$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dae10421-f3d1-3648-aaff-c5365bb01b90.roa File: dae10421-f3d1-3648-aaff-c5365bb01b90.roa (raw, json) Hash identifier: 3POCJUUGrT5r8ahLFmmSgzx1Aa24iLmfbFuzxf2bqBY= Subject key identifier: C8:34:5A:C9:E7:3F:D2:F5:E7:83:47:15:75:66:47:2F:FC:6E:B4:20 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E3FC48126E7162F11F8259B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dae10421-f3d1-3648-aaff-c5365bb01b90.roa Signing time: Sun 21 Jun 2026 21:00:12 +0000 ROA not before: Sun 21 Jun 2026 21:00:12 +0000 ROA not after: Sat 19 Sep 2026 21:00:12 +0000 asID: 25485 IP address blocks: 192.42.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3f:c4:81:26:e7:16:2f:11:f8:25:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 21 21:00:12 2026 GMT Not After : Sep 19 21:00:12 2026 GMT Subject: CN=8f1367af-2135-4b87-a049-cf21c6c4be50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b6:ab:de:72:d7:8c:b8:06:b4:81:65:e5:36: a4:a1:dd:20:04:74:5c:de:2a:da:e9:05:03:e8:74: 49:17:b0:77:49:0c:48:88:41:81:cb:ed:2a:6c:e9: dc:04:9b:c6:5f:c8:1e:2c:b6:4b:ac:ae:65:01:75: 39:c8:63:58:d0:ca:73:b8:20:16:bc:8f:57:86:e9: 0b:62:06:6d:2c:22:7b:b4:22:59:04:d9:2d:49:42: 1d:fa:b1:c8:02:29:06:d2:b5:0e:ff:cb:4c:24:d2: 5b:c7:f9:4c:8e:30:b4:d7:73:5b:8e:97:1c:88:71: 27:68:a9:e8:3e:13:10:d0:87:3d:5d:40:c4:db:6d: cc:f0:56:3f:26:19:86:12:5a:ee:14:77:8d:d4:d1: 3d:9e:a1:04:0c:36:63:fa:54:5f:7f:f1:39:7b:e9: 70:2f:42:bc:ca:dd:5e:83:40:a0:da:70:4f:5c:b4: d2:5c:40:c3:fa:14:ec:28:b0:8c:bd:95:2b:10:21: 57:21:bf:4b:1f:26:a8:70:58:70:f0:f5:4f:48:b5: b3:0a:6b:10:af:3a:fc:d9:04:b2:79:4e:76:6b:e1: eb:1c:39:45:35:7e:a6:5c:07:be:c1:ce:7d:fc:89: 5a:96:de:0d:18:07:8b:74:fc:c4:8b:dc:d4:1d:1f: c7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:34:5A:C9:E7:3F:D2:F5:E7:83:47:15:75:66:47:2F:FC:6E:B4:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dae10421-f3d1-3648-aaff-c5365bb01b90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:40:49:24:92:8b:63:82:3e:c8:84:82:3f:0e:09:b5:73:3f: 22:11:71:e1:c1:65:9c:47:f7:24:be:b6:c2:21:52:da:49:53: e7:d9:0c:d4:7b:3f:74:0c:f7:2e:9f:1d:15:ed:e0:61:78:7c: 38:38:98:71:96:42:de:2d:a8:67:d7:bc:1f:86:4c:39:06:84: e3:16:0a:e5:c4:6c:f5:be:28:2f:5d:57:87:9c:ba:21:d4:06: 5f:b1:75:e4:45:c6:82:53:b2:2c:58:69:24:c0:b3:d6:70:6b: df:25:10:77:15:54:46:c5:6b:69:2b:50:e6:91:68:60:c2:c0: 54:02:d0:69:bf:72:c3:f9:84:4b:1e:35:13:eb:a7:fa:99:66: fc:1b:eb:a0:0a:0d:72:1c:d2:8b:ab:90:80:80:85:1a:c6:ea: d4:e2:c5:b8:a1:22:37:8d:0f:c7:de:01:c9:07:69:af:ee:38: 5a:08:38:42:90:a4:13:39:1b:94:b2:47:ac:7f:2d:1b:c9:c0: d8:47:a2:54:9c:91:18:6e:12:40:a2:1e:81:ed:d0:51:25:02: 89:1e:88:a6:ca:c4:5c:4f:98:2f:dc:73:9c:d1:58:89:64:0e: b8:07:13:56:a3:ac:0f:e4:65:08:ae:7c:53:bd:d8:a4:bb:93: cb:1d:95:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4/xIEm5xYvEfglm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDYyMTIxMDAxMloXDTI2MDkxOTIxMDAxMlowLzEtMCsGA1UEAxMk OGYxMzY3YWYtMjEzNS00Yjg3LWEwNDktY2YyMWM2YzRiZTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7ar3nLXjLgGtIFl5Takod0gBHRc3ira6QUD 6HRJF7B3SQxIiEGBy+0qbOncBJvGX8geLLZLrK5lAXU5yGNY0MpzuCAWvI9XhukL YgZtLCJ7tCJZBNktSUId+rHIAikG0rUO/8tMJNJbx/lMjjC013NbjpcciHEnaKno PhMQ0Ic9XUDE223M8FY/JhmGElruFHeN1NE9nqEEDDZj+lRff/E5e+lwL0K8yt1e g0Cg2nBPXLTSXEDD+hTsKLCMvZUrECFXIb9LHyaocFhw8PVPSLWzCmsQrzr82QSy eU52a+HrHDlFNX6mXAe+wc59/Ilalt4NGAeLdPzEi9zUHR/HAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMg0WsnnP9L154NHFXVmRy/8brQgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGFlMTA0MjEtZjNkMS0z NjQ4LWFhZmYtYzUzNjViYjAxYjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9ASSSSi2OCPsiEgj8OCbVzPyIRceHBZZxH9yS+tsIhUtpJU+fZDNR7 P3QM9y6fHRXt4GF4fDg4mHGWQt4tqGfXvB+GTDkGhOMWCuXEbPW+KC9dV4ecuiHU Bl+xdeRFxoJTsixYaSTAs9Zwa98lEHcVVEbFa2krUOaRaGDCwFQC0Gm/csP5hEse NRPrp/qZZvwb66AKDXIc0ourkICAhRrG6tTixbihIjeND8feAckHaa/uOFoIOEKQ pBM5G5SyR6x/LRvJwNhHolSckRhuEkCiHoHt0FElAokeiKbKxFxPmC/cc5zRWIlk DrgHE1ajrA/kZQiufFO92KS7k8sdlWs= -----END CERTIFICATE-----Generated at Sun Jun 28 19:42:56 2026 by rpki-client