$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5e4f356-30d0-3c15-97fa-57c5dfb3f611.roa File: d5e4f356-30d0-3c15-97fa-57c5dfb3f611.roa (raw, json) Hash identifier: PIje8DKqWeJ3mnQjsJh6EqP4cta67ziweRmNXp5bL00= Subject key identifier: E0:72:0D:22:A8:32:A5:22:5A:85:7D:AC:9A:37:38:8F:D4:24:3A:65 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F62931C28E23A47B799D3A480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5e4f356-30d0-3c15-97fa-57c5dfb3f611.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396543 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:1c:28:e2:3a:47:b7:99:d3:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=fff4c0e1-f307-4588-9f07-2062a65da734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f0:2a:66:09:98:8b:df:3e:ca:30:56:44:55: 50:bd:c9:50:5f:e1:0f:b0:85:ab:c3:34:13:7b:c6: 5b:6a:45:f7:e9:cc:1b:d0:10:fd:eb:fb:66:57:92: a5:fe:38:ec:c7:aa:7e:09:84:75:8f:10:5a:1c:25: a0:d4:b3:e2:e5:16:33:7b:3b:f8:ae:15:b1:17:ab: e7:be:58:1f:61:c7:9a:47:a6:cf:e8:c5:81:65:1a: ca:38:ae:46:3e:52:ee:cd:5c:69:8f:ea:2d:cc:ad: a6:51:45:12:32:f4:60:b0:65:38:05:ed:14:ce:4f: 29:da:ae:ba:ce:07:89:cf:02:23:67:23:f6:68:43: 80:80:2e:15:4e:1f:19:76:bb:08:fb:65:ce:b8:96: 14:6b:19:98:82:42:e6:0a:86:4c:47:8b:50:72:1a: cb:e7:73:00:14:fa:3d:d1:99:11:d4:99:63:c0:6a: 69:0d:f0:05:d2:90:75:33:f5:6c:10:03:8c:51:4d: ad:67:4d:1c:11:4b:50:a0:5c:6f:ce:53:a2:83:e6: 79:15:04:5b:0e:e7:ab:61:9e:c5:a1:b3:d5:2a:27: 0a:2d:51:16:d0:4c:22:bd:f3:b5:80:c8:5c:6c:c2: 88:80:86:51:40:7e:fb:39:1f:44:4a:9e:94:2e:f3: c8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:72:0D:22:A8:32:A5:22:5A:85:7D:AC:9A:37:38:8F:D4:24:3A:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5e4f356-30d0-3c15-97fa-57c5dfb3f611.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:ca:3b:7c:c8:24:63:1f:95:b4:9e:ec:a3:f7:a8:57:e7:32: 26:a7:2e:d2:ee:4f:66:8f:4e:73:0a:11:1c:4e:45:d8:04:62: 2d:bb:73:ce:1a:33:8b:7f:e5:16:15:b0:a3:28:be:3d:43:19: 59:f7:7b:6d:78:4b:39:88:08:66:66:ff:ed:37:59:64:56:01: b3:10:e6:06:9a:45:ba:cd:de:d9:4f:a6:a9:e9:79:31:87:d0: b4:3b:7f:88:af:25:87:f6:0d:69:2c:a8:41:41:ea:d8:31:bb: 54:32:bf:de:4b:70:88:d8:be:66:da:c6:0a:ab:79:d5:47:f3: 37:c1:c0:cb:54:1c:6f:66:67:75:42:b3:6e:6c:f6:b7:c0:fb: 22:6f:36:c2:04:2a:e8:c7:d4:7d:b4:17:66:68:03:16:59:d9: 70:dd:be:cb:2a:07:dc:68:dc:d2:3e:92:cc:2e:ce:09:73:49: 79:2f:72:e2:6a:aa:fa:9d:34:79:b8:d2:e0:55:de:f6:2b:09: 9f:4b:7d:73:8e:2c:ba:7f:d4:e8:2e:6c:c7:cc:96:63:50:c4: 38:0e:50:89:ea:53:4f:a1:8e:5b:29:0d:f0:ce:89:d6:0a:ff: 79:88:1b:4f:88:f4:a0:ac:ed:ec:a3:27:89:8d:81:c4:90:65: d0:10:dd:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikxwo4jpHt5nTpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZmZmNGMwZTEtZjMwNy00NTg4LTlmMDctMjA2MmE2NWRhNzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvAqZgmYi98+yjBWRFVQvclQX+EPsIWrwzQT e8ZbakX36cwb0BD96/tmV5Kl/jjsx6p+CYR1jxBaHCWg1LPi5RYzezv4rhWxF6vn vlgfYceaR6bP6MWBZRrKOK5GPlLuzVxpj+otzK2mUUUSMvRgsGU4Be0Uzk8p2q66 zgeJzwIjZyP2aEOAgC4VTh8ZdrsI+2XOuJYUaxmYgkLmCoZMR4tQchrL53MAFPo9 0ZkR1JljwGppDfAF0pB1M/VsEAOMUU2tZ00cEUtQoFxvzlOig+Z5FQRbDuerYZ7F obPVKicKLVEW0EwivfO1gMhcbMKIgIZRQH77OR9ESp6ULvPIPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOByDSKoMqUiWoV9rJo3OI/UJDplMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDVlNGYzNTYtMzBkMC0z YzE1LTk3ZmEtNTdjNWRmYjNmNjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErKO3zIJGMflbSe7KP3qFfnMianLtLuT2aPTnMKERxORdgEYi27c84a M4t/5RYVsKMovj1DGVn3e214SzmICGZm/+03WWRWAbMQ5gaaRbrN3tlPpqnpeTGH 0LQ7f4ivJYf2DWksqEFB6tgxu1Qyv95LcIjYvmbaxgqredVH8zfBwMtUHG9mZ3VC s25s9rfA+yJvNsIEKujH1H20F2ZoAxZZ2XDdvssqB9xo3NI+kswuzglzSXkvcuJq qvqdNHm40uBV3vYrCZ9LfXOOLLp/1OgubMfMlmNQxDgOUInqU0+hjlspDfDOidYK /3mIG0+I9KCs7eyjJ4mNgcSQZdAQ3QY= -----END CERTIFICATE-----Generated at Thu Oct 8 08:52:56 2026 by rpki-client