$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70ea234e-0f11-36ea-aae2-3ae5490a2903.roa File: 70ea234e-0f11-36ea-aae2-3ae5490a2903.roa (raw, json) Hash identifier: zdJGbD7dRtEwEfO7lI2DV8r++wwOCBuo76588D2NrU8= Subject key identifier: F9:33:7C:9B:A2:88:64:27:30:BF:2C:08:87:5C:A6:6F:32:0F:1B:DA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D86B7A223624B44BF111A2C00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70ea234e-0f11-36ea-aae2-3ae5490a2903.roa Signing time: Thu 16 Apr 2026 14:09:54 +0000 ROA not before: Thu 16 Apr 2026 14:09:54 +0000 ROA not after: Wed 15 Jul 2026 14:09:54 +0000 asID: 36618 IP address blocks: 192.42.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:b7:a2:23:62:4b:44:bf:11:1a:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 16 14:09:54 2026 GMT Not After : Jul 15 14:09:54 2026 GMT Subject: CN=ffa7c07e-d646-4718-bba7-9a92705305b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7e:e8:3d:3c:4e:d9:ec:2a:ac:75:74:a8:c8: 29:ea:c1:7c:b1:09:d5:b7:a7:8c:c7:60:f5:7d:70: 47:48:ea:ec:2b:9c:43:f4:ad:0d:9d:58:91:b0:d5: 35:8b:3b:f9:3d:0e:2b:54:4a:91:8b:ee:32:ee:f5: c2:0f:25:fb:7f:44:77:ae:b1:e1:46:31:60:c4:3d: 6d:f5:d8:2c:e8:f8:bd:5a:1d:a9:37:b2:c2:67:62: f3:1d:58:35:20:c9:89:fa:04:38:a4:7c:09:9a:f6: dc:eb:be:b6:29:0e:28:9b:7d:d2:f2:1e:8c:f9:1b: f8:06:ef:bf:7c:fe:e2:b1:54:0a:ca:44:a0:8e:7d: 4e:47:37:5e:1e:e9:06:4c:68:b8:89:9d:36:b0:dd: 07:8d:cf:cf:ca:ae:16:96:23:f8:24:e1:11:2d:44: ba:49:95:84:8b:6d:af:84:1f:09:ab:66:13:1f:c4: 8e:8c:8b:07:09:65:18:de:0f:45:81:5f:0d:30:bf: 00:3b:fc:cb:65:a8:ea:7e:1a:ab:da:e5:ee:7d:0f: 35:38:3f:d1:c1:2c:6a:bf:a5:0e:e9:d2:c9:11:5c: 2b:ed:4c:92:82:21:73:67:04:65:be:d9:e7:4b:12: 0f:9a:55:c8:ec:75:c2:97:49:f7:a2:be:96:00:35: 37:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:33:7C:9B:A2:88:64:27:30:BF:2C:08:87:5C:A6:6F:32:0F:1B:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70ea234e-0f11-36ea-aae2-3ae5490a2903.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:47:e5:d6:58:c9:1f:70:28:cf:f7:4c:59:5d:a8:7b:e9:1c: 40:3c:4f:20:be:e6:bd:1d:54:d2:d8:88:c6:ed:1e:e5:5a:b5: 80:06:1a:24:cc:35:d7:39:4c:c3:85:26:7a:32:68:25:f5:8a: b2:27:98:d1:65:50:a3:1f:ea:d0:aa:80:83:5d:8f:d9:ea:4a: 38:14:05:07:df:bf:f4:7a:ae:66:aa:c6:85:7f:48:5d:4b:f2: 48:6f:45:89:35:af:72:6b:b9:3b:93:55:20:c9:4f:0a:0a:47: 54:ce:42:18:fc:90:c5:01:54:ed:45:3e:2e:b1:f4:b8:96:94: 0a:b1:5b:71:35:29:9a:dd:b6:03:69:51:6f:43:cc:7b:41:ee: 5d:b5:9b:48:c8:91:87:7c:37:3f:ee:d7:b3:cd:b7:80:6d:d8: 18:7d:71:5d:68:00:1d:52:37:9b:a6:09:84:98:5e:07:a0:66: 46:a0:34:a1:49:4a:e7:70:ad:b7:91:79:8d:b5:87:e1:87:0b: 4a:fc:2f:92:51:99:b8:25:78:9d:20:48:96:04:57:c1:31:eb: 66:a3:45:6e:a6:9e:2c:c9:c4:d6:70:ef:68:b3:b6:fe:01:29: 72:51:93:1d:3f:98:e4:a7:8a:4f:87:75:3e:d5:bb:7c:5b:19: e7:28:d8:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Gt6IjYktEvxEaLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxNjE0MDk1NFoXDTI2MDcxNTE0MDk1NFowLzEtMCsGA1UEAxMk ZmZhN2MwN2UtZDY0Ni00NzE4LWJiYTctOWE5MjcwNTMwNWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn7oPTxO2ewqrHV0qMgp6sF8sQnVt6eMx2D1 fXBHSOrsK5xD9K0NnViRsNU1izv5PQ4rVEqRi+4y7vXCDyX7f0R3rrHhRjFgxD1t 9dgs6Pi9Wh2pN7LCZ2LzHVg1IMmJ+gQ4pHwJmvbc6762KQ4om33S8h6M+Rv4Bu+/ fP7isVQKykSgjn1ORzdeHukGTGi4iZ02sN0Hjc/Pyq4WliP4JOERLUS6SZWEi22v hB8Jq2YTH8SOjIsHCWUY3g9FgV8NML8AO/zLZajqfhqr2uXufQ81OD/RwSxqv6UO 6dLJEVwr7UySgiFzZwRlvtnnSxIPmlXI7HXCl0n3or6WADU3HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkzfJuiiGQnML8sCIdcpm8yDxvaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzBlYTIzNGUtMGYxMS0z NmVhLWFhZTItM2FlNTQ5MGEyOTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNH5dZYyR9wKM/3TFldqHvpHEA8TyC+5r0dVNLYiMbtHuVatYAGGiTM Ndc5TMOFJnoyaCX1irInmNFlUKMf6tCqgINdj9nqSjgUBQffv/R6rmaqxoV/SF1L 8khvRYk1r3JruTuTVSDJTwoKR1TOQhj8kMUBVO1FPi6x9LiWlAqxW3E1KZrdtgNp UW9DzHtB7l21m0jIkYd8Nz/u17PNt4Bt2Bh9cV1oAB1SN5umCYSYXgegZkagNKFJ SudwrbeReY21h+GHC0r8L5JRmbgleJ0gSJYEV8Ex62ajRW6mnizJxNZw72iztv4B KXJRkx0/mOSnik+HdT7Vu3xbGeco2Jg= -----END CERTIFICATE-----Generated at Fri Apr 17 11:18:45 2026 by rpki-client