$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b817b27b-99be-3ff9-b478-f3a00a4404f2.roa File: b817b27b-99be-3ff9-b478-f3a00a4404f2.roa (raw, json) Hash identifier: +m9YrEq4syz5tdfguUjy70gijB113e4+uOasUniqgFE= Subject key identifier: 39:C9:30:47:C1:04:D5:D2:4B:8B:F8:67:C7:4D:3C:45:88:0B:A8:01 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6AAAAD51B711CFDF0FB21E80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b817b27b-99be-3ff9-b478-f3a00a4404f2.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 397198 IP address blocks: 192.42.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:ad:51:b7:11:cf:df:0f:b2:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=4b2204ff-6df4-4d74-97cd-370ba3d2a7fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c3:74:76:06:41:de:4f:97:a3:90:e6:17:c7: 55:6a:06:86:51:51:6e:a0:31:34:38:07:e1:c7:19: 1f:53:f5:8a:83:7d:de:7a:bd:1c:35:9f:51:ae:26: 04:90:bc:a7:02:0f:66:1d:0e:da:e7:2f:b6:e4:44: 6b:50:f6:c6:d3:b3:01:da:44:d0:3e:7a:ea:d7:4b: 9e:eb:37:93:1c:4c:c6:6b:21:b0:75:c8:24:30:e7: fc:6b:2b:3e:bb:c1:21:8b:ab:4f:eb:70:ad:9b:6d: 96:90:a6:4e:67:c0:40:fc:56:e3:79:76:ec:04:18: 87:2b:43:ae:7a:17:14:61:dc:ac:51:03:7c:27:2a: 7f:81:b7:bd:6d:f8:49:4f:6b:99:a9:26:09:8a:cb: 2a:0a:f4:2b:24:ef:27:f3:8a:e7:29:e5:ee:03:34: 59:30:94:3a:a7:88:a9:c2:30:22:d0:e9:d0:28:37: 8f:3d:b3:a6:00:7a:33:9b:6d:ec:9f:92:29:86:d2: 4b:20:11:a1:d5:5b:4b:85:32:f5:48:35:a8:7c:7e: 12:71:a2:cf:65:d5:75:82:56:fd:e2:7a:01:43:d4: ad:09:6d:b2:2b:a0:ea:6d:79:06:af:0f:3b:44:29: 73:7d:c9:eb:d2:09:45:71:68:9c:0c:25:58:2f:34: 7c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C9:30:47:C1:04:D5:D2:4B:8B:F8:67:C7:4D:3C:45:88:0B:A8:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b817b27b-99be-3ff9-b478-f3a00a4404f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:f8:97:d7:83:67:f1:75:5e:e6:ea:af:83:f8:ed:9b:33:00: a3:e4:3c:6f:29:0e:18:c0:66:b7:2f:d8:ed:d5:17:7b:23:3b: 7d:cf:4c:05:a3:1f:1d:a4:25:b5:85:83:72:ee:61:95:81:54: 71:b3:8c:35:0d:28:fd:91:da:d5:0a:0a:92:42:b7:42:51:88: 97:06:1e:b4:b4:20:b7:bc:d8:e6:7f:c0:bb:b6:9c:9a:7a:ad: 69:9f:1b:8c:09:e3:99:39:07:ff:e1:ad:eb:78:51:36:d6:ab: 87:f4:71:7d:6e:bd:48:c1:59:ae:fe:ec:41:4d:33:fd:95:6b: 5a:2e:ea:20:1b:20:d7:d8:30:72:9f:2e:20:89:35:60:1d:c1: 3f:1e:1b:3d:c4:b3:59:22:f4:3d:68:d4:6d:74:be:d4:f9:25: d5:9d:fe:c0:76:af:05:4a:63:70:7a:43:0f:75:fa:07:b9:09: a4:08:4f:09:1e:2d:e0:30:20:2f:bd:88:a8:7e:58:54:d5:18: 67:48:15:ed:08:ab:2e:2f:74:70:a8:b8:7d:9f:1d:90:6c:6d: 17:78:2f:a7:b6:b7:c7:f9:d9:0b:34:80:6f:76:68:94:ae:a7: 95:05:c7:1d:23:61:df:37:90:36:69:f0:85:da:83:70:2d:d7: 8e:fd:f6:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqq1RtxHP3w+yHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk NGIyMjA0ZmYtNmRmNC00ZDc0LTk3Y2QtMzcwYmEzZDJhN2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsN0dgZB3k+Xo5DmF8dVagaGUVFuoDE0OAfh xxkfU/WKg33eer0cNZ9RriYEkLynAg9mHQ7a5y+25ERrUPbG07MB2kTQPnrq10ue 6zeTHEzGayGwdcgkMOf8ays+u8Ehi6tP63Ctm22WkKZOZ8BA/FbjeXbsBBiHK0Ou ehcUYdysUQN8Jyp/gbe9bfhJT2uZqSYJissqCvQrJO8n84rnKeXuAzRZMJQ6p4ip wjAi0OnQKDePPbOmAHozm23sn5IphtJLIBGh1VtLhTL1SDWofH4ScaLPZdV1glb9 4noBQ9StCW2yK6DqbXkGrw87RClzfcnr0glFcWicDCVYLzR87wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnJMEfBBNXSS4v4Z8dNPEWIC6gBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjgxN2IyN2ItOTliZS0z ZmY5LWI0NzgtZjNhMDBhNDQwNGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACD4l9eDZ/F1Xubqr4P47ZszAKPkPG8pDhjAZrcv2O3VF3sjO33PTAWj Hx2kJbWFg3LuYZWBVHGzjDUNKP2R2tUKCpJCt0JRiJcGHrS0ILe82OZ/wLu2nJp6 rWmfG4wJ45k5B//hret4UTbWq4f0cX1uvUjBWa7+7EFNM/2Va1ou6iAbINfYMHKf LiCJNWAdwT8eGz3Es1ki9D1o1G10vtT5JdWd/sB2rwVKY3B6Qw91+ge5CaQITwke LeAwIC+9iKh+WFTVGGdIFe0Iqy4vdHCouH2fHZBsbRd4L6e2t8f52Qs0gG92aJSu p5UFxx0jYd83kDZp8IXag3At14799v0= -----END CERTIFICATE-----Generated at Fri Apr 17 10:47:01 2026 by rpki-client