$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b2c7db1-99ac-31a9-8a99-14dae6b4ad09.roa File: 3b2c7db1-99ac-31a9-8a99-14dae6b4ad09.roa (raw, json) Hash identifier: 8zqIWdN+4K+xd2gs8yt23gcuDcPtOGT5o1TqsiT9bMU= Subject key identifier: BE:3D:7B:8D:68:D7:C0:96:71:A1:8F:54:1B:55:13:14:09:44:A2:AA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F6292CE1ED696787A3FB2EC80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b2c7db1-99ac-31a9-8a99-14dae6b4ad09.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396587 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:ce:1e:d6:96:78:7a:3f:b2:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=5064ab42-7ad1-4655-9763-0d1b5c6537ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:82:61:55:2e:90:0f:03:59:3c:a5:c7:30:94: 72:31:0e:c2:df:3b:60:26:1e:a4:f6:e7:22:d3:00: 3a:19:77:d9:06:a9:59:2e:24:6b:7e:00:70:33:a5: 5f:d7:c2:b3:ed:05:2d:83:4a:d1:9f:58:5d:f1:f5: e0:9f:19:2e:61:96:63:d3:ae:4d:7d:fb:fe:b7:f7: df:d1:39:0c:48:67:06:e9:2c:a2:17:27:89:04:fb: be:87:87:6b:8c:fc:c3:ad:c9:a8:1a:fb:83:ba:4e: 15:ea:75:64:81:db:f5:ae:d9:cb:00:b6:1e:03:f4: d6:f0:37:61:70:b0:46:89:ec:c2:be:99:e2:0f:5d: 77:7f:15:5c:b3:17:c4:8c:9e:d3:d9:85:45:33:28: 75:5c:68:23:f4:1c:82:9d:1d:8c:cc:d9:82:9a:3d: 8c:f3:2d:11:c8:7f:e7:b5:be:1c:6c:6e:7c:44:14: ac:d9:ab:48:aa:7c:01:23:8f:41:b5:b2:22:01:57: ef:0a:02:a2:94:89:c6:d3:db:86:23:d5:be:83:0b: ad:38:b0:e7:1e:0f:6b:88:5d:a2:f8:01:fa:65:4d: 28:2b:e7:33:45:77:84:70:c0:d5:39:32:a9:9e:b0: 8d:be:54:68:3c:51:1a:99:70:c8:f1:6b:73:10:30: 5f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3D:7B:8D:68:D7:C0:96:71:A1:8F:54:1B:55:13:14:09:44:A2:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b2c7db1-99ac-31a9-8a99-14dae6b4ad09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:2c:f5:d5:e6:79:f7:6e:99:8e:30:dc:ec:f1:1b:e0:ce:b5: 89:57:7d:0d:f5:05:fc:81:91:8f:2a:7e:93:e4:9f:54:31:0f: 77:78:27:42:2d:57:3a:79:48:98:72:5c:83:61:57:33:7f:3b: f3:eb:44:4a:3e:af:e5:0b:9e:f1:5a:ee:6d:e2:00:46:1f:6d: d4:9e:5f:31:5c:d3:ff:9a:fa:ff:d5:eb:4f:8a:b6:ff:39:4a: cc:6c:9b:9e:9c:29:65:9d:00:e9:3e:82:0f:7c:5e:5a:0c:81: 47:59:f6:a9:ee:73:c4:aa:25:db:22:41:c4:d1:8e:a4:f6:2b: 53:4c:5b:35:14:ee:64:48:1d:9f:ff:30:6c:2b:f4:6f:8f:a4: 88:d2:9e:39:7f:f8:1f:cd:72:7d:33:d1:a7:64:ad:28:46:a4: 44:4c:4f:97:a3:73:41:88:eb:79:2f:3e:db:9d:82:9d:2c:b8: 13:49:67:67:a1:e1:90:c2:8f:cb:7d:c4:7a:03:7a:98:68:bd: df:e6:ba:cb:58:b7:fd:de:e5:72:84:bc:a7:51:97:5f:ff:a9: 10:b8:3b:a9:e9:aa:0e:f5:cd:02:7b:da:15:5a:70:30:dd:ca: 3d:ca:eb:77:2b:6f:2c:06:a4:84:46:8c:95:cf:1d:79:d5:11: 81:b1:46:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iks4e1pZ4ej+y7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NTA2NGFiNDItN2FkMS00NjU1LTk3NjMtMGQxYjVjNjUzN2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIJhVS6QDwNZPKXHMJRyMQ7C3ztgJh6k9uci 0wA6GXfZBqlZLiRrfgBwM6Vf18Kz7QUtg0rRn1hd8fXgnxkuYZZj065Nffv+t/ff 0TkMSGcG6SyiFyeJBPu+h4drjPzDrcmoGvuDuk4V6nVkgdv1rtnLALYeA/TW8Ddh cLBGiezCvpniD113fxVcsxfEjJ7T2YVFMyh1XGgj9ByCnR2MzNmCmj2M8y0RyH/n tb4cbG58RBSs2atIqnwBI49BtbIiAVfvCgKilInG09uGI9W+gwutOLDnHg9riF2i +AH6ZU0oK+czRXeEcMDVOTKpnrCNvlRoPFEamXDI8WtzEDBftwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL49e41o18CWcaGPVBtVExQJRKKqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2IyYzdkYjEtOTlhYy0z MWE5LThhOTktMTRkYWU2YjRhZDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKws9dXmefdumY4w3OzxG+DOtYlXfQ31BfyBkY8qfpPkn1QxD3d4J0It Vzp5SJhyXINhVzN/O/PrREo+r+ULnvFa7m3iAEYfbdSeXzFc0/+a+v/V60+Ktv85 Ssxsm56cKWWdAOk+gg98XloMgUdZ9qnuc8SqJdsiQcTRjqT2K1NMWzUU7mRIHZ// MGwr9G+PpIjSnjl/+B/Ncn0z0adkrShGpERMT5ejc0GI63kvPtudgp0suBNJZ2eh 4ZDCj8t9xHoDephovd/mustYt/3e5XKEvKdRl1//qRC4O6npqg71zQJ72hVacDDd yj3K63crbywGpIRGjJXPHXnVEYGxRpU= -----END CERTIFICATE-----Generated at Wed Oct 7 02:40:57 2026 by rpki-client