$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18255928-0614-33ce-a50e-25ff30e84c7a.roa File: 18255928-0614-33ce-a50e-25ff30e84c7a.roa (raw, json) Hash identifier: yVqijoMcByr7NVaDSIAUAp+Ysf0S+ozk3mAHidViBzk= Subject key identifier: D3:0B:A7:45:27:F8:00:46:A0:13:6B:69:3A:41:19:D2:94:90:5B:8C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F549D5B07485156A48728EB00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18255928-0614-33ce-a50e-25ff30e84c7a.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 397193 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:5b:07:48:51:56:a4:87:28:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=7093ff06-302e-4ea8-bf84-a79778b03a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:79:59:d3:03:19:ca:ab:4c:ba:01:83:d0:1d: 93:17:ae:0e:0b:fc:1c:0c:d6:d1:07:a9:dc:f0:6d: d2:58:c1:f7:59:42:b6:33:ee:5a:5d:90:7a:01:e0: 8d:cd:45:55:30:32:8c:d5:67:66:15:18:d7:a8:25: c1:c3:2d:f6:59:d6:82:d5:c3:a7:2e:2b:58:e7:49: f9:05:a9:09:69:2c:5d:f8:0a:cb:f5:54:36:b5:07: 88:49:b0:4b:49:c3:34:14:13:f6:c4:33:27:c0:43: 24:c6:b9:d1:9e:ea:d2:d0:cd:2b:69:02:2d:80:8a: f4:be:0b:37:76:32:ab:cd:6f:39:35:48:ca:ea:70: 1d:bc:a8:70:dd:69:d0:ef:e6:dd:5e:49:a8:dc:ab: 76:49:e0:94:1a:87:11:21:4d:e4:3f:24:db:1a:ff: 38:63:e6:10:46:24:7b:e0:32:af:81:63:cd:c5:b5: 14:8c:6e:8e:38:6c:ad:99:ad:50:16:cb:e5:ec:65: 04:e5:48:ed:d2:f0:94:c6:9d:34:c5:7e:17:00:0e: bc:9a:84:3e:3e:26:ac:2f:c5:89:f5:95:0d:b4:70: ad:90:e9:52:10:b5:3c:28:64:96:16:72:18:46:12: c0:38:a0:65:a7:83:d6:5c:be:99:5e:03:59:ea:20: c6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:0B:A7:45:27:F8:00:46:A0:13:6B:69:3A:41:19:D2:94:90:5B:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18255928-0614-33ce-a50e-25ff30e84c7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:7b:77:99:32:dc:71:2b:a3:a8:2c:0b:e6:ba:07:ee:82:14: 2b:5e:05:66:e6:9f:1f:a0:2b:0f:56:f9:07:9d:f1:12:f3:b3: 23:c2:9e:b7:c0:4e:87:95:a8:25:83:d5:56:18:58:9a:17:33: 26:80:2c:b2:98:c7:11:9c:b3:1f:91:fe:15:6c:a9:1c:6c:d2: 70:f7:75:1c:a1:20:4c:14:da:0d:ef:6d:0c:60:15:46:90:21: 67:dc:95:cd:50:a5:0e:81:fc:5e:4e:89:5f:2d:02:21:af:6b: 8a:56:05:76:a5:5f:97:b7:55:66:b1:a1:04:94:27:ba:29:21: b0:d6:d3:12:8a:af:d8:04:82:7b:2b:d3:1c:9a:c6:1c:fd:50: 50:80:89:8f:8f:19:80:57:ea:c7:48:8d:0f:68:63:89:07:d0: e0:d5:73:83:03:ad:a2:47:fb:92:a8:e6:76:ea:f5:d4:35:2d: 43:0d:3a:11:d8:4b:57:03:ec:50:21:6d:0d:8a:ee:46:66:3a: 4b:88:1b:93:8a:b5:7b:e1:7f:28:c9:4f:be:a2:48:02:3c:78: 55:1b:2a:ec:f9:f4:a4:20:54:7a:2d:03:2b:8e:0e:97:f1:72: 6c:ea:7a:c2:8e:43:1a:75:c7:df:92:6c:c9:54:ed:0f:60:9b: 01:22:09:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnVsHSFFWpIco6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NzA5M2ZmMDYtMzAyZS00ZWE4LWJmODQtYTc5Nzc4YjAzYTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3lZ0wMZyqtMugGD0B2TF64OC/wcDNbRB6nc 8G3SWMH3WUK2M+5aXZB6AeCNzUVVMDKM1WdmFRjXqCXBwy32WdaC1cOnLitY50n5 BakJaSxd+ArL9VQ2tQeISbBLScM0FBP2xDMnwEMkxrnRnurS0M0raQItgIr0vgs3 djKrzW85NUjK6nAdvKhw3WnQ7+bdXkmo3Kt2SeCUGocRIU3kPyTbGv84Y+YQRiR7 4DKvgWPNxbUUjG6OOGytma1QFsvl7GUE5Ujt0vCUxp00xX4XAA68moQ+PiasL8WJ 9ZUNtHCtkOlSELU8KGSWFnIYRhLAOKBlp4PWXL6ZXgNZ6iDGiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMLp0Un+ABGoBNraTpBGdKUkFuMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTgyNTU5MjgtMDYxNC0z M2NlLWE1MGUtMjVmZjMwZTg0YzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD57d5ky3HEro6gsC+a6B+6CFCteBWbmnx+gKw9W+Qed8RLzsyPCnrfA ToeVqCWD1VYYWJoXMyaALLKYxxGcsx+R/hVsqRxs0nD3dRyhIEwU2g3vbQxgFUaQ IWfclc1QpQ6B/F5OiV8tAiGva4pWBXalX5e3VWaxoQSUJ7opIbDW0xKKr9gEgnsr 0xyaxhz9UFCAiY+PGYBX6sdIjQ9oY4kH0ODVc4MDraJH+5Ko5nbq9dQ1LUMNOhHY S1cD7FAhbQ2K7kZmOkuIG5OKtXvhfyjJT76iSAI8eFUbKuz59KQgVHotAyuODpfx cmzqesKOQxp1x9+SbMlU7Q9gmwEiCT4= -----END CERTIFICATE-----Generated at Tue Sep 29 11:49:18 2026 by rpki-client