$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf5cfbae-b712-3d2b-90a1-1fddc5472579.roa File: bf5cfbae-b712-3d2b-90a1-1fddc5472579.roa (raw, json) Hash identifier: iLBAzKTXjKn8pXFgT7varyWJBF4kQKnyB9mCZ1rPmYI= Subject key identifier: C7:DB:EF:DE:4C:15:B0:B2:FC:D5:66:E5:DA:6C:D1:30:77:E3:DF:8E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D5FA86BE8312834B37A53D180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf5cfbae-b712-3d2b-90a1-1fddc5472579.roa Signing time: Thu 02 Apr 2026 14:22:43 +0000 ROA not before: Thu 02 Apr 2026 14:22:43 +0000 ROA not after: Wed 01 Jul 2026 14:22:43 +0000 asID: 396551 IP address blocks: 192.42.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:a8:6b:e8:31:28:34:b3:7a:53:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 2 14:22:43 2026 GMT Not After : Jul 1 14:22:43 2026 GMT Subject: CN=7a2c47bb-6c1d-4d20-9c6d-9266d0ebd729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:46:c3:9a:53:35:37:21:ad:16:47:3a:91:aa: d2:b5:42:ea:45:81:7d:85:8d:84:25:91:15:6c:9c: 63:81:62:a2:be:a9:73:19:a3:1b:58:04:ce:b5:5a: fe:37:0c:81:ef:51:2a:ce:b0:a7:78:2c:d1:23:45: fb:8c:f5:68:82:7d:e6:98:a7:ed:ef:c9:02:4c:29: ca:cf:5c:0a:1a:c9:02:a5:7f:cf:67:ff:8c:ae:75: d1:5e:53:91:1b:71:f6:e8:11:5e:03:7e:5a:12:87: bc:cb:b1:48:b9:f8:a2:f9:d4:fe:1a:8b:bf:80:2b: 05:d0:ea:6d:a7:b6:d3:57:64:80:47:64:27:1a:6b: 8e:56:dc:99:68:ea:c0:10:1c:33:66:81:d5:d0:9a: 70:16:0d:74:91:61:24:83:21:75:c6:63:d2:0f:c2: 41:89:06:02:1b:a6:95:7a:f7:eb:7f:ce:3a:be:bc: d3:ac:6b:e6:42:2c:b5:e3:2c:05:30:47:b8:17:cc: bc:51:86:9a:6a:3a:d0:7c:22:3a:e6:fc:ea:ce:d6: 28:e8:39:de:5d:16:50:09:3a:08:66:10:80:4a:5a: 63:5e:54:0d:8d:7a:04:6c:17:26:7b:70:a2:d3:ec: 13:ea:c3:6b:06:70:0c:1d:2e:f2:4f:87:52:8d:ef: e5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:DB:EF:DE:4C:15:B0:B2:FC:D5:66:E5:DA:6C:D1:30:77:E3:DF:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf5cfbae-b712-3d2b-90a1-1fddc5472579.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:f6:cd:cb:dc:d7:a6:e5:d7:4e:ff:13:61:eb:1f:76:16:3f: bf:a5:d0:06:86:46:3b:0e:c3:d7:51:5b:72:ed:55:f4:f2:11: b0:7b:14:ae:b1:79:22:b5:8a:8b:34:66:80:cd:00:62:72:f7: 53:4d:2e:1f:c8:bd:42:ae:71:25:4d:8c:77:c2:20:da:52:a3: fe:21:2b:bb:a1:f8:9d:66:dc:c6:5e:9f:43:53:e5:f3:30:47: 94:ff:46:b7:a9:13:d1:72:4a:29:37:d9:d3:a1:1f:cc:16:7c: 34:fb:e0:a0:0e:42:58:58:79:28:6d:85:42:a4:64:9e:7b:67: 11:81:6c:cf:4b:92:6d:af:4d:a2:3e:51:33:c4:12:fb:70:fe: 55:1e:07:6c:43:3f:41:a8:b4:3c:90:e2:0f:2f:d3:5f:50:a2: a2:f5:fe:48:bc:d3:2a:66:c1:9d:73:39:c5:fc:d7:00:64:50: 49:d7:86:5c:d8:7d:cc:79:0e:c0:f8:fa:9f:ed:24:d4:f0:f6: bb:d2:de:e2:10:d5:62:db:f0:ca:22:48:0c:ec:52:9e:3f:ba: 9d:69:87:0c:12:9d:f2:28:4a:9a:43:75:8c:05:3b:b1:ff:7c: 7e:53:58:eb:69:ec:ea:3f:cb:13:56:4f:10:b3:64:9e:ed:17: 59:1d:b0:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1fqGvoMSg0s3pT0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwMjE0MjI0M1oXDTI2MDcwMTE0MjI0M1owLzEtMCsGA1UEAxMk N2EyYzQ3YmItNmMxZC00ZDIwLTljNmQtOTI2NmQwZWJkNzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUbDmlM1NyGtFkc6karStULqRYF9hY2EJZEV bJxjgWKivqlzGaMbWATOtVr+NwyB71EqzrCneCzRI0X7jPVogn3mmKft78kCTCnK z1wKGskCpX/PZ/+MrnXRXlORG3H26BFeA35aEoe8y7FIufii+dT+Gou/gCsF0Opt p7bTV2SAR2QnGmuOVtyZaOrAEBwzZoHV0JpwFg10kWEkgyF1xmPSD8JBiQYCG6aV evfrf846vrzTrGvmQiy14ywFMEe4F8y8UYaaajrQfCI65vzqztYo6DneXRZQCToI ZhCASlpjXlQNjXoEbBcme3Ci0+wT6sNrBnAMHS7yT4dSje/lwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfb795MFbCy/NVm5dps0TB349+OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmY1Y2ZiYWUtYjcxMi0z ZDJiLTkwYTEtMWZkZGM1NDcyNTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALz2zcvc16bl107/E2HrH3YWP7+l0AaGRjsOw9dRW3LtVfTyEbB7FK6x eSK1ios0ZoDNAGJy91NNLh/IvUKucSVNjHfCINpSo/4hK7uh+J1m3MZen0NT5fMw R5T/RrepE9FySik32dOhH8wWfDT74KAOQlhYeShthUKkZJ57ZxGBbM9Lkm2vTaI+ UTPEEvtw/lUeB2xDP0GotDyQ4g8v019QoqL1/ki80ypmwZ1zOcX81wBkUEnXhlzY fcx5DsD4+p/tJNTw9rvS3uIQ1WLb8MoiSAzsUp4/up1phwwSnfIoSppDdYwFO7H/ fH5TWOtp7Oo/yxNWTxCzZJ7tF1kdsHE= -----END CERTIFICATE-----Generated at Sun Apr 19 08:23:16 2026 by rpki-client