$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b21f7a1d-a9fc-3c24-b7f0-c1e35af19389.roa File: b21f7a1d-a9fc-3c24-b7f0-c1e35af19389.roa (raw, json) Hash identifier: gKiSR2o1rTjynvFeazWG7o8kUMrjXJYt08PTqppCnvs= Subject key identifier: 9A:EA:5D:8D:17:23:C9:6A:35:0A:83:81:E2:22:CF:37:4E:36:67:17 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F6C5816FAA3DEACF0DA4F9E00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b21f7a1d-a9fc-3c24-b7f0-c1e35af19389.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 36629 IP address blocks: 192.42.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:16:fa:a3:de:ac:f0:da:4f:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=aa0743e7-d9e5-4478-944b-5e2d5238c279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c3:90:17:e5:0d:40:24:eb:05:31:99:f8:b0: e6:7e:c6:bc:64:25:c4:5c:31:5a:58:cb:03:cd:24: 23:dc:3f:38:9e:08:49:fe:cc:a7:21:c1:87:42:7c: 3a:93:4d:cc:05:8e:12:51:2b:40:4d:53:34:09:51: da:2e:97:c2:bc:4b:cf:17:14:10:38:8b:43:3e:b9: 54:87:18:65:27:13:63:ce:14:15:3e:81:ca:05:40: f5:11:f2:1c:1c:3d:19:97:fa:b6:08:4b:fa:80:e0: 82:29:46:a3:e5:01:5b:e9:69:1e:36:22:e9:a1:65: aa:e2:03:5e:cf:04:e0:f3:1f:23:b3:15:9e:76:c2: 6c:3b:f1:22:c7:29:9a:48:ed:26:c0:58:28:de:2e: 41:2d:6c:23:89:aa:b6:89:5a:29:d6:a8:43:f4:a5: 3e:a3:b3:11:f6:47:52:c8:9e:33:a3:8b:07:90:04: c7:45:24:a3:fd:4d:f2:ec:dd:14:57:90:43:90:0a: 76:d1:25:ba:ac:9a:28:88:58:1d:ae:10:a9:31:6e: 39:83:13:dd:e0:5e:f3:24:44:df:d5:e9:c6:79:8c: 7d:1c:a7:f5:8a:56:ae:76:27:00:37:78:0f:db:25: 46:c6:1e:b8:ac:d1:a0:dd:53:e5:e8:33:fb:c2:0d: c6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:EA:5D:8D:17:23:C9:6A:35:0A:83:81:E2:22:CF:37:4E:36:67:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b21f7a1d-a9fc-3c24-b7f0-c1e35af19389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:38:0c:ae:56:8e:07:42:22:0e:8d:36:7c:bf:86:de:29:6c: 88:4c:c0:37:9a:03:5f:46:65:2b:33:1d:b3:0a:98:e4:d8:63: 49:2b:f2:ca:12:18:b0:07:0a:ab:7f:4d:83:c9:e2:bb:80:af: a2:d1:5b:21:2b:65:fa:b3:93:09:2a:26:31:99:78:19:b8:78: 86:4c:60:e3:62:48:83:83:c2:80:b2:aa:83:24:53:d7:99:75: cf:5e:0a:15:4f:9f:2a:6d:98:3c:56:d2:9c:33:72:6d:af:bc: ac:65:6c:a8:95:ce:41:c5:c0:c0:07:5b:2f:09:e0:a4:b6:d3: fa:7f:49:ac:4e:93:9f:d3:ac:ce:1b:0c:af:f6:04:85:61:68: f5:8f:26:d4:43:ec:b0:cf:bc:8a:91:ee:22:0d:80:9e:29:92: bf:6d:9f:2c:64:67:89:14:96:e7:ca:96:62:7d:0e:ad:86:c9: 3a:6b:1b:7c:21:90:5d:1b:3a:bf:f3:ba:d2:5a:27:ef:5e:6d: cd:49:41:5b:64:17:fd:e2:0a:04:ad:aa:63:89:55:e6:33:f0: c9:e1:66:70:cd:51:3a:be:df:36:98:52:20:81:7b:bf:09:8b: 11:1d:ea:52:bf:a6:e5:71:7a:cc:8f:5a:ce:4a:db:28:87:4f: 15:9c:d7:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWBb6o96s8NpPngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk YWEwNzQzZTctZDllNS00NDc4LTk0NGItNWUyZDUyMzhjMjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMOQF+UNQCTrBTGZ+LDmfsa8ZCXEXDFaWMsD zSQj3D84nghJ/synIcGHQnw6k03MBY4SUStATVM0CVHaLpfCvEvPFxQQOItDPrlU hxhlJxNjzhQVPoHKBUD1EfIcHD0Zl/q2CEv6gOCCKUaj5QFb6WkeNiLpoWWq4gNe zwTg8x8jsxWedsJsO/EixymaSO0mwFgo3i5BLWwjiaq2iVop1qhD9KU+o7MR9kdS yJ4zo4sHkATHRSSj/U3y7N0UV5BDkAp20SW6rJooiFgdrhCpMW45gxPd4F7zJETf 1enGeYx9HKf1ilaudicAN3gP2yVGxh64rNGg3VPl6DP7wg3GsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrqXY0XI8lqNQqDgeIizzdONmcXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjIxZjdhMWQtYTlmYy0z YzI0LWI3ZjAtYzFlMzVhZjE5Mzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCquMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGA4DK5WjgdCIg6NNny/ht4pbIhMwDeaA19GZSszHbMKmOTYY0kr8soS GLAHCqt/TYPJ4ruAr6LRWyErZfqzkwkqJjGZeBm4eIZMYONiSIODwoCyqoMkU9eZ dc9eChVPnyptmDxW0pwzcm2vvKxlbKiVzkHFwMAHWy8J4KS20/p/SaxOk5/TrM4b DK/2BIVhaPWPJtRD7LDPvIqR7iINgJ4pkr9tnyxkZ4kUlufKlmJ9Dq2GyTprG3wh kF0bOr/zutJaJ+9ebc1JQVtkF/3iCgStqmOJVeYz8MnhZnDNUTq+3zaYUiCBe78J ixEd6lK/puVxesyPWs5K2yiHTxWc18E= -----END CERTIFICATE-----Generated at Thu Oct 8 20:51:03 2026 by rpki-client