$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2d2e533-ffd7-3992-a191-3af357f34b77.roa File: c2d2e533-ffd7-3992-a191-3af357f34b77.roa (raw, json) Hash identifier: INv/j0BLbnK9DNF6As6wl19CXuQeNfeKRLUmfny6OkI= Subject key identifier: 4C:3B:CE:FC:E3:C2:8B:37:89:2A:E2:72:54:99:D3:EF:C5:0C:2A:E3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F6292D34B2DFE0D2C71DB1B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2d2e533-ffd7-3992-a191-3af357f34b77.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396714 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:d3:4b:2d:fe:0d:2c:71:db:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=5ebfb016-a4a8-4ebb-8827-df116a7bbb52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ee:90:60:c1:a0:7b:3a:25:20:c6:12:83:6a: b0:80:52:c5:5c:75:25:8f:42:af:9a:0b:e8:b7:6b: 18:83:35:88:2b:65:9a:e9:c0:d3:fa:e1:26:74:da: 03:a5:b3:23:5e:d7:3c:ba:ad:32:a8:63:f6:99:f2: 85:77:5e:dd:6b:3b:a8:16:c3:8f:20:03:92:06:0d: 7c:cd:0a:6d:ca:60:88:af:90:46:ad:b5:30:13:87: da:8c:e7:25:de:31:9f:13:6c:85:96:35:d6:35:39: 46:41:5e:9e:57:b4:69:f0:bb:9c:5d:53:67:14:f9: 92:d0:bb:11:01:92:a8:cb:04:7a:6d:57:39:a1:b0: 63:8b:59:83:d0:10:a0:86:b8:87:21:21:a3:2f:9c: f6:92:7e:cf:bb:45:98:80:09:2c:8b:9d:7f:2e:f3: 45:46:9a:cc:b6:26:43:87:7c:79:c8:f9:e3:c6:d6: 9c:b9:a1:04:fc:4c:7c:e1:31:06:24:f0:5c:a6:8b: f7:5c:e4:ff:35:9f:88:40:07:f1:20:c4:e4:7e:68: de:eb:65:6a:f5:f2:b2:2a:fb:7c:17:a8:b0:8d:64: ff:ff:45:7d:4f:10:b0:20:08:1e:7d:87:e0:b1:58: 0a:7e:70:25:73:34:23:2b:b2:15:1e:98:12:b6:98: ab:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:3B:CE:FC:E3:C2:8B:37:89:2A:E2:72:54:99:D3:EF:C5:0C:2A:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2d2e533-ffd7-3992-a191-3af357f34b77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:96:80:d0:90:ee:ce:09:c1:e7:ad:59:61:2c:39:c8:15:39: 55:09:42:1f:37:46:9f:34:dc:2a:1c:ce:38:38:44:29:38:91: c1:ae:b9:93:42:c4:5b:de:30:ed:f6:a7:1c:8b:e0:17:3b:1f: bf:d1:ce:9f:a6:cc:b4:e0:f8:7b:76:52:d5:4d:09:8e:af:cf: 8c:b2:97:e1:d7:88:a2:85:a6:2a:cc:b4:87:41:ef:7f:dc:11: 06:54:66:8c:32:e5:f1:86:5e:fa:48:5a:4c:f9:1b:7b:a0:4e: 3d:fe:ce:a7:52:fa:13:d7:ab:a6:72:e0:5d:1e:6f:27:a1:ad: 5e:10:7b:90:66:71:f2:a6:91:e4:c8:0b:26:f7:0d:52:f6:21: 82:d8:54:bd:20:99:ed:1e:0a:3e:34:61:46:ad:4f:29:2e:92: 4b:23:76:5d:f3:98:67:93:37:70:25:8f:b8:bc:d0:02:59:4b: 70:16:a6:c1:50:74:3a:6c:c4:10:30:b6:d4:66:5e:fc:18:03: 17:30:01:e4:eb:af:5a:5d:8e:8f:ba:39:1e:5a:65:65:55:d6: c5:db:83:99:7b:17:c5:17:fa:07:e9:87:24:02:6d:5f:18:c7: 1d:09:94:d4:3a:5e:54:d8:58:95:02:cc:16:2c:38:37:74:d4: 15:2a:d6:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iktNLLf4NLHHbG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NWViZmIwMTYtYTRhOC00ZWJiLTg4MjctZGYxMTZhN2JiYjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+6QYMGgezolIMYSg2qwgFLFXHUlj0Kvmgvo t2sYgzWIK2Wa6cDT+uEmdNoDpbMjXtc8uq0yqGP2mfKFd17dazuoFsOPIAOSBg18 zQptymCIr5BGrbUwE4fajOcl3jGfE2yFljXWNTlGQV6eV7Rp8LucXVNnFPmS0LsR AZKoywR6bVc5obBji1mD0BCghriHISGjL5z2kn7Pu0WYgAksi51/LvNFRprMtiZD h3x5yPnjxtacuaEE/Ex84TEGJPBcpov3XOT/NZ+IQAfxIMTkfmje62Vq9fKyKvt8 F6iwjWT//0V9TxCwIAgefYfgsVgKfnAlczQjK7IVHpgStpiraQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEw7zvzjwos3iSriclSZ0+/FDCrjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzJkMmU1MzMtZmZkNy0z OTkyLWExOTEtM2FmMzU3ZjM0Yjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKWgNCQ7s4JweetWWEsOcgVOVUJQh83Rp803Coczjg4RCk4kcGuuZNC xFveMO32pxyL4Bc7H7/Rzp+mzLTg+Ht2UtVNCY6vz4yyl+HXiKKFpirMtIdB73/c EQZUZowy5fGGXvpIWkz5G3ugTj3+zqdS+hPXq6Zy4F0ebyehrV4Qe5BmcfKmkeTI Cyb3DVL2IYLYVL0gme0eCj40YUatTykukksjdl3zmGeTN3Alj7i80AJZS3AWpsFQ dDpsxBAwttRmXvwYAxcwAeTrr1pdjo+6OR5aZWVV1sXbg5l7F8UX+gfphyQCbV8Y xx0JlNQ6XlTYWJUCzBYsODd01BUq1ig= -----END CERTIFICATE-----Generated at Thu Oct 8 14:16:13 2026 by rpki-client