$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5e87e19-c0dc-3451-bb3f-63e5f0c86cec.roa File: c5e87e19-c0dc-3451-bb3f-63e5f0c86cec.roa (raw, json) Hash identifier: z3X3aafc0iTM3Ev1lVgJjD3ZvwcnRL4HignYitAVlnU= Subject key identifier: 09:09:D5:0D:E3:61:BF:E0:3D:44:DC:B5:27:7E:4A:40:6D:D7:89:A6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D86B79AF03976CB09F60A4280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5e87e19-c0dc-3451-bb3f-63e5f0c86cec.roa Signing time: Thu 16 Apr 2026 14:09:50 +0000 ROA not before: Thu 16 Apr 2026 14:09:50 +0000 ROA not after: Wed 15 Jul 2026 14:09:50 +0000 asID: 36627 IP address blocks: 192.42.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:b7:9a:f0:39:76:cb:09:f6:0a:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 16 14:09:50 2026 GMT Not After : Jul 15 14:09:50 2026 GMT Subject: CN=706d9b1d-45cf-4ea6-ba92-68661b0ce1de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a1:17:f0:b6:51:da:16:56:8a:23:13:f7:df: e6:5e:68:74:5a:f1:1a:88:2b:25:8c:49:c2:f3:89: b7:d0:ab:ae:03:2d:53:8a:a2:0a:ec:7e:61:31:b1: 91:dc:3a:8c:c4:33:1c:bf:65:66:dd:5e:e8:15:29: 4c:2f:e7:4e:2c:d0:75:09:47:91:0d:c0:0a:c6:dc: ec:8a:90:b6:4f:4a:0f:f0:28:2b:a1:d3:fd:ae:7d: 90:55:a1:cd:f0:a8:8d:ee:e5:0d:30:a6:30:ce:56: 00:22:db:08:b8:28:2f:0d:29:61:c7:c0:45:39:fd: d2:e3:b7:6b:13:99:11:c7:c1:1b:97:ed:01:81:35: 07:13:2c:7b:e4:0b:70:8d:47:06:bb:03:ad:20:a4: 2e:80:cb:f7:b5:51:dd:fa:f8:e3:da:59:b1:cf:1a: ac:93:1a:ac:7a:a0:b1:09:57:38:89:d6:22:ce:83: a1:34:80:f3:17:2a:bf:c5:7e:cd:e5:d8:3d:3a:bb: a8:fe:a8:bc:f7:80:44:9f:3e:2f:4b:3b:42:02:66: 1a:b8:02:8d:04:5b:f6:0d:7f:61:31:70:d6:36:e3: 59:a7:e2:ab:75:7c:a7:eb:79:8d:92:12:18:93:6a: 8d:6a:55:df:be:3b:de:0a:78:a1:7c:0f:89:2f:fe: d9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:09:D5:0D:E3:61:BF:E0:3D:44:DC:B5:27:7E:4A:40:6D:D7:89:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5e87e19-c0dc-3451-bb3f-63e5f0c86cec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:7c:41:93:02:9a:5c:73:33:a9:84:03:fb:f1:9f:9a:89:b5: b9:f9:c9:a6:43:3a:a2:4a:a8:98:9e:96:43:3c:38:51:c1:81: 1e:57:7a:0f:41:63:0f:9f:51:9e:dd:e2:ff:7a:5b:d0:3a:3b: e9:1e:c7:a5:b6:20:90:a4:60:82:cf:d6:3a:fa:f4:43:b5:9d: 31:e6:d3:c8:9a:bb:e3:22:0d:4f:39:1d:42:a4:2b:cb:d6:b9: 62:cd:ad:d3:6f:27:bb:e0:be:a3:e8:5e:c0:43:1b:8e:33:8b: 57:c7:3c:28:14:7a:3e:df:3e:1b:21:32:d5:b6:f7:59:0c:1b: 9b:c3:a3:de:ac:b9:bd:ba:b9:ed:98:40:fb:26:88:60:f8:34: e3:f5:42:80:cf:f0:f6:3f:02:f0:59:e0:56:c9:d5:67:85:64: 3a:6c:d5:3f:9a:85:79:0f:7b:ad:39:40:56:c9:de:ea:f1:2c: 50:e7:c5:56:55:c2:fa:4b:1c:d9:2e:7b:fd:9d:f0:4e:40:43: 9d:82:4b:9d:1d:91:ff:cf:9c:77:02:12:1f:cf:4e:c4:dd:a7: 8f:c4:9f:9e:a1:cc:77:4f:56:b9:8c:bb:25:39:e7:0f:2b:06: d5:ec:3f:8f:7e:c9:20:b9:c0:f3:4e:03:32:a9:7a:6a:74:e4: 81:d5:be:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Gt5rwOXbLCfYKQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxNjE0MDk1MFoXDTI2MDcxNTE0MDk1MFowLzEtMCsGA1UEAxMk NzA2ZDliMWQtNDVjZi00ZWE2LWJhOTItNjg2NjFiMGNlMWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KEX8LZR2hZWiiMT99/mXmh0WvEaiCsljEnC 84m30KuuAy1TiqIK7H5hMbGR3DqMxDMcv2Vm3V7oFSlML+dOLNB1CUeRDcAKxtzs ipC2T0oP8CgrodP9rn2QVaHN8KiN7uUNMKYwzlYAItsIuCgvDSlhx8BFOf3S47dr E5kRx8Ebl+0BgTUHEyx75AtwjUcGuwOtIKQugMv3tVHd+vjj2lmxzxqskxqseqCx CVc4idYizoOhNIDzFyq/xX7N5dg9Oruo/qi894BEnz4vSztCAmYauAKNBFv2DX9h MXDWNuNZp+KrdXyn63mNkhIYk2qNalXfvjveCnihfA+JL/7ZJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkJ1Q3jYb/gPUTctSd+SkBt14mmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzVlODdlMTktYzBkYy0z NDUxLWJiM2YtNjNlNWYwYzg2Y2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALF8QZMCmlxzM6mEA/vxn5qJtbn5yaZDOqJKqJielkM8OFHBgR5Xeg9B Yw+fUZ7d4v96W9A6O+kex6W2IJCkYILP1jr69EO1nTHm08iau+MiDU85HUKkK8vW uWLNrdNvJ7vgvqPoXsBDG44zi1fHPCgUej7fPhshMtW291kMG5vDo96sub26ue2Y QPsmiGD4NOP1QoDP8PY/AvBZ4FbJ1WeFZDps1T+ahXkPe605QFbJ3urxLFDnxVZV wvpLHNkue/2d8E5AQ52CS50dkf/PnHcCEh/PTsTdp4/En56hzHdPVrmMuyU55w8r BtXsP49+ySC5wPNOAzKpemp05IHVvik= -----END CERTIFICATE-----Generated at Fri Apr 17 10:10:22 2026 by rpki-client