$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b89d539-3fb1-3032-b773-de1a4807338c.roa File: 2b89d539-3fb1-3032-b773-de1a4807338c.roa (raw, json) Hash identifier: ouH/Q1Xrk19g68DWv2oQSuh/MuLEonO4pM6KTOxBKgk= Subject key identifier: CC:77:09:AE:64:5D:06:DB:3C:DB:5B:09:36:38:59:4F:01:86:51:CA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F093CE142903229E78ED95560 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b89d539-3fb1-3032-b773-de1a4807338c.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 396583 IP address blocks: 192.42.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:e1:42:90:32:29:e7:8e:d9:55:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=a57c413d-1446-46c6-9437-071c096d08a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:56:7f:94:32:8a:61:fc:f0:a3:16:2e:ed:a6: d5:5e:4b:31:97:b6:13:87:e6:f2:9f:2a:f5:0e:bc: 0a:d4:af:fe:94:1c:05:a1:40:c6:72:19:f2:1f:eb: 24:3c:2b:26:1a:ef:84:c9:a3:47:08:41:f1:73:7a: 12:ec:b0:70:d1:2e:4e:fc:bc:f7:88:31:0e:52:b7: 4a:f3:c8:33:9f:a1:8a:60:e4:b0:b2:90:1c:74:9d: 75:8a:a7:74:ac:ca:4c:86:7b:0a:2a:2f:f3:7e:03: 87:44:66:7c:ae:fd:b2:05:72:c2:a0:94:b2:be:d7: 2b:d9:1c:f0:25:8b:e5:b8:b4:91:2f:69:37:1d:b3: bb:87:65:59:2e:9e:6d:eb:88:c3:93:d5:25:a4:39: 12:f2:d7:06:50:fc:58:e8:4c:84:a3:91:49:03:28: 6c:b0:59:6f:cc:85:6d:44:8c:37:b4:83:ec:f3:57: 90:2d:d3:ae:10:52:9a:38:43:f8:a5:2f:2f:27:40: 9a:c4:14:61:30:c5:f6:b7:8f:ad:23:62:16:d3:6c: 2d:4c:63:d4:cc:2e:27:f2:bc:1b:68:db:2a:9b:1b: 02:47:c3:b0:80:3a:18:76:bd:32:ec:b1:92:55:f5: 76:2b:25:73:16:c7:c9:2e:1c:02:37:ce:8e:b0:84: a5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:77:09:AE:64:5D:06:DB:3C:DB:5B:09:36:38:59:4F:01:86:51:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b89d539-3fb1-3032-b773-de1a4807338c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:5f:0e:8c:80:12:a4:d3:3c:8b:01:bc:89:0b:d5:91:6f:60: bc:55:92:ab:99:ce:4d:94:d4:28:46:c4:80:b1:d9:b3:35:c7: 57:e4:cd:bd:8b:75:10:43:82:c4:af:c5:82:63:2e:92:58:ab: 23:d4:7c:d4:f8:75:b4:48:b6:86:71:a9:b6:91:f0:b9:1c:9b: 3c:1a:bb:98:63:2f:66:9d:7b:49:28:f7:5d:f8:95:4a:23:38: ed:50:e0:ce:97:43:fc:ec:6b:5d:7e:13:5c:ab:f4:c7:64:ee: 04:01:a8:2d:7c:6d:53:60:a1:b6:e9:eb:ac:e2:2a:a0:3a:e7: b7:b2:5d:16:55:85:65:1d:7e:55:44:ca:ed:f5:cd:c1:89:c0: 12:04:a2:b9:97:9a:e6:db:ab:1d:fa:61:3c:89:19:d6:73:2a: dc:50:46:86:cd:73:34:71:a8:60:b8:d8:da:a6:ec:2b:90:48: cc:81:6b:ea:e2:98:d5:b0:b3:d4:d9:83:78:73:d3:fe:45:f8: d3:08:6a:64:32:e4:4b:3a:1c:8f:9c:b9:81:43:28:a3:ae:4b: ce:73:23:fe:d1:69:d9:9d:5b:73:0c:55:3b:e7:60:2e:e5:6f: 11:27:94:bf:5c:68:80:c8:60:f5:a5:46:57:2a:de:95:0d:88: bb:8c:0c:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPOFCkDIp547ZVWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk YTU3YzQxM2QtMTQ0Ni00NmM2LTk0MzctMDcxYzA5NmQwOGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FZ/lDKKYfzwoxYu7abVXksxl7YTh+bynyr1 DrwK1K/+lBwFoUDGchnyH+skPCsmGu+EyaNHCEHxc3oS7LBw0S5O/Lz3iDEOUrdK 88gzn6GKYOSwspAcdJ11iqd0rMpMhnsKKi/zfgOHRGZ8rv2yBXLCoJSyvtcr2Rzw JYvluLSRL2k3HbO7h2VZLp5t64jDk9UlpDkS8tcGUPxY6EyEo5FJAyhssFlvzIVt RIw3tIPs81eQLdOuEFKaOEP4pS8vJ0CaxBRhMMX2t4+tI2IW02wtTGPUzC4n8rwb aNsqmxsCR8OwgDoYdr0y7LGSVfV2KyVzFsfJLhwCN86OsISlpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMx3Ca5kXQbbPNtbCTY4WU8BhlHKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmI4OWQ1MzktM2ZiMS0z MDMyLWI3NzMtZGUxYTQ4MDczMzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdfDoyAEqTTPIsBvIkL1ZFvYLxVkquZzk2U1ChGxICx2bM1x1fkzb2L dRBDgsSvxYJjLpJYqyPUfNT4dbRItoZxqbaR8Lkcmzwau5hjL2ade0ko9134lUoj OO1Q4M6XQ/zsa11+E1yr9Mdk7gQBqC18bVNgobbp66ziKqA657eyXRZVhWUdflVE yu31zcGJwBIEormXmubbqx36YTyJGdZzKtxQRobNczRxqGC42Nqm7CuQSMyBa+ri mNWws9TZg3hz0/5F+NMIamQy5Es6HI+cuYFDKKOuS85zI/7RadmdW3MMVTvnYC7l bxEnlL9caIDIYPWlRlcq3pUNiLuMDLU= -----END CERTIFICATE-----Generated at Mon Sep 21 17:23:14 2026 by rpki-client