$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a3a3e85-2e2b-3f73-8be7-4c0850450744.roa File: 2a3a3e85-2e2b-3f73-8be7-4c0850450744.roa (raw, json) Hash identifier: A89UhB4YdDmuWD8tV2mHZgoVykE82W+lNBalqnOBg14= Subject key identifier: F2:6E:01:DC:2D:58:57:5B:5C:50:95:FD:4F:49:5A:C8:40:E9:F0:4D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F6292C85AAA69F8A77A84A400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a3a3e85-2e2b-3f73-8be7-4c0850450744.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 397206 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:c8:5a:aa:69:f8:a7:7a:84:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=ee1bdb6f-c2da-46d7-8743-f049ce473854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7a:38:ac:35:09:c8:d8:32:aa:6d:38:34:eb: bb:99:aa:89:51:48:80:89:3d:4c:b4:e6:88:c7:a3: dd:46:89:3d:f7:93:c2:d7:ec:70:73:e4:20:5a:ea: e5:7b:76:c3:cb:12:f4:a1:82:72:f4:46:7f:2a:3c: bf:01:fa:d8:43:f7:4b:34:ab:a9:6a:bd:6b:51:c1: a9:19:03:97:b9:68:83:2a:a4:85:4d:f7:07:85:d8: e8:4d:67:7d:ca:7d:4c:29:cb:e8:61:8d:12:ad:a9: ff:51:b2:c4:5f:60:d7:c8:86:93:26:8d:ae:58:54: 7e:33:11:44:96:99:c7:b0:aa:d4:5d:69:21:b3:dd: 24:87:ba:4d:41:ac:67:cd:9b:6b:aa:c2:81:34:3f: 97:47:da:65:cb:44:5b:6a:6f:76:f1:b2:10:99:dc: 3d:48:f8:8c:d5:ba:19:fd:b3:92:39:07:47:b6:5d: 29:2a:ea:6d:31:87:f4:5a:b1:f8:df:66:83:7c:12: 01:c6:d0:5d:3e:af:06:3e:60:d3:2d:d3:43:95:59: b9:15:f3:73:92:7c:5e:6c:18:74:c1:be:5e:d4:99: 67:69:1c:63:df:91:75:5c:9f:a7:81:5f:31:89:8e: 4c:ce:56:ab:30:5c:04:0e:47:19:76:e4:1c:d9:71: 57:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:6E:01:DC:2D:58:57:5B:5C:50:95:FD:4F:49:5A:C8:40:E9:F0:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a3a3e85-2e2b-3f73-8be7-4c0850450744.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:dc:b7:29:71:2d:16:04:d6:69:d7:4e:84:6b:6c:4a:a6:11: c2:e9:be:9f:cf:30:ae:26:62:dc:b1:4f:a8:82:ea:01:29:2b: 31:c6:0a:5a:b0:ec:ec:cb:eb:4d:39:88:06:22:9f:3f:81:b5: bc:29:2c:15:3b:f7:55:86:6a:7f:5a:23:3f:34:d4:76:8d:e6: 0a:af:29:05:70:8f:b4:ea:04:15:7d:b0:b9:2b:54:df:a2:4b: e4:9e:4b:8d:2c:fb:07:94:21:a3:c9:69:84:d8:68:16:72:b1: 31:73:0c:99:0e:25:46:4d:71:ea:55:e2:fd:35:1a:85:d0:f4: e0:72:75:db:86:a5:69:90:ab:4c:a2:2d:97:68:54:35:60:87: 19:b1:53:c9:df:c0:e7:2f:6d:f3:53:b9:42:66:95:8c:94:67: 2a:cb:7b:0c:90:e9:cc:fc:9a:31:8b:45:ee:f3:cd:42:2d:af: 74:bc:fe:e0:22:07:b1:94:a9:a0:83:89:39:8d:0a:6c:e5:2c: 2d:0d:a4:5b:99:b5:22:6d:d3:71:fd:35:02:50:a7:63:59:50: bd:52:96:bf:5c:26:dc:a9:0c:bb:15:a5:a9:f5:fa:aa:dc:70: 1e:af:47:1c:b7:c5:13:6e:09:87:5e:02:c2:5b:b4:ae:e5:11: 15:16:f6:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikshaqmn4p3qEpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZWUxYmRiNmYtYzJkYS00NmQ3LTg3NDMtZjA0OWNlNDczODU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHo4rDUJyNgyqm04NOu7maqJUUiAiT1MtOaI x6PdRok995PC1+xwc+QgWurle3bDyxL0oYJy9EZ/Kjy/AfrYQ/dLNKupar1rUcGp GQOXuWiDKqSFTfcHhdjoTWd9yn1MKcvoYY0Sran/UbLEX2DXyIaTJo2uWFR+MxFE lpnHsKrUXWkhs90kh7pNQaxnzZtrqsKBND+XR9ply0Rbam928bIQmdw9SPiM1boZ /bOSOQdHtl0pKuptMYf0WrH432aDfBIBxtBdPq8GPmDTLdNDlVm5FfNzknxebBh0 wb5e1JlnaRxj35F1XJ+ngV8xiY5MzlarMFwEDkcZduQc2XFXKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJuAdwtWFdbXFCV/U9JWshA6fBNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmEzYTNlODUtMmUyYi0z ZjczLThiZTctNGMwODUwNDUwNzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL/ctylxLRYE1mnXToRrbEqmEcLpvp/PMK4mYtyxT6iC6gEpKzHGClqw 7OzL6005iAYinz+BtbwpLBU791WGan9aIz801HaN5gqvKQVwj7TqBBV9sLkrVN+i S+SeS40s+weUIaPJaYTYaBZysTFzDJkOJUZNcepV4v01GoXQ9OBydduGpWmQq0yi LZdoVDVghxmxU8nfwOcvbfNTuUJmlYyUZyrLewyQ6cz8mjGLRe7zzUItr3S8/uAi B7GUqaCDiTmNCmzlLC0NpFuZtSJt03H9NQJQp2NZUL1Slr9cJtypDLsVpan1+qrc cB6vRxy3xRNuCYdeAsJbtK7lERUW9mw= -----END CERTIFICATE-----Generated at Wed Oct 7 02:30:17 2026 by rpki-client