$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc951d5f-9ad2-36a2-9abe-efceb8af5211.roa File: cc951d5f-9ad2-36a2-9abe-efceb8af5211.roa (raw, json) Hash identifier: QmnZD1epW4ojjMrV0kW57X8XiUW0m9PNOOSSm+5oSCE= Subject key identifier: 5B:21:3E:FA:16:9D:C8:6F:E2:76:4A:CF:16:E0:E9:54:E6:56:31:BD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EA788302767E225491B86FFF0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc951d5f-9ad2-36a2-9abe-efceb8af5211.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396560 IP address blocks: 192.42.174.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:30:27:67:e2:25:49:1b:86:ff:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=f927d72a-2995-4632-93ab-09c08371f32d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:39:ac:de:55:33:c2:68:81:e8:4f:28:4f:c7: 38:03:9f:8f:06:7b:9c:9e:67:2d:be:71:b8:b2:1a: f3:3c:86:9e:e1:5c:f6:52:89:a7:6f:4b:fb:44:b7: 93:b5:53:fa:e5:e5:69:ef:d3:ff:56:0b:fe:ba:10: 5c:fb:d5:09:b0:24:e4:00:97:41:17:19:ea:13:43: f7:b7:64:86:2e:4e:13:69:64:67:76:72:5c:88:ec: 85:1f:a8:56:68:b1:d1:f0:a7:23:83:ec:23:03:bb: c9:84:12:e7:45:6a:6b:d1:68:dd:50:fc:7d:c0:19: bb:97:f9:02:79:38:7e:1b:c8:df:26:be:b8:e7:67: 21:5c:14:7d:1d:35:fd:25:63:f5:4d:d3:7b:e4:1e: 08:ad:10:c8:67:21:9d:1d:f6:c2:92:5b:eb:25:64: 2f:9d:b8:f8:97:5d:23:0a:8e:1f:cb:ba:f2:5c:10: 47:ad:ac:0a:c0:ca:46:b5:b8:dd:51:57:bf:d7:d7: d2:f7:16:2a:40:a4:d0:79:5e:49:64:50:ba:04:f5: 16:71:8c:70:9b:a0:d9:51:36:ac:5b:f5:7b:6c:ec: 30:3c:2d:01:99:d9:a8:59:3f:3a:18:15:a8:76:6e: 9e:ba:46:e4:d9:fd:ad:b9:59:9f:af:0e:41:0d:7b: 3a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:21:3E:FA:16:9D:C8:6F:E2:76:4A:CF:16:E0:E9:54:E6:56:31:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc951d5f-9ad2-36a2-9abe-efceb8af5211.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.174.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:39:4c:0f:7d:67:2f:31:1f:92:7c:a5:77:4a:81:b7:ec:b1: f4:37:bc:2b:f4:22:49:79:be:c5:9a:31:f5:7b:82:73:bf:03: 79:b9:53:4c:26:05:cd:0c:b1:8e:d7:36:3a:24:3a:13:a1:24: 42:ed:c6:6c:19:b6:25:c2:bf:d0:fc:41:bc:26:a1:16:c5:60: f3:9d:1d:2f:39:1a:a3:1a:68:95:15:d4:de:0a:ee:07:df:bf: da:b5:b5:19:1b:71:de:b3:86:55:20:10:dc:29:29:fc:e2:91: 7a:02:bc:d9:09:f3:52:5d:b4:e3:d8:3c:62:ae:d4:0a:95:a8: 78:0a:4a:95:90:d9:69:ee:d5:3c:7f:ee:df:6f:dd:98:d2:ac: ad:b4:bf:b5:99:4a:b2:d5:59:b2:cf:be:eb:1d:74:69:92:f7: c7:56:f4:fb:68:be:a5:20:77:9f:ad:10:84:41:cd:94:90:ed: 74:4b:67:ce:0d:e5:70:7e:57:4c:bd:89:5c:ba:09:5d:eb:55: a0:06:99:d5:01:d3:37:dd:59:ef:32:45:f9:8b:4b:f8:29:56: b2:ff:c3:80:5a:8e:15:49:86:02:cd:86:12:95:ef:91:f8:29: 3a:41:6e:b6:e5:f6:b4:8e:58:fa:c4:e8:7c:db:3d:d9:72:76: 7c:36:02:62 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6niDAnZ+IlSRuG//AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZjkyN2Q3MmEtMjk5NS00NjMyLTkzYWItMDljMDgzNzFmMzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojms3lUzwmiB6E8oT8c4A5+PBnucnmctvnG4 shrzPIae4Vz2Uomnb0v7RLeTtVP65eVp79P/Vgv+uhBc+9UJsCTkAJdBFxnqE0P3 t2SGLk4TaWRndnJciOyFH6hWaLHR8Kcjg+wjA7vJhBLnRWpr0WjdUPx9wBm7l/kC eTh+G8jfJr6452chXBR9HTX9JWP1TdN75B4IrRDIZyGdHfbCklvrJWQvnbj4l10j Co4fy7ryXBBHrawKwMpGtbjdUVe/19fS9xYqQKTQeV5JZFC6BPUWcYxwm6DZUTas W/V7bOwwPC0BmdmoWT86GBWodm6eukbk2f2tuVmfrw5BDXs6aQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFshPvoWnchv4nZKzxbg6VTmVjG9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2M5NTFkNWYtOWFkMi0z NmEyLTlhYmUtZWZjZWI4YWY1MjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCquHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAlOUwPfWcvMR+SfKV3SoG37LH0N7wr9CJJeb7FmjH1e4JzvwN5uVNM JgXNDLGO1zY6JDoToSRC7cZsGbYlwr/Q/EG8JqEWxWDznR0vORqjGmiVFdTeCu4H 37/atbUZG3Hes4ZVIBDcKSn84pF6ArzZCfNSXbTj2DxirtQKlah4CkqVkNlp7tU8 f+7fb92Y0qyttL+1mUqy1Vmyz77rHXRpkvfHVvT7aL6lIHefrRCEQc2UkO10S2fO DeVwfldMvYlcugld61WgBpnVAdM33VnvMkX5i0v4KVay/8OAWo4VSYYCzYYSle+R +Ck6QW625fa0jlj6xOh82z3ZcnZ8NgJi -----END CERTIFICATE-----Generated at Wed Jul 29 05:05:52 2026 by rpki-client