$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3421fa7e-e687-32b8-a339-5f6e1e16825b.roa File: 3421fa7e-e687-32b8-a339-5f6e1e16825b.roa (raw, json) Hash identifier: GnQPCIdl1MbwKBnlS40h0RpJgpDw966RJ1YX+XhsfLw= Subject key identifier: 43:F3:FB:0F:82:ED:CB:AB:AF:F8:C3:BC:19:1A:12:E6:AA:04:DE:9F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D4C1B137C08B1148E8781C820 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3421fa7e-e687-32b8-a339-5f6e1e16825b.roa Signing time: Thu 26 Mar 2026 14:17:34 +0000 ROA not before: Thu 26 Mar 2026 14:17:34 +0000 ROA not after: Wed 24 Jun 2026 14:17:34 +0000 asID: 36632 IP address blocks: 192.41.162.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 01 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4c:1b:13:7c:08:b1:14:8e:87:81:c8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 26 14:17:34 2026 GMT Not After : Jun 24 14:17:34 2026 GMT Subject: CN=f222236c-79fa-4d12-a90b-151809198bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dc:17:7a:3f:65:94:c2:93:7c:d1:00:f3:c4: 72:17:5b:84:b7:89:0f:62:d0:d1:19:26:5f:cf:01: 78:2b:2c:9d:23:5e:d7:a3:75:b0:4a:39:1f:4a:26: 5e:75:32:b9:96:b5:ca:e9:63:f3:14:1e:d8:db:e9: 91:c1:5a:b5:24:6b:37:c1:54:f9:03:ae:8e:af:e6: 0f:b4:f1:78:6f:75:2e:15:da:27:3c:7a:a5:fe:ee: 95:21:3a:92:e9:d9:0f:4f:f8:47:a8:2b:81:e9:64: f9:1c:54:fb:13:3c:15:2e:b4:ce:bb:7d:e9:c4:dc: f3:57:27:e9:c1:bb:62:4d:f0:94:13:40:80:d4:62: e3:4f:b0:75:f5:6f:de:37:e2:10:7e:90:b3:62:23: 41:2d:1d:e7:76:24:72:bb:45:98:a5:9c:cb:e3:f8: aa:47:f0:13:b7:fb:58:2d:6a:e8:37:b0:c4:cf:85: f9:3c:be:36:ac:16:1b:ae:b3:e4:a3:47:64:54:0d: 9f:68:30:a7:f4:c0:3f:46:be:72:98:44:6e:aa:ac: 1f:0c:de:09:7b:00:a5:9b:0f:c9:76:23:13:f3:53: 97:2c:e7:cd:38:ac:de:62:18:d3:4d:b9:9b:ed:32: 6f:6b:09:7a:f7:78:cf:32:e3:c4:73:c6:ae:db:05: b8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F3:FB:0F:82:ED:CB:AB:AF:F8:C3:BC:19:1A:12:E6:AA:04:DE:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3421fa7e-e687-32b8-a339-5f6e1e16825b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.41.162.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:f7:44:86:e4:99:8e:1b:1c:4e:c6:1c:83:99:0f:0b:75:d9: 7e:1f:bb:31:8f:21:63:b4:17:3d:a2:79:2c:11:07:3f:c1:e9: ae:19:ec:d4:93:87:6e:c8:ef:27:67:28:83:64:43:63:47:03: 11:f3:3f:8e:f4:43:6b:79:f7:40:a6:a5:cc:f1:0e:04:63:46: b4:42:75:a0:0c:0d:e5:91:c5:b5:6d:74:ae:23:60:c0:bc:71: f1:87:43:56:59:3c:25:df:e2:5a:c5:5b:9c:c1:4e:18:b6:d8: 27:bb:99:bd:c0:b7:ae:45:cd:be:2e:02:b7:59:6c:ff:d9:64: 14:d0:82:17:d7:2d:20:67:17:e3:db:ec:e4:47:03:84:73:b4: 2d:2d:ac:d7:7c:8f:91:1a:54:e0:5e:ea:c8:19:33:c5:83:81: e4:21:1b:ef:ab:4c:c3:75:52:78:4b:24:60:9d:9d:52:01:8e: ee:71:67:25:a9:be:b7:a7:2e:a6:b5:b3:c0:48:86:83:09:a4: f2:4a:04:3b:dd:83:e5:9f:b4:64:74:3d:15:d2:e1:33:b6:ee: 4c:91:7b:50:62:99:b9:f7:1c:4a:04:58:9d:1c:ba:92:81:0b: cb:eb:9a:05:c0:26:81:c4:f7:a9:62:1a:0f:6b:8b:aa:c4:9b: 5e:2b:be:c8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1MGxN8CLEUjoeByCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyNjE0MTczNFoXDTI2MDYyNDE0MTczNFowLzEtMCsGA1UEAxMk ZjIyMjIzNmMtNzlmYS00ZDEyLWE5MGItMTUxODA5MTk4YmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9wXej9llMKTfNEA88RyF1uEt4kPYtDRGSZf zwF4KyydI17Xo3WwSjkfSiZedTK5lrXK6WPzFB7Y2+mRwVq1JGs3wVT5A66Or+YP tPF4b3UuFdonPHql/u6VITqS6dkPT/hHqCuB6WT5HFT7EzwVLrTOu33pxNzzVyfp wbtiTfCUE0CA1GLjT7B19W/eN+IQfpCzYiNBLR3ndiRyu0WYpZzL4/iqR/ATt/tY LWroN7DEz4X5PL42rBYbrrPko0dkVA2faDCn9MA/Rr5ymERuqqwfDN4JewClmw/J diMT81OXLOfNOKzeYhjTTbmb7TJvawl693jPMuPEc8au2wW47wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEPz+w+C7curr/jDvBkaEuaqBN6fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzQyMWZhN2UtZTY4Ny0z MmI4LWEzMzktNWY2ZTFlMTY4MjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCmiHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBz90SG5JmOGxxOxhyDmQ8Lddl+H7sxjyFjtBc9onksEQc/wemuGezU k4duyO8nZyiDZENjRwMR8z+O9ENrefdApqXM8Q4EY0a0QnWgDA3lkcW1bXSuI2DA vHHxh0NWWTwl3+JaxVucwU4Yttgnu5m9wLeuRc2+LgK3WWz/2WQU0IIX1y0gZxfj 2+zkRwOEc7QtLazXfI+RGlTgXurIGTPFg4HkIRvvq0zDdVJ4SyRgnZ1SAY7ucWcl qb63py6mtbPASIaDCaTySgQ73YPln7RkdD0V0uEztu5MkXtQYpm59xxKBFidHLqS gQvL65oFwCaBxPepYhoPa4uqxJteK77I -----END CERTIFICATE-----Generated at Sun Mar 29 22:36:10 2026 by rpki-client