$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1f521d7-5f53-355c-bdff-434a28221197.roa File: c1f521d7-5f53-355c-bdff-434a28221197.roa (raw, json) Hash identifier: UXdYpR3HNoJ7Ft0bQaXrtBVQx1i59PnVocT0O0VT1Gc= Subject key identifier: 7B:B9:2C:43:5F:21:21:15:3A:8A:A2:39:D3:F8:0C:7E:1A:A1:08:B1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F629319EFA8ECF5CC7C254440 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1f521d7-5f53-355c-bdff-434a28221197.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396620 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:19:ef:a8:ec:f5:cc:7c:25:44:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=afb380fb-de6e-4917-9ff7-6b9152b03025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:dd:35:04:3c:98:11:5a:28:35:2d:3c:00:65: 36:29:31:74:52:1d:0e:1f:12:59:67:7e:c3:d7:90: 86:b1:66:ef:6a:43:1d:45:9a:42:d6:c9:51:bb:bc: 76:31:0c:ad:7a:dc:19:69:9f:fa:7e:6e:26:9f:5d: 24:8b:53:4d:5a:e1:f4:c6:e6:12:d1:12:b3:b0:19: f4:15:19:60:3a:36:1b:42:bc:44:78:39:98:36:9e: 12:1f:ab:5b:8b:0b:7e:ed:5a:a3:c5:06:2d:3e:1a: 15:ce:52:c7:77:0b:3e:a5:a4:1e:d8:1f:a5:4e:58: 4d:c0:f7:fe:d5:03:b8:bb:e2:33:b0:e7:bc:c3:2f: 44:31:25:fe:36:5a:ce:fb:d5:6c:0c:85:0c:3f:30: 75:58:a9:5f:bc:3b:56:b3:21:f4:91:a5:a9:38:7d: 4b:bb:bd:2f:e8:e1:68:bd:30:0b:fe:44:90:b4:24: da:37:8a:26:15:77:9c:24:23:cc:cc:29:7c:09:02: 45:f6:11:31:02:77:b2:f7:12:e9:2e:dd:47:50:59: be:9a:6a:aa:84:ec:2b:de:9c:e5:49:1f:61:82:da: b7:f0:26:ce:bd:44:3d:63:00:c1:d0:ec:31:e7:37: a5:b1:84:61:cb:2b:fc:f1:74:35:9e:2a:7b:74:7e: 39:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B9:2C:43:5F:21:21:15:3A:8A:A2:39:D3:F8:0C:7E:1A:A1:08:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1f521d7-5f53-355c-bdff-434a28221197.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:71:0b:ea:92:e4:52:8e:a1:32:e3:5b:18:a4:6d:54:ae:f6: 8f:70:af:29:9b:6d:54:26:88:58:29:24:b3:15:c1:b0:7a:3c: 6d:ec:c1:32:ce:6b:21:30:c5:91:82:bd:70:df:f2:dd:f8:36: 4f:ae:d1:7d:30:aa:d2:50:17:d8:27:53:54:d4:e7:f7:81:b7: 01:96:db:f2:a9:b0:5a:ab:a7:d4:25:0a:ac:06:09:81:fa:0a: 1a:99:87:f2:aa:82:e5:ad:6d:10:90:32:53:d2:23:8e:7b:53: ce:4b:64:fb:b2:63:08:31:cf:29:73:c9:c0:e7:8f:0e:af:c9: f0:8b:1c:19:9b:d1:a5:e9:2e:ee:4e:ba:10:0d:b4:07:b2:47: d5:dc:6b:40:bc:ab:94:a0:12:01:14:5e:b2:dd:d7:ca:55:44: fd:40:97:4f:c9:b7:b5:f3:2f:b7:40:dd:52:95:dd:25:bb:cf: 50:c0:1e:18:dc:96:96:8f:2d:d4:9f:87:33:d4:a5:0f:e8:17: 21:a4:9f:ce:95:ce:09:ac:1a:bb:4a:e6:1b:dc:ba:46:43:a7: 7b:bd:87:8a:91:b2:70:22:5b:05:18:82:a2:ea:e4:2b:d9:f5: f3:ba:a7:6f:6c:c3:ea:16:8c:d0:5e:fc:6b:d0:80:f9:03:fb: 47:82:f7:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikxnvqOz1zHwlREAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk YWZiMzgwZmItZGU2ZS00OTE3LTlmZjctNmI5MTUyYjAzMDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd01BDyYEVooNS08AGU2KTF0Uh0OHxJZZ37D 15CGsWbvakMdRZpC1slRu7x2MQytetwZaZ/6fm4mn10ki1NNWuH0xuYS0RKzsBn0 FRlgOjYbQrxEeDmYNp4SH6tbiwt+7VqjxQYtPhoVzlLHdws+paQe2B+lTlhNwPf+ 1QO4u+IzsOe8wy9EMSX+NlrO+9VsDIUMPzB1WKlfvDtWsyH0kaWpOH1Lu70v6OFo vTAL/kSQtCTaN4omFXecJCPMzCl8CQJF9hExAney9xLpLt1HUFm+mmqqhOwr3pzl SR9hgtq38CbOvUQ9YwDB0Owx5zelsYRhyyv88XQ1nip7dH45CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHu5LENfISEVOoqiOdP4DH4aoQixMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzFmNTIxZDctNWY1My0z NTVjLWJkZmYtNDM0YTI4MjIxMTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNxC+qS5FKOoTLjWxikbVSu9o9wrymbbVQmiFgpJLMVwbB6PG3swTLO ayEwxZGCvXDf8t34Nk+u0X0wqtJQF9gnU1TU5/eBtwGW2/KpsFqrp9QlCqwGCYH6 ChqZh/KqguWtbRCQMlPSI457U85LZPuyYwgxzylzycDnjw6vyfCLHBmb0aXpLu5O uhANtAeyR9Xca0C8q5SgEgEUXrLd18pVRP1Al0/Jt7XzL7dA3VKV3SW7z1DAHhjc lpaPLdSfhzPUpQ/oFyGkn86VzgmsGrtK5hvcukZDp3u9h4qRsnAiWwUYgqLq5CvZ 9fO6p29sw+oWjNBe/GvQgPkD+0eC91w= -----END CERTIFICATE-----Generated at Thu Oct 8 07:19:10 2026 by rpki-client