$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf09854e-4b86-3725-b4da-1d34f6ac54eb.roa File: cf09854e-4b86-3725-b4da-1d34f6ac54eb.roa (raw, json) Hash identifier: 9vAoeabM70Y7ujwiHoYfRyaOQZJv55P4hpDn8L+cpiE= Subject key identifier: 95:F8:14:11:C1:88:E4:86:9C:D1:58:80:21:11:BC:1B:01:60:2D:37 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E0A6FF17DAAC512050E0C2B00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf09854e-4b86-3725-b4da-1d34f6ac54eb.roa Signing time: Tue 02 Jun 2026 18:32:03 +0000 ROA not before: Tue 02 Jun 2026 18:32:03 +0000 ROA not after: Mon 31 Aug 2026 18:32:03 +0000 asID: 396600 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0a:6f:f1:7d:aa:c5:12:05:0e:0c:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 2 18:32:03 2026 GMT Not After : Aug 31 18:32:03 2026 GMT Subject: CN=9535934a-5cbe-4ed4-9095-64bcd643e9ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b0:d8:c1:c5:7c:01:e1:8e:fe:75:1a:64:e3: 72:59:b4:91:bd:a2:df:78:c3:84:fa:1b:87:fe:4e: c6:e0:69:27:1a:e0:64:20:25:67:92:aa:29:35:af: 20:29:e7:a8:3e:7b:87:9f:88:ab:a2:be:4c:52:ee: 04:1c:67:00:50:ee:35:97:87:24:f9:a8:2e:7c:72: 6d:45:e5:8e:ed:07:27:e3:64:e1:ba:87:81:2c:a1: 17:16:d4:ad:7e:61:f5:9f:6e:11:6b:d3:56:5c:d9: 7a:90:8e:e3:33:e3:b5:3a:16:1e:03:fa:e1:90:f8: d2:03:3d:56:c1:f0:56:ae:be:37:e5:d6:06:ee:60: 09:3f:bf:b3:96:ed:58:75:73:4e:cf:39:1e:75:80: fe:69:87:5a:11:5d:75:eb:d2:13:f3:97:33:dc:24: cf:72:1e:60:c8:50:f2:80:af:6b:1a:59:88:3e:39: 5f:a7:76:05:2e:c2:e5:ac:27:a8:3a:42:ab:5b:1b: e3:35:5d:ef:89:68:09:ef:70:eb:a3:07:64:85:06: d0:d7:7c:52:30:c3:f5:45:d7:20:ca:1b:54:10:f2: 78:82:4a:63:16:52:f9:05:24:91:f2:4f:c5:58:31: 04:96:38:28:dd:6f:1f:92:ff:4d:9d:62:2c:d7:d9: 2b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F8:14:11:C1:88:E4:86:9C:D1:58:80:21:11:BC:1B:01:60:2D:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf09854e-4b86-3725-b4da-1d34f6ac54eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:2d:5e:7a:9d:78:12:23:e8:3c:e2:55:eb:07:1e:47:01:01: 99:84:08:38:9d:c9:7c:e5:c2:a3:5e:71:1a:e2:60:39:6a:ac: 44:b4:a7:d6:38:1a:fa:84:8f:0c:1e:1d:99:56:87:a6:bf:99: 14:f4:1d:65:a1:ab:1d:82:34:14:4c:dc:d8:1d:70:41:cd:6d: 65:8a:c8:d2:98:8c:ca:5f:07:a9:60:50:82:b6:cc:71:78:11: 3d:80:23:39:1e:f2:b5:7d:51:c1:bc:b6:5f:f8:ee:21:77:4d: f9:74:2b:41:19:bf:1c:0c:60:7a:69:56:94:60:4d:0c:4d:e1: 8f:1c:c7:45:83:c7:de:e5:dd:e6:5f:db:eb:a7:c2:8f:18:e5: a1:05:91:06:08:de:bb:3d:94:d0:6f:3a:26:be:1a:4c:99:85: 46:4d:ec:6e:45:d6:a9:ea:68:99:8e:3d:2d:f4:e5:c3:3a:ad: e1:a5:db:af:80:a3:15:49:f2:27:b0:58:27:42:b0:ae:c2:8d: 6d:c5:73:ac:20:fa:bc:a1:86:8a:2b:7f:ef:9a:55:9b:71:c1: 6a:54:a3:5e:91:51:32:49:cb:26:7d:a9:ee:ac:86:17:c3:41: 1a:cf:88:36:36:7b:11:7d:b4:3c:6f:08:43:cb:54:5f:6b:6a: e4:f4:fc:78 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4Kb/F9qsUSBQ4MKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk OTUzNTkzNGEtNWNiZS00ZWQ0LTkwOTUtNjRiY2Q2NDNlOWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbDYwcV8AeGO/nUaZONyWbSRvaLfeMOE+huH /k7G4GknGuBkICVnkqopNa8gKeeoPnuHn4iror5MUu4EHGcAUO41l4ck+agufHJt ReWO7Qcn42ThuoeBLKEXFtStfmH1n24Ra9NWXNl6kI7jM+O1OhYeA/rhkPjSAz1W wfBWrr435dYG7mAJP7+zlu1YdXNOzzkedYD+aYdaEV1169IT85cz3CTPch5gyFDy gK9rGlmIPjlfp3YFLsLlrCeoOkKrWxvjNV3viWgJ73DrowdkhQbQ13xSMMP1Rdcg yhtUEPJ4gkpjFlL5BSSR8k/FWDEEljgo3W8fkv9NnWIs19krswIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJX4FBHBiOSGnNFYgCERvBsBYC03MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2YwOTg1NGUtNGI4Ni0z NzI1LWI0ZGEtMWQzNGY2YWM1NGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCELV56nXgSI+g84lXrBx5HAQGZhAg4ncl85cKjXnEa4mA5aqxEtKfW OBr6hI8MHh2ZVoemv5kU9B1loasdgjQUTNzYHXBBzW1lisjSmIzKXwepYFCCtsxx eBE9gCM5HvK1fVHBvLZf+O4hd035dCtBGb8cDGB6aVaUYE0MTeGPHMdFg8fe5d3m X9vrp8KPGOWhBZEGCN67PZTQbzomvhpMmYVGTexuRdap6miZjj0t9OXDOq3hpduv gKMVSfInsFgnQrCuwo1txXOsIPq8oYaKK3/vmlWbccFqVKNekVEyScsmfanurIYX w0Eaz4g2NnsRfbQ8bwhDy1Rfa2rk9Px4 -----END CERTIFICATE-----Generated at Sat Jun 13 17:47:07 2026 by rpki-client