$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a298bed-f619-3c13-81c0-fb9ebdb5b2f6.roa File: 2a298bed-f619-3c13-81c0-fb9ebdb5b2f6.roa (raw, json) Hash identifier: Y9iXFiHr1HaUtgtl43JV+5aYvD5Yh1WqDfXTywtCGis= Subject key identifier: FD:F9:FF:2A:46:76:A5:1C:17:B7:07:1A:55:33:52:DF:A5:D2:84:E4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F6292BF496BD996439CC5F380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a298bed-f619-3c13-81c0-fb9ebdb5b2f6.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 19836 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:bf:49:6b:d9:96:43:9c:c5:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=0d64ddb9-4963-4f12-b3af-e03cd3cc841f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2c:54:1c:1c:45:04:0d:ce:b3:da:8f:a5:d5: c1:d2:5e:9b:0a:e7:c0:59:46:87:b8:c1:1d:a4:70: f5:e5:3f:f8:7f:ac:ec:6f:02:2d:cb:72:6b:86:56: 5b:20:07:d4:0d:85:05:76:58:3d:74:1a:71:ef:f9: 3f:a7:da:79:33:5a:4d:5f:ee:66:55:03:c7:18:d1: ed:c8:3b:98:57:4e:74:ac:c4:84:bf:44:5a:67:f9: 77:3c:f2:e9:8f:6a:22:3b:94:ca:32:71:83:5b:19: 03:96:80:d9:d2:72:15:53:fc:c5:30:e9:7b:a4:2e: 6b:b6:5e:fc:1b:52:bb:5c:1b:c7:d3:66:b7:e3:04: 23:0b:b5:62:1b:44:97:59:10:1a:5d:bb:ab:94:b5: 50:c5:01:5f:a9:3a:e2:e3:ff:e8:8b:cd:fc:a0:91: 35:a0:82:73:d5:b3:7c:6f:ce:e9:bf:2d:77:4b:ee: a3:b0:b0:7c:1a:2c:97:c7:ed:21:58:d4:c5:df:e9: 52:0b:ac:e2:c7:db:20:5a:f4:61:5c:fe:a1:fd:b4: 0c:bf:c1:82:94:6a:6b:c0:df:02:13:92:c4:ae:34: 0a:e3:ea:f5:87:07:f3:ce:08:14:d8:98:07:91:62: 24:11:f4:d5:08:74:6f:60:9b:7d:b1:99:45:35:ec: dc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F9:FF:2A:46:76:A5:1C:17:B7:07:1A:55:33:52:DF:A5:D2:84:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a298bed-f619-3c13-81c0-fb9ebdb5b2f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:f6:fa:8c:a2:15:59:96:6f:e9:f1:84:c2:18:1c:99:f3:55: 64:90:e8:a9:2e:32:46:e3:1a:1d:d0:72:8e:70:65:d2:8b:18: 3f:1b:97:a9:90:1f:16:50:1c:f1:4c:69:4a:81:be:dc:0c:60: 13:ec:ed:30:15:bc:75:a4:59:02:e4:b2:6c:92:e4:f7:cd:f9: 99:9b:b0:e0:91:4c:69:f5:78:64:80:19:5e:67:bf:ad:fa:71: 6a:32:42:be:82:2a:ae:d5:38:2d:a0:f5:f6:c8:2e:d3:91:78: 5c:86:35:b4:ab:b4:a4:c1:60:77:48:3a:20:2b:07:5e:77:b1: ea:4c:fd:1e:d7:35:e5:29:f5:f5:a9:5b:d5:0c:22:7e:af:43: 60:1d:c3:d6:a0:b7:3b:e0:0d:33:87:83:72:1d:e8:8c:06:f5: b2:ad:9f:16:b4:47:10:f5:b8:ca:92:d3:87:5e:4c:41:c3:2f: 98:b2:19:fc:b3:44:b0:08:bd:f0:31:83:5e:87:05:ba:ec:f1: 40:43:11:2d:74:0b:f8:4a:dd:04:49:ee:cf:be:66:7f:f1:e8: 1e:39:1b:36:53:97:5c:67:60:50:90:1d:d8:2e:62:a5:de:9f: 2d:9c:2a:f1:86:45:d3:91:44:91:e3:29:90:67:69:b8:3b:d7: f4:53:a1:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikr9Ja9mWQ5zF84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MGQ2NGRkYjktNDk2My00ZjEyLWIzYWYtZTAzY2QzY2M4NDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSxUHBxFBA3Os9qPpdXB0l6bCufAWUaHuMEd pHD15T/4f6zsbwIty3JrhlZbIAfUDYUFdlg9dBpx7/k/p9p5M1pNX+5mVQPHGNHt yDuYV050rMSEv0RaZ/l3PPLpj2oiO5TKMnGDWxkDloDZ0nIVU/zFMOl7pC5rtl78 G1K7XBvH02a34wQjC7ViG0SXWRAaXburlLVQxQFfqTri4//oi838oJE1oIJz1bN8 b87pvy13S+6jsLB8GiyXx+0hWNTF3+lSC6zix9sgWvRhXP6h/bQMv8GClGprwN8C E5LErjQK4+r1hwfzzggU2JgHkWIkEfTVCHRvYJt9sZlFNezcEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP35/ypGdqUcF7cHGlUzUt+l0oTkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmEyOThiZWQtZjYxOS0z YzEzLTgxYzAtZmI5ZWJkYjViMmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACH2+oyiFVmWb+nxhMIYHJnzVWSQ6KkuMkbjGh3Qco5wZdKLGD8bl6mQ HxZQHPFMaUqBvtwMYBPs7TAVvHWkWQLksmyS5PfN+ZmbsOCRTGn1eGSAGV5nv636 cWoyQr6CKq7VOC2g9fbILtOReFyGNbSrtKTBYHdIOiArB153sepM/R7XNeUp9fWp W9UMIn6vQ2Adw9agtzvgDTOHg3Id6IwG9bKtnxa0RxD1uMqS04deTEHDL5iyGfyz RLAIvfAxg16HBbrs8UBDES10C/hK3QRJ7s++Zn/x6B45GzZTl1xnYFCQHdguYqXe ny2cKvGGRdORRJHjKZBnabg71/RToV8= -----END CERTIFICATE-----Generated at Wed Oct 7 03:57:10 2026 by rpki-client