$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d32a548f-9b46-3dce-af65-24b2ed102928.roa File: d32a548f-9b46-3dce-af65-24b2ed102928.roa (raw, json) Hash identifier: pe/QfnK4edv3uI+uYWBtz64TBWZxLcvQjiIOl6a14hE= Subject key identifier: D0:7C:3C:F1:23:E7:11:74:5F:CA:CE:B3:AC:C4:FF:DB:52:60:5A:41 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6AAAAA392AA3BF4AF6F8FE80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d32a548f-9b46-3dce-af65-24b2ed102928.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 396591 IP address blocks: 192.42.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:aa:39:2a:a3:bf:4a:f6:f8:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=92b4ef9e-f378-494c-b938-9b0110b3dcab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f0:03:a9:55:7e:41:b1:a1:92:b0:17:1d:b1: 04:20:af:8b:1a:2f:1b:f7:83:30:78:ef:40:c1:dc: 5e:e6:11:9a:c4:e6:d6:f9:bd:fc:4b:54:33:e8:2b: ab:78:be:6c:78:0a:df:cb:5e:80:cf:06:76:24:66: db:32:20:72:9d:c5:9f:20:9d:35:51:bf:7a:df:c4: e0:47:27:b9:4d:63:6b:19:52:6c:f9:63:9b:34:f8: 03:ad:ff:93:cf:97:b4:1e:46:d3:15:e5:cd:8c:a0: a5:45:b1:48:af:99:0a:13:db:41:19:ee:7c:0d:01: 95:4b:89:9e:34:a6:93:fa:65:49:79:d6:f1:91:f5: eb:62:65:fe:80:95:e9:08:51:a4:89:97:27:90:44: 4f:8c:31:f3:55:b7:67:3d:59:d0:36:57:05:f4:2f: b8:90:06:d1:01:68:e3:c0:14:cd:85:5c:21:85:85: ae:23:47:c7:8e:51:ea:d6:9e:cb:6e:fb:26:bf:54: 4c:cd:31:de:4d:0a:2b:6d:57:b8:51:d1:29:3c:99: f2:ec:47:da:dd:54:07:a5:58:c7:78:16:b7:1f:c1: 6d:b0:18:42:0f:e2:4c:66:9e:d7:68:3a:eb:ca:e2: 61:c7:38:fd:15:a1:8a:10:0e:9a:f8:73:21:29:5f: 5c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:7C:3C:F1:23:E7:11:74:5F:CA:CE:B3:AC:C4:FF:DB:52:60:5A:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d32a548f-9b46-3dce-af65-24b2ed102928.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:81:1d:3b:5f:ca:04:7b:89:2e:a5:9e:15:14:5b:f6:20:39: 9e:22:93:6e:b7:56:2b:f4:49:44:db:50:55:e9:f2:09:2e:08: 39:4a:55:15:74:4b:cf:32:85:35:ff:45:56:fe:23:96:7c:a2: 63:ba:cf:ea:2b:19:4e:7e:f9:7f:fa:02:71:6e:36:c1:7b:c2: 2e:7b:db:ed:03:cb:62:8d:10:5f:bc:db:d2:1d:5e:97:c8:17: 5f:1d:c9:53:48:19:ee:37:40:13:af:be:28:a1:e4:88:b1:ce: c6:3c:ca:d8:f1:f2:ce:51:d9:f4:d4:4c:a4:e2:ab:9b:38:90: e2:f7:d5:d8:da:b1:2a:54:a5:35:85:60:64:f7:fa:65:e5:53: 39:b8:f0:d5:55:ea:cf:3e:4e:89:d4:77:6d:6f:35:49:bf:6c: 64:ca:1d:6b:7e:77:5f:85:e2:70:e1:4d:86:73:71:56:a8:5b: 0f:6a:d6:1c:53:7f:52:82:8c:94:e4:ef:ac:bf:60:14:50:82: 0f:67:58:79:d9:03:93:2c:ed:d8:d8:28:14:22:dd:58:6e:d5: 9a:8e:45:64:1a:a6:c4:cb:da:fc:6e:69:2d:30:4f:25:da:1e: 4c:ad:5c:ea:8f:5c:88:90:a6:7b:36:93:20:dc:a5:85:97:e7: 79:00:bf:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqqo5KqO/Svb4/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk OTJiNGVmOWUtZjM3OC00OTRjLWI5MzgtOWIwMTEwYjNkY2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfADqVV+QbGhkrAXHbEEIK+LGi8b94MweO9A wdxe5hGaxObW+b38S1Qz6CureL5seArfy16AzwZ2JGbbMiByncWfIJ01Ub9638Tg Rye5TWNrGVJs+WObNPgDrf+Tz5e0HkbTFeXNjKClRbFIr5kKE9tBGe58DQGVS4me NKaT+mVJedbxkfXrYmX+gJXpCFGkiZcnkERPjDHzVbdnPVnQNlcF9C+4kAbRAWjj wBTNhVwhhYWuI0fHjlHq1p7Lbvsmv1RMzTHeTQorbVe4UdEpPJny7Efa3VQHpVjH eBa3H8FtsBhCD+JMZp7XaDrryuJhxzj9FaGKEA6a+HMhKV9c4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNB8PPEj5xF0X8rOs6zE/9tSYFpBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDMyYTU0OGYtOWI0Ni0z ZGNlLWFmNjUtMjRiMmVkMTAyOTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGBHTtfygR7iS6lnhUUW/YgOZ4ik263Viv0SUTbUFXp8gkuCDlKVRV0 S88yhTX/RVb+I5Z8omO6z+orGU5++X/6AnFuNsF7wi572+0Dy2KNEF+829IdXpfI F18dyVNIGe43QBOvviih5IixzsY8ytjx8s5R2fTUTKTiq5s4kOL31djasSpUpTWF YGT3+mXlUzm48NVV6s8+TonUd21vNUm/bGTKHWt+d1+F4nDhTYZzcVaoWw9q1hxT f1KCjJTk76y/YBRQgg9nWHnZA5Ms7djYKBQi3Vhu1ZqORWQapsTL2vxuaS0wTyXa HkytXOqPXIiQpns2kyDcpYWX53kAv5A= -----END CERTIFICATE-----Generated at Fri Apr 17 03:26:19 2026 by rpki-client