$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be2a5f38-481a-3181-975a-7ec6f5512df7.roa File: be2a5f38-481a-3181-975a-7ec6f5512df7.roa (raw, json) Hash identifier: g/yXO5bxclLTu+UbtiKtLgDklMY3cSNMA27fOEgImj0= Subject key identifier: 26:21:4E:29:00:E5:54:E9:9B:87:A6:08:79:61:73:E6:AA:6D:3B:7D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F067271BA6A7E10428903A380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be2a5f38-481a-3181-975a-7ec6f5512df7.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 25485 IP address blocks: 192.42.178.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:71:ba:6a:7e:10:42:89:03:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=54c026db-5d2a-41e9-b83b-e692bb53bcb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0b:59:00:cf:e7:ea:55:da:37:4e:cd:ce:2d: 68:02:07:b7:a3:ff:c9:ac:31:56:ed:8d:a4:31:64: 08:cd:fc:9f:b1:44:b1:fa:10:96:a9:b2:32:5d:23: 97:70:3c:d8:7a:dd:fa:51:9a:d7:67:06:76:c7:d3: 26:2e:4d:6f:26:2e:dc:97:61:43:74:fd:92:5d:b5: ac:61:ca:45:62:ba:5a:06:e1:da:50:7f:6e:37:cb: 66:96:3d:75:27:a0:a8:39:a0:0a:23:a4:91:40:2b: 24:f2:0e:5a:56:45:b6:72:8c:95:52:ab:a3:02:00: c0:d6:4c:d3:08:25:a1:52:ec:b3:f7:de:a1:1c:fa: a6:f9:8f:aa:b5:0d:e2:92:68:21:15:8e:3d:f4:85: 74:c4:e9:7e:5d:0c:b3:1c:7f:9c:ad:ee:a7:87:b1: 98:f8:f9:6c:06:f0:b9:5e:c7:9f:42:b0:39:96:17: 7f:cf:5c:7e:f2:92:2b:77:38:a3:f5:bf:1d:33:6b: 72:54:81:b4:c6:7e:3d:a5:9b:36:a2:3d:0e:e5:17: f4:40:21:5d:b8:07:f1:d5:9c:19:8a:28:1a:c8:7d: a4:65:f2:ed:a6:1b:f7:4d:9e:51:a9:5e:18:16:90: 54:37:e3:9a:8d:85:74:65:3c:c0:cd:dd:7b:21:79: 26:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:21:4E:29:00:E5:54:E9:9B:87:A6:08:79:61:73:E6:AA:6D:3B:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be2a5f38-481a-3181-975a-7ec6f5512df7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.178.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:7b:3c:60:4c:a4:ac:ed:d2:ef:9d:0b:28:61:9c:9c:d6:43: 92:9f:7a:88:3f:cb:ba:ff:0e:28:cd:ed:ba:90:90:ac:5d:eb: 88:18:b6:d2:3e:50:d7:80:f3:a2:dc:0a:42:54:08:7b:de:8f: cc:89:db:71:d4:be:9d:9b:8c:4b:a7:de:0e:fe:93:06:7f:fd: 98:6f:f6:53:4d:e6:7b:2f:2c:22:da:86:bb:33:54:30:0b:4c: 9a:ec:9e:9a:4b:94:b3:fe:6b:4e:fb:b7:2d:42:b9:57:5e:ae: a4:d3:c6:a1:10:21:5d:16:e3:31:4f:bc:ae:38:74:1e:49:ec: 11:a8:41:55:61:ea:d7:d4:9f:48:11:78:52:3e:56:a1:44:29: d5:b8:c5:dd:57:76:81:8e:08:df:db:ef:8b:de:af:93:6f:7a: b7:8b:44:33:62:20:2d:fa:b5:56:f7:10:6b:28:79:ee:4c:29: bd:68:62:7b:48:b9:f0:fb:e5:c8:96:8e:e8:b0:bb:80:25:74: f8:bd:ec:f3:34:cb:26:52:cd:5b:50:a4:90:52:1e:d1:85:b4: 83:f8:a0:4a:7e:1c:67:f9:e6:74:02:8d:53:9a:db:d7:b3:3d: e4:a3:47:0d:4e:e9:08:8d:75:61:61:c1:08:84:83:a7:a5:2b: e8:5f:6d:64 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8GcnG6an4QQokDo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk NTRjMDI2ZGItNWQyYS00MWU5LWI4M2ItZTY5MmJiNTNiY2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAtZAM/n6lXaN07Nzi1oAge3o//JrDFW7Y2k MWQIzfyfsUSx+hCWqbIyXSOXcDzYet36UZrXZwZ2x9MmLk1vJi7cl2FDdP2SXbWs YcpFYrpaBuHaUH9uN8tmlj11J6CoOaAKI6SRQCsk8g5aVkW2coyVUqujAgDA1kzT CCWhUuyz996hHPqm+Y+qtQ3ikmghFY499IV0xOl+XQyzHH+cre6nh7GY+PlsBvC5 XsefQrA5lhd/z1x+8pIrdzij9b8dM2tyVIG0xn49pZs2oj0O5Rf0QCFduAfx1ZwZ iigayH2kZfLtphv3TZ5RqV4YFpBUN+OajYV0ZTzAzd17IXkm8QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCYhTikA5VTpm4emCHlhc+aqbTt9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmUyYTVmMzgtNDgxYS0z MTgxLTk3NWEtN2VjNmY1NTEyZGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqyHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCQezxgTKSs7dLvnQsoYZyc1kOSn3qIP8u6/w4oze26kJCsXeuIGLbS PlDXgPOi3ApCVAh73o/Midtx1L6dm4xLp94O/pMGf/2Yb/ZTTeZ7Lywi2oa7M1Qw C0ya7J6aS5Sz/mtO+7ctQrlXXq6k08ahECFdFuMxT7yuOHQeSewRqEFVYerX1J9I EXhSPlahRCnVuMXdV3aBjgjf2++L3q+Tb3q3i0QzYiAt+rVW9xBrKHnuTCm9aGJ7 SLnw++XIlo7osLuAJXT4vezzNMsmUs1bUKSQUh7RhbSD+KBKfhxn+eZ0Ao1TmtvX sz3ko0cNTukIjXVhYcEIhIOnpSvoX21k -----END CERTIFICATE-----Generated at Sun Sep 27 02:22:13 2026 by rpki-client