$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ea8905d-dce4-3add-830c-ad3e2af0b690.roa File: 5ea8905d-dce4-3add-830c-ad3e2af0b690.roa (raw, json) Hash identifier: nrDTjvxOnqNZcHKcuiOWl7P6/rW+honJ1Jdp9+f0Npc= Subject key identifier: B8:06:55:B2:32:F8:32:AC:86:C1:DF:A0:77:14:97:F0:07:C6:51:78 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584DE150A7ECB51F17709877F180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ea8905d-dce4-3add-830c-ad3e2af0b690.roa Signing time: Tue 19 May 2026 01:00:24 +0000 ROA not before: Tue 19 May 2026 01:00:24 +0000 ROA not after: Mon 17 Aug 2026 01:00:24 +0000 asID: 396586 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e1:50:a7:ec:b5:1f:17:70:98:77:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 19 01:00:24 2026 GMT Not After : Aug 17 01:00:24 2026 GMT Subject: CN=7c22dc89-012f-4efa-a785-5099c6a4b519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0e:b9:c1:91:aa:2c:e7:8d:cf:45:93:64:0c: 65:57:9e:0b:19:8a:af:a8:fb:c8:fe:a9:3a:f7:03: a3:16:24:f6:eb:f8:ce:24:2a:17:08:b1:6b:b5:21: 9f:5d:6b:df:f0:59:ea:c7:32:18:8a:ea:ca:ab:d3: 84:05:62:b5:5b:9c:6c:ce:5e:3c:9f:b1:8c:f6:69: f8:67:74:aa:74:97:55:8d:04:9f:b8:13:ca:16:8b: a7:00:e7:0b:8b:82:11:c5:e0:c9:15:c5:71:37:90: a3:e3:1a:52:ee:e6:94:77:23:29:00:89:07:4b:a3: 0c:da:94:87:83:ed:08:52:77:51:fe:a6:d2:a3:e7: 7c:c9:e4:25:06:9b:87:eb:a0:87:28:c0:33:00:76: 8c:22:c9:bd:49:a0:3c:96:67:bb:df:48:88:70:52: 54:5d:8b:3e:4e:15:8a:c8:3e:99:75:b0:63:20:f7: db:a4:7a:62:86:09:99:43:7b:6c:34:03:71:4f:55: 41:67:d5:2e:f4:e3:fe:19:4c:a9:c5:21:cb:1c:5d: 3f:58:36:b2:ce:76:5d:f7:be:42:61:ea:17:2c:6d: 63:29:08:f3:a5:b6:fe:92:16:16:11:b8:28:7b:42: 2b:a7:9d:e9:0c:87:8a:2a:3c:03:a8:a1:99:cb:3b: a2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:06:55:B2:32:F8:32:AC:86:C1:DF:A0:77:14:97:F0:07:C6:51:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ea8905d-dce4-3add-830c-ad3e2af0b690.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:b7:8e:da:72:b7:29:c6:cc:d3:e2:db:ab:f5:32:a7:92:9f: 4e:c9:f9:ff:ae:71:4d:7c:e0:83:b6:a3:1f:59:da:c7:79:75: 85:3c:70:24:9a:1c:c6:08:9c:b8:aa:96:94:17:7f:e5:8a:97: 22:f1:6c:8d:29:c1:28:0c:6d:86:7e:61:59:c4:6f:82:fb:cb: 56:fc:da:4c:7a:84:de:19:e6:73:be:c8:6e:5d:66:5b:52:90: ce:d6:68:24:ad:1a:3c:a9:a6:d9:63:18:eb:cc:62:83:75:2f: 00:a0:89:00:c9:07:b7:2f:c0:0b:d1:68:94:7b:29:08:76:f5: 73:cf:33:5e:0e:7c:27:5a:5c:21:62:67:14:85:17:37:c0:4c: 84:4f:b0:2c:c0:2f:09:72:1b:4e:fc:5b:79:00:51:ee:b9:22: 3c:33:a3:b2:e4:86:39:6f:5a:14:92:90:85:3c:21:f8:80:4c: 5e:a2:02:cc:bf:f1:0c:46:1d:86:ec:18:97:dc:4b:9b:75:cc: fa:a7:bc:75:7f:86:32:40:1c:cb:d0:fc:13:81:30:fb:64:d3: 25:c6:7f:87:9c:2c:95:6d:04:12:47:c9:bc:39:75:27:67:70: f6:47:1c:a1:38:8e:53:26:1b:da:37:65:db:eb:cd:70:3a:8d: df:f5:a7:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3hUKfstR8XcJh38YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk N2MyMmRjODktMDEyZi00ZWZhLWE3ODUtNTA5OWM2YTRiNTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwA65wZGqLOeNz0WTZAxlV54LGYqvqPvI/qk6 9wOjFiT26/jOJCoXCLFrtSGfXWvf8FnqxzIYiurKq9OEBWK1W5xszl48n7GM9mn4 Z3SqdJdVjQSfuBPKFounAOcLi4IRxeDJFcVxN5Cj4xpS7uaUdyMpAIkHS6MM2pSH g+0IUndR/qbSo+d8yeQlBpuH66CHKMAzAHaMIsm9SaA8lme730iIcFJUXYs+ThWK yD6ZdbBjIPfbpHpihgmZQ3tsNANxT1VBZ9Uu9OP+GUypxSHLHF0/WDayznZd975C YeoXLG1jKQjzpbb+khYWEbgoe0Irp53pDIeKKjwDqKGZyzui5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgGVbIy+DKshsHfoHcUl/AHxlF4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWVhODkwNWQtZGNlNC0z YWRkLTgzMGMtYWQzZTJhZjBiNjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACS3jtpytynGzNPi26v1MqeSn07J+f+ucU184IO2ox9Z2sd5dYU8cCSa HMYInLiqlpQXf+WKlyLxbI0pwSgMbYZ+YVnEb4L7y1b82kx6hN4Z5nO+yG5dZltS kM7WaCStGjypptljGOvMYoN1LwCgiQDJB7cvwAvRaJR7KQh29XPPM14OfCdaXCFi ZxSFFzfATIRPsCzALwlyG078W3kAUe65Ijwzo7LkhjlvWhSSkIU8IfiATF6iAsy/ 8QxGHYbsGJfcS5t1zPqnvHV/hjJAHMvQ/BOBMPtk0yXGf4ecLJVtBBJHybw5dSdn cPZHHKE4jlMmG9o3ZdvrzXA6jd/1p38= -----END CERTIFICATE-----Generated at Sat Jun 13 18:36:04 2026 by rpki-client