$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/520471d3-70f1-33ad-a68e-fb5c7a6dc22c.roa File: 520471d3-70f1-33ad-a68e-fb5c7a6dc22c.roa (raw, json) Hash identifier: r1Ml0sTobD8ExbpYH5PyjyinhWh2P2c43CNKLgy1K3I= Subject key identifier: 54:4D:2F:87:0C:B6:40:42:F4:77:C5:CC:C6:EC:7D:50:8E:BF:D0:78 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D00B2950CED98E52DE884F600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/520471d3-70f1-33ad-a68e-fb5c7a6dc22c.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 40647 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:95:0c:ed:98:e5:2d:e8:84:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=68c67d50-69b2-4f2f-8d7e-381d962ea1c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:34:6a:5e:16:ee:d3:cf:0f:5a:13:5a:5a:7d: eb:4b:7f:16:a7:86:49:22:4f:92:79:be:10:8e:23: 13:31:5c:ee:19:f2:2d:d1:ca:bb:46:68:d4:32:2f: 94:b5:a0:8f:ff:df:ca:0d:10:37:9e:95:23:6a:ff: 81:a6:5a:11:93:73:54:41:5a:1a:b1:32:62:03:92: 81:87:3e:10:ea:87:1a:cb:e0:39:db:a4:da:08:12: 3d:dd:d7:85:a0:04:8c:32:1d:8f:01:8a:5b:b5:cb: 3c:73:40:59:00:cb:17:91:42:32:6c:12:98:95:de: 59:2d:fd:cb:66:80:1d:bd:a9:4c:69:24:76:8f:85: 48:82:29:46:23:68:d1:1f:82:70:d0:9e:27:18:37: 8b:2c:5f:6f:b1:8e:f6:64:6f:55:bc:79:b2:d3:de: ab:b0:b4:8d:aa:ea:f5:56:30:8b:ca:21:bc:99:ea: e8:64:f4:c4:bc:25:ff:99:b1:fa:89:5b:b8:bd:ed: a5:c6:07:ea:91:2d:2c:52:f7:30:18:76:e7:2d:03: ce:c6:a8:13:32:cd:f2:d7:ef:6b:94:60:03:58:b5: 0d:da:bf:b1:ba:1c:d0:9c:d0:6e:0e:b9:0e:03:d7: 3c:a7:6e:09:b3:ae:bf:cc:87:cc:dd:84:60:32:1a: d2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:4D:2F:87:0C:B6:40:42:F4:77:C5:CC:C6:EC:7D:50:8E:BF:D0:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/520471d3-70f1-33ad-a68e-fb5c7a6dc22c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:f3:48:4f:7c:b2:ba:ea:8d:c8:df:90:dd:97:9d:da:f3:55: 78:fe:df:9a:d6:ec:99:54:99:2a:25:f9:db:a8:ef:72:3f:8e: f7:7b:96:ac:14:90:c3:58:dc:02:71:2f:22:9d:7f:3b:df:c8: 80:56:d7:36:0f:e8:31:35:41:4f:e5:f9:fb:b6:22:86:44:2e: 9c:16:a2:f6:39:48:75:73:28:c2:aa:d3:dc:82:99:35:1e:ad: f3:6d:cf:cd:f6:bb:75:a9:2d:38:a5:eb:21:13:e8:fe:a8:48: 0c:7f:f2:ef:a7:a6:6b:53:f8:53:01:0e:ba:e1:f7:6a:e7:73: 9e:22:33:94:11:d8:7e:44:fb:f2:1b:d9:f8:08:09:7b:ce:ef: a7:17:b3:56:f1:38:33:1f:44:f0:94:0f:9e:89:25:a5:f5:ea: 13:71:33:10:a2:3b:11:bd:31:ce:07:d6:30:5c:b4:ee:70:9c: 7e:6e:cd:9c:e0:e5:7c:7c:44:4f:f8:4b:ec:92:4f:49:68:8e: fc:41:1f:20:fe:58:91:c0:42:90:82:f0:10:ed:44:d5:81:eb: 61:3a:2f:e8:f8:1f:c7:9f:82:ad:fd:07:26:20:fb:52:6c:f6: c3:33:c0:37:92:44:8c:ea:1e:22:a9:06:f9:0a:5c:db:cb:8a: 84:d0:dc:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AspUM7ZjlLeiE9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk NjhjNjdkNTAtNjliMi00ZjJmLThkN2UtMzgxZDk2MmVhMWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjRqXhbu088PWhNaWn3rS38Wp4ZJIk+Seb4Q jiMTMVzuGfIt0cq7RmjUMi+UtaCP/9/KDRA3npUjav+BploRk3NUQVoasTJiA5KB hz4Q6ocay+A526TaCBI93deFoASMMh2PAYpbtcs8c0BZAMsXkUIybBKYld5ZLf3L ZoAdvalMaSR2j4VIgilGI2jRH4Jw0J4nGDeLLF9vsY72ZG9VvHmy096rsLSNqur1 VjCLyiG8meroZPTEvCX/mbH6iVu4ve2lxgfqkS0sUvcwGHbnLQPOxqgTMs3y1+9r lGADWLUN2r+xuhzQnNBuDrkOA9c8p24Js66/zIfM3YRgMhrSPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRNL4cMtkBC9HfFzMbsfVCOv9B4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTIwNDcxZDMtNzBmMS0z M2FkLWE2OGUtZmI1YzdhNmRjMjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7zSE98srrqjcjfkN2XndrzVXj+35rW7JlUmSol+duo73I/jvd7lqwU kMNY3AJxLyKdfzvfyIBW1zYP6DE1QU/l+fu2IoZELpwWovY5SHVzKMKq09yCmTUe rfNtz832u3WpLTil6yET6P6oSAx/8u+npmtT+FMBDrrh92rnc54iM5QR2H5E+/Ib 2fgICXvO76cXs1bxODMfRPCUD56JJaX16hNxMxCiOxG9Mc4H1jBctO5wnH5uzZzg 5Xx8RE/4S+yST0lojvxBHyD+WJHAQpCC8BDtRNWB62E6L+j4H8efgq39ByYg+1Js 9sMzwDeSRIzqHiKpBvkKXNvLioTQ3PQ= -----END CERTIFICATE-----Generated at Mon Mar 2 03:14:10 2026 by rpki-client