$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71665870-81da-344b-b282-8b43d96e23d8.roa File: 71665870-81da-344b-b282-8b43d96e23d8.roa (raw, json) Hash identifier: yxYKq6n40txfRAi6L9r56b2ucL+YBZnqG6IcsjX0URA= Subject key identifier: 82:C8:1C:E9:9B:5D:59:6C:B8:3E:E4:44:0B:37:DF:6F:17:83:1B:64 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F62931B4F7D14207A2122EC80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71665870-81da-344b-b282-8b43d96e23d8.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396549 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:1b:4f:7d:14:20:7a:21:22:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=1d7c7ab4-d770-4bd9-af9a-fbc2b606dfb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4c:fd:87:25:8a:d7:9e:e2:45:b5:1c:40:65: 55:95:f9:b1:7e:a7:a1:07:7d:59:7e:ec:ca:b7:96: 25:e4:89:20:fe:2b:d6:29:10:78:da:d3:9e:4e:c2: 2e:7d:14:28:65:b7:61:cb:8b:62:57:d6:a9:6d:a6: 1e:ba:6a:77:31:37:44:55:d3:c5:14:d0:47:5d:f8: 6c:f8:4b:a4:79:d9:42:a2:70:61:11:4c:53:17:67: cc:29:cb:0c:94:f5:25:82:96:c0:88:cb:d7:ce:41: f1:62:f3:67:ee:b2:cd:35:74:25:21:f4:d4:61:34: 1a:df:09:b0:bb:f2:0c:97:12:29:d5:b9:83:b7:c5: da:f1:2f:8a:ba:14:2d:ff:25:b9:c1:cf:b9:ff:17: e5:55:48:b4:7d:d0:8f:d1:95:c0:86:b7:8b:1c:55: 7d:eb:98:1c:bf:79:b5:f4:26:31:61:5f:5d:a8:e1: 95:cc:ed:73:2f:5d:59:4b:ec:20:3f:77:43:1d:b4: 67:b1:20:99:21:95:3c:4f:e0:33:6f:5c:f5:43:78: 28:80:15:f3:6b:84:8b:bd:10:be:ae:e7:24:4b:ad: a4:7c:8c:91:a1:59:ea:45:08:05:c0:d8:b1:e3:46: 11:43:4e:21:d5:3f:07:bb:77:3d:a3:b4:d8:aa:03: eb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C8:1C:E9:9B:5D:59:6C:B8:3E:E4:44:0B:37:DF:6F:17:83:1B:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71665870-81da-344b-b282-8b43d96e23d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:ed:f0:97:23:d8:69:2f:84:b3:7a:b4:8e:cb:4c:25:df:e3: 4b:2a:04:cd:c6:a9:f9:5c:96:cb:8d:16:0d:7b:95:ba:60:0a: ed:e4:f0:ad:a4:72:38:e8:f1:dc:b0:f5:26:99:b8:d9:09:b2: e8:52:cd:5a:54:72:79:de:e2:48:9a:cf:09:a6:1f:a1:12:f2: 43:27:4e:cf:60:7b:5c:b1:a2:fd:6c:6f:83:0a:76:80:0d:69: 8f:4d:12:f2:44:9f:d9:9e:dc:70:d4:ba:83:c8:cc:e2:20:d0: 32:16:1c:d4:3b:68:20:ce:f1:12:c5:04:26:62:f0:8b:ed:00: 2b:ed:c6:0b:b2:e7:3f:45:c4:e6:fd:6d:f7:02:28:2c:5e:89: 86:44:9a:bd:6c:10:83:ba:fd:df:93:cb:fe:6e:54:3a:15:5a: bc:90:1e:f9:d0:fa:83:95:ea:62:74:d6:c8:d5:89:d0:61:3f: 9e:03:f6:46:d5:66:27:0a:16:3a:a7:36:58:fe:1c:ce:c0:a9: 89:7e:fd:2c:e4:72:ed:77:da:0b:a1:7c:68:a3:7a:84:4e:d7: 83:13:c8:72:83:00:6d:ca:bd:5d:e3:ba:11:f0:58:aa:97:17: b5:d7:01:43:c6:8a:79:aa:55:7e:7c:02:05:be:fe:c0:cf:9e: 70:8f:dc:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikxtPfRQgeiEi7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MWQ3YzdhYjQtZDc3MC00YmQ5LWFmOWEtZmJjMmI2MDZkZmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kz9hyWK157iRbUcQGVVlfmxfqehB31ZfuzK t5Yl5Ikg/ivWKRB42tOeTsIufRQoZbdhy4tiV9apbaYeump3MTdEVdPFFNBHXfhs +EukedlConBhEUxTF2fMKcsMlPUlgpbAiMvXzkHxYvNn7rLNNXQlIfTUYTQa3wmw u/IMlxIp1bmDt8Xa8S+KuhQt/yW5wc+5/xflVUi0fdCP0ZXAhreLHFV965gcv3m1 9CYxYV9dqOGVzO1zL11ZS+wgP3dDHbRnsSCZIZU8T+Azb1z1Q3gogBXza4SLvRC+ ruckS62kfIyRoVnqRQgFwNix40YRQ04h1T8Hu3c9o7TYqgPrHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILIHOmbXVlsuD7kRAs3328XgxtkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzE2NjU4NzAtODFkYS0z NDRiLWIyODItOGI0M2Q5NmUyM2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHt8Jcj2GkvhLN6tI7LTCXf40sqBM3GqflclsuNFg17lbpgCu3k8K2k cjjo8dyw9SaZuNkJsuhSzVpUcnne4kiazwmmH6ES8kMnTs9ge1yxov1sb4MKdoAN aY9NEvJEn9me3HDUuoPIzOIg0DIWHNQ7aCDO8RLFBCZi8IvtACvtxguy5z9FxOb9 bfcCKCxeiYZEmr1sEIO6/d+Ty/5uVDoVWryQHvnQ+oOV6mJ01sjVidBhP54D9kbV ZicKFjqnNlj+HM7AqYl+/Szkcu132guhfGijeoRO14MTyHKDAG3KvV3juhHwWKqX F7XXAUPGinmqVX58AgW+/sDPnnCP3F4= -----END CERTIFICATE-----Generated at Fri Oct 9 23:02:19 2026 by rpki-client