$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/453dc094-2ded-3358-8f99-710fa2f5861d.roa File: 453dc094-2ded-3358-8f99-710fa2f5861d.roa (raw, json) Hash identifier: pWb7GBJRyM2v8TEWgwIi9r2HvJ7qiV/ZKtz8pg+wXr0= Subject key identifier: 91:5A:8F:9A:91:1A:37:2B:6E:76:D9:BF:2C:B5:64:1E:E1:6C:C5:DC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F62931D26053A97C0A91869C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/453dc094-2ded-3358-8f99-710fa2f5861d.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396585 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:1d:26:05:3a:97:c0:a9:18:69:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=6e5e9d54-ac46-4db4-bef7-9d6c0d5cf227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fa:e3:ae:fe:94:e8:85:e4:b7:52:c7:a5:43: 5d:36:30:2d:d1:87:de:4f:47:e1:1a:9a:df:9f:2f: b5:79:e5:4b:10:2f:96:2e:85:e9:55:9c:ba:75:3a: 50:ab:cd:fa:75:27:47:77:f9:45:f9:90:13:40:6e: 15:7f:d7:04:92:c2:b6:73:82:22:99:d6:1c:22:e3: fa:ff:f3:a3:f6:b0:2b:cb:84:f7:1b:53:1a:a6:e5: d4:d5:e1:b6:4c:ce:03:78:35:d3:ca:b0:c9:ed:27: ef:b1:fe:7d:30:66:1a:70:41:26:95:34:53:19:e9: af:94:c9:84:48:8d:97:0a:a1:dd:9c:35:b5:74:7a: aa:a3:25:bc:38:28:ce:e9:35:e6:e2:1d:13:38:c4: 58:78:e1:75:c1:6b:36:67:9b:78:3c:74:10:2a:0c: 3d:ba:23:17:a3:d6:6c:b9:2d:e8:0d:af:9a:6f:50: 8e:fc:bc:24:5c:07:40:48:8a:97:f0:e7:d2:b7:62: da:e4:ef:c1:c5:e3:50:34:18:0e:32:e9:fb:ef:58: 7c:de:f4:fa:f6:94:81:c3:ce:81:80:87:19:2a:60: 6e:38:87:10:56:76:ec:42:fb:fb:36:20:cf:6f:1b: 18:bf:d7:99:b3:a7:9b:46:00:1a:a5:25:02:73:61: 44:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:5A:8F:9A:91:1A:37:2B:6E:76:D9:BF:2C:B5:64:1E:E1:6C:C5:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/453dc094-2ded-3358-8f99-710fa2f5861d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:2b:72:0f:04:ac:79:fb:f2:9b:2f:97:4a:88:09:d0:95:7a: a7:23:9e:86:f8:94:b9:2f:52:3e:8d:16:04:c7:b3:75:4c:76: 04:ef:91:8e:f3:df:e0:87:63:2d:f5:99:92:0c:31:fd:b1:7e: 36:b8:45:43:3a:95:f2:22:a3:da:21:12:67:36:31:16:ff:45: e9:87:14:5c:09:2f:a9:b3:b1:68:95:17:03:89:2f:aa:82:66: f9:00:90:46:d9:e1:2d:e9:39:cd:7b:e3:a3:28:11:41:2a:96: 8c:59:5c:69:32:9b:bc:09:ff:d6:1b:66:bf:dc:18:05:56:71: db:75:2e:8e:c6:25:66:16:05:a3:06:b5:31:fb:7f:fc:e8:ec: 15:73:11:e1:9c:a6:4b:d4:41:91:ad:2e:1c:c3:22:1e:dd:6e: 61:e9:02:87:17:e7:95:3b:fc:50:89:39:0c:5a:5f:62:e3:72: c7:94:2b:83:85:dd:4d:db:6f:de:6a:4a:91:64:9e:06:6f:69: 1f:07:c3:cc:16:6e:60:43:7d:69:68:75:74:2b:6b:a4:79:e6: 4e:d4:1d:04:32:bd:d4:09:4d:02:53:b7:f2:8a:7e:6d:eb:45: d8:51:8f:fd:7b:25:e0:40:27:c3:21:93:83:78:b9:5d:74:69: e4:ff:29:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikx0mBTqXwKkYacAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NmU1ZTlkNTQtYWM0Ni00ZGI0LWJlZjctOWQ2YzBkNWNmMjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfrjrv6U6IXkt1LHpUNdNjAt0YfeT0fhGprf ny+1eeVLEC+WLoXpVZy6dTpQq836dSdHd/lF+ZATQG4Vf9cEksK2c4IimdYcIuP6 //Oj9rAry4T3G1MapuXU1eG2TM4DeDXTyrDJ7Sfvsf59MGYacEEmlTRTGemvlMmE SI2XCqHdnDW1dHqqoyW8OCjO6TXm4h0TOMRYeOF1wWs2Z5t4PHQQKgw9uiMXo9Zs uS3oDa+ab1CO/LwkXAdASIqX8OfSt2La5O/BxeNQNBgOMun771h83vT69pSBw86B gIcZKmBuOIcQVnbsQvv7NiDPbxsYv9eZs6ebRgAapSUCc2FEhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFaj5qRGjcrbnbZvyy1ZB7hbMXcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDUzZGMwOTQtMmRlZC0z MzU4LThmOTktNzEwZmEyZjU4NjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4rcg8ErHn78psvl0qICdCVeqcjnob4lLkvUj6NFgTHs3VMdgTvkY7z 3+CHYy31mZIMMf2xfja4RUM6lfIio9ohEmc2MRb/RemHFFwJL6mzsWiVFwOJL6qC ZvkAkEbZ4S3pOc1746MoEUEqloxZXGkym7wJ/9YbZr/cGAVWcdt1Lo7GJWYWBaMG tTH7f/zo7BVzEeGcpkvUQZGtLhzDIh7dbmHpAocX55U7/FCJOQxaX2LjcseUK4OF 3U3bb95qSpFkngZvaR8Hw8wWbmBDfWlodXQra6R55k7UHQQyvdQJTQJTt/KKfm3r RdhRj/17JeBAJ8Mhk4N4uV10aeT/KU8= -----END CERTIFICATE-----Generated at Wed Oct 7 08:06:08 2026 by rpki-client