$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8c87c4b-13b2-330d-b898-07edefe1f587.roa File: b8c87c4b-13b2-330d-b898-07edefe1f587.roa (raw, json) Hash identifier: tk1UjtT4yfpoiNVlfFb6ACSnoxSMZ0NQSahaU6csnow= Subject key identifier: 86:9B:2D:95:22:24:13:8E:03:07:AD:83:37:3D:2B:C4:CA:5A:E3:04 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F62930FBC637EC4F57B3EA180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8c87c4b-13b2-330d-b898-07edefe1f587.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 40717 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:0f:bc:63:7e:c4:f5:7b:3e:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=130c65fb-7a27-4f20-b4a8-885d08337f5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b4:35:32:55:18:de:e2:7d:c2:0f:55:68:86: 70:98:e3:3d:c2:38:96:5a:2c:cd:d3:42:65:35:ed: 2e:b4:8c:f7:89:b1:e7:a7:69:e8:17:2d:c5:33:66: 08:42:a3:0d:2f:7d:2f:91:aa:ee:03:ea:c9:c2:47: d8:f3:60:41:0b:fb:05:f0:0a:e0:98:78:40:c8:c9: 1a:2b:eb:ee:01:3c:a4:fc:e8:59:21:89:0a:9a:24: 22:29:6d:95:55:0b:ea:ba:2a:61:f1:de:f5:aa:ec: f4:2b:c9:3a:3c:3c:ff:a3:d9:b9:76:28:25:48:b3: e0:f9:b7:88:50:15:da:5f:a1:c2:fc:0e:4a:10:4b: 19:86:36:70:c2:fe:60:58:92:32:68:ab:32:fc:ff: 24:0a:b5:6a:0f:3f:af:be:42:39:1d:a5:51:1c:1c: 6c:6d:b1:de:43:4e:0f:e7:08:0a:fa:84:22:0b:db: df:0e:15:24:02:4d:00:49:17:b7:71:1e:7b:ed:93: a0:51:c6:96:73:45:a3:6e:3c:f6:fb:61:df:3c:d8: b0:07:01:ad:8e:a4:93:74:8d:0d:7b:89:ce:25:db: 59:c0:48:c5:1b:d1:3e:a9:1e:07:c5:71:66:1c:84: 21:af:0c:4f:a5:c7:69:be:74:9d:8e:04:52:65:1e: 12:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:9B:2D:95:22:24:13:8E:03:07:AD:83:37:3D:2B:C4:CA:5A:E3:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8c87c4b-13b2-330d-b898-07edefe1f587.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:74:09:f4:05:7a:66:8d:e3:6d:1f:ee:f5:4a:a4:bc:ab:75: 84:b6:e2:08:7f:df:4a:26:57:c3:ed:51:e7:09:04:61:c3:db: 62:12:9a:28:6b:f3:5d:91:e8:98:06:24:fc:d3:60:2e:1e:4b: d8:e6:49:f3:76:82:be:a9:df:81:5f:91:91:76:64:d2:f0:a4: a7:14:df:d5:9d:f5:74:3d:3d:53:ee:98:94:e3:54:cc:be:28: b0:90:7f:66:47:56:cf:83:58:65:d2:a7:5e:8c:49:72:60:a8: 38:b6:69:3b:9a:68:7a:6d:83:87:37:09:38:46:84:5c:ba:7a: cc:82:ac:65:c7:89:aa:08:f3:32:ef:1f:03:59:33:f6:1e:60: c7:ab:22:98:b4:09:de:04:82:e0:e7:2a:e2:e1:c6:3f:a5:8d: 26:a5:55:4f:f3:34:ec:46:26:36:9c:ee:34:75:4c:ad:d5:6b: f3:dc:f0:48:5c:35:c6:d2:ad:10:cd:0b:5b:56:64:45:a4:5d: 29:bc:f3:48:7c:af:ad:ef:98:e7:cc:d9:32:38:4a:89:3a:9b: e3:4b:90:40:6c:39:ed:6a:86:06:da:24:2f:93:d1:aa:20:38: 8c:43:ef:05:d6:75:99:dc:80:c0:b5:39:d6:9c:f4:c6:81:22: 40:6e:1f:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikw+8Y37E9Xs+oYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MTMwYzY1ZmItN2EyNy00ZjIwLWI0YTgtODg1ZDA4MzM3ZjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybQ1MlUY3uJ9wg9VaIZwmOM9wjiWWizN00Jl Ne0utIz3ibHnp2noFy3FM2YIQqMNL30vkaruA+rJwkfY82BBC/sF8ArgmHhAyMka K+vuATyk/OhZIYkKmiQiKW2VVQvquiph8d71quz0K8k6PDz/o9m5diglSLPg+beI UBXaX6HC/A5KEEsZhjZwwv5gWJIyaKsy/P8kCrVqDz+vvkI5HaVRHBxsbbHeQ04P 5wgK+oQiC9vfDhUkAk0ASRe3cR577ZOgUcaWc0Wjbjz2+2HfPNiwBwGtjqSTdI0N e4nOJdtZwEjFG9E+qR4HxXFmHIQhrwxPpcdpvnSdjgRSZR4SjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIabLZUiJBOOAwetgzc9K8TKWuMEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjhjODdjNGItMTNiMi0z MzBkLWI4OTgtMDdlZGVmZTFmNTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJ0CfQFemaN420f7vVKpLyrdYS24gh/30omV8PtUecJBGHD22ISmihr 812R6JgGJPzTYC4eS9jmSfN2gr6p34FfkZF2ZNLwpKcU39Wd9XQ9PVPumJTjVMy+ KLCQf2ZHVs+DWGXSp16MSXJgqDi2aTuaaHptg4c3CThGhFy6esyCrGXHiaoI8zLv HwNZM/YeYMerIpi0Cd4EguDnKuLhxj+ljSalVU/zNOxGJjac7jR1TK3Va/Pc8Ehc NcbSrRDNC1tWZEWkXSm880h8r63vmOfM2TI4Sok6m+NLkEBsOe1qhgbaJC+T0aog OIxD7wXWdZncgMC1Odac9MaBIkBuH50= -----END CERTIFICATE-----Generated at Thu Oct 8 01:03:35 2026 by rpki-client