$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7b75a7b-4cf4-370a-bd3f-8c361f722363.roa File: a7b75a7b-4cf4-370a-bd3f-8c361f722363.roa (raw, json) Hash identifier: QHvGvcDdsNqUvwanSVzrNkXDXsd/z4XZe3EH+cZhBQw= Subject key identifier: A1:06:89:7C:79:25:2A:8E:5B:36:CA:D3:97:CA:CB:95:80:8F:BC:E0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E0A7009B8E6005F4FA7C7DCA0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7b75a7b-4cf4-370a-bd3f-8c361f722363.roa Signing time: Tue 02 Jun 2026 18:32:03 +0000 ROA not before: Tue 02 Jun 2026 18:32:03 +0000 ROA not after: Mon 31 Aug 2026 18:32:03 +0000 asID: 396606 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0a:70:09:b8:e6:00:5f:4f:a7:c7:dc:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 2 18:32:03 2026 GMT Not After : Aug 31 18:32:03 2026 GMT Subject: CN=d8d21942-60c3-48e1-9060-988eb258cdaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1e:7f:af:1a:69:de:0c:c7:0c:6b:da:2c:55: 03:2d:1a:d6:7f:58:46:3c:df:1c:47:3c:8d:af:f1: d2:59:61:22:5a:d1:af:f5:8e:0f:a7:2d:51:0f:39: b8:b2:2f:16:59:2a:ca:9c:08:27:32:5d:b5:ff:00: 34:ac:2d:60:55:38:3e:d8:d3:c6:bc:07:b7:b6:c0: 24:92:5c:93:b6:52:bb:96:2f:22:9a:fc:ed:96:a8: 49:55:d4:ab:cb:c8:90:87:3c:bf:00:a5:3b:92:52: 7a:9f:2b:37:b4:21:8a:72:ee:83:22:95:06:0b:c8: 18:9c:95:48:72:2f:ab:91:bb:d3:30:6f:11:59:39: ea:a5:d4:bc:9c:4f:77:bc:a8:68:af:c0:ea:02:a4: ed:53:88:4d:47:1f:20:1d:5a:c9:08:66:e4:65:05: 1c:36:c9:73:7a:1e:17:a9:af:fe:9a:9e:20:3e:22: b3:e8:bd:d6:dc:f6:e1:00:60:3a:11:46:e3:bb:f0: 5e:f5:11:05:97:4b:f1:94:d8:c2:c8:e0:6a:60:d4: 51:52:1c:13:12:77:56:d9:d3:a9:f6:5b:d3:6a:00: 5d:31:81:ef:2f:9c:bd:d9:1d:77:ae:23:59:f0:a5: c5:fa:43:f8:dd:b3:9f:bf:a5:ba:10:00:bb:67:1d: ed:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:06:89:7C:79:25:2A:8E:5B:36:CA:D3:97:CA:CB:95:80:8F:BC:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7b75a7b-4cf4-370a-bd3f-8c361f722363.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:3c:a4:1e:7b:06:a4:28:f3:cd:ba:5f:ac:99:04:a3:00:15: af:8d:d0:27:67:7f:06:19:bb:85:76:92:ff:57:9b:a6:07:54: 5c:07:02:dc:93:13:e9:11:d2:fc:73:77:00:81:84:b4:b1:5f: ba:43:7d:1b:be:ca:e7:95:2b:c7:2d:2a:73:3b:f0:be:6a:2c: 3b:01:ca:85:2b:7a:d1:b1:0a:11:d8:ba:19:bd:bc:ee:8f:a5: 4e:35:24:39:fa:81:dd:ec:de:01:48:b1:d7:6e:98:90:1c:cd: 42:47:17:a6:b4:1b:44:ca:7a:43:b4:8c:54:fd:44:d7:f5:8d: 04:f4:c5:7b:38:2c:89:11:5e:b4:7e:46:52:76:da:81:5d:a0: 0c:c2:c6:4f:95:f2:e7:f0:9d:87:1b:4a:b3:86:36:b1:b7:14: d0:76:02:67:3d:fa:1d:86:e0:25:29:ab:a5:90:5a:f5:38:5e: ab:4a:b0:21:3a:f1:c6:05:d6:44:d1:f1:67:ce:49:d0:f5:3d: 96:fc:2c:93:0d:2d:5c:56:cb:5c:74:fa:89:a4:da:82:90:84: 3a:5e:7f:83:0e:63:9c:f7:5d:9f:6a:bc:12:8c:4e:db:2b:b7: c8:33:e7:9b:55:72:35:84:c9:4f:88:40:04:b0:5c:a3:b2:b8: d1:50:44:fe -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4KcAm45gBfT6fH3KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk ZDhkMjE5NDItNjBjMy00OGUxLTkwNjAtOTg4ZWIyNThjZGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh5/rxpp3gzHDGvaLFUDLRrWf1hGPN8cRzyN r/HSWWEiWtGv9Y4Ppy1RDzm4si8WWSrKnAgnMl21/wA0rC1gVTg+2NPGvAe3tsAk klyTtlK7li8imvztlqhJVdSry8iQhzy/AKU7klJ6nys3tCGKcu6DIpUGC8gYnJVI ci+rkbvTMG8RWTnqpdS8nE93vKhor8DqAqTtU4hNRx8gHVrJCGbkZQUcNslzeh4X qa/+mp4gPiKz6L3W3PbhAGA6EUbju/Be9REFl0vxlNjCyOBqYNRRUhwTEndW2dOp 9lvTagBdMYHvL5y92R13riNZ8KXF+kP43bOfv6W6EAC7Zx3tGQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKEGiXx5JSqOWzbK05fKy5WAj7zgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTdiNzVhN2ItNGNmNC0z NzBhLWJkM2YtOGMzNjFmNzIyMzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCZPKQeewakKPPNul+smQSjABWvjdAnZ38GGbuFdpL/V5umB1RcBwLc kxPpEdL8c3cAgYS0sV+6Q30bvsrnlSvHLSpzO/C+aiw7AcqFK3rRsQoR2LoZvbzu j6VONSQ5+oHd7N4BSLHXbpiQHM1CRxemtBtEynpDtIxU/UTX9Y0E9MV7OCyJEV60 fkZSdtqBXaAMwsZPlfLn8J2HG0qzhjaxtxTQdgJnPfodhuAlKaulkFr1OF6rSrAh OvHGBdZE0fFnzknQ9T2W/CyTDS1cVstcdPqJpNqCkIQ6Xn+DDmOc912farwSjE7b K7fIM+ebVXI1hMlPiEAEsFyjsrjRUET+ -----END CERTIFICATE-----Generated at Sat Jun 13 22:32:16 2026 by rpki-client