$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ceebc2b9-85d7-3b51-9e20-0a1c35d5204d.roa File: ceebc2b9-85d7-3b51-9e20-0a1c35d5204d.roa (raw, json) Hash identifier: 5xnMMBAJE6yLTwslgWmS/Lwsov+c7eqcdmBofJeyDBQ= Subject key identifier: 7A:9A:26:CC:8A:C3:C1:A9:83:E6:BE:3A:6D:14:4A:13:EE:55:97:25 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F498677E5D5607ADFF42DCDC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ceebc2b9-85d7-3b51-9e20-0a1c35d5204d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396580 IP address blocks: 192.42.174.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:77:e5:d5:60:7a:df:f4:2d:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=54e962f0-fd92-4f71-bd7b-3b3599ca1605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bf:3a:eb:bc:fe:f3:69:cc:5e:4e:a0:7d:88: c6:3d:27:0e:bc:cf:f5:77:92:fb:ce:88:37:e3:68: d5:46:58:cc:24:10:77:05:95:dc:92:ca:dd:38:cf: bc:6b:85:d1:f1:e7:25:81:04:78:e4:9b:86:98:d1: f8:86:2a:0e:20:92:6a:8b:70:b7:09:f4:b5:b5:3d: bc:32:16:e3:97:42:a8:b4:60:de:ee:03:d5:d7:00: 46:b8:54:14:af:0b:f5:2b:65:34:b1:c1:a5:5d:b2: c9:97:6c:f1:49:0e:87:74:20:c9:66:b5:7b:ba:52: ab:c1:fe:98:62:63:c4:31:b3:41:64:bc:80:19:b3: ba:95:3e:5d:a9:18:97:34:1a:a4:62:f6:3c:54:13: cd:e7:ee:91:aa:07:5c:64:bb:6f:87:3c:1e:46:5c: 18:1d:41:80:be:49:9e:a5:a8:b9:d6:aa:64:47:ef: 54:4e:4c:fc:0b:de:db:09:dc:18:98:c4:d7:56:30: b9:dd:63:a8:af:50:3d:a8:8d:b4:fb:f2:e7:bc:e3: fe:4b:92:49:1f:01:81:fd:56:cf:8d:47:66:8c:47: 40:f7:43:53:8d:a4:d2:e5:d1:d6:71:a5:85:42:d2: a1:8b:d4:bc:e5:9d:28:4a:32:e1:95:0e:f4:4f:c3: da:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:9A:26:CC:8A:C3:C1:A9:83:E6:BE:3A:6D:14:4A:13:EE:55:97:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ceebc2b9-85d7-3b51-9e20-0a1c35d5204d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.174.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:7d:78:87:4e:3e:ae:5a:f9:6e:c3:39:a2:16:19:9a:0d:70: 26:91:23:87:77:18:89:54:67:aa:ef:ab:6a:6d:f2:c4:78:5c: 7d:ac:4d:a7:1a:87:75:1b:5b:3e:d7:9d:6e:59:6e:06:f4:2f: b9:58:89:0a:8d:41:5b:0b:5a:38:8c:a9:42:ab:e6:9e:40:01: 1d:38:65:67:48:de:fa:da:f2:e8:47:65:0f:41:d7:9a:e9:56: 83:11:6b:7e:78:a5:75:2a:c6:e7:cc:8b:20:10:4e:e2:40:e8: b9:99:3d:be:71:75:03:26:c7:3c:b8:36:7c:57:ba:17:c2:cf: 3c:90:9c:ba:32:3d:5a:14:16:98:5b:cd:86:5a:19:4c:8e:f4: 78:6d:16:43:f7:ee:51:c8:75:6a:0e:43:bc:6c:84:a1:36:ed: 60:32:dd:ce:4b:9a:f5:a5:68:d5:6a:ed:5f:ef:17:6d:24:8e: 33:99:cc:9b:29:dc:8b:0c:9c:f8:ba:b1:c0:a5:b2:0d:66:75: 3c:ef:84:59:d8:a3:4e:ac:9b:92:83:50:fb:47:6b:fa:74:78: e5:df:08:5f:30:e0:2f:5a:66:5b:78:66:d8:1f:ea:84:c3:9d: 3c:14:cf:65:82:f1:2c:7e:c5:75:4c:44:23:21:01:2d:2a:36: bc:37:18:20 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jhnfl1WB63/QtzcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTRlOTYyZjAtZmQ5Mi00ZjcxLWJkN2ItM2IzNTk5Y2ExNjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArb8667z+82nMXk6gfYjGPScOvM/1d5L7zog3 42jVRljMJBB3BZXcksrdOM+8a4XR8eclgQR45JuGmNH4hioOIJJqi3C3CfS1tT28 Mhbjl0KotGDe7gPV1wBGuFQUrwv1K2U0scGlXbLJl2zxSQ6HdCDJZrV7ulKrwf6Y YmPEMbNBZLyAGbO6lT5dqRiXNBqkYvY8VBPN5+6RqgdcZLtvhzweRlwYHUGAvkme pai51qpkR+9UTkz8C97bCdwYmMTXVjC53WOor1A9qI20+/LnvOP+S5JJHwGB/VbP jUdmjEdA90NTjaTS5dHWcaWFQtKhi9S85Z0oSjLhlQ70T8Pa6QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHqaJsyKw8Gpg+a+Om0UShPuVZclMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2VlYmMyYjktODVkNy0z YjUxLTllMjAtMGExYzM1ZDUyMDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCquHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBefXiHTj6uWvluwzmiFhmaDXAmkSOHdxiJVGeq76tqbfLEeFx9rE2n God1G1s+151uWW4G9C+5WIkKjUFbC1o4jKlCq+aeQAEdOGVnSN762vLoR2UPQdea 6VaDEWt+eKV1KsbnzIsgEE7iQOi5mT2+cXUDJsc8uDZ8V7oXws88kJy6Mj1aFBaY W82GWhlMjvR4bRZD9+5RyHVqDkO8bIShNu1gMt3OS5r1pWjVau1f7xdtJI4zmcyb KdyLDJz4urHApbINZnU874RZ2KNOrJuSg1D7R2v6dHjl3whfMOAvWmZbeGbYH+qE w508FM9lgvEsfsV1TEQjIQEtKja8Nxgg -----END CERTIFICATE-----Generated at Sat Sep 26 16:59:43 2026 by rpki-client