$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad44616b-b1bc-3991-9cf5-76b87385e9f7.roa File: ad44616b-b1bc-3991-9cf5-76b87385e9f7.roa (raw, json) Hash identifier: r8N2KpLaIAmXvHAnbeHTn22cKIX/btyxOZid3PSiOaQ= Subject key identifier: 46:D9:B9:B7:08:2F:F4:8A:12:71:4D:76:B7:F6:A6:2E:1A:66:85:19 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F6292CF7FB51B491CAEFBCD60 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad44616b-b1bc-3991-9cf5-76b87385e9f7.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396657 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:cf:7f:b5:1b:49:1c:ae:fb:cd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=9d8617c8-9c29-4df0-850c-c6be24edf69d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fa:32:8b:83:3a:2e:f3:d7:3c:65:12:23:64: af:41:a2:00:3c:b5:48:78:ed:17:d8:ee:e9:8b:7b: 4b:e5:d2:b6:f2:85:ce:95:23:44:02:46:3c:c6:af: c2:e7:15:1a:d3:bb:81:94:ab:43:9d:76:47:7e:90: 5f:3e:10:43:cc:b8:5d:ad:e6:43:24:db:ab:ed:e4: de:64:5d:0b:42:de:fb:89:22:69:ea:c6:f4:78:22: c7:69:97:9e:b7:e9:77:e3:90:37:d0:0e:0b:71:f9: 2d:49:1a:65:61:66:84:f3:b7:2f:c9:01:dd:69:aa: e8:9a:b5:32:08:9a:25:c9:31:0b:3e:13:22:2e:18: d4:da:ab:44:a5:44:e6:51:62:3a:d7:a8:22:04:2d: b2:ca:d7:22:4f:d1:37:f5:f9:fd:39:5b:24:ec:d4: 06:15:9b:98:3f:9d:df:33:4f:73:30:23:30:37:98: 85:14:1e:f5:bb:85:2f:b8:36:b6:f7:ef:64:01:a6: d6:fd:95:50:b5:9b:28:c1:32:e4:01:e9:cb:c2:94: 7b:41:16:18:46:b2:a2:32:b4:06:4a:93:1f:0f:f9: 16:3c:e9:4b:2b:32:02:17:6d:ad:e1:fa:5b:1a:6c: f1:a9:d1:20:5c:37:58:f3:39:2e:38:67:b8:c2:dd: 85:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D9:B9:B7:08:2F:F4:8A:12:71:4D:76:B7:F6:A6:2E:1A:66:85:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad44616b-b1bc-3991-9cf5-76b87385e9f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:2b:b1:ea:98:71:53:a1:8a:2f:b3:c4:9e:bc:19:65:7a:09: 73:93:ad:4b:b7:e5:92:b9:cd:57:b5:3a:6f:88:8c:31:b1:11: a5:18:75:b6:9d:77:2b:6a:81:a1:53:32:9b:76:3b:14:56:42: dd:95:c5:0b:e9:ec:56:49:a9:4c:8b:b1:6c:d3:2f:27:ee:f8: 99:aa:00:45:e7:24:89:aa:18:f7:58:22:b5:dc:f7:31:a9:7a: 67:17:b8:fc:01:10:b7:06:47:38:c8:f5:07:36:06:7c:d7:4a: ec:b9:4a:f7:7c:d8:60:b6:e8:47:e6:c7:59:fb:f2:3c:e7:dc: ae:3f:5a:32:f8:eb:49:c7:b2:7b:7d:1b:0a:31:39:1a:c0:b0: 7e:3a:14:c7:bd:17:98:10:34:dc:09:07:92:50:79:54:60:c7: 59:70:ef:1d:5a:4d:de:11:7f:c8:79:1f:89:30:cb:c8:3d:b0: 59:3f:45:54:72:f1:26:3e:5a:1f:8a:73:95:71:e5:5b:14:6a: b5:89:d6:f9:d5:c1:a6:50:2e:94:8f:09:4d:62:1e:83:11:a0: 94:dd:9f:b1:c6:3f:bc:8d:7f:91:bd:34:64:1a:65:92:ae:63: f7:55:53:ff:3d:30:07:5a:64:d9:90:87:ae:17:48:6d:f5:8a: e7:1e:21:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iks9/tRtJHK77zWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk OWQ4NjE3YzgtOWMyOS00ZGYwLTg1MGMtYzZiZTI0ZWRmNjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/oyi4M6LvPXPGUSI2SvQaIAPLVIeO0X2O7p i3tL5dK28oXOlSNEAkY8xq/C5xUa07uBlKtDnXZHfpBfPhBDzLhdreZDJNur7eTe ZF0LQt77iSJp6sb0eCLHaZeet+l345A30A4LcfktSRplYWaE87cvyQHdaaromrUy CJolyTELPhMiLhjU2qtEpUTmUWI616giBC2yytciT9E39fn9OVsk7NQGFZuYP53f M09zMCMwN5iFFB71u4UvuDa29+9kAabW/ZVQtZsowTLkAenLwpR7QRYYRrKiMrQG SpMfD/kWPOlLKzICF22t4fpbGmzxqdEgXDdY8zkuOGe4wt2FqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbZubcIL/SKEnFNdrf2pi4aZoUZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWQ0NDYxNmItYjFiYy0z OTkxLTljZjUtNzZiODczODVlOWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0rseqYcVOhii+zxJ68GWV6CXOTrUu35ZK5zVe1Om+IjDGxEaUYdbad dytqgaFTMpt2OxRWQt2VxQvp7FZJqUyLsWzTLyfu+JmqAEXnJImqGPdYIrXc9zGp emcXuPwBELcGRzjI9Qc2BnzXSuy5Svd82GC26Efmx1n78jzn3K4/WjL460nHsnt9 GwoxORrAsH46FMe9F5gQNNwJB5JQeVRgx1lw7x1aTd4Rf8h5H4kwy8g9sFk/RVRy 8SY+Wh+Kc5Vx5VsUarWJ1vnVwaZQLpSPCU1iHoMRoJTdn7HGP7yNf5G9NGQaZZKu Y/dVU/89MAdaZNmQh64XSG31iuceIUw= -----END CERTIFICATE-----Generated at Thu Oct 8 20:32:41 2026 by rpki-client