$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3f95505-9535-3813-b43b-8d119202d5a4.roa File: a3f95505-9535-3813-b43b-8d119202d5a4.roa (raw, json) Hash identifier: ryEKwTtWPTc1llbHg7gnn2X69asMKkmxThuSBvJPDtM= Subject key identifier: 2C:36:C9:46:6D:3D:0E:17:60:5C:2E:8A:5F:58:5F:59:E6:3A:41:58 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D00B268BABBAB6EC0D52800C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3f95505-9535-3813-b43b-8d119202d5a4.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 396545 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:68:ba:bb:ab:6e:c0:d5:28:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=c7a3572d-f3e3-4888-9fe3-9bf738d62860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d8:e8:da:b2:4f:f8:77:e3:27:25:29:ef:71: 3a:11:b0:21:f2:1f:f2:44:95:34:5f:65:57:6a:45: cc:45:07:d7:c9:6c:42:b4:c1:dd:b7:8e:46:9b:e0: 06:38:97:05:74:e3:0e:1b:67:06:3e:02:fc:01:aa: 76:dc:94:b6:7e:8c:7e:45:1b:57:00:16:31:fb:70: 5d:06:ed:17:79:27:7f:65:ed:a2:b6:45:13:26:bb: ce:f7:5b:4e:33:7a:19:fa:21:6a:83:fc:15:ed:b4: d1:03:cb:a6:28:11:c5:22:66:23:59:7f:c7:1e:c8: 36:ff:4a:4b:f1:55:19:cf:7b:07:65:e7:9a:23:8f: 8d:de:40:50:91:05:c4:86:0f:77:61:b5:a4:a5:53: e0:52:92:09:69:41:73:b5:bd:ae:7d:ef:37:41:e4: 81:09:dd:fc:5b:7c:d8:88:9e:e9:02:ed:71:22:b4: c0:04:79:55:b3:c2:36:3d:c3:c0:fc:be:bd:11:29: 39:c2:55:50:65:37:9e:ad:2b:73:b5:f9:3a:40:e0: af:d9:a4:ce:a5:3e:ef:4a:78:0e:e0:02:a1:3a:7c: ef:0e:1d:0d:be:35:c6:ca:d1:18:d2:2f:54:4d:68: 3b:26:e0:ea:4f:28:e9:65:58:ba:7c:b3:ce:8d:ab: 0e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:36:C9:46:6D:3D:0E:17:60:5C:2E:8A:5F:58:5F:59:E6:3A:41:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3f95505-9535-3813-b43b-8d119202d5a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:29:33:08:1f:27:22:a7:0d:87:0b:60:bf:cf:f8:90:72:4a: af:e7:ea:73:78:94:e4:e0:1d:f7:eb:71:43:ce:64:18:7b:5b: da:09:78:eb:7d:dc:e7:cf:fa:a3:53:8f:57:7e:d5:c1:18:65: 2d:0c:a3:a5:95:83:3a:ac:6d:ce:51:dd:59:8c:04:79:bd:6b: a6:e9:54:11:19:cf:17:c8:3a:76:2c:5c:9d:85:8c:9a:74:b8: 80:82:27:1d:71:7e:7f:90:81:b3:ff:ca:0d:06:83:f6:40:fa: fe:21:f3:e6:73:74:50:d2:fe:46:6a:5b:80:6b:d2:9b:f3:9c: 2e:90:ad:05:16:e1:dc:88:0c:41:61:15:33:98:26:92:6e:06: 5e:2b:d1:29:16:13:b3:ce:5c:0b:f8:69:91:75:04:80:5c:49: 8b:ce:35:18:37:00:1e:f7:16:86:bb:58:52:14:8e:ef:fe:7f: d8:e8:07:8e:83:82:47:21:22:00:5d:90:76:6c:c2:d7:76:51: fc:f5:a7:3f:b2:45:b7:04:2a:77:eb:79:60:d4:85:15:8b:26: 74:ac:94:d5:2a:ad:1b:e4:ef:5c:93:08:ac:0f:a8:5f:52:5f: 8f:1e:4d:c2:58:45:f9:bf:eb:59:d2:b6:6c:8f:f6:8d:7b:30: 30:4e:54:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Asmi6u6tuwNUoAMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk YzdhMzU3MmQtZjNlMy00ODg4LTlmZTMtOWJmNzM4ZDYyODYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdjo2rJP+HfjJyUp73E6EbAh8h/yRJU0X2VX akXMRQfXyWxCtMHdt45Gm+AGOJcFdOMOG2cGPgL8Aap23JS2fox+RRtXABYx+3Bd Bu0XeSd/Ze2itkUTJrvO91tOM3oZ+iFqg/wV7bTRA8umKBHFImYjWX/HHsg2/0pL 8VUZz3sHZeeaI4+N3kBQkQXEhg93YbWkpVPgUpIJaUFztb2ufe83QeSBCd38W3zY iJ7pAu1xIrTABHlVs8I2PcPA/L69ESk5wlVQZTeerStztfk6QOCv2aTOpT7vSngO 4AKhOnzvDh0NvjXGytEY0i9UTWg7JuDqTyjpZVi6fLPOjasOtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCw2yUZtPQ4XYFwuil9YX1nmOkFYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTNmOTU1MDUtOTUzNS0z ODEzLWI0M2ItOGQxMTkyMDJkNWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACApMwgfJyKnDYcLYL/P+JBySq/n6nN4lOTgHffrcUPOZBh7W9oJeOt9 3OfP+qNTj1d+1cEYZS0Mo6WVgzqsbc5R3VmMBHm9a6bpVBEZzxfIOnYsXJ2FjJp0 uICCJx1xfn+QgbP/yg0Gg/ZA+v4h8+ZzdFDS/kZqW4Br0pvznC6QrQUW4dyIDEFh FTOYJpJuBl4r0SkWE7POXAv4aZF1BIBcSYvONRg3AB73Foa7WFIUju/+f9joB46D gkchIgBdkHZswtd2Ufz1pz+yRbcEKnfreWDUhRWLJnSslNUqrRvk71yTCKwPqF9S X48eTcJYRfm/61nStmyP9o17MDBOVJQ= -----END CERTIFICATE-----Generated at Mon Mar 2 08:21:29 2026 by rpki-client