$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12eaaa83-b509-3975-8e67-44d17670ca83.roa File: 12eaaa83-b509-3975-8e67-44d17670ca83.roa (raw, json) Hash identifier: 1dxuDv9WXI3kb+rDWC9fa0hKt2dSMyOBSp87rEOsF4g= Subject key identifier: AE:DC:50:75:C3:37:04:11:15:1C:5B:7C:91:A7:7C:3A:E2:53:1A:19 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D300A3E9EDD66AFCF53C01480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12eaaa83-b509-3975-8e67-44d17670ca83.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 20431 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:3e:9e:dd:66:af:cf:53:c0:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=3d6a524d-7b29-4a26-9b94-452b3ad90524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ad:cf:53:4f:77:b8:fa:c8:be:ce:a7:24:b1: e2:17:21:49:5f:9e:7f:a3:66:89:e5:a0:e1:f2:27: f5:66:d7:dc:9f:99:dd:b0:c6:67:81:69:79:68:4e: 82:ed:dc:05:d5:91:10:f1:e7:6d:b2:5d:fc:a9:54: db:a3:e3:8e:6b:c8:51:26:43:a4:fe:1a:3a:4f:b3: a0:42:0c:82:bb:1e:52:37:3a:a8:1c:e4:c6:ea:3e: c2:74:7f:2c:2f:ab:c5:62:78:ef:19:9e:e6:b4:37: f9:da:82:b7:ed:c6:d9:92:3b:fd:c9:f9:22:4a:53: 14:72:01:87:3a:e6:da:42:4e:4c:b5:e7:d9:c1:6e: 06:9f:d0:9d:90:c9:22:cc:67:63:37:f5:09:ab:50: 8b:ac:23:4f:f7:d5:4e:46:48:3e:e9:18:16:29:6d: 59:4e:06:33:28:be:b5:a0:42:3a:dd:98:4e:4d:eb: 53:f3:ae:27:91:b2:5f:19:17:84:32:2e:38:19:8c: eb:42:db:b4:83:d4:0b:0d:ca:04:ab:f4:c9:b7:e7: ae:1f:d2:af:52:6d:06:f9:4b:02:7f:6a:aa:34:df: bb:3b:24:a0:70:b4:4a:98:fd:08:d9:41:5c:ca:a8: b1:90:e5:db:2f:0d:e8:d0:0f:17:25:28:87:b7:fa: 40:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:DC:50:75:C3:37:04:11:15:1C:5B:7C:91:A7:7C:3A:E2:53:1A:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12eaaa83-b509-3975-8e67-44d17670ca83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:1b:69:d1:6c:2c:0e:f7:2e:50:74:10:d0:fa:00:78:7c:9c: 32:e5:6f:16:70:77:18:17:93:63:00:bf:b2:ef:5d:c4:ec:84: 03:80:24:d9:87:53:b9:9b:4c:65:31:2e:18:7f:95:eb:dd:08: b4:e3:2f:aa:4e:b3:49:09:8f:2c:9a:5b:b8:32:66:53:dc:62: 29:f1:df:74:f2:61:3c:1a:7f:c1:1e:ca:27:68:ad:f5:90:68: dc:13:de:dc:95:61:48:a5:8c:42:fb:7d:82:66:64:71:58:1f: 88:ce:c2:5f:87:8f:65:5c:89:b0:92:77:f3:6b:4b:f3:91:8f: 1c:91:9c:0b:60:12:f7:c9:64:4e:d4:f5:d2:f5:a1:e7:f2:bf: a9:83:2e:bd:c0:e9:be:ef:52:0c:fa:44:0f:0e:dd:dd:e8:b9: e4:f2:9a:9b:3a:61:b1:ff:f0:84:88:c4:f8:8a:f0:d4:99:93: 5a:a4:e2:d8:be:5f:ee:b1:76:26:c6:3a:da:7a:61:41:97:d9: 22:a9:10:ab:68:fd:02:88:2a:09:cd:ed:bf:75:8f:be:7f:36: d8:04:f3:00:74:f5:6f:e1:4f:86:9e:69:34:df:32:68:90:09: 99:23:26:c0:19:69:b0:fa:ab:f1:f3:14:be:5f:91:04:e0:0a: 2b:e9:d7:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCj6e3Wavz1PAFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk M2Q2YTUyNGQtN2IyOS00YTI2LTliOTQtNDUyYjNhZDkwNTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK3PU093uPrIvs6nJLHiFyFJX55/o2aJ5aDh 8if1Ztfcn5ndsMZngWl5aE6C7dwF1ZEQ8edtsl38qVTbo+OOa8hRJkOk/ho6T7Og QgyCux5SNzqoHOTG6j7CdH8sL6vFYnjvGZ7mtDf52oK37cbZkjv9yfkiSlMUcgGH OubaQk5MtefZwW4Gn9CdkMkizGdjN/UJq1CLrCNP99VORkg+6RgWKW1ZTgYzKL61 oEI63ZhOTetT864nkbJfGReEMi44GYzrQtu0g9QLDcoEq/TJt+euH9KvUm0G+UsC f2qqNN+7OySgcLRKmP0I2UFcyqixkOXbLw3o0A8XJSiHt/pAAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7cUHXDNwQRFRxbfJGnfDriUxoZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTJlYWFhODMtYjUwOS0z OTc1LThlNjctNDRkMTc2NzBjYTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4badFsLA73LlB0END6AHh8nDLlbxZwdxgXk2MAv7LvXcTshAOAJNmH U7mbTGUxLhh/levdCLTjL6pOs0kJjyyaW7gyZlPcYinx33TyYTwaf8EeyidorfWQ aNwT3tyVYUiljEL7fYJmZHFYH4jOwl+Hj2VcibCSd/NrS/ORjxyRnAtgEvfJZE7U 9dL1oefyv6mDLr3A6b7vUgz6RA8O3d3oueTymps6YbH/8ISIxPiK8NSZk1qk4ti+ X+6xdibGOtp6YUGX2SKpEKto/QKIKgnN7b91j75/NtgE8wB09W/hT4aeaTTfMmiQ CZkjJsAZabD6q/HzFL5fkQTgCivp13I= -----END CERTIFICATE-----Generated at Thu Mar 26 12:03:53 2026 by rpki-client