$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4dc64b94-5cbe-3719-a78a-874ca3cb8f15.roa File: 4dc64b94-5cbe-3719-a78a-874ca3cb8f15.roa (raw, json) Hash identifier: 1Irq7RzFqKiRWKaHuDyMAhO1J5adhXQuU4TssUmMOF4= Subject key identifier: FF:22:90:6D:1D:8A:C1:44:28:2C:C5:5D:20:46:DB:72:F4:C7:BA:C6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F1CC7C24DD785F7584642C780 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4dc64b94-5cbe-3719-a78a-874ca3cb8f15.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 396605 IP address blocks: 192.42.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:c2:4d:d7:85:f7:58:46:42:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=3413ce7c-e002-4b49-b870-98d4376a99b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:70:ab:0e:b8:20:e9:ab:53:0b:18:99:13:3b: 8f:f0:0b:c2:96:b3:c8:06:80:9c:52:f6:b3:ab:5e: 3f:fd:84:30:47:dc:2d:e7:3d:e0:c7:af:41:c4:cc: b5:62:ae:cb:f5:7e:04:f2:04:76:bc:cc:ae:d2:6e: ed:b8:89:47:1e:df:26:35:ab:b9:8d:42:11:bf:0e: be:e9:d9:9c:cc:2a:4c:6c:95:41:53:3e:e8:c0:fe: dc:c0:3d:cb:7b:a1:2c:12:35:04:46:25:97:85:b2: e4:9b:6d:4a:85:12:e4:93:a8:99:37:86:4d:a0:3d: c9:ee:23:27:de:d1:a4:9f:da:2b:e8:8d:e5:ad:39: 3c:d6:24:53:24:d2:b1:3f:11:a6:01:ee:43:aa:aa: 20:95:24:3f:cc:70:68:23:4b:19:04:8f:09:2f:77: 21:e8:a4:5f:21:b3:f4:d5:03:94:73:9a:ad:89:92: 13:d6:e6:43:9b:5d:b3:f7:0e:f5:7e:25:12:5f:45: 43:33:c4:2f:4c:50:24:a7:41:88:d3:be:d1:19:79: f7:af:c3:74:f8:f4:7c:a4:0e:12:8c:d1:20:66:55: 28:23:89:7c:8c:44:d8:f1:34:01:4d:44:8e:81:cf: ab:07:e3:41:49:88:92:47:d0:81:da:92:1a:2a:06: 58:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:22:90:6D:1D:8A:C1:44:28:2C:C5:5D:20:46:DB:72:F4:C7:BA:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4dc64b94-5cbe-3719-a78a-874ca3cb8f15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:f6:82:6d:d9:2b:fe:39:83:e1:1a:67:52:ab:2b:60:f4:8a: 89:f4:e1:04:b0:98:2f:66:69:e0:4e:bf:bd:04:38:61:0d:82: 17:2c:bb:18:a6:9b:36:f1:76:20:09:5e:ec:ae:7e:92:48:b6: 78:b9:fa:06:d4:ea:16:ce:48:e0:e0:8d:63:80:75:22:2d:33: b9:b8:23:c1:55:1e:0e:98:3e:38:4d:55:fa:d8:a4:6d:a0:4e: ac:7d:73:28:1b:1a:db:f1:f3:bb:ea:a2:67:ab:f4:9d:a1:06: b8:c4:73:d9:ae:a0:03:b1:d4:b6:54:52:f3:2d:51:b8:8d:20: 47:23:81:0c:56:cd:5f:33:9f:02:18:c6:6f:65:31:40:55:62: 80:1b:5f:1f:f2:ce:c2:c6:89:23:2d:99:2c:37:2d:0c:cf:cf: 0c:1f:3e:f5:68:54:e8:90:2d:e4:3f:2c:1b:b9:81:a4:ce:18: f5:8a:c1:9e:6e:26:b4:ad:dd:62:e7:bd:f2:37:57:b0:f1:46: 76:66:df:67:de:cf:b1:83:e0:3a:94:25:4d:07:f9:f0:d0:82: 49:38:b1:11:3e:e7:69:bc:65:2d:1c:04:be:98:d0:13:b5:c5: 04:3f:f6:2f:f8:ea:47:29:79:78:1b:17:40:3e:0a:1b:9f:64: e8:d2:d1:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx8JN14X3WEZCx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk MzQxM2NlN2MtZTAwMi00YjQ5LWI4NzAtOThkNDM3NmE5OWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnCrDrgg6atTCxiZEzuP8AvClrPIBoCcUvaz q14//YQwR9wt5z3gx69BxMy1Yq7L9X4E8gR2vMyu0m7tuIlHHt8mNau5jUIRvw6+ 6dmczCpMbJVBUz7owP7cwD3Le6EsEjUERiWXhbLkm21KhRLkk6iZN4ZNoD3J7iMn 3tGkn9or6I3lrTk81iRTJNKxPxGmAe5DqqoglSQ/zHBoI0sZBI8JL3ch6KRfIbP0 1QOUc5qtiZIT1uZDm12z9w71fiUSX0VDM8QvTFAkp0GI077RGXn3r8N0+PR8pA4S jNEgZlUoI4l8jETY8TQBTUSOgc+rB+NBSYiSR9CB2pIaKgZYyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8ikG0disFEKCzFXSBG23L0x7rGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGRjNjRiOTQtNWNiZS0z NzE5LWE3OGEtODc0Y2EzY2I4ZjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJz2gm3ZK/45g+EaZ1KrK2D0ion04QSwmC9maeBOv70EOGENghcsuxim mzbxdiAJXuyufpJItni5+gbU6hbOSODgjWOAdSItM7m4I8FVHg6YPjhNVfrYpG2g Tqx9cygbGtvx87vqomer9J2hBrjEc9muoAOx1LZUUvMtUbiNIEcjgQxWzV8znwIY xm9lMUBVYoAbXx/yzsLGiSMtmSw3LQzPzwwfPvVoVOiQLeQ/LBu5gaTOGPWKwZ5u JrSt3WLnvfI3V7DxRnZm32fez7GD4DqUJU0H+fDQgkk4sRE+52m8ZS0cBL6Y0BO1 xQQ/9i/46kcpeXgbF0A+ChufZOjS0VA= -----END CERTIFICATE-----Generated at Mon Sep 21 19:33:33 2026 by rpki-client