$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa643f6f-69ac-33cb-86e1-5d4feda19e20.roa File: aa643f6f-69ac-33cb-86e1-5d4feda19e20.roa (raw, json) Hash identifier: 4NOQWieRTOoVas6ecHl5wt2KLZPEEt95daLDBnAz33Q= Subject key identifier: 9E:96:A5:76:81:0D:15:42:F2:37:5A:89:C2:74:4F:E5:35:A8:17:EF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D703FFA2184B320165B788100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa643f6f-69ac-33cb-86e1-5d4feda19e20.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 397210 IP address blocks: 192.42.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:fa:21:84:b3:20:16:5b:78:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=101bb370-0b43-4f95-be4c-4ef7e3a582c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d2:4e:ce:e8:64:44:44:06:14:75:47:b6:5b: 71:12:48:0f:a1:da:9d:35:a3:a7:dc:c7:2b:4e:66: 1c:80:f6:59:96:6d:c4:5a:b5:88:41:d7:25:2a:0c: 88:ec:11:c1:55:03:b0:f6:80:6a:4f:ac:7e:77:af: 61:24:dd:0e:1e:66:22:a8:ca:7b:6c:1d:93:02:52: 33:a3:89:1a:c5:8d:c6:0e:c9:0e:12:50:93:38:fa: 0c:d0:6e:34:39:88:bb:94:a2:0c:bc:0b:b6:a5:71: 89:0a:e5:0d:67:6b:53:da:e6:ca:b1:df:d1:73:fd: bf:49:3a:c2:ef:94:d2:1c:94:a8:2c:d6:47:86:08: 8c:85:a1:ae:dd:41:d5:9a:8a:47:29:f1:c2:c9:1b: f0:4d:e0:ee:79:0f:e0:14:74:59:90:e3:98:08:94: aa:8f:7e:c2:76:54:9c:e2:59:07:c1:53:23:31:ab: e1:54:40:f0:3a:99:83:15:a4:f8:5a:8d:5a:9b:0a: c2:17:1c:e9:5a:17:9e:9e:af:f4:32:1c:a5:a2:3c: 2a:01:19:54:91:13:8a:f1:45:c8:09:b1:cc:8f:5e: 01:51:ea:9b:b2:19:22:ef:49:94:a4:6b:6a:2d:3d: e3:3e:ee:24:c8:a5:b3:49:9d:49:38:82:e9:bc:81: 05:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:96:A5:76:81:0D:15:42:F2:37:5A:89:C2:74:4F:E5:35:A8:17:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa643f6f-69ac-33cb-86e1-5d4feda19e20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:40:69:88:f1:5c:ae:6a:6c:f2:4f:87:53:5e:7b:b5:58:88: 53:4e:3b:9b:d0:7f:df:04:19:5f:ea:98:28:cf:0b:f1:a7:9b: 0a:51:36:59:0c:80:5f:e6:c3:ea:56:c9:53:e0:e9:4f:09:32: 53:02:ff:fe:92:e8:76:93:be:b9:53:7a:b5:60:53:08:95:01: ee:5b:0f:b1:1c:da:fc:e6:5b:12:d0:b6:75:1f:b5:e9:b2:0e: 27:08:4c:9e:ca:83:82:70:83:b2:55:58:e4:74:87:cb:b5:57: 15:be:d5:26:f4:12:15:75:5a:b9:ec:d7:d4:5b:f8:89:27:e2: d5:48:05:69:00:f6:90:7e:80:e0:15:2a:15:22:0f:de:76:f7: 43:cb:b7:34:31:8f:1b:1e:ab:2c:f4:01:b0:11:c7:ba:af:39: 5e:07:41:3b:ce:cf:b9:0f:aa:9e:a4:8a:a2:3b:5d:c6:c1:82: c7:72:23:72:fc:bf:0c:67:0a:d2:af:81:26:64:f0:52:0c:6c: eb:0f:65:03:cf:eb:68:99:1c:2c:78:c0:69:94:3c:a7:27:e0: 00:9c:f3:26:08:36:f9:ef:d9:64:27:c0:2a:9f:dd:28:05:30: a8:b5:9b:79:3c:d8:e4:24:72:3c:c8:b3:d3:6a:db:8b:e6:c3: ff:8e:ce:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP/ohhLMgFlt4gQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk MTAxYmIzNzAtMGI0My00Zjk1LWJlNGMtNGVmN2UzYTU4MmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstJOzuhkREQGFHVHtltxEkgPodqdNaOn3Mcr TmYcgPZZlm3EWrWIQdclKgyI7BHBVQOw9oBqT6x+d69hJN0OHmYiqMp7bB2TAlIz o4kaxY3GDskOElCTOPoM0G40OYi7lKIMvAu2pXGJCuUNZ2tT2ubKsd/Rc/2/STrC 75TSHJSoLNZHhgiMhaGu3UHVmopHKfHCyRvwTeDueQ/gFHRZkOOYCJSqj37CdlSc 4lkHwVMjMavhVEDwOpmDFaT4Wo1amwrCFxzpWheenq/0MhylojwqARlUkROK8UXI CbHMj14BUeqbshki70mUpGtqLT3jPu4kyKWzSZ1JOILpvIEFQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6WpXaBDRVC8jdaicJ0T+U1qBfvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWE2NDNmNmYtNjlhYy0z M2NiLTg2ZTEtNWQ0ZmVkYTE5ZTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVAaYjxXK5qbPJPh1Nee7VYiFNOO5vQf98EGV/qmCjPC/GnmwpRNlkM gF/mw+pWyVPg6U8JMlMC//6S6HaTvrlTerVgUwiVAe5bD7Ec2vzmWxLQtnUftemy DicITJ7Kg4Jwg7JVWOR0h8u1VxW+1Sb0EhV1Wrns19Rb+Ikn4tVIBWkA9pB+gOAV KhUiD95290PLtzQxjxseqyz0AbARx7qvOV4HQTvOz7kPqp6kiqI7XcbBgsdyI3L8 vwxnCtKvgSZk8FIMbOsPZQPP62iZHCx4wGmUPKcn4ACc8yYINvnv2WQnwCqf3SgF MKi1m3k82OQkcjzIs9Nq24vmw/+OzmM= -----END CERTIFICATE-----Generated at Fri Apr 17 10:22:23 2026 by rpki-client