$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72f44339-1ba4-3231-99c2-44a4d8a5b16a.roa File: 72f44339-1ba4-3231-99c2-44a4d8a5b16a.roa (raw, json) Hash identifier: wMjcmqmlYEBEGJvFYXWB1XU6H0xDeqnz5UOyTypzERQ= Subject key identifier: 61:D9:A0:74:DD:D3:86:06:C1:47:EB:6E:92:74:F4:41:0E:3A:2F:B5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D86B7A300907C06534D43EC80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72f44339-1ba4-3231-99c2-44a4d8a5b16a.roa Signing time: Thu 16 Apr 2026 14:09:54 +0000 ROA not before: Thu 16 Apr 2026 14:09:54 +0000 ROA not after: Wed 15 Jul 2026 14:09:54 +0000 asID: 396613 IP address blocks: 192.42.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:b7:a3:00:90:7c:06:53:4d:43:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 16 14:09:54 2026 GMT Not After : Jul 15 14:09:54 2026 GMT Subject: CN=57d57f16-8b38-4bf0-a438-26a089c819ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:be:f4:dd:fc:96:4a:01:c7:fe:14:f9:36:f3: eb:63:a4:88:f6:de:71:1c:85:71:fc:b4:74:a8:85: 74:ac:57:7a:b5:70:0e:61:46:d1:ad:32:7f:31:d4: f2:99:9e:e6:47:d1:9a:16:43:ef:a7:d6:d6:65:db: 11:4c:2f:4f:8d:e7:46:7e:9c:e0:df:d1:66:2b:54: b0:21:03:8e:9a:8d:b3:cb:bb:e9:48:9f:27:d2:81: a6:aa:d0:eb:ae:47:46:cb:dd:a9:36:7a:8b:d4:53: 73:d5:38:72:7d:91:9b:59:1f:71:35:72:58:97:2e: fc:db:37:21:a4:87:39:59:dd:62:7a:15:df:de:8b: 1b:8a:e3:73:08:7b:e5:09:76:8d:0c:58:0e:71:c6: 96:9b:ce:a2:60:95:5e:e8:91:62:e8:0d:b4:c5:d3: fc:d5:fd:29:48:97:87:23:93:3b:0d:26:02:2f:94: 9f:b1:38:aa:cf:a8:28:83:f6:37:f7:a6:00:7f:22: 20:67:7d:2e:2d:25:da:3a:fa:76:97:70:8d:8b:fc: 78:18:5d:9f:8d:40:c8:b0:3d:a7:53:d5:83:b2:43: 5f:76:63:03:82:13:d7:85:10:19:c9:d1:a3:f3:99: 77:9c:6e:3b:75:7e:15:c6:a5:b2:51:43:01:0d:58: ce:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D9:A0:74:DD:D3:86:06:C1:47:EB:6E:92:74:F4:41:0E:3A:2F:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72f44339-1ba4-3231-99c2-44a4d8a5b16a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:37:14:1f:49:01:17:a4:e4:44:13:26:14:7c:d8:ee:ab:c1: a6:e5:23:8a:65:7d:ea:7f:da:b9:51:76:33:5a:e5:e0:ee:45: 05:6f:58:4c:cb:20:7c:ae:1f:59:fe:a3:87:82:3f:1a:4c:4c: 67:3d:71:38:6b:1b:b8:ad:7c:23:28:a9:f4:d7:81:59:cb:04: f7:67:09:b2:b9:f2:a3:0a:90:79:b0:aa:e6:69:28:a9:49:4e: fb:73:68:90:bf:ac:af:83:61:04:d9:5f:55:43:40:1c:b7:54: 33:5f:a4:47:11:60:ec:c0:56:4f:32:de:46:20:98:2d:b4:3b: d9:f8:91:7e:c4:a6:92:3e:7b:b2:b9:17:30:74:f0:6c:41:db: 25:cb:44:c7:1d:21:29:65:89:ed:aa:38:2f:2a:50:b1:c3:56: e8:8a:a8:2f:62:2a:90:55:82:0c:02:fc:d5:44:c7:8b:42:3c: 4d:02:48:ff:25:21:ed:b0:ed:9f:8a:8b:bb:fe:28:8e:1b:2c: d9:a8:00:52:b2:6f:ca:40:16:11:0d:de:5a:40:37:02:0c:5f: d7:f4:3f:7f:d2:a0:0c:5b:73:5c:1a:d0:ea:31:6f:63:4c:68: aa:e9:c7:77:03:86:8d:5a:5f:c4:a1:6a:a8:80:17:80:b8:67: b6:80:0a:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Gt6MAkHwGU01D7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxNjE0MDk1NFoXDTI2MDcxNTE0MDk1NFowLzEtMCsGA1UEAxMk NTdkNTdmMTYtOGIzOC00YmYwLWE0MzgtMjZhMDg5YzgxOWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr703fyWSgHH/hT5NvPrY6SI9t5xHIVx/LR0 qIV0rFd6tXAOYUbRrTJ/MdTymZ7mR9GaFkPvp9bWZdsRTC9PjedGfpzg39FmK1Sw IQOOmo2zy7vpSJ8n0oGmqtDrrkdGy92pNnqL1FNz1ThyfZGbWR9xNXJYly782zch pIc5Wd1iehXf3osbiuNzCHvlCXaNDFgOccaWm86iYJVe6JFi6A20xdP81f0pSJeH I5M7DSYCL5SfsTiqz6gog/Y396YAfyIgZ30uLSXaOvp2l3CNi/x4GF2fjUDIsD2n U9WDskNfdmMDghPXhRAZydGj85l3nG47dX4VxqWyUUMBDVjOKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHZoHTd04YGwUfrbpJ09EEOOi+1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzJmNDQzMzktMWJhNC0z MjMxLTk5YzItNDRhNGQ4YTViMTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI03FB9JARek5EQTJhR82O6rwablI4plfep/2rlRdjNa5eDuRQVvWEzL IHyuH1n+o4eCPxpMTGc9cThrG7itfCMoqfTXgVnLBPdnCbK58qMKkHmwquZpKKlJ TvtzaJC/rK+DYQTZX1VDQBy3VDNfpEcRYOzAVk8y3kYgmC20O9n4kX7EppI+e7K5 FzB08GxB2yXLRMcdISllie2qOC8qULHDVuiKqC9iKpBVggwC/NVEx4tCPE0CSP8l Ie2w7Z+Ki7v+KI4bLNmoAFKyb8pAFhEN3lpANwIMX9f0P3/SoAxbc1wa0Ooxb2NM aKrpx3cDho1aX8ShaqiAF4C4Z7aACtk= -----END CERTIFICATE-----Generated at Fri Apr 17 11:25:30 2026 by rpki-client