$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8f86980-6bba-3c5b-a7d5-161fa235370b.roa File: e8f86980-6bba-3c5b-a7d5-161fa235370b.roa (raw, json) Hash identifier: KSFSwAlS5tCmimdDlCDotoanqcNDyLJG+ysOJi5+L+0= Subject key identifier: C2:24:22:45:60:FD:47:30:9E:B6:A9:40:E3:3E:24:BA:40:A1:77:AF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F6292C13CB20210B64465FC80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8f86980-6bba-3c5b-a7d5-161fa235370b.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396704 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:c1:3c:b2:02:10:b6:44:65:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=1a7599eb-0013-4b67-911f-30b7a116d80b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b7:86:9e:14:da:c9:d6:f0:3b:3e:de:9c:23: 7e:e5:06:fb:4d:87:a5:22:35:4a:6d:03:ea:72:cc: 2d:25:8c:56:2f:d6:11:d2:0d:b9:bc:e8:62:96:ef: 49:b8:8d:77:57:1e:01:81:2f:34:7d:27:c3:f9:59: 4e:4b:da:80:e5:77:07:6a:4b:d6:e6:94:9b:c2:e3: da:62:bb:97:cf:8d:ab:96:7c:75:c2:9a:23:b5:41: e0:df:be:db:d1:e8:b1:cc:79:82:ee:09:5d:3e:cd: 5a:ea:9d:27:df:07:d0:33:66:a7:da:4a:39:a9:d3: 5c:f0:4d:3d:56:eb:4c:3a:00:7b:34:3e:8f:a8:5b: 96:23:19:5f:e5:01:4c:ee:b2:fc:4d:5b:7a:80:d9: 08:19:56:05:88:f7:7b:9d:05:84:e3:c1:90:6b:4e: c8:38:4e:e1:1f:6b:9f:17:e9:9d:bb:3e:d7:79:d9: eb:39:65:2b:44:77:d0:c3:02:50:2d:14:a2:a4:06: 12:78:f7:8f:a6:16:1b:03:71:7c:de:dc:89:85:5e: e7:3d:9a:17:7a:15:a8:43:62:fd:d3:c6:f5:f1:e6: b0:c5:d3:3d:81:d0:96:29:9c:e9:e0:20:87:78:1c: 6f:bc:47:b7:5e:d4:32:17:81:1b:5e:22:7e:c5:68: b6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:24:22:45:60:FD:47:30:9E:B6:A9:40:E3:3E:24:BA:40:A1:77:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8f86980-6bba-3c5b-a7d5-161fa235370b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:7d:4a:ec:86:f3:b4:60:27:a7:89:cf:b7:79:04:a5:5c:18: 31:a0:16:31:cb:48:bf:41:87:5e:74:dd:ca:2f:4f:39:e4:3f: 8c:0c:94:fa:eb:2c:bc:2d:21:a8:60:79:88:b2:1e:6c:a1:cc: 00:96:05:05:1a:85:60:79:7e:e3:8f:4e:4a:69:c6:a2:34:82: 22:0e:47:78:b2:b9:1a:fc:7b:c6:b9:e0:f7:6a:d3:d3:9b:13: 5d:87:1b:89:26:73:01:e3:f4:3f:f0:d2:e9:be:25:c4:ee:3f: ff:a4:28:b5:61:d4:8b:67:d9:3c:71:91:db:c9:89:b5:90:b6: b1:df:08:de:e5:c5:d9:b9:84:c6:87:ba:82:b5:c7:28:67:0f: 1c:7e:0a:76:c3:08:5a:54:2e:20:91:1f:ab:a1:4f:1a:0e:a1: 0f:6c:a2:d5:f2:ca:7f:4c:82:f2:cb:67:06:9a:1e:6c:64:1c: 94:83:35:b3:27:99:b6:5d:c3:ea:c0:e9:63:d2:13:61:bf:27: fc:59:92:6a:2a:ed:04:84:81:70:7f:6c:05:b2:1d:a2:d4:43: 45:ef:c7:70:d5:c5:5c:a1:30:b5:6b:41:2c:c3:0f:6a:15:3d: 39:95:94:bf:06:17:11:48:9c:7e:26:95:76:d4:a9:3e:97:ee: 63:72:70:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iksE8sgIQtkRl/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MWE3NTk5ZWItMDAxMy00YjY3LTkxMWYtMzBiN2ExMTZkODBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvreGnhTaydbwOz7enCN+5Qb7TYelIjVKbQPq cswtJYxWL9YR0g25vOhilu9JuI13Vx4BgS80fSfD+VlOS9qA5XcHakvW5pSbwuPa YruXz42rlnx1wpojtUHg377b0eixzHmC7gldPs1a6p0n3wfQM2an2ko5qdNc8E09 VutMOgB7ND6PqFuWIxlf5QFM7rL8TVt6gNkIGVYFiPd7nQWE48GQa07IOE7hH2uf F+mduz7XednrOWUrRHfQwwJQLRSipAYSePePphYbA3F83tyJhV7nPZoXehWoQ2L9 08b18eawxdM9gdCWKZzp4CCHeBxvvEe3XtQyF4EbXiJ+xWi2mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIkIkVg/UcwnrapQOM+JLpAoXevMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZThmODY5ODAtNmJiYS0z YzViLWE3ZDUtMTYxZmEyMzUzNzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJR9SuyG87RgJ6eJz7d5BKVcGDGgFjHLSL9Bh1503covTznkP4wMlPrr LLwtIahgeYiyHmyhzACWBQUahWB5fuOPTkppxqI0giIOR3iyuRr8e8a54Pdq09Ob E12HG4kmcwHj9D/w0um+JcTuP/+kKLVh1Itn2TxxkdvJibWQtrHfCN7lxdm5hMaH uoK1xyhnDxx+CnbDCFpULiCRH6uhTxoOoQ9sotXyyn9MgvLLZwaaHmxkHJSDNbMn mbZdw+rA6WPSE2G/J/xZkmoq7QSEgXB/bAWyHaLUQ0Xvx3DVxVyhMLVrQSzDD2oV PTmVlL8GFxFInH4mlXbUqT6X7mNycNc= -----END CERTIFICATE-----Generated at Wed Oct 7 23:04:45 2026 by rpki-client