$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da0c9105-e727-36bc-a6d6-a29b6fed4a32.roa File: da0c9105-e727-36bc-a6d6-a29b6fed4a32.roa (raw, json) Hash identifier: aAiMDsh7+0NWh0vegHiOvMSd0V9WsB6B3OwRfcVNd0g= Subject key identifier: 0B:66:E9:90:B5:41:A7:15:61:D3:92:DD:7C:C7:36:B4:70:9F:41:0B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F62930D925CBCED92962C6000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da0c9105-e727-36bc-a6d6-a29b6fed4a32.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396563 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:0d:92:5c:bc:ed:92:96:2c:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=d02b2873-f085-438e-ad6f-38ce946e240f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:58:57:1a:fb:2a:68:12:b1:83:af:5d:4b:80: 9c:a5:e0:6c:92:cd:fb:2d:99:47:dc:3d:f6:a4:c8: bd:76:0f:f6:2b:ed:4f:8f:ba:1f:17:4e:1d:ca:94: 3f:fb:9d:37:b3:10:8d:13:10:58:09:56:12:e8:2d: de:0e:12:1a:5e:c5:42:22:a4:18:e7:1f:3b:74:a3: f3:b2:ef:1a:5b:61:a4:25:01:33:f2:a8:1b:a8:5f: b7:1b:1e:9d:d1:f0:36:cd:04:24:d0:16:2d:24:31: 00:7c:1e:bb:2e:f8:7d:6c:33:50:21:e6:22:a6:48: 69:8c:28:58:9c:59:1d:b4:4e:46:4e:3e:14:8a:59: 3e:0c:0b:69:49:68:0b:cc:17:e6:a0:91:95:c5:8e: 11:e9:81:32:e4:09:26:d3:b4:b8:6d:cf:25:50:c3: a0:97:31:5e:9b:78:ae:10:ab:83:68:8c:34:6f:05: 05:c2:1f:c1:16:76:ba:19:2e:e8:58:32:7a:ba:59: 39:52:02:fe:eb:97:28:0f:28:11:81:9c:cb:8e:31: 64:d2:ca:b8:2c:3b:27:05:e9:b8:69:88:6d:f4:e1: 27:6e:fd:92:f8:18:bb:7e:09:71:e0:64:66:55:f6: 18:22:27:c9:12:49:b8:2b:fb:f2:ab:a6:dd:d0:c8: 5c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:66:E9:90:B5:41:A7:15:61:D3:92:DD:7C:C7:36:B4:70:9F:41:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da0c9105-e727-36bc-a6d6-a29b6fed4a32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:8d:ba:83:e0:86:0a:d0:a5:db:84:e6:b9:af:d6:26:64:33: d7:85:9b:e1:df:f6:8c:a3:39:dd:6b:55:01:b6:0c:79:83:5f: ac:c4:8a:f4:e3:d1:05:7e:c3:ac:68:d7:b5:5d:f4:ae:b4:a2: fe:57:e5:6c:e8:a3:7a:13:5b:56:99:ae:5f:65:4f:f4:a5:e2: d7:92:f9:4c:75:f9:2e:a7:6e:d6:94:df:9f:76:ec:c0:d8:cd: 0c:1a:00:b1:4c:bf:ed:b9:6d:76:10:d8:3f:33:b0:97:70:5c: b8:2a:ae:08:43:c5:ef:a6:32:23:44:03:ac:65:d5:c2:bd:e5: e4:0c:0e:40:0c:ae:f2:14:ef:5e:71:b6:dd:33:ab:06:f6:6a: dd:e7:4c:d4:de:05:3e:6a:9a:42:75:99:87:e9:30:ac:bb:b4: c5:15:d6:c0:c8:2e:88:5d:e9:c4:1d:82:03:f3:94:7e:47:83: 2a:e2:47:d9:7c:76:19:f4:ae:89:31:45:1d:d8:77:0c:05:a4: 22:34:e8:9d:9e:bf:ca:f5:54:91:9d:af:3a:19:2c:89:42:34: 8a:e0:4e:19:bc:56:f9:2f:49:f4:ca:73:b4:99:b8:43:01:3b: f3:c8:3c:a2:c1:c9:ef:3d:52:a3:1c:23:97:98:80:0b:91:88: e3:c2:44:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikw2SXLztkpYsYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZDAyYjI4NzMtZjA4NS00MzhlLWFkNmYtMzhjZTk0NmUyNDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVhXGvsqaBKxg69dS4CcpeBsks37LZlH3D32 pMi9dg/2K+1Pj7ofF04dypQ/+503sxCNExBYCVYS6C3eDhIaXsVCIqQY5x87dKPz su8aW2GkJQEz8qgbqF+3Gx6d0fA2zQQk0BYtJDEAfB67Lvh9bDNQIeYipkhpjChY nFkdtE5GTj4Uilk+DAtpSWgLzBfmoJGVxY4R6YEy5Akm07S4bc8lUMOglzFem3iu EKuDaIw0bwUFwh/BFna6GS7oWDJ6ulk5UgL+65coDygRgZzLjjFk0sq4LDsnBem4 aYht9OEnbv2S+Bi7fglx4GRmVfYYIifJEkm4K/vyq6bd0MhcYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtm6ZC1QacVYdOS3XzHNrRwn0ELMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGEwYzkxMDUtZTcyNy0z NmJjLWE2ZDYtYTI5YjZmZWQ0YTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuNuoPghgrQpduE5rmv1iZkM9eFm+Hf9oyjOd1rVQG2DHmDX6zEivTj 0QV+w6xo17Vd9K60ov5X5Wzoo3oTW1aZrl9lT/Sl4teS+Ux1+S6nbtaU35927MDY zQwaALFMv+25bXYQ2D8zsJdwXLgqrghDxe+mMiNEA6xl1cK95eQMDkAMrvIU715x tt0zqwb2at3nTNTeBT5qmkJ1mYfpMKy7tMUV1sDILohd6cQdggPzlH5HgyriR9l8 dhn0rokxRR3YdwwFpCI06J2ev8r1VJGdrzoZLIlCNIrgThm8VvkvSfTKc7SZuEMB O/PIPKLBye89UqMcI5eYgAuRiOPCROg= -----END CERTIFICATE-----Generated at Tue Oct 6 20:10:20 2026 by rpki-client