$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/438f457e-1916-328d-9276-5ac23bfd1b74.roa File: 438f457e-1916-328d-9276-5ac23bfd1b74.roa (raw, json) Hash identifier: NJQyHwTVdz9f0Ier0irf4QNQXaxdybfMR0AXMhy4J/Q= Subject key identifier: 1F:46:BE:16:54:07:C3:00:FA:FE:6B:FD:AD:00:7C:BE:DB:A4:F3:00 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F62931E63B99FA2DB1943D180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/438f457e-1916-328d-9276-5ac23bfd1b74.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 36620 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:1e:63:b9:9f:a2:db:19:43:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=0ed14b55-d9ab-47c2-9bcc-18a940adc327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a3:de:32:8e:79:88:21:e4:35:99:17:21:b8: fa:f9:91:8b:53:cd:0c:50:de:b6:b4:c3:89:8c:90: 96:98:df:81:08:44:28:f8:19:a1:db:6b:fd:2f:9e: 3b:db:d4:4f:35:c4:0f:c1:d0:a2:5a:92:76:a8:2a: 75:20:c2:b2:39:92:43:eb:af:74:42:3b:94:f2:f4: ad:78:e6:5f:96:cc:f0:7c:51:e7:ca:99:ea:f0:ee: 51:60:b6:25:22:ff:42:f8:26:32:04:2f:9e:dc:a7: 93:e9:e3:99:fb:64:6e:65:a4:89:a0:4d:9c:46:77: 76:c1:3a:45:47:08:46:ba:4f:6c:b1:fd:0f:42:44: 28:cb:c4:72:94:a4:ce:b2:5e:cf:3e:28:29:bd:fb: 79:9c:b2:13:d5:6a:64:b8:42:e3:c1:8f:1a:55:22: b6:46:2e:b9:17:6b:56:70:f6:bb:cf:b1:9e:cf:81: 5d:ef:57:d2:e7:29:59:e4:a3:34:43:ba:e0:7f:2c: bc:83:4e:a4:45:ad:d9:d6:b4:d9:92:29:f6:5a:7c: 09:8a:21:49:91:f1:19:63:52:a5:3b:91:6a:0a:08: 73:69:6b:1a:e4:88:f0:f5:e9:31:e3:74:d8:fc:c1: 5e:19:3d:27:14:98:dd:92:6a:ba:2f:e4:53:cc:68: 32:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:46:BE:16:54:07:C3:00:FA:FE:6B:FD:AD:00:7C:BE:DB:A4:F3:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/438f457e-1916-328d-9276-5ac23bfd1b74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:42:76:87:8e:43:3e:1f:7a:c7:6e:3b:82:8f:79:d2:83:57: 7f:f5:5e:6d:20:7a:ea:35:3a:f1:4f:37:93:b0:b5:34:35:4f: 58:58:77:8b:60:e2:ce:5e:4d:05:40:3c:e8:b3:d4:79:21:5b: 3d:9e:09:0d:e5:3b:e3:9d:d9:14:99:c3:cb:dc:0f:90:c6:a2: 6e:cb:3d:59:ab:61:08:a4:cd:5d:41:c7:91:a1:77:04:6f:d7: 6e:1d:dc:c1:59:2b:cd:b7:7f:09:89:bc:dc:a5:ad:6a:b7:e6: 32:a5:b5:cc:80:13:bf:17:a4:22:63:ce:7c:12:d0:5b:9f:18: 78:61:05:ba:ef:72:cd:41:a4:7c:a5:15:11:c6:91:b8:30:69: fc:33:1e:02:69:d7:5f:39:8f:37:ad:a5:ba:14:5a:6f:93:75: ca:ff:60:07:52:60:b0:95:b8:2b:a4:0a:7b:64:f5:9d:a9:f6: e7:c6:ed:bd:ea:c0:a8:f9:fc:91:bc:63:4e:98:5e:9d:56:96: 3b:15:10:c6:b6:d4:1a:3e:95:65:c5:f7:c2:72:00:7a:e5:30: 0a:65:d3:b0:57:3f:04:ff:d1:d8:4b:42:7e:ca:4f:76:49:b9: cd:cb:da:61:84:9a:79:b7:fb:52:58:f0:cd:62:d7:d4:1a:df: 55:1e:3d:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikx5juZ+i2xlD0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MGVkMTRiNTUtZDlhYi00N2MyLTliY2MtMThhOTQwYWRjMzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6PeMo55iCHkNZkXIbj6+ZGLU80MUN62tMOJ jJCWmN+BCEQo+Bmh22v9L54729RPNcQPwdCiWpJ2qCp1IMKyOZJD6690QjuU8vSt eOZflszwfFHnypnq8O5RYLYlIv9C+CYyBC+e3KeT6eOZ+2RuZaSJoE2cRnd2wTpF RwhGuk9ssf0PQkQoy8RylKTOsl7PPigpvft5nLIT1WpkuELjwY8aVSK2Ri65F2tW cPa7z7Gez4Fd71fS5ylZ5KM0Q7rgfyy8g06kRa3Z1rTZkin2WnwJiiFJkfEZY1Kl O5FqCghzaWsa5Ijw9ekx43TY/MFeGT0nFJjdkmq6L+RTzGgy7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9GvhZUB8MA+v5r/a0AfL7bpPMAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDM4ZjQ1N2UtMTkxNi0z MjhkLTkyNzYtNWFjMjNiZmQxYjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRCdoeOQz4fesduO4KPedKDV3/1Xm0geuo1OvFPN5OwtTQ1T1hYd4tg 4s5eTQVAPOiz1HkhWz2eCQ3lO+Od2RSZw8vcD5DGom7LPVmrYQikzV1Bx5GhdwRv 124d3MFZK823fwmJvNylrWq35jKltcyAE78XpCJjznwS0FufGHhhBbrvcs1BpHyl FRHGkbgwafwzHgJp1185jzetpboUWm+Tdcr/YAdSYLCVuCukCntk9Z2p9ufG7b3q wKj5/JG8Y06YXp1WljsVEMa21Bo+lWXF98JyAHrlMApl07BXPwT/0dhLQn7KT3ZJ uc3L2mGEmnm3+1JY8M1i19Qa31UePYs= -----END CERTIFICATE-----Generated at Thu Oct 8 09:01:57 2026 by rpki-client