$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/332162e4-d41a-3489-b7d6-e85ac59afe0b.roa File: 332162e4-d41a-3489-b7d6-e85ac59afe0b.roa (raw, json) Hash identifier: FhNMlMVhS5xqVpRtNa6EF9x4Sf99h5ixv6MKk0iRsg0= Subject key identifier: 64:EB:DB:96:8A:4A:65:51:9A:EE:4C:1A:A1:C1:FF:D5:A0:7D:76:E7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F629316E87D0FB5CE9CBD0A00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/332162e4-d41a-3489-b7d6-e85ac59afe0b.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396619 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:16:e8:7d:0f:b5:ce:9c:bd:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=570e3c4d-9da3-4abc-9e59-b464fe979962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b6:3c:8e:8b:ac:08:36:34:58:07:df:80:66: d0:ca:4a:e3:45:18:17:9e:a2:1e:93:9f:58:cf:f0: 38:b5:4f:b8:fc:9e:12:55:b2:43:bd:58:21:4b:8c: b6:b4:fb:4a:23:7d:73:ac:02:37:3b:73:ae:01:6d: 3f:bf:85:09:7a:40:45:2d:2d:42:09:ed:67:57:a9: 9f:df:78:0c:8e:5e:5a:a6:c0:24:2c:5d:04:97:8d: 35:2d:63:a0:7a:cd:e2:94:f0:13:46:ef:1e:1b:cc: 19:2c:d5:48:3e:40:8e:eb:90:19:0b:4c:9c:f0:44: 78:a3:74:f1:8b:f7:96:be:3f:b8:6a:d0:f8:53:cc: 49:70:b9:b2:06:7f:bf:04:9d:2a:6d:54:1a:43:ee: 43:63:59:29:9a:fe:f6:83:2d:43:66:64:20:c0:65: 87:9d:cb:30:09:bc:01:6c:a3:c2:19:90:6b:86:1c: 87:b1:32:e9:02:7f:86:e6:88:dd:b2:74:96:8a:1a: 38:76:db:d1:6c:8a:64:a9:f9:26:da:cd:6a:12:da: c0:77:20:b1:df:f4:95:04:8f:92:91:2b:9a:da:04: 3b:30:56:92:fc:3c:2e:a0:48:54:c3:fd:97:df:fe: 8b:89:77:2d:d4:6c:39:46:9a:9c:1b:9e:28:b4:b7: f0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:EB:DB:96:8A:4A:65:51:9A:EE:4C:1A:A1:C1:FF:D5:A0:7D:76:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/332162e4-d41a-3489-b7d6-e85ac59afe0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:06:6e:3d:46:35:50:f9:79:64:99:16:3f:34:81:30:18:41: 15:bd:c3:50:dc:96:ee:7e:cf:9a:32:b0:5f:4b:20:e8:59:f0: 1f:92:5e:cf:b0:d1:23:27:00:d7:6b:a3:0d:62:9b:4e:5e:ac: 4d:27:ac:26:75:62:40:8d:d2:e7:f1:86:14:68:2d:c6:fb:d4: 07:12:15:ff:6a:fa:d4:c9:58:52:d8:af:05:42:c8:12:25:ed: 84:a5:06:c5:07:62:83:98:d8:62:34:f8:7d:44:bf:db:c3:c2: 8d:8a:2f:cf:94:af:9b:74:98:08:1e:8c:40:ab:8e:f2:69:6c: b0:91:25:6b:2b:e8:e9:ea:75:d8:b5:8b:75:e9:3d:d0:a6:e3: 31:d9:0e:e1:81:b0:33:29:a3:ad:ed:43:d5:22:8d:74:d7:62: 87:46:ed:8e:14:5a:e8:d6:c4:52:17:fa:c7:87:5b:b5:ba:33: a3:89:73:17:dc:38:a5:28:d5:86:ed:79:4a:09:6e:b4:0e:9c: 4c:67:88:e6:a2:22:1d:09:18:74:d3:bc:7b:6a:73:75:1a:03: db:ef:3a:07:cd:60:cb:a1:70:cd:0b:9e:17:ac:ee:16:bb:56: a8:31:5b:27:93:8e:66:de:81:11:ac:26:5a:6f:00:07:bb:9a: dd:21:1e:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikxbofQ+1zpy9CgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NTcwZTNjNGQtOWRhMy00YWJjLTllNTktYjQ2NGZlOTc5OTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrY8jousCDY0WAffgGbQykrjRRgXnqIek59Y z/A4tU+4/J4SVbJDvVghS4y2tPtKI31zrAI3O3OuAW0/v4UJekBFLS1CCe1nV6mf 33gMjl5apsAkLF0El401LWOges3ilPATRu8eG8wZLNVIPkCO65AZC0yc8ER4o3Tx i/eWvj+4atD4U8xJcLmyBn+/BJ0qbVQaQ+5DY1kpmv72gy1DZmQgwGWHncswCbwB bKPCGZBrhhyHsTLpAn+G5ojdsnSWiho4dtvRbIpkqfkm2s1qEtrAdyCx3/SVBI+S kSua2gQ7MFaS/DwuoEhUw/2X3/6LiXct1Gw5RpqcG54otLfwSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTr25aKSmVRmu5MGqHB/9WgfXbnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzMyMTYyZTQtZDQxYS0z NDg5LWI3ZDYtZTg1YWM1OWFmZTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALMGbj1GNVD5eWSZFj80gTAYQRW9w1Dclu5+z5oysF9LIOhZ8B+SXs+w 0SMnANdrow1im05erE0nrCZ1YkCN0ufxhhRoLcb71AcSFf9q+tTJWFLYrwVCyBIl 7YSlBsUHYoOY2GI0+H1Ev9vDwo2KL8+Ur5t0mAgejECrjvJpbLCRJWsr6Onqddi1 i3XpPdCm4zHZDuGBsDMpo63tQ9UijXTXYodG7Y4UWujWxFIX+seHW7W6M6OJcxfc OKUo1YbteUoJbrQOnExniOaiIh0JGHTTvHtqc3UaA9vvOgfNYMuhcM0Lnhes7ha7 VqgxWyeTjmbegRGsJlpvAAe7mt0hHpc= -----END CERTIFICATE-----Generated at Wed Oct 7 02:29:54 2026 by rpki-client