$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/969ab94c-bddb-3235-9711-5eeb606e73fb.roa File: 969ab94c-bddb-3235-9711-5eeb606e73fb.roa (raw, json) Hash identifier: dA0SmgzWAKCYgdUOCL1wWchCdEfzXS6WlG8r7b7bc+k= Subject key identifier: 44:47:EF:43:7C:27:E1:BF:D0:E6:B6:79:2E:B3:B9:51:4E:2A:D9:7A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F62930DD61DF75735B4564D80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/969ab94c-bddb-3235-9711-5eeb606e73fb.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396600 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:0d:d6:1d:f7:57:35:b4:56:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=af2416a1-f27b-4cee-ba56-6d9671876bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:35:70:f1:9c:a1:92:12:ed:9b:15:de:6f:41: 82:cf:3e:90:b9:cd:7e:4e:6b:b5:07:a1:ed:0a:8c: 89:47:af:92:37:0e:1e:0f:2b:f2:fe:30:26:2a:0a: 0a:fb:5c:1c:7c:9e:87:7b:1b:c7:f2:07:fd:4d:dc: 30:e6:23:dc:cd:13:d3:81:ce:91:9f:8f:2d:c0:3e: ce:cf:6f:03:38:05:75:5a:c3:a0:96:72:93:3e:57: 6f:14:64:c5:32:bb:d5:60:cb:c6:73:4b:7b:fe:31: 8a:42:93:56:6e:54:42:82:33:03:55:ff:c7:fe:fe: cf:f0:fa:c2:26:ed:3c:cf:a3:ec:f7:b1:50:ef:65: 6c:a9:94:82:c0:16:1e:36:df:bb:37:a8:ad:c4:dd: 8b:17:10:3d:c2:24:a5:ac:a2:e5:96:22:2b:86:69: c2:f0:c6:be:d1:bb:85:c3:85:40:cf:fd:13:ba:b5: 8d:8e:78:6d:01:25:36:a4:af:39:2a:6b:ba:02:b0: 19:d9:f9:b7:f2:79:d3:1c:b1:b6:5a:13:3c:c3:cd: bb:0e:eb:1d:ff:e7:f3:dc:7c:36:02:e2:63:50:9c: 38:00:35:37:a1:24:f3:7c:99:0e:92:73:17:10:9c: 0b:c9:54:c9:c4:36:e7:1c:18:4e:49:3c:15:50:4b: 11:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:47:EF:43:7C:27:E1:BF:D0:E6:B6:79:2E:B3:B9:51:4E:2A:D9:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/969ab94c-bddb-3235-9711-5eeb606e73fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:dd:f4:29:9a:95:bf:69:d8:4f:f5:f8:ee:d1:4f:e4:1d:9d: fa:54:4f:03:51:6c:17:ae:59:a5:17:ac:51:36:88:50:8d:a4: 2a:95:b0:4f:1e:85:0e:70:93:e7:b7:78:54:18:73:69:6e:4e: 40:99:99:db:13:2e:f4:18:78:e2:2a:7c:27:0b:1f:5d:9b:9e: 2d:fd:35:c2:cb:93:b8:ce:44:d6:2e:17:13:fc:c1:54:d5:ee: 2b:88:5b:0f:7d:57:ee:9c:ce:a3:29:df:3b:50:17:77:09:ca: 27:7d:06:5c:7b:39:da:a6:4e:91:02:89:27:1b:8c:9f:fc:b4: 76:5d:6a:37:04:00:a9:e0:fd:7f:26:26:4c:88:e2:7b:c3:1a: 80:d7:fc:8e:23:40:6c:68:0a:28:d2:b6:0a:c1:09:5b:17:f7: 24:68:ff:36:41:4d:67:be:9a:f6:3d:81:e6:0e:fa:79:a5:cc: 36:78:27:da:bf:e8:1a:4f:31:6a:0e:98:b6:38:b4:b7:b9:77: e5:2f:79:5f:4c:d5:e7:cf:3d:22:4c:64:61:0b:22:aa:6d:c7: 23:74:19:29:24:27:9e:0e:28:58:02:a7:9e:d4:16:fa:b5:f7: 54:5b:34:77:8f:b5:ff:f6:cb:42:2f:ca:b0:c2:f5:5f:63:aa: 7d:a2:2b:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikw3WHfdXNbRWTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk YWYyNDE2YTEtZjI3Yi00Y2VlLWJhNTYtNmQ5NjcxODc2YmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjVw8ZyhkhLtmxXeb0GCzz6Quc1+Tmu1B6Ht CoyJR6+SNw4eDyvy/jAmKgoK+1wcfJ6HexvH8gf9Tdww5iPczRPTgc6Rn48twD7O z28DOAV1WsOglnKTPldvFGTFMrvVYMvGc0t7/jGKQpNWblRCgjMDVf/H/v7P8PrC Ju08z6Ps97FQ72VsqZSCwBYeNt+7N6itxN2LFxA9wiSlrKLlliIrhmnC8Ma+0buF w4VAz/0TurWNjnhtASU2pK85Kmu6ArAZ2fm38nnTHLG2WhM8w827Dusd/+fz3Hw2 AuJjUJw4ADU3oSTzfJkOknMXEJwLyVTJxDbnHBhOSTwVUEsRfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERH70N8J+G/0Oa2eS6zuVFOKtl6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTY5YWI5NGMtYmRkYi0z MjM1LTk3MTEtNWVlYjYwNmU3M2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALvd9Cmalb9p2E/1+O7RT+QdnfpUTwNRbBeuWaUXrFE2iFCNpCqVsE8e hQ5wk+e3eFQYc2luTkCZmdsTLvQYeOIqfCcLH12bni39NcLLk7jORNYuFxP8wVTV 7iuIWw99V+6czqMp3ztQF3cJyid9Blx7OdqmTpECiScbjJ/8tHZdajcEAKng/X8m JkyI4nvDGoDX/I4jQGxoCijStgrBCVsX9yRo/zZBTWe+mvY9geYO+nmlzDZ4J9q/ 6BpPMWoOmLY4tLe5d+UveV9M1efPPSJMZGELIqptxyN0GSkkJ54OKFgCp57UFvq1 91RbNHePtf/2y0IvyrDC9V9jqn2iK8g= -----END CERTIFICATE-----Generated at Thu Oct 8 05:38:18 2026 by rpki-client