$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23cef1cf-5840-3e2b-b759-ecc091af4622.roa File: 23cef1cf-5840-3e2b-b759-ecc091af4622.roa (raw, json) Hash identifier: Co2kzXzm5Xze9XW9LvLaI0YdaMqa7RM+lKti3UcNuAU= Subject key identifier: 4F:5A:8F:F2:75:38:7C:FB:AC:B9:8B:58:00:80:65:60:CC:71:12:07 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F497DA7477BB8ECC17F7E1DC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23cef1cf-5840-3e2b-b759-ecc091af4622.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396582 IP address blocks: 192.68.126.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:a7:47:7b:b8:ec:c1:7f:7e:1d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=02d97ae8-d59c-4927-b440-5190e7a44e56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ea:e3:e8:4d:e4:69:db:51:1f:af:fc:d7:19: 88:12:40:09:af:35:be:3c:5e:30:be:72:b1:70:fa: 2e:d5:2e:40:11:dc:2e:4c:c3:75:ef:f1:1f:61:71: cc:97:7c:42:1a:90:5b:90:44:93:a3:44:fa:64:98: f2:5d:c8:53:b2:c6:77:69:b4:a1:58:db:be:51:4e: 27:c5:81:0c:4a:38:16:c9:8f:7c:78:25:c7:27:2c: 2d:58:a3:bd:51:a6:09:ca:a9:20:2f:ba:e8:f6:98: f6:f0:99:69:c3:e9:1d:bf:6f:66:e5:8d:ec:4a:10: cc:cb:ec:e3:28:10:1a:81:c1:ef:54:60:ca:7e:92: d9:88:8a:f4:2f:fa:fa:fb:99:40:a7:7b:71:f8:81: f0:bf:d9:65:4b:bb:ac:17:be:40:87:2b:5e:f1:25: 1e:2c:28:51:8f:38:cc:52:30:8c:bc:56:b6:d3:7c: 77:e1:ef:89:2f:ad:32:4e:71:c3:0a:ee:36:22:11: 4c:4a:a0:85:93:9f:45:d1:54:54:1d:f1:79:b6:4c: 76:de:68:08:16:fd:c0:de:21:34:2d:fc:24:0b:0a: e4:a9:46:c8:88:5a:03:54:ec:ce:6f:a9:eb:9c:64: 98:e8:56:dd:54:24:42:d7:1e:27:f8:e7:59:14:dd: c3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:5A:8F:F2:75:38:7C:FB:AC:B9:8B:58:00:80:65:60:CC:71:12:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23cef1cf-5840-3e2b-b759-ecc091af4622.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:54:05:22:05:eb:76:a8:bf:91:2e:ab:92:bc:2f:57:5d:d7: 4c:45:da:5f:75:8f:f9:85:5c:fe:12:0a:c5:79:db:21:73:8a: 26:5b:fa:d7:6c:5b:ed:0d:60:71:5d:d1:9a:e3:e8:df:5c:ac: 3d:b6:b1:11:9f:1f:43:6b:78:1f:90:1e:0c:cf:f5:00:44:23: f9:e0:ac:4f:0d:27:28:81:38:46:f6:16:fb:91:35:3f:9a:68: 9b:28:fa:df:71:d3:3f:82:cc:6f:2e:29:fd:4e:72:fb:43:1f: a1:4c:33:9f:0e:6e:cb:71:ca:07:67:fa:ff:fe:33:7d:91:29: 61:69:4a:cc:69:15:aa:d6:f8:ce:6f:e8:a6:42:00:67:39:a1: 86:6d:5e:c6:cd:66:b2:d3:64:9c:22:e4:dd:11:43:e8:98:9b: 90:e7:83:4a:c6:ed:6c:0f:79:5c:a0:1c:cd:66:2f:3b:ea:c5: 23:39:89:33:c5:05:42:6d:0d:de:6e:b3:c6:84:3b:09:5d:8a: 2a:e6:ea:8b:9c:cc:db:2d:a8:2f:c2:fd:58:75:1f:0f:bc:03: 6d:83:12:f2:3f:68:57:57:5d:01:cb:d3:be:bf:32:e5:50:f8: 0f:09:65:fd:a9:79:fa:6d:7f:49:ca:d4:45:fd:9a:76:70:3d: b6:94:fe:27 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JfadHe7jswX9+HcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDJkOTdhZTgtZDU5Yy00OTI3LWI0NDAtNTE5MGU3YTQ0ZTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+rj6E3kadtRH6/81xmIEkAJrzW+PF4wvnKx cPou1S5AEdwuTMN17/EfYXHMl3xCGpBbkESTo0T6ZJjyXchTssZ3abShWNu+UU4n xYEMSjgWyY98eCXHJywtWKO9UaYJyqkgL7ro9pj28Jlpw+kdv29m5Y3sShDMy+zj KBAagcHvVGDKfpLZiIr0L/r6+5lAp3tx+IHwv9llS7usF75Ahyte8SUeLChRjzjM UjCMvFa203x34e+JL60yTnHDCu42IhFMSqCFk59F0VRUHfF5tkx23mgIFv3A3iE0 LfwkCwrkqUbIiFoDVOzOb6nrnGSY6FbdVCRC1x4n+OdZFN3DTQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE9aj/J1OHz7rLmLWACAZWDMcRIHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjNjZWYxY2YtNTg0MC0z ZTJiLWI3NTktZWNjMDkxYWY0NjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAIVAUiBet2qL+RLquSvC9XXddMRdpfdY/5hVz+EgrFedshc4omW/rX bFvtDWBxXdGa4+jfXKw9trERnx9Da3gfkB4Mz/UARCP54KxPDScogThG9hb7kTU/ mmibKPrfcdM/gsxvLin9TnL7Qx+hTDOfDm7LccoHZ/r//jN9kSlhaUrMaRWq1vjO b+imQgBnOaGGbV7GzWay02ScIuTdEUPomJuQ54NKxu1sD3lcoBzNZi876sUjOYkz xQVCbQ3ebrPGhDsJXYoq5uqLnMzbLagvwv1YdR8PvANtgxLyP2hXV10By9O+vzLl UPgPCWX9qXn6bX9JytRF/Zp2cD22lP4n -----END CERTIFICATE-----Generated at Sun Sep 27 23:29:48 2026 by rpki-client