaV x+RJ7wrlbDjjTPbst2a57sxzT1ihQj+G2GBQ7OeuqdZGHKzHKZOTAxgYYkWo14o0 m7rt3TE+fAAm6sC8XNnGu1CIJWZhIx5LSboa0XxHrgoJE0dVAwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCp+ISXKK0L20xWcWv27hjUIF6CKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWMzY2U0NWEtNzBjZC0z ZGM1LWIzN2QtZTNkMTExY2Y3ZTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqxHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCOmUuKTmmC4zHuCz98a9+0Nlry4lqzpay0tUDFt7UMVdEYtjzCDUVG B9tQ8i7QQ71wNuTwPXjmjqdRY5R2mAXeD0NPJ7BJRPL1pEEy4QaPLlVcKV/yjIoO hG/Tw6Ccv5VHxTcoHNoNS0d02y3GgtjrYYeMpgoxyqGkqFyahc6tfCtq78P/al3I hjMRlCexp9UnDlnXb6OEHAlUqt2cwqbo8J1ALfbP4HJ+ZbTovjRdpVcD9D2fA6NY DQr2AM1CYLXmldKWVnzuBLJI2KXJcXFfastN7sem+XzykK3Oa7Ufespdspq3Ll+A Uyo/5mBdSe/NPcJLLqgYt8Lw0dAXkl98 -----END CERTIFICATE-----Generated at Tue Sep 22 18:05:41 2026 by rpki-client