$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cac08b00-ba94-304f-8b53-a587441ecb7b.roa File: cac08b00-ba94-304f-8b53-a587441ecb7b.roa (raw, json) Hash identifier: njgvUoggmuNuocznXzBAEprz0/fmkwm+9I+pntN7LBw= Subject key identifier: 76:B8:2A:98:73:39:31:5F:B6:65:88:05:72:D5:9E:64:9F:3C:97:DE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F6292D47E00C6B5289D902A40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cac08b00-ba94-304f-8b53-a587441ecb7b.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396624 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:d4:7e:00:c6:b5:28:9d:90:2a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=aaffcdf5-33f9-4c24-8e28-ca10ff8147c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ea:8e:77:1e:48:9c:af:b3:e1:c3:2e:ee:c6: 12:c5:ba:9f:11:68:5f:4a:71:53:5a:37:a0:21:ec: 80:ec:79:b4:10:cc:16:45:59:b6:02:cc:85:09:91: bc:9d:1c:fb:1a:fd:94:d8:7d:9d:54:a7:57:b8:9a: 04:c7:72:45:c5:06:e8:e6:88:85:64:51:a5:4a:3e: bc:58:dc:f3:f2:7c:c6:90:f0:f5:17:0c:64:59:16: 13:a7:f1:7a:8c:b5:82:0e:6a:b9:52:90:12:f3:cb: 66:1f:08:7c:cb:3e:62:59:88:7d:2b:4f:0a:f0:f1: d8:8b:06:2e:ac:9d:24:a2:6e:61:b7:3c:be:93:b1: 44:d3:a7:31:bc:96:81:9e:47:e5:8b:35:83:72:f9: d8:c0:74:9b:25:a5:08:ed:9f:34:65:78:6d:bb:a1: 49:53:41:d6:24:76:85:a4:83:be:96:05:77:03:4c: b4:29:dd:a6:b6:30:c6:e8:2b:91:50:de:e3:75:99: cb:a5:70:81:27:9a:46:90:00:99:36:c8:da:db:9c: 8e:6a:ff:fa:84:1e:16:49:22:59:3c:5f:6d:f8:55: 18:f7:68:c3:9b:4d:91:8b:3d:2a:88:52:d0:5a:ce: 49:1c:df:b2:3a:d0:1b:4e:52:cd:64:fe:11:f0:8d: f8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B8:2A:98:73:39:31:5F:B6:65:88:05:72:D5:9E:64:9F:3C:97:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cac08b00-ba94-304f-8b53-a587441ecb7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:c5:c2:29:73:d1:cc:73:4f:77:64:35:c4:bc:fe:28:25:72: 86:d5:12:61:b4:04:b2:07:ba:b5:0d:cd:96:35:65:71:82:3f: c6:d5:d9:39:bf:0a:56:56:ff:1d:21:ce:ea:91:3b:85:56:9b: 6b:20:e9:59:45:dd:96:8d:49:b2:73:12:26:49:8d:79:98:ce: df:1d:35:e3:d1:f0:bd:60:ad:94:cb:cf:a6:01:22:99:a9:44: b9:b1:8a:e8:08:7f:11:6f:af:c4:f9:32:31:09:3d:95:27:91: bb:ff:b2:ed:d5:0c:a5:32:27:57:da:12:e9:c8:6b:b8:b8:e9: 27:e2:a6:e8:c7:e5:99:99:09:ad:b3:c6:72:c2:83:0e:52:63: d3:77:5a:04:e0:32:b7:b3:40:3a:3d:b4:21:2e:a5:be:56:9b: a7:65:1b:a2:59:2a:17:e2:05:24:55:74:3d:74:06:f1:b7:06: 14:35:a9:32:53:91:1c:1a:7d:c9:29:e5:64:38:f6:87:9f:b4: eb:83:fd:1a:57:16:eb:0e:c4:13:ba:86:8c:75:46:ff:24:5e: dc:4d:9e:e5:13:6a:a4:b9:73:59:68:8b:7a:cf:e5:ce:20:1f: b6:4c:86:77:d2:78:00:7d:71:20:99:b3:9d:91:3f:64:d2:1c: dc:6d:db:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iktR+AMa1KJ2QKkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk YWFmZmNkZjUtMzNmOS00YzI0LThlMjgtY2ExMGZmODE0N2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuqOdx5InK+z4cMu7sYSxbqfEWhfSnFTWjeg IeyA7Hm0EMwWRVm2AsyFCZG8nRz7Gv2U2H2dVKdXuJoEx3JFxQbo5oiFZFGlSj68 WNzz8nzGkPD1FwxkWRYTp/F6jLWCDmq5UpAS88tmHwh8yz5iWYh9K08K8PHYiwYu rJ0kom5htzy+k7FE06cxvJaBnkflizWDcvnYwHSbJaUI7Z80ZXhtu6FJU0HWJHaF pIO+lgV3A0y0Kd2mtjDG6CuRUN7jdZnLpXCBJ5pGkACZNsja25yOav/6hB4WSSJZ PF9t+FUY92jDm02Riz0qiFLQWs5JHN+yOtAbTlLNZP4R8I34rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHa4KphzOTFftmWIBXLVnmSfPJfeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2FjMDhiMDAtYmE5NC0z MDRmLThiNTMtYTU4NzQ0MWVjYjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3Fwilz0cxzT3dkNcS8/iglcobVEmG0BLIHurUNzZY1ZXGCP8bV2Tm/ ClZW/x0hzuqRO4VWm2sg6VlF3ZaNSbJzEiZJjXmYzt8dNePR8L1grZTLz6YBIpmp RLmxiugIfxFvr8T5MjEJPZUnkbv/su3VDKUyJ1faEunIa7i46SfipujH5ZmZCa2z xnLCgw5SY9N3WgTgMrezQDo9tCEupb5Wm6dlG6JZKhfiBSRVdD10BvG3BhQ1qTJT kRwafckp5WQ49oeftOuD/RpXFusOxBO6hox1Rv8kXtxNnuUTaqS5c1loi3rP5c4g H7ZMhnfSeAB9cSCZs52RP2TSHNxt288= -----END CERTIFICATE-----Generated at Thu Oct 8 05:22:26 2026 by rpki-client