$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70ea234e-0f11-36ea-aae2-3ae5490a2903.roa File: 70ea234e-0f11-36ea-aae2-3ae5490a2903.roa (raw, json) Hash identifier: cX9UiUEOFZmrzpE6B2KlOcCUZgguhiN8Pa+o1QxUX3g= Subject key identifier: 9E:3F:02:1E:66:73:F5:66:65:AC:E2:F5:F4:F7:82:85:14:79:79:26 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F093CE69570169DBF87D77980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70ea234e-0f11-36ea-aae2-3ae5490a2903.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 36618 IP address blocks: 192.42.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:e6:95:70:16:9d:bf:87:d7:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=2aa044fd-d86c-45b3-8fea-357706fa450b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e0:2e:07:c1:e0:4c:26:1d:b3:a3:24:74:9d: a4:8c:33:db:00:a4:a9:e8:18:68:28:19:0d:60:fc: cb:06:c1:61:be:34:b1:a1:c7:eb:7f:a2:ca:50:2f: 94:f7:2c:2a:34:b2:d6:a1:bf:3f:ab:c0:02:80:33: 9e:8d:5d:0c:ec:b9:ff:72:67:50:cd:c3:ef:83:a1: 03:10:e9:b5:7d:c9:87:7c:12:e0:ed:73:3c:70:d5: bf:f8:b8:a5:d6:02:59:e5:7f:9e:4c:79:ae:15:11: 3b:ba:7a:8b:d7:4d:13:34:60:76:7f:82:bc:ea:90: 78:23:e8:d0:f3:f8:f9:f9:d3:71:6d:0d:d1:37:cb: b9:5a:ef:3f:5e:00:0b:73:58:c8:f5:19:f6:c1:68: 8d:23:f9:6b:22:c9:f1:10:29:aa:52:04:4b:e8:30: db:9a:46:57:3f:7e:92:cc:f4:ed:e6:4d:70:73:df: 72:cc:a4:38:22:e4:70:52:60:6f:59:17:8c:02:be: bf:1e:de:6d:f3:5d:c2:4d:03:ce:1a:9e:76:ae:bf: 87:ba:a1:61:32:61:8d:23:d6:f8:d3:17:12:c4:87: 0d:22:7d:e5:6b:45:09:e2:2b:54:7c:d5:ee:5e:85: 3a:54:17:4c:ae:fc:95:8e:f6:02:50:99:b6:9f:cf: 63:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:3F:02:1E:66:73:F5:66:65:AC:E2:F5:F4:F7:82:85:14:79:79:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70ea234e-0f11-36ea-aae2-3ae5490a2903.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:1c:87:86:cb:bf:52:22:87:d9:78:1b:b6:d3:13:1e:ba:2d: 57:db:e4:4a:a2:28:28:68:67:73:c5:0d:37:c3:55:ba:86:04: 28:86:83:e7:20:99:b4:2e:ee:53:ce:5f:28:63:2a:da:09:47: e7:c2:5b:e8:69:f9:b8:1e:5b:cd:41:e6:8f:6b:81:7e:b1:ac: 15:37:0c:fe:b7:ab:15:a1:9d:c3:54:43:c9:a7:77:b1:e9:9a: 9a:27:28:02:c8:67:75:62:02:7e:ac:5e:5a:4f:2f:f9:e2:8b: 00:62:d2:a1:74:95:41:e4:90:d6:8f:5f:86:d3:56:70:80:f4: f5:b0:ca:8c:dd:1f:64:5e:b7:f5:88:3f:8a:95:05:e1:13:ec: 54:57:1c:de:fb:b2:17:c4:ce:81:bc:9d:8c:2f:24:db:6d:50: 00:bc:5d:9e:15:5b:a7:da:95:16:a4:53:3e:c5:83:ce:e2:f5: 91:b0:5a:5a:eb:bc:63:bf:d4:aa:c7:74:39:1e:83:93:c5:71: 78:d5:a2:9e:96:cd:e1:fe:7c:5f:b4:64:b9:e1:8e:54:3a:e5: 2d:f6:47:b4:0b:29:ee:08:63:82:64:ee:1e:6e:7d:49:04:b3: 02:7f:86:5f:38:85:17:f6:5f:9c:ff:18:7c:7b:c7:75:ea:09: e8:4d:1b:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPOaVcBadv4fXeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk MmFhMDQ0ZmQtZDg2Yy00NWIzLThmZWEtMzU3NzA2ZmE0NTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOAuB8HgTCYds6MkdJ2kjDPbAKSp6BhoKBkN YPzLBsFhvjSxocfrf6LKUC+U9ywqNLLWob8/q8ACgDOejV0M7Ln/cmdQzcPvg6ED EOm1fcmHfBLg7XM8cNW/+Lil1gJZ5X+eTHmuFRE7unqL100TNGB2f4K86pB4I+jQ 8/j5+dNxbQ3RN8u5Wu8/XgALc1jI9Rn2wWiNI/lrIsnxECmqUgRL6DDbmkZXP36S zPTt5k1wc99yzKQ4IuRwUmBvWReMAr6/Ht5t813CTQPOGp52rr+HuqFhMmGNI9b4 0xcSxIcNIn3la0UJ4itUfNXuXoU6VBdMrvyVjvYCUJm2n89j6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4/Ah5mc/VmZazi9fT3goUUeXkmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzBlYTIzNGUtMGYxMS0z NmVhLWFhZTItM2FlNTQ5MGEyOTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcch4bLv1Iih9l4G7bTEx66LVfb5EqiKChoZ3PFDTfDVbqGBCiGg+cg mbQu7lPOXyhjKtoJR+fCW+hp+bgeW81B5o9rgX6xrBU3DP63qxWhncNUQ8mnd7Hp mponKALIZ3ViAn6sXlpPL/niiwBi0qF0lUHkkNaPX4bTVnCA9PWwyozdH2Ret/WI P4qVBeET7FRXHN77shfEzoG8nYwvJNttUAC8XZ4VW6falRakUz7Fg87i9ZGwWlrr vGO/1KrHdDkeg5PFcXjVop6WzeH+fF+0ZLnhjlQ65S32R7QLKe4IY4Jk7h5ufUkE swJ/hl84hRf2X5z/GHx7x3XqCehNGwE= -----END CERTIFICATE-----Generated at Tue Sep 22 18:29:37 2026 by rpki-client