$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4e5a720-c2b3-3cfa-beb4-2002ba5d6b6a.roa File: f4e5a720-c2b3-3cfa-beb4-2002ba5d6b6a.roa (raw, json) Hash identifier: XrFF9Kjpbi0Bdt1wUmbFQCP39idit1PP27si4/NFEIM= Subject key identifier: 3B:79:86:FC:1A:CE:27:99:AB:7D:63:F4:29:62:01:13:70:45:55:FD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F6292C8EC7CBF4AACC50E0E20 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4e5a720-c2b3-3cfa-beb4-2002ba5d6b6a.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396760 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:c8:ec:7c:bf:4a:ac:c5:0e:0e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=faff322b-bcd0-4ac1-ba84-35c75b6401fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e5:15:49:fa:e3:8a:e5:76:74:6d:3c:df:0c: e2:01:cb:6c:da:d5:73:51:7b:bc:08:24:73:01:92: 80:b0:4c:1c:2e:ab:14:fb:28:da:19:18:c4:01:e3: bd:b3:11:34:5b:64:d0:78:6c:5c:08:62:6b:fd:93: 8c:a2:00:a0:e9:b4:46:0a:96:9c:17:d4:86:9e:97: e4:72:0e:05:be:ea:88:e1:89:ea:4d:4d:a5:87:2c: 07:82:f8:54:69:40:58:c0:a1:ff:d8:19:cd:0e:05: b7:23:5d:fc:fb:4d:5c:c0:75:70:f3:70:c4:3c:47: d2:c1:15:5d:e6:40:69:a2:41:47:23:5e:f7:f6:d4: 8e:47:9a:37:e4:04:26:9f:1c:54:5b:4e:d3:5c:f8: 97:0c:b3:27:18:c1:88:f5:e1:94:07:1c:fc:d5:09: 92:37:32:06:ff:51:bb:61:a5:d6:09:a3:98:17:cf: c0:89:85:c2:bd:84:ac:55:ac:71:fc:73:00:1d:ac: 7d:bb:9a:f1:30:bb:ea:4a:1e:9c:c0:ac:33:f3:ff: 7c:cd:03:58:d6:51:a0:aa:84:a6:c8:a2:77:f9:9e: 8f:49:bf:81:d0:3a:e9:b9:0d:f5:bd:cc:65:ad:8b: 34:b8:5e:58:c3:c7:22:a5:d8:b6:48:bf:b8:08:c1: 9f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:79:86:FC:1A:CE:27:99:AB:7D:63:F4:29:62:01:13:70:45:55:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4e5a720-c2b3-3cfa-beb4-2002ba5d6b6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:f8:e4:ea:be:ee:50:84:63:c8:69:5d:26:86:d2:85:5c:6f: e6:dd:81:0e:92:c7:a8:7f:04:5c:82:fc:a0:a9:03:89:49:56: 63:1f:8b:51:f4:14:3a:a9:84:ec:66:e2:2d:32:43:1d:f6:a7: ef:ee:ea:8e:3c:ab:db:8c:ff:61:d5:25:c9:cf:ea:2e:0b:52: 59:b9:a6:28:43:b3:32:94:e3:9f:74:de:08:97:4d:e3:3e:dd: 21:e7:09:fd:d0:5f:98:87:c0:ea:a6:c5:84:84:90:fe:9c:66: 89:86:57:9c:10:ce:31:c0:b8:cc:05:23:7f:8f:c9:ec:28:41: f5:60:31:b0:5d:06:da:c3:08:18:5c:f0:7a:6e:78:4c:1a:60: 6b:ed:6b:b5:63:07:4d:f7:a7:4f:6c:41:73:ac:81:6c:39:54: ca:a9:8b:b6:5a:b2:86:32:0d:e6:c9:4a:9e:f0:a2:60:56:08: b2:60:dd:6a:aa:80:d8:b3:4d:51:0e:ee:98:43:dd:93:d1:45: 22:48:99:c3:6a:85:08:ed:4d:03:95:3e:ea:aa:fc:00:b0:d6: 74:9b:2e:e3:4f:71:f1:9f:6e:a5:80:a2:bf:5b:61:f3:0c:ac: 6e:0d:08:4a:3a:d7:e7:0d:d5:ba:24:7e:cc:45:70:07:5e:61: ca:18:e2:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iksjsfL9KrMUODiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZmFmZjMyMmItYmNkMC00YWMxLWJhODQtMzVjNzViNjQwMWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+UVSfrjiuV2dG083wziActs2tVzUXu8CCRz AZKAsEwcLqsU+yjaGRjEAeO9sxE0W2TQeGxcCGJr/ZOMogCg6bRGCpacF9SGnpfk cg4FvuqI4YnqTU2lhywHgvhUaUBYwKH/2BnNDgW3I138+01cwHVw83DEPEfSwRVd 5kBpokFHI1739tSOR5o35AQmnxxUW07TXPiXDLMnGMGI9eGUBxz81QmSNzIG/1G7 YaXWCaOYF8/AiYXCvYSsVaxx/HMAHax9u5rxMLvqSh6cwKwz8/98zQNY1lGgqoSm yKJ3+Z6PSb+B0DrpuQ31vcxlrYs0uF5Yw8cipdi2SL+4CMGfMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDt5hvwazieZq31j9CliARNwRVX9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjRlNWE3MjAtYzJiMy0z Y2ZhLWJlYjQtMjAwMmJhNWQ2YjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAr45Oq+7lCEY8hpXSaG0oVcb+bdgQ6Sx6h/BFyC/KCpA4lJVmMfi1H0 FDqphOxm4i0yQx32p+/u6o48q9uM/2HVJcnP6i4LUlm5pihDszKU45903giXTeM+ 3SHnCf3QX5iHwOqmxYSEkP6cZomGV5wQzjHAuMwFI3+PyewoQfVgMbBdBtrDCBhc 8HpueEwaYGvta7VjB033p09sQXOsgWw5VMqpi7ZasoYyDebJSp7womBWCLJg3Wqq gNizTVEO7phD3ZPRRSJImcNqhQjtTQOVPuqq/ACw1nSbLuNPcfGfbqWAor9bYfMM rG4NCEo61+cN1bokfsxFcAdeYcoY4sA= -----END CERTIFICATE-----Generated at Sat Oct 10 00:39:12 2026 by rpki-client