$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21e8be6e-f3cb-3e49-9b78-f7d9b91bd138.roa File: 21e8be6e-f3cb-3e49-9b78-f7d9b91bd138.roa (raw, json) Hash identifier: 4lcDa42OIYvZe5Yf3wlOqpJv6zUJKgYu6hHcqso4Tb4= Subject key identifier: 2A:AC:4B:C9:A3:5A:BA:BE:C7:CB:3E:1B:88:99:65:EF:94:B1:92:99 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F093CD2976D045691B691C260 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21e8be6e-f3cb-3e49-9b78-f7d9b91bd138.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 396555 IP address blocks: 192.42.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:d2:97:6d:04:56:91:b6:91:c2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=a6bcd1ce-2b58-4af9-9fe5-a7545dac0c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:86:5a:e6:e1:e3:b3:6b:6c:78:fb:3f:4e:13: fb:05:3d:4e:62:38:d4:e5:71:4d:10:e9:5b:03:fa: 7a:be:b2:b3:95:c5:ca:3c:cb:0c:40:19:ff:70:bc: ed:05:1a:da:5b:6e:82:35:31:62:29:34:e4:8a:ba: da:93:7a:24:5e:73:79:14:3a:d9:a0:ea:c7:79:e4: a8:f5:ad:23:2c:4a:e5:6e:26:c8:e4:a4:99:39:e9: b1:61:ea:12:6f:f2:9d:8a:a1:85:9c:27:65:80:34: 7e:e7:c9:6f:c0:d1:7f:0f:06:1c:37:aa:90:3c:08: dc:38:4a:e8:59:de:3b:02:4f:ef:cb:cd:42:9d:f7: 0c:99:65:9c:da:76:98:3a:40:23:76:b3:73:38:98: 99:10:ea:95:47:40:77:d0:aa:d0:11:72:7b:e3:a1: 28:5d:05:ec:2d:2a:21:2f:bf:75:5c:2a:cf:30:ac: b9:70:e2:5e:53:a5:a3:1b:da:0c:56:96:2d:88:54: 16:a6:dd:7c:de:cd:fe:5c:73:1e:68:35:3c:87:8d: b0:cd:7f:83:b5:af:fd:a4:53:e0:a2:97:d3:08:7b: 16:be:2e:d5:b4:ce:47:64:e8:09:f3:af:a9:a4:da: 3a:55:d5:58:6f:57:2b:75:eb:6d:a8:56:81:07:a9: 17:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:AC:4B:C9:A3:5A:BA:BE:C7:CB:3E:1B:88:99:65:EF:94:B1:92:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21e8be6e-f3cb-3e49-9b78-f7d9b91bd138.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:17:1d:30:2f:d5:ca:af:e7:74:cf:c5:86:32:94:0d:bc:83: 8e:f0:0a:7a:70:bc:d0:55:46:10:e6:08:be:cc:50:0d:a5:f1: 3c:fc:0d:78:22:a0:69:11:ab:b2:e0:7d:08:49:77:99:94:42: bd:a2:08:a6:b6:98:83:35:a3:fe:1e:d6:07:03:ef:d3:ab:fb: 80:dc:b2:b7:98:08:40:62:66:24:b2:3e:fa:1a:a6:b3:05:4e: 4d:5b:05:dc:08:a0:1b:3d:e8:cd:38:c3:3d:7d:53:7d:4d:8c: ea:b8:61:e5:78:63:20:51:03:fb:b7:09:ac:9f:08:78:b4:36: e7:9b:8c:d9:d1:48:0c:8e:28:c4:39:a4:f9:e4:db:e4:01:a7: 3c:0f:34:50:aa:ba:8d:0a:54:98:eb:a1:41:14:d3:27:46:16: b9:7c:b6:38:81:61:d2:bb:81:1e:db:50:ef:ca:ee:4a:64:0e: 54:70:ab:b5:d0:ef:29:d8:21:b7:c8:5d:06:fe:b5:54:e5:da: b0:8c:73:70:39:b5:15:71:5f:58:c8:43:08:1d:2a:cc:0e:ba: 0e:82:68:1b:d4:4a:f8:9e:d7:1a:4e:e4:4d:7e:30:0d:1e:9c: 6e:03:77:85:a3:be:07:99:27:ca:d3:4a:3a:f4:63:47:73:2d: 21:bc:68:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPNKXbQRWkbaRwmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk YTZiY2QxY2UtMmI1OC00YWY5LTlmZTUtYTc1NDVkYWMwYzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4Za5uHjs2tsePs/ThP7BT1OYjjU5XFNEOlb A/p6vrKzlcXKPMsMQBn/cLztBRraW26CNTFiKTTkirrak3okXnN5FDrZoOrHeeSo 9a0jLErlbibI5KSZOemxYeoSb/KdiqGFnCdlgDR+58lvwNF/DwYcN6qQPAjcOEro Wd47Ak/vy81CnfcMmWWc2naYOkAjdrNzOJiZEOqVR0B30KrQEXJ746EoXQXsLSoh L791XCrPMKy5cOJeU6WjG9oMVpYtiFQWpt183s3+XHMeaDU8h42wzX+Dta/9pFPg opfTCHsWvi7VtM5HZOgJ86+ppNo6VdVYb1crdettqFaBB6kXBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqsS8mjWrq+x8s+G4iZZe+UsZKZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjFlOGJlNmUtZjNjYi0z ZTQ5LTliNzgtZjdkOWI5MWJkMTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKkXHTAv1cqv53TPxYYylA28g47wCnpwvNBVRhDmCL7MUA2l8Tz8DXgi oGkRq7LgfQhJd5mUQr2iCKa2mIM1o/4e1gcD79Or+4DcsreYCEBiZiSyPvoaprMF Tk1bBdwIoBs96M04wz19U31NjOq4YeV4YyBRA/u3CayfCHi0NuebjNnRSAyOKMQ5 pPnk2+QBpzwPNFCquo0KVJjroUEU0ydGFrl8tjiBYdK7gR7bUO/K7kpkDlRwq7XQ 7ynYIbfIXQb+tVTl2rCMc3A5tRVxX1jIQwgdKswOug6CaBvUSvie1xpO5E1+MA0e nG4Dd4WjvgeZJ8rTSjr0Y0dzLSG8aJY= -----END CERTIFICATE-----Generated at Fri Oct 9 11:54:19 2026 by rpki-client