$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aafb3f5c-ccba-3ea1-866c-1c67ab57ba5c.roa File: aafb3f5c-ccba-3ea1-866c-1c67ab57ba5c.roa (raw, json) Hash identifier: dFaegROSkJZ1excVK1sz0IuztPsFr9VwuteLDv9O4KA= Subject key identifier: 64:7A:AA:9D:EC:82:4B:77:B7:87:AB:AD:4B:01:F4:77:56:9C:55:F3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EA797AFE18136B3B2958D1600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aafb3f5c-ccba-3ea1-866c-1c67ab57ba5c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 397197 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:af:e1:81:36:b3:b2:95:8d:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=f8bb4d4a-0b55-41d9-9ea1-eff0b2614dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:93:e8:8e:13:82:b2:67:31:af:93:d6:85:d3: 23:d3:71:a0:80:40:4d:fe:b1:7e:54:92:4d:98:29: 19:69:11:8e:a3:ca:b6:b0:40:bb:f4:a1:14:16:aa: 15:0f:39:82:94:47:31:19:2a:db:f0:84:20:47:95: 56:c2:03:71:56:87:46:41:da:8a:c0:69:7e:b8:c2: ba:52:03:13:e9:d3:be:9d:f9:86:19:ee:de:2c:31: b4:9a:96:38:58:f8:2a:65:b4:15:31:5d:42:6c:df: 98:d3:6a:1a:74:9b:77:42:82:13:4e:cb:df:0e:fd: 98:0e:d4:fa:ce:05:67:bf:69:cd:1e:93:97:a0:9c: d4:d2:4f:44:ab:f7:93:3f:f4:c5:28:92:4b:c3:ad: 0a:2c:c7:dc:a4:1b:d6:d9:38:a2:d9:3e:be:6d:c2: 3a:e0:71:3e:e7:86:ec:6f:df:01:d5:2a:63:d4:c3: ed:40:65:9f:e6:5c:36:9c:d9:e4:86:31:a7:70:eb: 04:48:83:2b:79:4c:d7:82:76:6b:b8:34:96:6d:e1: f8:06:fe:49:7a:2d:f9:1f:3f:95:41:1c:82:3c:ff: c1:83:c3:7e:05:ee:e7:7e:6e:96:c4:ec:70:8f:24: b7:ea:0b:fb:b3:79:2e:09:17:f6:1d:83:bb:9d:66: b0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:7A:AA:9D:EC:82:4B:77:B7:87:AB:AD:4B:01:F4:77:56:9C:55:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aafb3f5c-ccba-3ea1-866c-1c67ab57ba5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:8b:56:3b:c3:20:e2:81:75:31:07:6a:75:8e:63:f8:54:c5: 04:3f:0d:05:e2:65:a3:28:20:27:6f:06:3c:77:79:36:aa:9f: 30:9e:5c:61:d5:6c:5a:0b:b0:8c:1a:23:4c:a5:c8:3a:69:44: ff:b9:bb:ee:6d:1c:3e:86:6b:b7:a3:bb:6d:52:df:61:1f:95: 36:f1:6f:ec:eb:89:18:ca:cc:91:cf:84:f1:2e:aa:82:d4:f6: 7a:05:aa:1c:9d:3c:10:8e:44:c4:00:c0:fa:a7:7c:61:79:0a: 39:56:19:2b:ff:52:b9:7e:f8:31:47:06:b5:5e:15:13:ba:f4: b9:86:b1:e4:7a:77:39:8b:ef:8f:c3:e9:0d:72:f6:af:52:1f: 43:e2:d2:9c:76:f5:0d:3d:ad:5f:91:63:60:5c:b1:4d:5d:a6: 00:be:32:45:f2:84:8c:2b:43:83:cb:4b:b9:bb:e9:77:ea:29: 29:57:43:75:2d:a5:34:66:36:8a:c6:84:50:02:aa:ed:d5:a5: 2c:e1:16:eb:29:0b:0a:ec:cf:30:cc:0e:34:49:02:0c:d6:05: 0a:08:cf:94:da:e5:d4:f6:18:80:c4:9f:8b:8e:7e:e1:4e:15: 11:77:07:c9:66:38:40:30:35:a7:dd:6a:5b:5d:17:af:d6:be: 74:69:46:f3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nl6/hgTazspWNFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZjhiYjRkNGEtMGI1NS00MWQ5LTllYTEtZWZmMGIyNjE0ZGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZPojhOCsmcxr5PWhdMj03GggEBN/rF+VJJN mCkZaRGOo8q2sEC79KEUFqoVDzmClEcxGSrb8IQgR5VWwgNxVodGQdqKwGl+uMK6 UgMT6dO+nfmGGe7eLDG0mpY4WPgqZbQVMV1CbN+Y02oadJt3QoITTsvfDv2YDtT6 zgVnv2nNHpOXoJzU0k9Eq/eTP/TFKJJLw60KLMfcpBvW2Tii2T6+bcI64HE+54bs b98B1Spj1MPtQGWf5lw2nNnkhjGncOsESIMreUzXgnZruDSWbeH4Bv5Jei35Hz+V QRyCPP/Bg8N+Be7nfm6WxOxwjyS36gv7s3kuCRf2HYO7nWawvQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGR6qp3sgkt3t4errUsB9HdWnFXzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWFmYjNmNWMtY2NiYS0z ZWExLTg2NmMtMWM2N2FiNTdiYTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBAi1Y7wyDigXUxB2p1jmP4VMUEPw0F4mWjKCAnbwY8d3k2qp8wnlxh 1WxaC7CMGiNMpcg6aUT/ubvubRw+hmu3o7ttUt9hH5U28W/s64kYysyRz4TxLqqC 1PZ6BaocnTwQjkTEAMD6p3xheQo5Vhkr/1K5fvgxRwa1XhUTuvS5hrHkenc5i++P w+kNcvavUh9D4tKcdvUNPa1fkWNgXLFNXaYAvjJF8oSMK0ODy0u5u+l36ikpV0N1 LaU0ZjaKxoRQAqrt1aUs4RbrKQsK7M8wzA40SQIM1gUKCM+U2uXU9hiAxJ+Ljn7h ThURdwfJZjhAMDWn3WpbXRev1r50aUbz -----END CERTIFICATE-----Generated at Wed Aug 19 20:30:27 2026 by rpki-client