$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8092bb5a-c89a-3de7-802d-d7d43f13f406.roa File: 8092bb5a-c89a-3de7-802d-d7d43f13f406.roa (raw, json) Hash identifier: v/0L+wZW88wrt3CumN/cyUsLdzo1u6S4SQnN/bVF5g0= Subject key identifier: D9:19:5D:C3:CC:6B:79:2A:74:F5:A1:2F:FD:49:0F:0B:DB:48:42:85 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F6292D0C46DBB49CF1F4085E0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8092bb5a-c89a-3de7-802d-d7d43f13f406.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396618 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:d0:c4:6d:bb:49:cf:1f:40:85:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=2e3e6264-7b7f-4d6a-980c-36c9d208e505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e8:6a:b3:3a:c3:ac:0f:d3:e6:a0:54:ac:1b: 04:be:8c:e0:19:14:a3:95:99:e0:30:ed:29:de:05: 48:5c:b8:f3:c7:b7:18:13:4b:0d:8b:0a:bb:8f:94: 4a:e8:b9:cb:4d:c0:90:db:39:fe:cb:9b:9a:8a:1c: 56:cc:fd:a7:af:17:4e:0d:60:ce:fe:b7:a0:cf:36: d7:8a:99:31:ce:c9:c7:81:24:6f:82:54:c1:dd:4d: f7:9e:02:8f:6b:52:69:15:5d:25:8b:7a:75:54:98: bb:a0:f3:b5:8a:7c:61:66:bb:73:53:1e:9d:57:a2: c0:32:06:3d:c3:24:c6:72:59:ea:2f:dd:eb:a5:4f: 25:88:cf:2e:f3:c7:36:5e:4f:bd:3d:6a:b3:fc:72: f0:60:f6:de:57:25:fb:24:32:c2:e7:0c:58:68:04: 9c:26:1b:cb:d4:d9:dc:9a:fd:e4:6f:77:8f:0f:e6: 77:1e:bb:e8:95:8d:7f:4d:11:e8:3a:22:2b:4e:5a: 48:bd:95:5a:14:cb:b4:cf:11:fc:7f:13:3b:2e:e6: d5:35:50:92:36:76:97:2b:e4:bd:85:a8:36:c1:8b: 88:74:38:85:19:9f:6f:ed:59:49:9c:1e:4f:ba:93: 8b:54:05:52:01:79:70:eb:78:34:1a:39:e5:13:52: a0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:19:5D:C3:CC:6B:79:2A:74:F5:A1:2F:FD:49:0F:0B:DB:48:42:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8092bb5a-c89a-3de7-802d-d7d43f13f406.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:4d:7d:a4:fc:0e:d9:2d:9e:d6:87:c6:dc:26:5e:dc:57:4a: 5c:fb:01:91:af:0c:1a:c2:9e:4f:4d:75:05:21:f0:6d:15:e5: d5:2a:aa:82:44:46:b0:db:1a:c8:2a:ff:34:83:10:59:a5:14: 25:7d:f3:1e:fd:66:93:33:26:22:70:59:ae:f0:6c:2b:6d:c0: 34:3a:60:53:8f:8a:2f:ec:c2:20:6c:2e:14:2d:97:d8:7c:eb: 80:58:67:56:17:8c:ca:fd:97:03:95:7e:62:dc:2a:28:ea:cb: b9:fb:2e:c6:1b:e0:00:3a:57:2b:02:77:b1:e7:3f:2a:a4:b4: 33:4a:0b:e3:20:c4:86:fa:c6:7d:45:c3:b5:17:b1:40:5c:ed: c1:d6:59:a5:73:f0:e5:e2:29:70:e7:db:62:be:c5:09:06:6f: e9:06:0c:46:ba:f6:1c:e2:2a:b2:fb:5d:31:9a:47:dd:17:e5: 49:e0:58:01:3a:96:c2:06:24:73:57:e2:34:1e:0b:82:9e:36: 26:02:97:b2:1f:c3:b8:74:c4:58:2b:fe:f3:8f:82:a2:37:b1: 40:23:9e:be:6a:e7:8f:ee:a5:bd:42:75:8f:63:8e:ad:4e:cb: dc:8e:f7:33:72:a6:24:fb:f6:67:7d:40:72:e4:4a:5b:6f:46: 99:16:fe:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iktDEbbtJzx9AheAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MmUzZTYyNjQtN2I3Zi00ZDZhLTk4MGMtMzZjOWQyMDhlNTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOhqszrDrA/T5qBUrBsEvozgGRSjlZngMO0p 3gVIXLjzx7cYE0sNiwq7j5RK6LnLTcCQ2zn+y5uaihxWzP2nrxdODWDO/regzzbX ipkxzsnHgSRvglTB3U33ngKPa1JpFV0li3p1VJi7oPO1inxhZrtzUx6dV6LAMgY9 wyTGclnqL93rpU8liM8u88c2Xk+9PWqz/HLwYPbeVyX7JDLC5wxYaAScJhvL1Nnc mv3kb3ePD+Z3HrvolY1/TRHoOiIrTlpIvZVaFMu0zxH8fxM7LubVNVCSNnaXK+S9 hag2wYuIdDiFGZ9v7VlJnB5PupOLVAVSAXlw63g0GjnlE1KgHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkZXcPMa3kqdPWhL/1JDwvbSEKFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODA5MmJiNWEtYzg5YS0z ZGU3LTgwMmQtZDdkNDNmMTNmNDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFNfaT8DtktntaHxtwmXtxXSlz7AZGvDBrCnk9NdQUh8G0V5dUqqoJE RrDbGsgq/zSDEFmlFCV98x79ZpMzJiJwWa7wbCttwDQ6YFOPii/swiBsLhQtl9h8 64BYZ1YXjMr9lwOVfmLcKijqy7n7LsYb4AA6VysCd7HnPyqktDNKC+MgxIb6xn1F w7UXsUBc7cHWWaVz8OXiKXDn22K+xQkGb+kGDEa69hziKrL7XTGaR90X5UngWAE6 lsIGJHNX4jQeC4KeNiYCl7Ifw7h0xFgr/vOPgqI3sUAjnr5q54/upb1CdY9jjq1O y9yO9zNypiT79md9QHLkSltvRpkW/vk= -----END CERTIFICATE-----Generated at Sun Oct 11 17:19:25 2026 by rpki-client