$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b2c7db1-99ac-31a9-8a99-14dae6b4ad09.roa File: 3b2c7db1-99ac-31a9-8a99-14dae6b4ad09.roa (raw, json) Hash identifier: Pw2VoCRJCxAbo05TcyX6FNQk5LOZXANRlWnAlydzVxg= Subject key identifier: 26:1B:94:E2:5D:11:73:FB:A0:84:B2:80:B7:C8:76:FA:8B:A8:A5:D6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E1E44474259575924088B4680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b2c7db1-99ac-31a9-8a99-14dae6b4ad09.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 396587 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:47:42:59:57:59:24:08:8b:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=8d8e2809-e49a-482b-b0d6-f9f34b4b7c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:28:ab:80:6b:c9:ec:19:1f:de:92:fc:fb:f9: fb:2c:8a:75:79:56:3c:5f:58:e4:08:7d:27:78:22: 73:4e:db:01:e5:33:d6:0d:25:74:48:77:0e:10:4f: 60:c5:e9:3a:27:6f:46:4f:8e:fd:79:0e:f0:e5:c7: 16:bd:d7:68:5d:6a:c4:08:45:70:8b:07:3a:eb:0b: 11:ad:3f:34:95:9f:02:8a:70:15:0b:d3:f3:5c:9a: 53:33:bb:db:9f:cc:dd:98:40:65:c8:7d:90:c3:54: 04:4e:16:4f:22:42:0c:80:02:b2:d9:c5:31:f4:2d: 6c:e0:71:e5:34:ec:a7:68:a3:26:d3:1c:07:16:18: 18:76:60:ef:d0:69:49:ca:0e:64:b3:bc:50:94:97: 74:b9:3b:bc:88:a8:13:8b:1d:cb:f2:57:99:87:f4: 05:9b:ad:24:27:41:8f:16:c3:d9:9a:b1:2e:02:fb: 3a:6f:27:13:82:0b:45:e8:e8:b0:d7:bd:60:79:c1: 4d:74:05:82:80:13:3b:3a:27:e3:fd:ee:d9:45:b6: 65:b3:62:9a:b2:0a:98:f8:6a:9d:31:a5:cf:6c:94: 26:8b:9e:2c:ae:d3:1a:79:80:b4:bd:43:5d:56:a6: f3:75:3b:b7:07:40:20:21:d6:b2:a3:b6:41:87:11: 08:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:1B:94:E2:5D:11:73:FB:A0:84:B2:80:B7:C8:76:FA:8B:A8:A5:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b2c7db1-99ac-31a9-8a99-14dae6b4ad09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:c5:b7:42:5c:1d:a5:7e:1d:25:1d:f0:57:58:22:32:71:2e: 51:0d:23:50:18:75:dd:7d:46:c5:c5:56:c7:98:37:60:a0:af: 41:04:4e:28:25:77:16:f4:38:8a:43:20:82:c5:33:f3:3d:0c: 4e:bd:03:35:09:81:af:0c:0f:da:f7:dc:f4:05:8d:09:c7:42: 78:30:e4:6c:a9:37:2a:20:08:63:1c:bf:ad:35:57:d1:71:56: c9:ae:5f:be:96:0a:c0:c1:b6:c7:95:f6:25:f7:83:cb:7c:32: a3:07:17:87:11:34:a8:f4:9c:80:a8:f8:a5:a7:79:e8:13:1d: 8a:f9:c0:49:b7:d3:27:58:4e:f0:8e:48:05:50:61:f6:8f:f5: 7a:3c:89:df:31:3c:9b:fb:62:5c:65:23:bb:8c:20:c8:cd:e5: d2:0f:08:a7:1f:db:9b:2d:66:0b:9f:c9:f7:7f:4a:9d:b7:68: a1:15:2c:db:b1:f5:e5:04:83:03:2d:61:ae:9e:3c:3a:a0:d9: d4:80:aa:de:15:ac:ca:97:63:c9:ec:22:9e:34:35:cf:01:fa: 52:a9:28:40:47:ab:db:b8:b3:75:38:d3:4e:b9:f6:d4:77:3b: aa:a9:f2:6f:96:10:c7:75:24:83:4f:08:0d:03:ec:5d:4d:3a: 8f:4b:02:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eREdCWVdZJAiLRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk OGQ4ZTI4MDktZTQ5YS00ODJiLWIwZDYtZjlmMzRiNGI3YzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiirgGvJ7Bkf3pL8+/n7LIp1eVY8X1jkCH0n eCJzTtsB5TPWDSV0SHcOEE9gxek6J29GT479eQ7w5ccWvddoXWrECEVwiwc66wsR rT80lZ8CinAVC9PzXJpTM7vbn8zdmEBlyH2Qw1QEThZPIkIMgAKy2cUx9C1s4HHl NOynaKMm0xwHFhgYdmDv0GlJyg5ks7xQlJd0uTu8iKgTix3L8leZh/QFm60kJ0GP FsPZmrEuAvs6bycTggtF6Oiw171gecFNdAWCgBM7Oifj/e7ZRbZls2KasgqY+Gqd MaXPbJQmi54srtMaeYC0vUNdVqbzdTu3B0AgIdayo7ZBhxEIywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCYblOJdEXP7oISygLfIdvqLqKXWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2IyYzdkYjEtOTlhYy0z MWE5LThhOTktMTRkYWU2YjRhZDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjFt0JcHaV+HSUd8FdYIjJxLlENI1AYdd19RsXFVseYN2Cgr0EETigl dxb0OIpDIILFM/M9DE69AzUJga8MD9r33PQFjQnHQngw5GypNyogCGMcv601V9Fx VsmuX76WCsDBtseV9iX3g8t8MqMHF4cRNKj0nICo+KWneegTHYr5wEm30ydYTvCO SAVQYfaP9Xo8id8xPJv7YlxlI7uMIMjN5dIPCKcf25stZgufyfd/Sp23aKEVLNux 9eUEgwMtYa6ePDqg2dSAqt4VrMqXY8nsIp40Nc8B+lKpKEBHq9u4s3U400659tR3 O6qp8m+WEMd1JINPCA0D7F1NOo9LAuc= -----END CERTIFICATE-----Generated at Sat Jun 13 16:09:16 2026 by rpki-client