$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b841b145-f20a-3288-b0d8-a6f16857090c.roa File: b841b145-f20a-3288-b0d8-a6f16857090c.roa (raw, json) Hash identifier: CZMDrszWDCm3+CCclmHcOi0cKuIy4Cl2mQV1dQ1Rt5M= Subject key identifier: DB:EE:94:C6:54:A8:33:68:2F:C4:60:09:0D:B3:41:22:A6:F5:DF:6C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E3FC47CB50FA60B9C5BB19500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b841b145-f20a-3288-b0d8-a6f16857090c.roa Signing time: Sun 21 Jun 2026 21:00:12 +0000 ROA not before: Sun 21 Jun 2026 21:00:12 +0000 ROA not after: Sat 19 Sep 2026 21:00:12 +0000 asID: 396549 IP address blocks: 192.42.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3f:c4:7c:b5:0f:a6:0b:9c:5b:b1:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 21 21:00:12 2026 GMT Not After : Sep 19 21:00:12 2026 GMT Subject: CN=bdad7a10-1297-40a2-bbc8-481b4cfc8db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:13:0d:87:01:e1:53:6e:84:d5:f6:49:28:f6: 4f:70:3e:17:34:f3:4c:1d:6c:3f:f5:b7:a3:53:f6: 37:61:58:1a:15:13:12:b9:02:d7:a1:18:a2:d2:27: d6:85:9c:f5:4e:65:27:dd:37:30:1d:6e:9a:ce:5d: 59:49:2d:f7:25:ad:e1:6c:db:cb:42:dc:e5:34:a8: 71:91:1d:d4:56:c2:7e:1b:7b:53:84:f0:02:af:dc: d8:92:26:6d:cf:e6:cb:cc:30:c6:47:21:bb:26:d2: 79:39:42:51:41:b5:fc:1e:65:6e:95:df:3b:55:9b: cc:14:64:90:7f:ad:d6:20:71:87:e9:33:29:38:bd: 2a:c9:a0:3a:c6:57:fe:b4:53:64:c4:1e:80:28:30: 6a:93:c7:99:b7:40:ec:2a:67:a1:9b:34:b5:b1:48: cc:33:8c:e9:d7:c1:6e:0a:a8:34:41:d8:48:13:3b: c4:d5:03:19:39:6b:25:c9:2a:0b:8b:53:53:2b:a0: e6:db:8a:53:0c:d7:08:26:d7:09:0a:06:ad:1c:04: a1:52:d2:6b:d2:da:ff:74:c8:73:f0:fd:16:c5:b3: 65:92:4b:b6:51:77:ee:c2:81:09:ac:2e:a8:d4:3e: 65:09:73:de:e6:d0:87:0f:d1:d7:e5:75:02:13:db: d0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:EE:94:C6:54:A8:33:68:2F:C4:60:09:0D:B3:41:22:A6:F5:DF:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b841b145-f20a-3288-b0d8-a6f16857090c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:cc:82:48:2c:6a:a4:6b:f8:a5:50:c4:a3:50:93:d1:88:e8: 2b:0e:31:f1:8e:02:ae:90:28:be:85:33:c3:7b:c9:bf:ca:4a: 56:35:b2:b1:8d:73:f6:fd:dc:84:98:fd:6a:34:d2:48:51:2d: 12:0c:97:f8:5b:73:a4:01:c2:5f:54:f3:b7:98:70:cd:bd:c5: f1:db:7e:a5:81:f7:61:36:96:ce:df:db:15:f5:ca:0b:6a:a3: 2a:e6:b8:c2:da:1d:16:20:cd:e9:b7:49:ec:03:8b:ce:b6:55: 70:8e:f5:2b:93:77:ef:8d:d7:25:4e:ff:54:41:69:b9:d6:c7: f3:10:1c:26:57:f7:31:de:61:81:39:c9:9a:ed:5f:de:66:a6: dc:82:10:c7:bb:58:af:eb:c4:ba:f4:e6:f1:fe:f8:13:0c:2c: fc:49:ef:88:5d:94:76:94:6a:d0:26:43:0b:c1:7c:f0:e8:ea: 37:91:47:ed:7c:51:0b:06:60:e2:0b:60:e4:4c:88:22:9a:c6: 11:76:47:de:0d:1e:97:52:24:6d:c1:ef:3b:76:49:4f:15:21: f3:9f:c0:a5:99:bf:36:1b:96:c1:56:be:7f:ad:73:e3:7c:7b: b8:93:57:80:03:3a:ad:43:78:a9:c4:b2:2d:7d:49:51:9e:fd: d7:ef:fc:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4/xHy1D6YLnFuxlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDYyMTIxMDAxMloXDTI2MDkxOTIxMDAxMlowLzEtMCsGA1UEAxMk YmRhZDdhMTAtMTI5Ny00MGEyLWJiYzgtNDgxYjRjZmM4ZGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRMNhwHhU26E1fZJKPZPcD4XNPNMHWw/9bej U/Y3YVgaFRMSuQLXoRii0ifWhZz1TmUn3TcwHW6azl1ZSS33Ja3hbNvLQtzlNKhx kR3UVsJ+G3tThPACr9zYkiZtz+bLzDDGRyG7JtJ5OUJRQbX8HmVuld87VZvMFGSQ f63WIHGH6TMpOL0qyaA6xlf+tFNkxB6AKDBqk8eZt0DsKmehmzS1sUjMM4zp18Fu Cqg0QdhIEzvE1QMZOWslySoLi1NTK6Dm24pTDNcIJtcJCgatHAShUtJr0tr/dMhz 8P0WxbNlkku2UXfuwoEJrC6o1D5lCXPe5tCHD9HX5XUCE9vQ9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvulMZUqDNoL8RgCQ2zQSKm9d9sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjg0MWIxNDUtZjIwYS0z Mjg4LWIwZDgtYTZmMTY4NTcwOTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKrMgkgsaqRr+KVQxKNQk9GI6CsOMfGOAq6QKL6FM8N7yb/KSlY1srGN c/b93ISY/Wo00khRLRIMl/hbc6QBwl9U87eYcM29xfHbfqWB92E2ls7f2xX1ygtq oyrmuMLaHRYgzem3SewDi862VXCO9SuTd++N1yVO/1RBabnWx/MQHCZX9zHeYYE5 yZrtX95mptyCEMe7WK/rxLr05vH++BMMLPxJ74hdlHaUatAmQwvBfPDo6jeRR+18 UQsGYOILYORMiCKaxhF2R94NHpdSJG3B7zt2SU8VIfOfwKWZvzYblsFWvn+tc+N8 e7iTV4ADOq1DeKnEsi19SVGe/dfv/EE= -----END CERTIFICATE-----Generated at Sun Jun 28 19:42:57 2026 by rpki-client