$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b2cab63-0b90-357b-8ba3-1f832955695a.roa File: 7b2cab63-0b90-357b-8ba3-1f832955695a.roa (raw, json) Hash identifier: 7h7INo0ho+4l16PS2hfVJU0f5v82Jnm6Om4cFnkovE0= Subject key identifier: 9A:57:C2:C9:86:8C:AA:27:70:71:82:EC:1C:7F:6F:AC:2B:5E:3C:6A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F6292D57DDC9864019B81DEC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b2cab63-0b90-357b-8ba3-1f832955695a.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396609 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:d5:7d:dc:98:64:01:9b:81:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=e59dbc60-22ba-433a-b46d-7dc9590163c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:34:2f:d5:89:ba:0f:1b:16:77:34:9f:a3:88: d6:4c:4c:2f:da:d2:0a:72:17:98:b5:45:de:a8:ef: aa:f6:cf:a2:26:47:ea:a5:9a:67:5c:f2:ec:f0:8d: 06:58:97:16:61:53:53:c2:e4:5f:24:23:65:e3:e9: e5:96:6f:05:d2:22:cd:58:e2:37:0e:f0:3b:31:41: 9a:54:9b:14:56:1e:4a:79:91:85:cc:ce:19:09:e3: c1:7b:28:32:6f:23:af:a1:f8:bc:4b:43:0d:fb:f1: dc:34:10:8d:d2:4c:18:70:2c:29:fe:98:10:4a:2e: f1:a8:40:6d:da:ed:bd:96:ce:68:b9:cd:cc:e5:82: cb:36:62:f2:0d:1d:ba:37:0d:91:41:a6:6a:8a:80: da:f6:23:a0:de:80:8d:c1:11:9d:21:a8:85:9b:4d: 99:f7:16:87:20:ea:db:50:e3:6d:94:54:68:87:17: 68:3f:8d:00:79:22:8c:41:fa:9d:5a:1f:f2:b9:18: 6b:93:92:01:ff:1e:b9:95:4e:33:1e:b5:31:2d:7d: a8:0a:6b:46:5b:fa:d8:6c:90:45:cd:4d:5d:c9:60: e3:19:ca:8e:bf:e3:d5:91:54:6a:d3:eb:e0:ae:cc: bc:ff:32:f9:eb:d4:7e:d3:bf:35:0a:40:ff:ea:e9: e9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:57:C2:C9:86:8C:AA:27:70:71:82:EC:1C:7F:6F:AC:2B:5E:3C:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b2cab63-0b90-357b-8ba3-1f832955695a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:06:10:91:35:0e:4a:21:de:d6:93:a3:2d:d2:b4:9a:45:8f: bd:dd:be:92:30:27:cf:e1:ab:19:17:e7:5b:f6:e7:f5:ec:9a: 37:7a:37:d0:9b:67:3a:85:91:e3:d5:f7:22:c5:91:b1:d2:25: 50:88:33:40:7d:d0:c0:0b:56:80:24:86:01:1e:e4:43:48:a6: 7d:30:ee:e8:30:8d:cf:41:4f:47:d2:35:71:ae:5a:22:31:f8: 19:59:8e:fd:d4:5a:fa:2f:a2:34:7d:23:82:76:ec:bb:ca:7c: e8:d7:79:c7:01:3d:84:7a:58:f2:36:4f:1b:6d:9a:53:54:ee: a9:be:1a:47:a9:88:cd:49:01:13:0c:c8:a1:47:f1:83:56:c7: 58:fc:62:a9:f1:5f:8f:75:ab:eb:c9:01:a2:97:c9:08:57:16: 6b:0d:2a:09:b2:9a:d5:71:91:1c:a9:e6:3c:ee:85:b4:7d:41: 62:75:e2:22:f2:66:c6:0e:b6:d8:7f:45:84:81:2a:5e:30:09: a5:02:2d:71:c2:e8:b7:b1:74:85:5b:94:93:a6:be:21:df:85: 32:75:30:2c:84:bf:28:cd:c5:cd:ce:9a:82:53:35:e2:e5:03: 2f:47:55:56:ab:01:aa:74:3c:79:98:5e:65:35:cf:c3:71:8e: 11:a7:a0:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iktV93JhkAZuB3sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZTU5ZGJjNjAtMjJiYS00MzNhLWI0NmQtN2RjOTU5MDE2M2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDQv1Ym6DxsWdzSfo4jWTEwv2tIKcheYtUXe qO+q9s+iJkfqpZpnXPLs8I0GWJcWYVNTwuRfJCNl4+nllm8F0iLNWOI3DvA7MUGa VJsUVh5KeZGFzM4ZCePBeygybyOvofi8S0MN+/HcNBCN0kwYcCwp/pgQSi7xqEBt 2u29ls5ouc3M5YLLNmLyDR26Nw2RQaZqioDa9iOg3oCNwRGdIaiFm02Z9xaHIOrb UONtlFRohxdoP40AeSKMQfqdWh/yuRhrk5IB/x65lU4zHrUxLX2oCmtGW/rYbJBF zU1dyWDjGcqOv+PVkVRq0+vgrsy8/zL569R+0781CkD/6unpNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpXwsmGjKoncHGC7Bx/b6wrXjxqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2IyY2FiNjMtMGI5MC0z NTdiLThiYTMtMWY4MzI5NTU2OTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYGEJE1Dkoh3taToy3StJpFj73dvpIwJ8/hqxkX51v25/Xsmjd6N9Cb ZzqFkePV9yLFkbHSJVCIM0B90MALVoAkhgEe5ENIpn0w7ugwjc9BT0fSNXGuWiIx +BlZjv3UWvovojR9I4J27LvKfOjXeccBPYR6WPI2TxttmlNU7qm+GkepiM1JARMM yKFH8YNWx1j8YqnxX491q+vJAaKXyQhXFmsNKgmymtVxkRyp5jzuhbR9QWJ14iLy ZsYOtth/RYSBKl4wCaUCLXHC6LexdIVblJOmviHfhTJ1MCyEvyjNxc3OmoJTNeLl Ay9HVVarAap0PHmYXmU1z8NxjhGnoCY= -----END CERTIFICATE-----Generated at Tue Oct 6 21:12:53 2026 by rpki-client