$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a59a5457-dd10-39fa-bf9b-2f1050342f55.roa File: a59a5457-dd10-39fa-bf9b-2f1050342f55.roa (raw, json) Hash identifier: g9dgCZlwxSCCAjulojK4NqIegKd8q9bEu3rxTXeAdCE= Subject key identifier: 80:70:72:98:7B:A1:56:CC:A6:E3:27:3B:25:C9:3B:F9:3D:D5:7E:4D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D5243C23A2524EBF5AACE0800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a59a5457-dd10-39fa-bf9b-2f1050342f55.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 36616 IP address blocks: 192.82.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 01 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:c2:3a:25:24:eb:f5:aa:ce:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=668bdf1f-7508-477d-a0c1-11e6649c635f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:86:9f:66:39:21:64:55:1e:22:f7:22:9b:db: c0:aa:db:39:05:e5:1c:cf:12:ab:51:fc:da:b4:e8: bb:cc:47:d5:14:6b:f7:8f:6b:6a:ce:dc:aa:65:34: 04:07:58:0d:3a:bc:10:2a:bf:f9:ac:56:b1:28:2b: f3:93:93:2d:94:fd:12:0d:e2:cd:99:48:3e:5c:09: b0:fe:5d:8b:f1:87:ae:76:02:37:03:66:7e:3c:df: 15:2c:df:12:70:e6:50:36:28:90:92:3d:e4:81:b7: ed:6a:9c:af:1e:c3:38:0b:87:be:28:00:9d:8a:62: 6b:e5:64:d8:17:48:de:72:ac:2d:52:a8:18:c6:19: a1:6e:ea:b1:cd:76:b6:50:9a:e1:9c:66:b6:d1:47: 6f:f4:80:89:e8:15:cc:4d:fa:e3:ed:2f:57:cc:18: c8:0f:b5:73:55:58:b0:16:b7:97:3f:08:74:d1:cf: a8:ac:1c:22:68:c4:80:0e:5c:be:27:e1:cb:e8:5c: 3b:d9:e4:88:06:c3:67:7d:66:4b:08:e5:00:cc:18: 3c:a9:b4:70:0d:8c:04:fe:e9:e3:c6:db:73:69:dd: aa:68:7b:96:bc:90:b5:ea:5c:f4:97:cc:3a:85:34: 16:cf:15:d9:15:27:f5:9a:30:07:c9:6b:3a:e8:4b: e4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:70:72:98:7B:A1:56:CC:A6:E3:27:3B:25:C9:3B:F9:3D:D5:7E:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a59a5457-dd10-39fa-bf9b-2f1050342f55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.82.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:c3:ed:ec:2e:50:2d:56:83:77:47:5a:c6:bb:c7:4c:00:36: 18:05:3f:67:e1:a3:d8:cd:69:ee:00:ac:ef:b7:86:b4:40:6e: 58:43:fd:cb:10:fb:09:57:82:e0:24:d4:c5:c8:7a:eb:44:78: b3:d4:4a:42:d5:5c:87:e6:34:5d:6c:f2:58:9f:b9:f3:b5:67: b7:a8:3d:cd:8e:d8:77:5b:59:15:18:d1:72:ac:42:01:70:77: 54:68:83:39:95:fc:74:af:94:0b:73:49:b1:54:87:73:4f:10: 76:8c:e9:73:ab:e1:75:4b:a8:d8:64:b4:bd:0d:f7:c6:68:1f: 27:4b:7c:35:5a:e5:d1:b5:7f:8b:13:4f:65:e5:1e:01:f8:34: ac:2d:1d:09:fe:e0:af:1e:ed:0b:df:c9:76:c1:5a:15:2a:f7: 91:ce:36:a3:bd:d2:72:1f:13:d4:19:4e:39:c6:44:38:99:f2: 75:a2:a6:a6:aa:af:73:af:92:55:90:ae:6f:2c:b7:d7:b1:c7: a4:fc:b7:6d:80:33:34:9d:cf:59:b9:65:a5:c3:75:ad:dc:0e: 70:4e:2b:ae:cc:dc:94:22:6a:83:f9:72:e2:1e:3d:c9:28:04: 3d:6a:da:5e:d6:36:84:91:e8:c3:e4:d5:bb:0c:39:77:6c:6e: 9e:bf:07:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ8I6JSTr9arOCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk NjY4YmRmMWYtNzUwOC00NzdkLWEwYzEtMTFlNjY0OWM2MzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoafZjkhZFUeIvcim9vAqts5BeUczxKrUfza tOi7zEfVFGv3j2tqztyqZTQEB1gNOrwQKr/5rFaxKCvzk5MtlP0SDeLNmUg+XAmw /l2L8YeudgI3A2Z+PN8VLN8ScOZQNiiQkj3kgbftapyvHsM4C4e+KACdimJr5WTY F0jecqwtUqgYxhmhbuqxzXa2UJrhnGa20Udv9ICJ6BXMTfrj7S9XzBjID7VzVViw FreXPwh00c+orBwiaMSADly+J+HL6Fw72eSIBsNnfWZLCOUAzBg8qbRwDYwE/unj xttzad2qaHuWvJC16lz0l8w6hTQWzxXZFSf1mjAHyWs66Evk2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBwcph7oVbMpuMnOyXJO/k91X5NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTU5YTU0NTctZGQxMC0z OWZhLWJmOWItMmYxMDUwMzQyZjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFKFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDD7ewuUC1Wg3dHWsa7x0wANhgFP2fho9jNae4ArO+3hrRAblhD/csQ +wlXguAk1MXIeutEeLPUSkLVXIfmNF1s8lifufO1Z7eoPc2O2HdbWRUY0XKsQgFw d1RogzmV/HSvlAtzSbFUh3NPEHaM6XOr4XVLqNhktL0N98ZoHydLfDVa5dG1f4sT T2XlHgH4NKwtHQn+4K8e7QvfyXbBWhUq95HONqO90nIfE9QZTjnGRDiZ8nWipqaq r3OvklWQrm8st9exx6T8t22AMzSdz1m5ZaXDda3cDnBOK67M3JQiaoP5cuIePcko BD1q2l7WNoSR6MPk1bsMOXdsbp6/B7Y= -----END CERTIFICATE-----Generated at Sun Mar 29 22:42:01 2026 by rpki-client