$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae19a127-62a2-38bf-9f41-30bcd4da2037.roa File: ae19a127-62a2-38bf-9f41-30bcd4da2037.roa (raw, json) Hash identifier: PRzFRXB+ZDXyPVRFM9SJGWGk3Ul+oMchJFlYwtN0uL4= Subject key identifier: CD:E1:B4:70:78:23:D5:91:D4:D0:D7:F1:84:98:17:F9:C9:BA:25:9A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F6292D203363468BBB24A8C00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae19a127-62a2-38bf-9f41-30bcd4da2037.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396586 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:d2:03:36:34:68:bb:b2:4a:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=4fee7d0d-dd3d-473d-91b0-3ae45461f4f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a7:e8:98:d7:a3:ed:f1:31:9f:4b:af:9c:c7: 1c:a8:0f:7a:cd:ca:42:e8:bb:7c:fe:e2:84:bb:54: 8a:9d:40:5d:5f:b5:f6:a4:f6:f9:8d:ad:d1:84:2e: b2:33:eb:d6:d0:8b:0a:50:df:2a:09:20:db:d0:f7: 95:31:2a:36:0f:8d:fd:bd:f8:7f:da:23:f3:dc:55: fa:03:62:ba:c3:fe:be:b4:83:79:6f:ff:6c:ad:f2: 00:21:38:88:b7:89:09:4f:0f:77:a0:32:ac:97:19: 44:83:41:0b:a3:8b:07:f6:cb:ba:df:20:25:65:27: 33:7a:7c:9e:89:28:c0:bc:84:19:2d:dc:ee:90:92: 3a:ec:68:7b:6f:43:2f:82:2a:e8:6e:97:59:31:83: bf:a7:c5:dd:48:fb:d5:c8:3d:b4:48:57:fa:d9:f3: 60:a7:62:30:4a:9c:e6:fb:46:a6:a8:1d:fb:df:7a: 52:0f:dc:32:02:40:c7:4b:2c:89:82:15:89:c3:47: 43:f4:ce:ff:56:45:c6:08:76:4b:f8:14:59:6e:91: ea:db:14:a9:77:89:9a:79:8c:0c:7e:6c:1c:1a:4e: 4f:36:95:1d:c9:87:89:9e:cf:e5:91:ab:c5:1b:84: 4b:76:e9:53:84:62:0d:fc:3e:20:50:bd:00:80:aa: 68:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E1:B4:70:78:23:D5:91:D4:D0:D7:F1:84:98:17:F9:C9:BA:25:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae19a127-62a2-38bf-9f41-30bcd4da2037.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:be:58:92:41:a3:4f:82:e8:1b:1a:85:ff:34:d7:ea:8d:12: bf:c9:0d:e6:01:69:75:66:c5:4c:6b:56:38:d0:57:bf:12:d4: 2a:84:87:aa:42:10:99:a9:61:b5:87:93:5c:4f:b4:9d:d0:c2: b2:ec:ae:de:10:f1:65:2d:1e:cd:63:32:23:28:38:d6:68:00: d0:a4:d9:9c:3b:3c:ba:a3:be:bc:52:cc:9a:9b:33:40:c8:02: 9c:12:d5:45:c3:16:8c:f2:03:8d:3c:e2:40:2a:9e:ec:d0:b4: 3a:1c:a8:ac:24:8c:a3:bd:9f:bd:e3:bb:5c:81:a2:cf:79:41: 94:9c:db:58:d5:34:e0:9c:33:87:e7:e5:0a:04:d1:ec:d3:05: 51:0d:8b:eb:13:ed:14:8b:2c:18:a9:97:ae:6a:ae:bc:64:4f: b2:31:7c:6a:e0:30:73:2d:c7:7b:ec:9b:c6:bb:5a:69:04:24: 7d:8f:c3:6a:23:b8:49:40:0c:a7:97:01:a2:30:5a:ef:7b:a4: 7a:ae:4f:68:71:c2:5c:df:45:14:94:c2:f3:88:aa:c6:4a:06: e7:69:93:d5:ab:c2:29:5e:6b:b8:5a:df:e6:c4:10:f2:4a:e1: 59:97:8c:e6:d9:7c:fb:b1:1d:92:9c:ce:fa:88:a5:f8:58:e5: 86:36:b7:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iktIDNjRou7JKjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NGZlZTdkMGQtZGQzZC00NzNkLTkxYjAtM2FlNDU0NjFmNGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6fomNej7fExn0uvnMccqA96zcpC6Lt8/uKE u1SKnUBdX7X2pPb5ja3RhC6yM+vW0IsKUN8qCSDb0PeVMSo2D439vfh/2iPz3FX6 A2K6w/6+tIN5b/9srfIAITiIt4kJTw93oDKslxlEg0ELo4sH9su63yAlZSczenye iSjAvIQZLdzukJI67Gh7b0MvgirobpdZMYO/p8XdSPvVyD20SFf62fNgp2IwSpzm +0amqB3733pSD9wyAkDHSyyJghWJw0dD9M7/VkXGCHZL+BRZbpHq2xSpd4maeYwM fmwcGk5PNpUdyYeJns/lkavFG4RLdulThGIN/D4gUL0AgKpoYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3htHB4I9WR1NDX8YSYF/nJuiWaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWUxOWExMjctNjJhMi0z OGJmLTlmNDEtMzBiY2Q0ZGEyMDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIq+WJJBo0+C6Bsahf801+qNEr/JDeYBaXVmxUxrVjjQV78S1CqEh6pC EJmpYbWHk1xPtJ3QwrLsrt4Q8WUtHs1jMiMoONZoANCk2Zw7PLqjvrxSzJqbM0DI ApwS1UXDFozyA4084kAqnuzQtDocqKwkjKO9n73ju1yBos95QZSc21jVNOCcM4fn 5QoE0ezTBVENi+sT7RSLLBipl65qrrxkT7IxfGrgMHMtx3vsm8a7WmkEJH2Pw2oj uElADKeXAaIwWu97pHquT2hxwlzfRRSUwvOIqsZKBudpk9Wrwilea7ha3+bEEPJK 4VmXjObZfPuxHZKczvqIpfhY5YY2tx8= -----END CERTIFICATE-----Generated at Tue Oct 6 18:08:12 2026 by rpki-client