$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4e0f1b9-d236-3078-a1d3-fc12b2c8eddd.roa File: a4e0f1b9-d236-3078-a1d3-fc12b2c8eddd.roa (raw, json) Hash identifier: VEy+UtQz7ai9yHcE5EEdCvzOXul55xNpHJmmv0qsBsI= Subject key identifier: 9E:37:59:D8:5C:AC:74:8F:F2:CA:D3:0B:13:B6:00:82:50:DB:77:12 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D703FF63848616C8DFDB63F00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4e0f1b9-d236-3078-a1d3-fc12b2c8eddd.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 396603 IP address blocks: 192.42.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:f6:38:48:61:6c:8d:fd:b6:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=f2fb7ccb-b972-46de-8716-adce934015d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1f:45:b8:95:81:b4:82:92:d7:61:14:5f:ee: c8:f8:36:03:89:55:b3:cd:30:06:77:1c:05:9b:4f: f5:6f:d7:1c:be:da:94:19:3a:03:e8:93:ae:32:04: cc:28:a1:bd:78:f0:09:86:35:ef:55:2f:0e:9f:95: 85:c3:b3:3a:1f:24:a9:24:b6:ae:2e:6e:eb:08:53: 03:90:97:05:61:db:d8:ad:53:3b:b6:fc:48:55:74: 70:b5:f0:48:8a:3b:e4:94:5d:e0:ea:eb:a3:16:70: 4c:a7:27:4e:b1:66:83:15:84:cb:05:a6:6f:d8:47: 16:13:68:c7:50:3f:74:4b:8f:85:83:4b:54:c0:18: 13:be:f8:e9:6a:df:6c:90:dd:63:0e:52:b0:0a:c5: 78:5c:52:d1:b1:a1:4f:ec:a7:42:c7:c1:c9:85:83: 4f:bf:fc:d7:3c:37:2d:d7:b2:f9:0a:31:23:09:78: 64:32:7b:28:3c:23:92:2e:f3:89:40:16:97:d4:3b: e2:8a:3c:02:2c:3d:db:8b:ed:90:f3:14:51:c6:c5: 34:9f:72:8d:ce:67:81:ca:56:44:28:c6:62:7f:8d: e8:73:fa:bf:e9:a0:b2:fb:e2:ec:29:ec:53:e6:76: c8:55:00:52:e8:b3:cb:24:f5:a2:92:5a:99:0b:eb: d6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:37:59:D8:5C:AC:74:8F:F2:CA:D3:0B:13:B6:00:82:50:DB:77:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4e0f1b9-d236-3078-a1d3-fc12b2c8eddd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:83:be:fe:70:f6:37:1e:28:36:e4:1b:e7:82:0e:23:41:50: fb:6e:fe:04:82:95:d2:0e:5d:9d:c4:d3:3e:5a:f8:e7:46:18: ed:80:89:66:09:1c:ac:57:ca:09:fe:26:4b:50:f3:0d:dd:0c: 92:e0:25:36:bf:89:03:a2:d6:f3:61:97:65:e9:53:81:40:9b: 18:27:bf:ad:53:96:a5:74:d9:f4:e1:83:e6:20:ab:88:c7:b5: 47:3d:d7:0c:07:97:e1:86:86:34:a1:9d:ae:08:25:39:f5:45: ee:41:90:69:31:41:d1:ad:11:3c:eb:d6:07:a4:07:57:99:eb: 12:e7:99:ab:ae:21:c6:86:08:3c:a3:cc:ad:63:8c:49:82:4f: 7d:1f:96:f4:25:00:f1:a3:f8:7e:e2:c2:1a:ba:8f:3c:37:c8: e0:e2:2c:5a:30:92:86:c6:7e:d2:bc:f2:86:04:f3:cd:0d:a2: f9:91:d8:35:19:f8:79:c6:fd:b6:85:6d:33:5f:b5:62:db:3e: 7e:88:50:17:be:56:37:af:80:79:2b:ea:2c:28:eb:16:8f:5a: c1:30:fa:df:c7:5f:26:a7:54:d0:e3:64:be:f7:a5:49:39:c2: 44:ee:c2:ac:27:49:3f:d4:08:a4:c5:a2:b5:97:08:7e:4b:96: 5c:a2:fe:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP/Y4SGFsjf22PwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk ZjJmYjdjY2ItYjk3Mi00NmRlLTg3MTYtYWRjZTkzNDAxNWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR9FuJWBtIKS12EUX+7I+DYDiVWzzTAGdxwF m0/1b9ccvtqUGToD6JOuMgTMKKG9ePAJhjXvVS8On5WFw7M6HySpJLauLm7rCFMD kJcFYdvYrVM7tvxIVXRwtfBIijvklF3g6uujFnBMpydOsWaDFYTLBaZv2EcWE2jH UD90S4+Fg0tUwBgTvvjpat9skN1jDlKwCsV4XFLRsaFP7KdCx8HJhYNPv/zXPDct 17L5CjEjCXhkMnsoPCOSLvOJQBaX1DviijwCLD3bi+2Q8xRRxsU0n3KNzmeBylZE KMZif43oc/q/6aCy++LsKexT5nbIVQBS6LPLJPWiklqZC+vWnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ43WdhcrHSP8srTCxO2AIJQ23cSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTRlMGYxYjktZDIzNi0z MDc4LWExZDMtZmMxMmIyYzhlZGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeDvv5w9jceKDbkG+eCDiNBUPtu/gSCldIOXZ3E0z5a+OdGGO2AiWYJ HKxXygn+JktQ8w3dDJLgJTa/iQOi1vNhl2XpU4FAmxgnv61TlqV02fThg+Ygq4jH tUc91wwHl+GGhjShna4IJTn1Re5BkGkxQdGtETzr1gekB1eZ6xLnmauuIcaGCDyj zK1jjEmCT30flvQlAPGj+H7iwhq6jzw3yODiLFowkobGftK88oYE880NovmR2DUZ +HnG/baFbTNftWLbPn6IUBe+VjevgHkr6iwo6xaPWsEw+t/HXyanVNDjZL73pUk5 wkTuwqwnST/UCKTForWXCH5Lllyi/rU= -----END CERTIFICATE-----Generated at Fri Apr 17 11:45:59 2026 by rpki-client