$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddf62a4b-13dc-3cee-a786-b4aeee8ebb17.roa File: ddf62a4b-13dc-3cee-a786-b4aeee8ebb17.roa (raw, json) Hash identifier: 8xQ/fqamjkwgiM6efO0mxWjptHiVaC3qqARI5O1UO1c= Subject key identifier: 98:B4:B1:D0:CA:50:4B:1B:DF:38:3F:02:B1:92:01:64:5E:7D:F8:91 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F6292CFC85BAE7AA05AF6AC60 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddf62a4b-13dc-3cee-a786-b4aeee8ebb17.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396661 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:cf:c8:5b:ae:7a:a0:5a:f6:ac:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=1f8c6048-dcef-44f5-a795-9c9371b80f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:14:c6:14:9a:64:5a:02:44:a1:ed:5c:9f:eb: 90:f1:ed:89:c6:e8:30:ff:b6:db:09:a3:46:29:1f: dd:80:1b:51:11:cd:e9:1a:d8:c5:73:bb:64:84:e6: b9:5d:82:30:98:1c:0d:4c:f5:3a:6b:77:68:55:5f: cb:6e:be:fe:c4:3c:64:03:2f:7c:fb:ce:05:49:81: 45:ef:71:bb:36:4b:e4:01:3c:60:6f:41:89:6e:c6: cc:07:2e:fb:ce:94:33:05:ce:b4:1a:5e:47:c0:4f: 4f:a0:21:4d:51:64:a7:fb:95:29:4e:a1:d6:05:c3: cf:94:fe:ef:75:d4:fa:38:59:5a:92:c3:07:79:3d: 5f:bf:50:de:2b:5b:22:b4:6d:10:76:71:d5:ae:af: 0c:7e:70:d7:b2:ad:91:c0:0a:98:ec:f1:b2:5c:b6: fb:66:28:40:c6:77:a7:38:09:e5:26:83:ee:e2:80: cf:1c:41:11:f0:d5:84:25:b9:7a:ea:52:e6:3c:c5: 36:2d:51:db:0b:c9:eb:b3:08:53:3c:99:78:2e:6b: 9e:7a:b0:61:68:96:a6:bb:f6:6f:b2:bf:08:35:96: 2e:a8:53:04:fe:86:0d:44:e1:a1:ff:78:30:af:7a: b2:c4:e7:25:d5:04:9b:84:74:9d:36:0a:d0:e3:f5: f8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B4:B1:D0:CA:50:4B:1B:DF:38:3F:02:B1:92:01:64:5E:7D:F8:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddf62a4b-13dc-3cee-a786-b4aeee8ebb17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:84:7a:f9:30:b1:f5:31:43:e2:d3:a8:52:4b:9b:9a:49:61: 12:59:79:5f:1b:62:03:c8:3c:56:ab:bc:eb:d8:0a:35:24:7a: fc:01:e1:51:f5:5e:a5:f5:75:28:e0:24:89:07:65:59:a1:60: 0f:b0:4f:e1:09:33:d1:3d:d4:95:2d:75:0c:88:93:4f:89:01: a3:7b:2f:ef:31:56:98:bc:66:59:a7:98:8e:b5:7d:d7:71:3c: ee:c3:d4:82:91:d1:c3:3a:f3:01:52:99:ff:26:a0:ff:d6:74: 64:18:b9:8b:62:bb:1d:42:04:d4:d4:f5:cf:92:1a:1d:19:2f: 9f:57:d9:0b:76:7f:ee:fa:9a:61:a5:96:db:da:a9:8a:62:c6: 89:c2:93:50:a1:ae:40:e6:10:54:61:01:f7:9d:eb:16:f1:6d: eb:bf:8d:c4:60:ba:f8:15:aa:a7:5f:f8:44:e3:e6:8c:7c:66: fe:fe:6b:76:0e:d3:74:c6:c9:53:b6:e0:bd:27:a0:b2:79:44: 4a:ac:c1:52:83:8f:83:15:14:20:6e:af:f9:57:42:82:5f:fd: 5f:a8:b7:cb:2d:68:8c:48:53:10:d5:1e:39:1f:5f:dc:cb:cb: 58:36:a6:89:6d:d2:0b:33:d6:df:7d:74:e4:6f:51:ae:90:37: 62:f9:a1:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iks/IW656oFr2rGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MWY4YzYwNDgtZGNlZi00NGY1LWE3OTUtOWM5MzcxYjgwZjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhTGFJpkWgJEoe1cn+uQ8e2Jxugw/7bbCaNG KR/dgBtREc3pGtjFc7tkhOa5XYIwmBwNTPU6a3doVV/Lbr7+xDxkAy98+84FSYFF 73G7NkvkATxgb0GJbsbMBy77zpQzBc60Gl5HwE9PoCFNUWSn+5UpTqHWBcPPlP7v ddT6OFlaksMHeT1fv1DeK1sitG0QdnHVrq8MfnDXsq2RwAqY7PGyXLb7ZihAxnen OAnlJoPu4oDPHEER8NWEJbl66lLmPMU2LVHbC8nrswhTPJl4LmueerBhaJamu/Zv sr8INZYuqFME/oYNROGh/3gwr3qyxOcl1QSbhHSdNgrQ4/X44QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJi0sdDKUEsb3zg/ArGSAWReffiRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGRmNjJhNGItMTNkYy0z Y2VlLWE3ODYtYjRhZWVlOGViYjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqEevkwsfUxQ+LTqFJLm5pJYRJZeV8bYgPIPFarvOvYCjUkevwB4VH1 XqX1dSjgJIkHZVmhYA+wT+EJM9E91JUtdQyIk0+JAaN7L+8xVpi8ZlmnmI61fddx PO7D1IKR0cM68wFSmf8moP/WdGQYuYtiux1CBNTU9c+SGh0ZL59X2Qt2f+76mmGl ltvaqYpixonCk1ChrkDmEFRhAfed6xbxbeu/jcRguvgVqqdf+ETj5ox8Zv7+a3YO 03TGyVO24L0noLJ5REqswVKDj4MVFCBur/lXQoJf/V+ot8staIxIUxDVHjkfX9zL y1g2polt0gsz1t99dORvUa6QN2L5oas= -----END CERTIFICATE-----Generated at Thu Oct 8 05:34:57 2026 by rpki-client