$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfd5e8ec-45b5-353e-8841-81ff7172f15e.roa File: dfd5e8ec-45b5-353e-8841-81ff7172f15e.roa (raw, json) Hash identifier: bgN/+lQVaRiZdzW5pJ/WS3mUEzL5y3ZHNA3BLH52JbY= Subject key identifier: 75:0E:A2:70:3D:0A:E6:E5:D7:03:38:9A:C7:C9:08:B7:EF:61:41:27 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EE2274A9BA04DA4349710A6C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfd5e8ec-45b5-353e-8841-81ff7172f15e.roa Signing time: Wed 19 Aug 2026 01:00:12 +0000 ROA not before: Wed 19 Aug 2026 01:00:12 +0000 ROA not after: Tue 17 Nov 2026 02:00:12 +0000 asID: 20431 IP address blocks: 192.42.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e2:27:4a:9b:a0:4d:a4:34:97:10:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 19 01:00:12 2026 GMT Not After : Nov 17 02:00:12 2026 GMT Subject: CN=45b7c92a-d635-496e-996d-b6b730290d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ec:b8:5a:2a:47:39:58:e2:2a:cb:91:45:f6: 6e:d1:e5:3b:94:79:c8:57:f3:d7:c9:c6:93:7a:eb: 7b:ed:1c:eb:10:88:18:57:a1:86:bf:7f:12:9f:a3: 06:26:c7:ad:cc:a0:15:95:55:73:26:a3:ef:85:95: f6:56:e3:a6:de:ff:8e:b0:0d:81:94:10:0f:36:82: f1:d0:90:02:1d:08:e1:39:63:aa:06:18:04:1c:87: aa:c1:03:e3:44:8d:a0:d1:57:20:f5:2d:b6:13:94: dd:8b:39:fa:15:ea:95:47:32:9e:d9:08:ee:90:6d: 05:bc:42:b3:9a:de:fd:1c:e9:3a:ec:1d:f3:2f:05: 1e:23:48:25:0a:71:13:c8:6e:a4:f8:98:61:75:39: c8:eb:2f:13:09:18:1b:32:c2:fb:ac:75:23:6d:25: f6:46:20:4b:b6:c4:6b:0a:54:0f:73:72:ae:fb:6a: ef:5c:f6:b2:ca:08:1f:3f:bb:e1:c7:c2:79:94:5c: 49:9e:a8:d5:85:04:ee:e2:76:03:69:21:3c:f0:5d: 54:3e:5f:57:f0:2f:b1:77:91:a4:25:af:34:aa:0e: bd:9b:e1:bd:77:de:d3:52:3d:9d:26:43:26:ce:1b: ae:77:c4:10:40:5e:9e:10:d5:34:95:ee:c7:bb:d3: 40:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:0E:A2:70:3D:0A:E6:E5:D7:03:38:9A:C7:C9:08:B7:EF:61:41:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfd5e8ec-45b5-353e-8841-81ff7172f15e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:26:ce:35:b3:b9:54:99:19:46:ec:f7:da:08:b8:f5:f5:f8: 03:12:c0:ca:01:99:29:2f:ce:0e:39:c9:e0:bb:9c:27:0b:6b: 02:c1:99:d7:81:2c:61:4a:5b:5d:88:cc:e6:5c:4e:74:1a:86: bf:72:53:2f:71:f0:f3:a8:4a:af:e1:05:9c:ca:71:62:01:d5: c1:c3:43:7f:41:16:a8:98:9e:68:e3:f3:1c:14:c8:4a:84:b0: 2f:e8:40:80:ec:0b:4c:b8:af:07:4d:0b:d9:79:57:af:d2:70: 01:f7:c1:4b:16:78:d9:a9:ab:0d:61:39:bb:b0:b6:f0:c0:5e: b0:7f:0f:08:85:4d:4a:5e:4f:12:23:13:d6:0d:ae:d3:f0:96: 2e:a9:91:29:df:29:e4:bf:0e:87:ef:37:8d:73:58:82:71:23: 1b:9e:43:d4:7a:bc:bf:76:b5:65:fd:0d:d6:92:83:f7:07:65: c2:ff:b0:d4:67:55:ce:de:5e:0a:77:ae:c4:86:8e:e6:36:64: 3c:32:40:da:a5:8c:3f:4c:23:6f:24:32:3f:4a:39:a8:8f:a2: 1c:e8:96:db:d5:27:62:f2:ac:e7:2f:ea:f6:8d:cf:96:4b:cf: 05:02:06:58:bb:9a:80:c8:6b:ab:0b:73:d2:24:18:de:77:39: 74:ce:9d:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7iJ0qboE2kNJcQpsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgxOTAxMDAxMloXDTI2MTExNzAyMDAxMlowLzEtMCsGA1UEAxMk NDViN2M5MmEtZDYzNS00OTZlLTk5NmQtYjZiNzMwMjkwZDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOy4WipHOVjiKsuRRfZu0eU7lHnIV/PXycaT eut77RzrEIgYV6GGv38Sn6MGJsetzKAVlVVzJqPvhZX2VuOm3v+OsA2BlBAPNoLx 0JACHQjhOWOqBhgEHIeqwQPjRI2g0Vcg9S22E5Tdizn6FeqVRzKe2QjukG0FvEKz mt79HOk67B3zLwUeI0glCnETyG6k+JhhdTnI6y8TCRgbMsL7rHUjbSX2RiBLtsRr ClQPc3Ku+2rvXPayyggfP7vhx8J5lFxJnqjVhQTu4nYDaSE88F1UPl9X8C+xd5Gk Ja80qg69m+G9d97TUj2dJkMmzhuud8QQQF6eENU0le7Hu9NA4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUOonA9Cubl1wM4msfJCLfvYUEnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGZkNWU4ZWMtNDViNS0z NTNlLTg4NDEtODFmZjcxNzJmMTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkmzjWzuVSZGUbs99oIuPX1+AMSwMoBmSkvzg45yeC7nCcLawLBmdeB LGFKW12IzOZcTnQahr9yUy9x8POoSq/hBZzKcWIB1cHDQ39BFqiYnmjj8xwUyEqE sC/oQIDsC0y4rwdNC9l5V6/ScAH3wUsWeNmpqw1hObuwtvDAXrB/DwiFTUpeTxIj E9YNrtPwli6pkSnfKeS/DofvN41zWIJxIxueQ9R6vL92tWX9DdaSg/cHZcL/sNRn Vc7eXgp3rsSGjuY2ZDwyQNqljD9MI28kMj9KOaiPohzoltvVJ2LyrOcv6vaNz5ZL zwUCBli7moDIa6sLc9IkGN53OXTOnTM= -----END CERTIFICATE-----Generated at Wed Aug 19 20:14:33 2026 by rpki-client