$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cef4cd4-dab0-375d-a79e-cb9078c0c2bf.roa File: 1cef4cd4-dab0-375d-a79e-cb9078c0c2bf.roa (raw, json) Hash identifier: US7nWBWx6NtmTaq7KRl8Cj6dMaiOX1SUqnreTbelHvs= Subject key identifier: 28:8E:31:40:4D:EC:CB:85:E6:7B:8F:67:10:6D:9C:1A:3A:6E:CC:AB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F62930F226FB037893446EA00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cef4cd4-dab0-375d-a79e-cb9078c0c2bf.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 20431 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:0f:22:6f:b0:37:89:34:46:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=304fdb1a-3599-4409-b77f-8feed3562141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:17:27:26:3d:62:14:9f:fb:50:ed:3d:b0:e3: 35:a7:f2:25:28:3b:ab:7a:35:5b:ed:dc:67:52:bf: bd:fb:14:f8:7b:20:72:c0:4c:f6:43:c2:29:e4:af: 29:d2:e0:b9:a4:33:37:ed:6b:11:ae:1a:b3:4e:c9: e0:45:04:af:24:92:28:46:25:9d:b1:f1:44:df:9b: a6:58:e8:f5:58:28:f1:1c:06:d3:41:fd:57:88:a6: 6e:11:5e:c0:63:2e:18:25:87:06:66:ce:28:34:57: db:a0:6a:04:29:8b:69:ef:78:86:c0:49:be:a7:96: 08:e4:d9:d0:8b:3b:69:0c:04:76:88:e8:79:c1:c8: fb:49:60:7b:3d:8a:1b:51:bc:b4:72:57:89:82:c7: ab:bd:32:4c:54:96:0d:c5:2e:9f:2f:cb:0a:00:6f: 58:de:98:d4:0f:6f:b5:2d:ad:db:84:d7:56:d2:da: 6b:00:d7:a7:a7:28:ec:df:3d:9d:29:f8:e3:94:19: 3c:b3:8f:a2:3f:2b:33:d6:33:e5:89:83:2e:e9:c8: 1e:62:f6:c2:4f:12:63:f2:3f:81:58:0d:b0:fc:87: 9b:3e:1a:88:79:d7:2f:48:23:00:82:35:ed:2d:7b: 39:49:43:07:d6:b8:52:9c:60:67:a0:5b:74:4d:5b: 9c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:8E:31:40:4D:EC:CB:85:E6:7B:8F:67:10:6D:9C:1A:3A:6E:CC:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cef4cd4-dab0-375d-a79e-cb9078c0c2bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:72:9c:92:2b:6b:82:b2:19:07:9d:27:df:a8:7e:62:b2:cc: a3:cc:84:51:86:9a:cc:d6:fd:85:89:28:f5:c9:04:a8:e6:8c: 60:c4:29:9e:9e:78:bd:7b:2e:33:e9:9e:5c:7a:4c:bc:22:83: 5f:20:bc:c0:5c:e8:4d:fb:71:86:70:ee:9e:c0:34:38:42:0f: 1a:82:1e:6b:2b:0a:f9:a5:a3:5b:00:82:5e:8b:93:f7:4b:55: 9c:64:10:7f:25:06:b3:22:49:34:24:54:4c:89:ca:38:0b:8a: c4:ea:75:39:4f:72:0b:56:c7:03:83:96:ee:12:e3:47:e4:08: 1b:96:79:74:49:d6:33:bf:7e:23:39:32:7c:26:cc:3b:d7:89: d9:7a:b8:c4:fa:31:6e:a6:77:4e:6b:72:b7:32:49:03:f4:33: bb:49:6a:76:22:9f:29:da:e8:03:52:e0:7b:7c:1f:23:fb:f5: 6a:15:cd:c4:55:22:f2:a2:db:40:7d:a9:97:d9:49:a4:44:24: c0:d6:00:ef:83:34:2c:f7:e0:46:c9:26:0b:62:dc:80:fe:4d: f5:40:7e:da:27:f9:80:1d:2e:db:79:28:59:69:5f:1a:d6:fa: dd:00:17:0d:17:ac:0b:a0:e0:c5:db:f0:b6:29:a3:09:0d:4e: 8d:cc:3f:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikw8ib7A3iTRG6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MzA0ZmRiMWEtMzU5OS00NDA5LWI3N2YtOGZlZWQzNTYyMTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxcnJj1iFJ/7UO09sOM1p/IlKDurejVb7dxn Ur+9+xT4eyBywEz2Q8Ip5K8p0uC5pDM37WsRrhqzTsngRQSvJJIoRiWdsfFE35um WOj1WCjxHAbTQf1XiKZuEV7AYy4YJYcGZs4oNFfboGoEKYtp73iGwEm+p5YI5NnQ iztpDAR2iOh5wcj7SWB7PYobUby0cleJgservTJMVJYNxS6fL8sKAG9Y3pjUD2+1 La3bhNdW0tprANenpyjs3z2dKfjjlBk8s4+iPysz1jPliYMu6cgeYvbCTxJj8j+B WA2w/IebPhqIedcvSCMAgjXtLXs5SUMH1rhSnGBnoFt0TVucpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCiOMUBN7MuF5nuPZxBtnBo6bsyrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWNlZjRjZDQtZGFiMC0z NzVkLWE3OWUtY2I5MDc4YzBjMmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5ynJIra4KyGQedJ9+ofmKyzKPMhFGGmszW/YWJKPXJBKjmjGDEKZ6e eL17LjPpnlx6TLwig18gvMBc6E37cYZw7p7ANDhCDxqCHmsrCvmlo1sAgl6Lk/dL VZxkEH8lBrMiSTQkVEyJyjgLisTqdTlPcgtWxwODlu4S40fkCBuWeXRJ1jO/fiM5 MnwmzDvXidl6uMT6MW6md05rcrcySQP0M7tJanYinyna6ANS4Ht8HyP79WoVzcRV IvKi20B9qZfZSaREJMDWAO+DNCz34EbJJgti3ID+TfVAfton+YAdLtt5KFlpXxrW +t0AFw0XrAug4MXb8LYpowkNTo3MPwA= -----END CERTIFICATE-----Generated at Tue Oct 6 18:11:29 2026 by rpki-client