$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aafb3f5c-ccba-3ea1-866c-1c67ab57ba5c.roa File: aafb3f5c-ccba-3ea1-866c-1c67ab57ba5c.roa (raw, json) Hash identifier: HGKAGTQPCkqfjAOUlKdwH4EjPuMr1W0ARQY+RJML8gA= Subject key identifier: 90:D0:A5:AF:83:36:A8:A6:29:D8:6C:24:29:02:BB:27:F9:33:9E:18 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584DF7A5E61DA096B6CD68C4C980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aafb3f5c-ccba-3ea1-866c-1c67ab57ba5c.roa Signing time: Wed 27 May 2026 01:00:14 +0000 ROA not before: Wed 27 May 2026 01:00:14 +0000 ROA not after: Tue 25 Aug 2026 01:00:14 +0000 asID: 397197 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f7:a5:e6:1d:a0:96:b6:cd:68:c4:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 27 01:00:14 2026 GMT Not After : Aug 25 01:00:14 2026 GMT Subject: CN=62731e34-c557-4c9e-b401-73e341f80d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8c:19:4e:f7:f8:f8:87:40:af:cd:6a:b0:86: 74:b4:35:35:34:84:0b:0f:2d:b7:61:ef:d6:a4:17: 2e:d1:e5:3e:a6:dc:46:9c:bb:ec:c6:bb:54:8c:5f: f9:58:75:46:f4:f6:e3:fd:68:46:3a:d9:39:20:9f: 17:e8:ad:2a:2a:f2:8b:57:08:27:09:0d:7a:3a:54: 63:36:22:4b:4d:a9:bb:1b:37:dc:5c:b8:f7:a3:d3: 71:c0:c0:83:9f:33:44:1a:d5:9e:3c:13:55:a5:ca: d0:db:c4:02:da:f5:90:e2:41:78:65:10:a1:fb:09: 72:c8:59:04:d5:95:4d:dc:2e:d8:2c:32:c4:59:08: 6b:85:18:ec:12:fc:b1:16:de:f4:dd:02:89:1e:77: ad:68:81:98:27:e0:26:6e:e5:02:92:b4:83:c4:92: bd:5a:c7:35:50:3e:ae:20:39:77:e0:01:f0:82:4c: e1:60:0c:08:93:e7:b2:8c:7d:07:fe:43:e0:e8:53: d3:53:f5:6e:b9:fd:22:61:d0:59:d9:15:de:91:78: ce:64:ae:e7:7d:9b:7f:03:29:7e:1b:75:16:6a:bf: 0f:26:4d:63:e4:c0:a3:65:8b:e3:61:fc:d4:c3:11: 14:0a:02:05:0d:21:55:b0:58:cf:63:d9:0a:a5:1b: ee:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D0:A5:AF:83:36:A8:A6:29:D8:6C:24:29:02:BB:27:F9:33:9E:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aafb3f5c-ccba-3ea1-866c-1c67ab57ba5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:c4:08:40:bc:36:f3:1e:c8:9a:57:05:cf:cb:ac:2c:52:61: ae:03:31:e1:f9:a3:7f:bf:d1:f3:34:69:11:8b:ae:d1:c0:97: 17:a3:c6:53:4e:51:54:17:84:02:79:0b:a4:d7:a5:e1:f3:6c: 0c:52:3e:d5:97:83:5a:a9:f6:6e:e6:a4:a7:99:c9:e7:37:71: f7:33:57:bc:05:36:a6:0c:03:d2:bf:af:22:4a:e5:9f:56:87: 0a:78:f6:93:d6:03:30:ce:98:f4:a8:f3:5e:3c:6d:10:85:7d: 8f:13:ec:24:e1:01:da:5c:4f:05:1f:3c:24:41:b6:dc:89:5a: a9:17:c1:f2:06:c1:a0:85:0e:02:e8:7f:3f:74:74:37:58:bf: eb:e9:af:a0:5a:d4:38:69:34:52:a5:55:b8:d2:c0:a5:73:2b: cc:69:34:8c:45:58:a5:a7:6d:d7:fa:47:bd:a8:6a:fc:0d:2b: 8c:9c:39:a8:16:d2:35:0d:c2:f6:b4:44:8e:69:92:ab:98:8e: fc:22:20:2c:e8:40:2d:5d:39:c8:df:05:69:88:e0:4f:db:54: 88:e7:1a:ff:f7:5f:8d:00:4e:93:c1:e9:2f:f6:cc:aa:3f:f3: 84:f0:e2:3d:9f:9c:f8:fd:18:1c:a6:39:68:9d:81:53:4b:21: a1:d0:c5:ea -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE33peYdoJa2zWjEyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDUyNzAxMDAxNFoXDTI2MDgyNTAxMDAxNFowLzEtMCsGA1UEAxMk NjI3MzFlMzQtYzU1Ny00YzllLWI0MDEtNzNlMzQxZjgwZDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4wZTvf4+IdAr81qsIZ0tDU1NIQLDy23Ye/W pBcu0eU+ptxGnLvsxrtUjF/5WHVG9Pbj/WhGOtk5IJ8X6K0qKvKLVwgnCQ16OlRj NiJLTam7GzfcXLj3o9NxwMCDnzNEGtWePBNVpcrQ28QC2vWQ4kF4ZRCh+wlyyFkE 1ZVN3C7YLDLEWQhrhRjsEvyxFt703QKJHnetaIGYJ+AmbuUCkrSDxJK9Wsc1UD6u IDl34AHwgkzhYAwIk+eyjH0H/kPg6FPTU/Vuuf0iYdBZ2RXekXjOZK7nfZt/Ayl+ G3UWar8PJk1j5MCjZYvjYfzUwxEUCgIFDSFVsFjPY9kKpRvubQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJDQpa+DNqimKdhsJCkCuyf5M54YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWFmYjNmNWMtY2NiYS0z ZWExLTg2NmMtMWM2N2FiNTdiYTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCbxAhAvDbzHsiaVwXPy6wsUmGuAzHh+aN/v9HzNGkRi67RwJcXo8ZT TlFUF4QCeQuk16Xh82wMUj7Vl4NaqfZu5qSnmcnnN3H3M1e8BTamDAPSv68iSuWf VocKePaT1gMwzpj0qPNePG0QhX2PE+wk4QHaXE8FHzwkQbbciVqpF8HyBsGghQ4C 6H8/dHQ3WL/r6a+gWtQ4aTRSpVW40sClcyvMaTSMRVilp23X+ke9qGr8DSuMnDmo FtI1DcL2tESOaZKrmI78IiAs6EAtXTnI3wVpiOBP21SI5xr/91+NAE6Twekv9syq P/OE8OI9n5z4/RgcpjlonYFTSyGh0MXq -----END CERTIFICATE-----Generated at Sat Jun 13 19:14:48 2026 by rpki-client