$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ce02706-3bbe-38eb-ae8a-a9fa14c188b1.roa File: 4ce02706-3bbe-38eb-ae8a-a9fa14c188b1.roa (raw, json) Hash identifier: lb0d/Kbvqs1T11NPYzVG1dK3dDFsLIr9to+z7g1Hh9c= Subject key identifier: 57:97:27:7B:85:24:C2:26:B9:50:3E:DA:5B:82:55:C7:9C:BA:74:6F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D4D5A90686BC17C9D4092C200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ce02706-3bbe-38eb-ae8a-a9fa14c188b1.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 36622 IP address blocks: 192.82.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 01 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:90:68:6b:c1:7c:9d:40:92:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=974d2283-6af4-4ffb-b364-1c24802973b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:75:20:19:f4:1b:59:fb:21:e6:c1:0d:a0:f5: cb:de:8b:ce:40:f1:95:54:3b:79:ad:d1:8c:6d:23: d9:b1:6a:f0:75:9e:81:f2:46:bd:09:0e:70:36:55: 63:dc:fb:6f:3b:b3:c8:68:41:ba:19:66:30:90:e4: 4e:95:73:e6:9b:0c:47:9a:bc:14:9e:f4:ac:fc:7f: 3d:cd:29:92:1a:fa:1d:f3:08:5d:ab:79:d6:3e:57: a8:63:0e:c6:44:08:2e:94:fd:25:68:bb:27:7b:3a: 16:17:6d:32:3d:43:aa:c8:72:33:4a:18:83:73:5f: eb:8e:bb:84:d0:1b:48:b7:56:68:da:9a:55:09:42: 19:57:3b:a2:46:9c:08:8a:e2:4f:18:c3:96:1e:9e: 48:31:3a:c0:bb:6f:13:20:b3:1e:1a:1c:05:aa:5b: 5c:15:a9:a9:6e:28:4e:44:c2:c2:7b:28:f2:ff:b6: e1:a7:84:37:a2:94:c4:6a:4c:82:3e:5b:ba:8e:63: f6:b4:46:4a:c6:9c:4e:67:a0:fc:93:b4:83:40:0c: b5:07:c3:74:97:51:81:1d:77:de:f2:1d:96:57:6a: f3:ea:eb:e6:59:82:3b:0c:f0:7e:1c:88:e7:14:95: cc:82:eb:23:37:5c:78:17:52:32:d4:8d:7b:c4:e7: c8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:97:27:7B:85:24:C2:26:B9:50:3E:DA:5B:82:55:C7:9C:BA:74:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ce02706-3bbe-38eb-ae8a-a9fa14c188b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.82.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:57:ab:1b:23:b8:2a:ac:a8:9f:2f:d7:3b:de:4e:b5:30:2f: 29:1d:75:9d:e6:4d:1b:87:34:6f:a0:53:9a:6c:04:59:09:ca: ec:98:75:48:83:d0:dc:ef:2b:a6:70:8a:82:17:b2:53:62:87: 82:a4:a7:71:22:1a:79:12:47:1b:ef:ef:e7:63:0c:dd:67:cb: d9:87:2f:2a:b4:da:78:b2:59:ad:96:3c:cb:6e:c6:48:96:53: 10:11:c1:8d:13:6d:65:20:bb:6b:f4:87:76:a6:97:3b:11:fc: 97:20:a8:9f:8f:44:bb:f0:9e:d1:c4:88:c7:86:5e:96:c6:f3: 54:da:55:20:cd:f2:a4:0f:91:85:9e:53:05:e0:7e:50:a3:37: 48:d2:3d:6a:29:4f:3a:64:1d:a8:8a:f2:38:68:e4:ed:22:8b: 7b:c1:2d:35:71:4b:e9:da:03:26:85:59:96:87:a9:ac:6b:59: 6f:cd:b8:b8:77:2c:65:eb:09:05:44:55:59:7c:ae:4a:83:d7: c0:fe:f8:51:05:eb:96:d8:b4:91:ec:e8:8d:76:10:fe:4c:45: 79:97:6e:01:42:50:f8:cd:41:e1:2f:6f:16:3f:34:90:57:f9: bf:10:f6:3b:1d:b2:88:f5:ce:53:f2:40:aa:0b:07:34:5a:23: 55:61:27:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWpBoa8F8nUCSwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk OTc0ZDIyODMtNmFmNC00ZmZiLWIzNjQtMWMyNDgwMjk3M2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHUgGfQbWfsh5sENoPXL3ovOQPGVVDt5rdGM bSPZsWrwdZ6B8ka9CQ5wNlVj3PtvO7PIaEG6GWYwkOROlXPmmwxHmrwUnvSs/H89 zSmSGvod8whdq3nWPleoYw7GRAgulP0laLsnezoWF20yPUOqyHIzShiDc1/rjruE 0BtIt1Zo2ppVCUIZVzuiRpwIiuJPGMOWHp5IMTrAu28TILMeGhwFqltcFampbihO RMLCeyjy/7bhp4Q3opTEakyCPlu6jmP2tEZKxpxOZ6D8k7SDQAy1B8N0l1GBHXfe 8h2WV2rz6uvmWYI7DPB+HIjnFJXMgusjN1x4F1Iy1I17xOfIzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFeXJ3uFJMImuVA+2luCVcecunRvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGNlMDI3MDYtM2JiZS0z OGViLWFlOGEtYTlmYTE0YzE4OGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFKGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVXqxsjuCqsqJ8v1zveTrUwLykddZ3mTRuHNG+gU5psBFkJyuyYdUiD 0NzvK6ZwioIXslNih4Kkp3EiGnkSRxvv7+djDN1ny9mHLyq02niyWa2WPMtuxkiW UxARwY0TbWUgu2v0h3amlzsR/JcgqJ+PRLvwntHEiMeGXpbG81TaVSDN8qQPkYWe UwXgflCjN0jSPWopTzpkHaiK8jho5O0ii3vBLTVxS+naAyaFWZaHqaxrWW/NuLh3 LGXrCQVEVVl8rkqD18D++FEF65bYtJHs6I12EP5MRXmXbgFCUPjNQeEvbxY/NJBX +b8Q9jsdsoj1zlPyQKoLBzRaI1VhJyM= -----END CERTIFICATE-----Generated at Sun Mar 29 22:39:32 2026 by rpki-client