$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c5d2463-abcf-39c0-abfe-d7d952bf87be.roa File: 8c5d2463-abcf-39c0-abfe-d7d952bf87be.roa (raw, json) Hash identifier: TEyIy8J4WYFZQr87Vdvigs0IevKlqxSU9Wf3zHFPZJQ= Subject key identifier: 09:57:05:9F:1B:1E:D5:30:33:BF:10:CB:48:04:3C:8C:A7:17:FA:2B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F62930D9DB24E9936C476935C Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c5d2463-abcf-39c0-abfe-d7d952bf87be.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396596 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:0d:9d:b2:4e:99:36:c4:76:93:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=2a7a0768-2d64-42a3-804a-548a09010ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f4:66:8e:7c:dc:1c:67:dd:f4:49:19:75:0c: af:42:22:72:6b:c5:ca:33:ce:10:23:a0:6e:d9:61: de:38:43:50:b0:14:93:f7:8c:54:89:d1:7e:b9:e0: 3d:42:8f:85:49:56:84:88:a8:c3:18:ce:8e:78:9a: 0c:ce:5a:94:23:24:02:7c:cc:7d:c3:e1:98:a2:56: 4b:e5:cf:a4:00:de:6d:ca:28:e3:66:c6:37:25:32: b1:4a:a5:d7:fe:92:41:dc:e6:01:06:d0:df:4f:7c: 84:69:a0:db:04:81:b7:23:92:1e:3b:bd:74:01:ca: fa:c5:8e:b9:da:b4:a5:99:a0:99:f3:ee:11:0d:7c: 74:b8:bd:96:de:40:77:86:59:23:9b:94:1b:dd:73: e1:e8:5a:b7:68:5b:11:fd:44:18:6f:62:73:74:2c: 68:20:08:99:2d:58:af:b5:82:f0:bf:ee:29:ce:7f: a5:54:08:49:85:01:cf:61:c3:02:75:d6:52:ca:1a: d6:5f:b7:b3:6c:2d:94:a4:1c:e0:09:38:fb:8d:67: b5:f0:75:52:67:4f:7d:9e:21:71:27:1a:ed:ad:cc: 2e:76:6a:20:97:da:56:93:f3:e7:e5:0e:11:6d:b9: 79:ee:e1:a1:c3:f8:0b:37:01:61:17:91:e0:b7:af: 08:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:57:05:9F:1B:1E:D5:30:33:BF:10:CB:48:04:3C:8C:A7:17:FA:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c5d2463-abcf-39c0-abfe-d7d952bf87be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:85:81:1c:29:dd:aa:ee:78:05:70:e2:9b:81:85:35:ff:72: ff:f0:f3:68:69:bf:68:b1:e4:cb:b7:37:66:3a:1c:a5:2b:74: 7f:40:a8:3a:88:e3:7b:19:7b:9b:00:f7:74:43:6f:fe:a7:5b: 1a:5f:49:12:dd:20:63:07:4a:e9:c9:05:c8:1b:09:bb:f1:6b: c6:16:02:66:02:c5:dc:68:2c:1e:bd:7f:9b:6e:18:9a:6f:1f: 97:0d:4f:29:f1:8d:cf:7f:0f:32:a7:88:1c:1b:45:64:ed:0b: 70:ad:e6:87:c9:8f:9a:60:6d:a5:bb:58:75:2d:71:b8:a0:8c: ec:31:91:b0:8f:d0:5b:6e:98:23:3c:79:06:c0:c4:e9:4a:64: d9:76:cd:7a:5a:f9:d0:90:22:28:86:b4:e2:76:db:60:40:a3: 81:dc:d0:03:a3:7a:77:4d:03:64:ae:c7:2a:1c:7e:ca:2e:32: 68:83:dd:c2:6d:09:d1:32:17:60:37:ef:d0:37:e9:a1:39:14: 91:42:aa:2d:93:f0:38:a8:7b:a8:14:78:e4:8e:a2:66:3f:8e: f5:77:d0:d3:07:95:39:15:1c:a5:bb:0c:02:f6:93:ab:12:bc: a9:6e:36:49:21:70:a7:39:bb:e6:29:31:6e:a5:70:48:93:d3: d9:07:cb:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikw2dsk6ZNsR2k1wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MmE3YTA3NjgtMmQ2NC00MmEzLTgwNGEtNTQ4YTA5MDEwYmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/RmjnzcHGfd9EkZdQyvQiJya8XKM84QI6Bu 2WHeOENQsBST94xUidF+ueA9Qo+FSVaEiKjDGM6OeJoMzlqUIyQCfMx9w+GYolZL 5c+kAN5tyijjZsY3JTKxSqXX/pJB3OYBBtDfT3yEaaDbBIG3I5IeO710Acr6xY65 2rSlmaCZ8+4RDXx0uL2W3kB3hlkjm5Qb3XPh6Fq3aFsR/UQYb2JzdCxoIAiZLViv tYLwv+4pzn+lVAhJhQHPYcMCddZSyhrWX7ezbC2UpBzgCTj7jWe18HVSZ099niFx Jxrtrcwudmogl9pWk/Pn5Q4Rbbl57uGhw/gLNwFhF5Hgt68IbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlXBZ8bHtUwM78Qy0gEPIynF/orMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGM1ZDI0NjMtYWJjZi0z OWMwLWFiZmUtZDdkOTUyYmY4N2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWFgRwp3arueAVw4puBhTX/cv/w82hpv2ix5Mu3N2Y6HKUrdH9AqDqI 43sZe5sA93RDb/6nWxpfSRLdIGMHSunJBcgbCbvxa8YWAmYCxdxoLB69f5tuGJpv H5cNTynxjc9/DzKniBwbRWTtC3Ct5ofJj5pgbaW7WHUtcbigjOwxkbCP0FtumCM8 eQbAxOlKZNl2zXpa+dCQIiiGtOJ222BAo4Hc0AOjendNA2SuxyocfsouMmiD3cJt CdEyF2A379A36aE5FJFCqi2T8Dioe6gUeOSOomY/jvV30NMHlTkVHKW7DAL2k6sS vKluNkkhcKc5u+YpMW6lcEiT09kHy2c= -----END CERTIFICATE-----Generated at Thu Oct 8 08:52:47 2026 by rpki-client