$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa4b5717-b3bc-3774-a2bc-646e7b84119d.roa File: aa4b5717-b3bc-3774-a2bc-646e7b84119d.roa (raw, json) Hash identifier: QShcpcoMbAp4F6d2M+ShnRtvy7clEMppBFxb2LcBrwI= Subject key identifier: 1E:2A:2A:6C:58:E1:A1:6F:0D:77:53:11:96:4D:31:DB:24:66:93:D0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584DDA55D3C1A20CDA1935AF4900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa4b5717-b3bc-3774-a2bc-646e7b84119d.roa Signing time: Sat 16 May 2026 13:00:31 +0000 ROA not before: Sat 16 May 2026 13:00:31 +0000 ROA not after: Fri 14 Aug 2026 13:00:31 +0000 asID: 396564 IP address blocks: 192.42.173.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:da:55:d3:c1:a2:0c:da:19:35:af:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 16 13:00:31 2026 GMT Not After : Aug 14 13:00:31 2026 GMT Subject: CN=47c7fed8-6fe7-4eff-b996-4549a2dbbb14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:51:9f:4b:a4:27:ee:a5:31:18:a1:e5:ae:23: 01:29:db:b7:24:aa:10:c8:77:8f:15:91:48:cd:b8: 7a:45:81:3d:4a:be:00:92:38:43:e6:1e:77:56:44: 2c:1f:dc:cf:59:cd:d0:99:76:9a:46:f3:d5:c1:57: 1d:8d:d5:4a:9e:71:b9:70:57:00:1c:4e:52:2b:d7: bc:95:36:2b:04:2e:72:f8:0c:da:40:da:22:3e:28: ea:48:8e:f0:dc:27:6f:2e:04:b3:c2:d2:b6:d4:bd: 9b:0e:05:a6:4e:66:4f:ce:42:6a:71:01:bf:7c:db: 06:75:e6:17:8f:46:c3:bb:be:d4:5e:ec:91:2a:a3: bc:f0:57:02:38:38:8e:a5:25:ec:66:86:14:05:1c: d9:6b:40:7a:51:2c:5a:ea:54:cf:27:c7:a4:4d:1d: d5:32:e6:c1:48:35:a6:49:23:0e:29:f4:65:f9:32: b1:7f:9b:2a:34:61:bb:9c:13:eb:3b:b8:d4:b7:e9: 39:5e:0b:27:c5:3c:e9:53:6d:61:73:3b:6f:97:36: 57:90:c1:57:8f:54:50:98:b6:96:7d:a2:0a:50:34: 4d:c7:07:32:2c:4e:19:9a:fb:6e:f3:15:e1:ee:3c: 76:68:37:c7:f4:13:10:9c:5e:b6:db:f1:b8:b7:6f: 21:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:2A:2A:6C:58:E1:A1:6F:0D:77:53:11:96:4D:31:DB:24:66:93:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa4b5717-b3bc-3774-a2bc-646e7b84119d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.173.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:f6:0b:8e:d6:34:32:22:4a:f6:be:c2:96:d8:98:2a:bb:bb: aa:b4:b8:6a:55:0d:2b:ca:db:3e:4b:cb:76:38:7a:e8:2a:47: fd:5d:d2:b3:e0:3d:b6:31:f2:c2:0e:db:a0:a0:cf:94:b4:73: 80:c9:50:fa:c6:d1:7a:a3:03:87:a1:fd:26:79:2e:24:78:1d: e1:68:53:80:a7:44:24:87:c2:4a:92:b5:51:bd:4e:a9:b2:88: 2c:1f:28:d2:f4:42:a8:2d:4d:fc:21:f1:dc:b9:fc:3c:f0:73: 2a:75:a5:6a:56:c8:d8:72:e1:85:b4:c1:69:33:13:70:38:c0: 42:cf:c5:34:f9:d0:25:9b:7c:31:b0:4e:a0:8d:33:0c:00:52: 6e:04:59:67:37:b5:37:72:dd:83:f4:26:0c:e1:23:95:a4:43: 47:68:21:e7:9e:3b:c7:ff:24:73:88:9d:62:ce:e7:0f:e7:c5: 10:d1:69:5e:97:b5:33:8b:eb:ee:5f:2a:8a:4b:cc:9f:52:4c: 3a:00:15:c6:49:52:b7:56:3e:ba:c4:b8:e3:7e:4d:47:06:a9: da:69:ee:2a:65:64:f1:83:ee:73:bc:65:88:b8:66:b6:2e:9a: 03:c6:25:a7:c6:69:ee:ea:c9:e8:3e:16:df:c8:cb:bd:90:60: 44:35:96:b5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3aVdPBogzaGTWvSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDUxNjEzMDAzMVoXDTI2MDgxNDEzMDAzMVowLzEtMCsGA1UEAxMk NDdjN2ZlZDgtNmZlNy00ZWZmLWI5OTYtNDU0OWEyZGJiYjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFGfS6Qn7qUxGKHlriMBKdu3JKoQyHePFZFI zbh6RYE9Sr4AkjhD5h53VkQsH9zPWc3QmXaaRvPVwVcdjdVKnnG5cFcAHE5SK9e8 lTYrBC5y+AzaQNoiPijqSI7w3CdvLgSzwtK21L2bDgWmTmZPzkJqcQG/fNsGdeYX j0bDu77UXuyRKqO88FcCODiOpSXsZoYUBRzZa0B6USxa6lTPJ8ekTR3VMubBSDWm SSMOKfRl+TKxf5sqNGG7nBPrO7jUt+k5XgsnxTzpU21hcztvlzZXkMFXj1RQmLaW faIKUDRNxwcyLE4Zmvtu8xXh7jx2aDfH9BMQnF622/G4t28hrQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFB4qKmxY4aFvDXdTEZZNMdskZpPQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWE0YjU3MTctYjNiYy0z Nzc0LWEyYmMtNjQ2ZTdiODQxMTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA59guO1jQyIkr2vsKW2Jgqu7uqtLhqVQ0ryts+S8t2OHroKkf9XdKz 4D22MfLCDtugoM+UtHOAyVD6xtF6owOHof0meS4keB3haFOAp0Qkh8JKkrVRvU6p sogsHyjS9EKoLU38IfHcufw88HMqdaVqVsjYcuGFtMFpMxNwOMBCz8U0+dAlm3wx sE6gjTMMAFJuBFlnN7U3ct2D9CYM4SOVpENHaCHnnjvH/yRziJ1izucP58UQ0Wle l7Uzi+vuXyqKS8yfUkw6ABXGSVK3Vj66xLjjfk1HBqnaae4qZWTxg+5zvGWIuGa2 LpoDxiWnxmnu6snoPhbfyMu9kGBENZa1 -----END CERTIFICATE-----Generated at Sat Jun 13 21:13:36 2026 by rpki-client