$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87ef70a2-df33-314d-8b3a-e587e8adb985.roa File: 87ef70a2-df33-314d-8b3a-e587e8adb985.roa (raw, json) Hash identifier: fi68pqJ4+HS8u1E8x/zMES0gh2FMh+LNzkbXhvsjMjw= Subject key identifier: 30:F8:CE:E3:F2:80:0E:18:9E:78:C7:44:7F:89:1E:F5:1B:19:3B:85 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D00B297543AFBDB4969741A80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87ef70a2-df33-314d-8b3a-e587e8adb985.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 36627 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:97:54:3a:fb:db:49:69:74:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=e2576828-3d95-4af9-afd2-5a4e008a7079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:eb:be:d1:0c:e6:33:bf:a5:30:36:72:e9:07: e0:1b:43:61:c0:ba:21:e9:ba:be:00:75:43:f3:fe: c4:0e:6d:a0:7e:4a:10:35:fe:a0:fc:5e:15:11:b3: 15:7b:87:b6:d9:9b:14:48:1f:0e:8c:e6:4b:94:a2: 03:08:7a:0a:5b:57:86:9e:b5:2e:ca:08:fd:47:7b: 54:73:c3:7e:c6:c4:20:93:65:2e:e8:cd:5a:85:9d: 57:fd:8c:19:f8:3f:90:9d:4c:1c:6f:ee:25:c8:5f: 75:1b:6e:ef:b3:13:23:b5:af:aa:f5:33:2a:3c:51: 1b:d1:de:1b:90:5e:8d:ad:a6:e1:eb:98:fd:44:3a: 08:69:9d:38:d1:8f:44:7f:31:69:3c:4b:8a:e6:37: 47:d0:8d:9a:10:83:c8:41:72:ca:da:73:73:81:1a: 3e:1f:3a:c2:50:76:8e:cd:5e:45:0e:bd:9d:e5:ac: 56:4f:27:ec:c4:f7:bd:91:1a:04:44:af:c3:84:72: 79:a6:fe:ca:7f:58:a8:29:05:45:9d:51:f2:c1:12: 43:71:89:31:57:a1:fa:63:a6:88:ae:df:66:4d:0a: 69:18:0c:1e:58:95:b1:2c:b1:7f:1d:a4:30:75:23: 38:92:36:3e:5f:d7:2d:16:29:14:a3:3f:b0:c8:ef: 03:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F8:CE:E3:F2:80:0E:18:9E:78:C7:44:7F:89:1E:F5:1B:19:3B:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87ef70a2-df33-314d-8b3a-e587e8adb985.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:49:78:63:93:86:1a:9a:1f:33:58:4a:dd:46:43:c5:b7:fe: f4:d7:34:7a:52:1f:a4:f6:d3:b4:55:05:ec:d8:4d:d1:3a:79: 33:b5:4d:63:7c:a3:33:24:a5:40:c8:fa:39:6a:d3:1f:aa:1d: 56:5e:26:f1:5a:41:a2:0c:8b:28:f9:c7:34:77:ab:c2:83:0a: d5:60:4a:cf:d2:fc:ee:9b:39:03:20:5c:fb:be:96:e2:a2:97: a9:ca:18:b5:0f:57:a9:11:45:59:44:a5:98:05:06:1c:41:0d: 8f:dd:11:40:49:97:1d:b2:96:60:55:d3:58:af:ae:01:e5:67: 86:85:3a:8d:81:9f:a7:1f:2b:34:17:a9:7f:b1:fd:59:87:ea: 34:ba:3f:56:fe:bd:71:97:e9:5e:10:ac:e8:82:68:f3:5f:f0: b4:83:76:b3:6d:8f:ec:a4:89:19:27:d7:dd:3c:ff:de:e6:99: 6a:54:7f:a7:2e:19:3c:3d:71:53:0b:b5:c0:02:73:d8:94:78: 54:15:49:e6:b9:8b:fb:43:98:9f:07:d0:5c:14:2a:ef:f1:ba: 49:6c:1d:47:af:08:6f:b4:c9:dd:b1:e3:d2:69:23:76:a1:64: 6e:66:5b:76:8f:41:82:24:61:30:36:02:fb:13:47:fa:27:af: bb:c7:ce:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AspdUOvvbSWl0GoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk ZTI1NzY4MjgtM2Q5NS00YWY5LWFmZDItNWE0ZTAwOGE3MDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguu+0QzmM7+lMDZy6QfgG0NhwLoh6bq+AHVD 8/7EDm2gfkoQNf6g/F4VEbMVe4e22ZsUSB8OjOZLlKIDCHoKW1eGnrUuygj9R3tU c8N+xsQgk2Uu6M1ahZ1X/YwZ+D+QnUwcb+4lyF91G27vsxMjta+q9TMqPFEb0d4b kF6Nrabh65j9RDoIaZ040Y9EfzFpPEuK5jdH0I2aEIPIQXLK2nNzgRo+HzrCUHaO zV5FDr2d5axWTyfsxPe9kRoERK/DhHJ5pv7Kf1ioKQVFnVHywRJDcYkxV6H6Y6aI rt9mTQppGAweWJWxLLF/HaQwdSM4kjY+X9ctFikUoz+wyO8DJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDD4zuPygA4YnnjHRH+JHvUbGTuFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODdlZjcwYTItZGYzMy0z MTRkLThiM2EtZTU4N2U4YWRiOTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhJeGOThhqaHzNYSt1GQ8W3/vTXNHpSH6T207RVBezYTdE6eTO1TWN8 ozMkpUDI+jlq0x+qHVZeJvFaQaIMiyj5xzR3q8KDCtVgSs/S/O6bOQMgXPu+luKi l6nKGLUPV6kRRVlEpZgFBhxBDY/dEUBJlx2ylmBV01ivrgHlZ4aFOo2Bn6cfKzQX qX+x/VmH6jS6P1b+vXGX6V4QrOiCaPNf8LSDdrNtj+ykiRkn1908/97mmWpUf6cu GTw9cVMLtcACc9iUeFQVSea5i/tDmJ8H0FwUKu/xuklsHUevCG+0yd2x49JpI3ah ZG5mW3aPQYIkYTA2AvsTR/onr7vHzlI= -----END CERTIFICATE-----Generated at Mon Mar 2 06:48:56 2026 by rpki-client