$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd04b7e4-213a-3709-8b14-1b9d99e1f51d.roa File: cd04b7e4-213a-3709-8b14-1b9d99e1f51d.roa (raw, json) Hash identifier: 63seJZsZ7KdvKigor6mfuRwLHboVssBbLztRgJjJuHk= Subject key identifier: 65:44:DD:6C:82:3C:DC:B1:37:00:67:48:6F:90:B8:9D:FE:FD:B4:6D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F480D527E5FDD8366EFE4ED40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd04b7e4-213a-3709-8b14-1b9d99e1f51d.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 20172 IP address blocks: 192.42.175.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:52:7e:5f:dd:83:66:ef:e4:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=d0726ed2-27d0-4845-ad53-29fd2dac0d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:de:c4:c3:41:c9:42:ff:5a:17:e5:66:86:b6: 0b:8f:97:2c:5f:89:c6:09:05:bd:2b:57:4e:a3:e9: 22:45:fa:20:11:0b:a9:38:9f:f0:cc:b7:5c:eb:ba: 7f:7e:68:eb:f5:fa:77:27:b5:8f:91:a0:12:c3:36: 47:20:d4:90:5f:73:51:e4:1c:dc:08:f0:81:87:31: 4a:38:f0:d5:d7:7c:02:10:a7:75:6c:68:64:dd:c2: de:ba:df:89:92:f1:4d:88:7e:93:04:64:a4:24:e0: 10:57:66:19:bf:13:ad:61:45:45:8c:6e:70:55:b6: be:1e:74:d3:83:c0:f3:f9:09:84:0c:e2:e6:8f:d9: e8:8b:44:45:6e:6e:a9:9d:f4:86:f4:7d:23:ba:ec: 01:2a:15:91:29:ca:3b:a2:f4:86:67:e8:1b:16:a3: 48:46:c6:db:da:61:aa:b9:07:e6:fe:22:00:77:db: 61:ad:3e:a5:35:00:72:81:90:5f:21:07:cb:48:32: a1:24:56:4c:b7:25:80:db:66:9c:8b:5d:61:f8:b6: 29:aa:14:b8:3a:1f:d9:e2:21:b6:07:06:e5:62:8a: 17:06:54:ab:d5:c0:da:04:b0:8b:9c:10:fc:a0:e4: 00:3c:41:cb:70:ff:cc:2a:2b:ef:06:f1:4e:02:b3: 35:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:44:DD:6C:82:3C:DC:B1:37:00:67:48:6F:90:B8:9D:FE:FD:B4:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd04b7e4-213a-3709-8b14-1b9d99e1f51d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.175.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:8e:f9:fd:ce:27:07:ec:96:b8:d3:1c:98:f2:68:e2:24:8b: 89:be:b1:13:ab:65:26:69:bb:56:0b:f3:c9:e3:ed:92:65:46: 21:5d:48:b6:54:2b:92:2b:17:87:99:5f:f6:33:36:9e:66:10: 2e:f1:f9:bc:32:30:95:7c:43:f6:1a:8f:98:f8:cc:a5:82:e4: 8d:84:31:b0:d1:36:3f:4b:45:be:ab:d9:62:49:bc:0b:e5:b3: c7:b8:a3:96:7d:1e:43:2e:a4:bc:f0:05:34:10:b7:ee:a0:53: fe:32:f9:10:f4:e1:f4:9b:e3:9f:08:fc:5f:06:ba:3c:2a:32: 80:1e:95:51:29:91:dc:ef:d5:6c:0b:ae:c5:1d:58:10:cf:ce: 51:6b:ce:03:e0:dd:a3:3a:33:20:75:3d:7c:bb:90:a5:79:04: a9:8e:79:e3:17:c2:2d:28:42:f9:d9:3d:ef:b0:df:c8:9a:88: 0b:bb:2b:c4:5b:74:dd:3d:af:5c:0c:e8:64:94:b1:8d:36:93: 51:8b:ba:06:68:c8:d3:c9:0a:a7:c3:8c:42:95:5d:c3:4c:43: b3:e1:c8:5b:c2:5f:53:ee:99:ff:2f:99:82:26:b2:0c:c1:d9: d0:d9:c7:b6:61:c2:6b:41:0b:4c:b0:b1:19:23:56:86:da:c0: 81:57:8c:e7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9IDVJ+X92DZu/k7UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk ZDA3MjZlZDItMjdkMC00ODQ1LWFkNTMtMjlmZDJkYWMwZDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkt7Ew0HJQv9aF+VmhrYLj5csX4nGCQW9K1dO o+kiRfogEQupOJ/wzLdc67p/fmjr9fp3J7WPkaASwzZHINSQX3NR5BzcCPCBhzFK OPDV13wCEKd1bGhk3cLeut+JkvFNiH6TBGSkJOAQV2YZvxOtYUVFjG5wVba+HnTT g8Dz+QmEDOLmj9noi0RFbm6pnfSG9H0juuwBKhWRKco7ovSGZ+gbFqNIRsbb2mGq uQfm/iIAd9thrT6lNQBygZBfIQfLSDKhJFZMtyWA22aci11h+LYpqhS4Oh/Z4iG2 BwblYooXBlSr1cDaBLCLnBD8oOQAPEHLcP/MKivvBvFOArM1+QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGVE3WyCPNyxNwBnSG+QuJ3+/bRtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2QwNGI3ZTQtMjEzYS0z NzA5LThiMTQtMWI5ZDk5ZTFmNTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqvHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQASjvn9zicH7Ja40xyY8mjiJIuJvrETq2UmabtWC/PJ4+2SZUYhXUi2 VCuSKxeHmV/2MzaeZhAu8fm8MjCVfEP2Go+Y+MylguSNhDGw0TY/S0W+q9liSbwL 5bPHuKOWfR5DLqS88AU0ELfuoFP+MvkQ9OH0m+OfCPxfBro8KjKAHpVRKZHc79Vs C67FHVgQz85Ra84D4N2jOjMgdT18u5CleQSpjnnjF8ItKEL52T3vsN/ImogLuyvE W3TdPa9cDOhklLGNNpNRi7oGaMjTyQqnw4xClV3DTEOz4chbwl9T7pn/L5mCJrIM wdnQ2ce2YcJrQQtMsLEZI1aG2sCBV4zn -----END CERTIFICATE-----Generated at Sun Sep 27 06:32:45 2026 by rpki-client