$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29c20774-0704-3daa-967f-59cba395221f.roa File: 29c20774-0704-3daa-967f-59cba395221f.roa (raw, json) Hash identifier: byEy3/YglN9BWOuCHxpPy3S5qqv+lnsN4tZABJGbrgk= Subject key identifier: 41:25:0A:8A:9E:24:38:D3:11:3F:E2:D9:EB:33:D1:4B:6A:8C:01:A4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F497D94799D9022EDF5413D40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29c20774-0704-3daa-967f-59cba395221f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36618 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:94:79:9d:90:22:ed:f5:41:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d85a68b6-789c-46ee-999f-184324a1e76d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ae:fd:e2:2a:71:0e:f7:7d:02:a9:c6:82:97: d1:91:be:ec:11:10:67:90:d6:5d:98:4f:11:ee:55: bf:b6:ec:11:14:41:a7:21:7b:62:9b:27:2a:84:95: 90:95:f5:fa:10:22:7c:ca:2f:69:2f:7c:46:60:ba: 1f:9a:4c:05:c6:ce:f8:e0:22:11:82:0c:74:d3:70: 07:64:bd:9f:ce:fb:89:df:2a:3e:dd:c5:6d:28:2a: 29:e5:35:45:89:6e:3b:f2:d6:cc:84:6e:a8:c0:33: 1d:d0:9e:e9:3f:ef:b1:28:1c:f7:92:86:64:30:67: 9f:d7:a4:dd:b0:75:48:01:cd:1c:fe:11:af:30:66: c4:60:22:22:95:f4:d3:a5:8e:1a:e7:a2:5b:89:c5: a8:de:bf:55:75:24:98:d2:f0:50:7d:5a:95:0e:f8: a9:db:da:d9:38:a7:d5:f9:ec:fe:f0:70:f1:48:bf: 0c:0b:7a:54:62:1f:de:f5:0a:4f:5a:aa:82:82:4a: ef:c1:68:ff:73:b8:bb:be:b0:18:1b:8a:be:fd:32: 22:bd:1f:88:d4:e5:c8:6d:81:aa:7e:c6:76:42:64: d5:1f:ea:a1:30:fe:b5:29:9f:5e:7f:52:c4:dd:9b: 8a:34:af:b1:c0:f9:7c:96:5b:84:8f:3b:bc:cf:bf: 17:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:25:0A:8A:9E:24:38:D3:11:3F:E2:D9:EB:33:D1:4B:6A:8C:01:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29c20774-0704-3daa-967f-59cba395221f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:a2:e7:01:98:9e:0b:7a:3e:07:c1:45:f0:62:5b:9a:a3:87: a1:42:61:31:ca:cd:c5:38:04:e7:12:10:69:43:9e:6a:eb:c6: c9:55:3c:0c:d3:6c:7b:da:b5:fd:82:75:df:45:55:1f:df:8b: da:35:b0:23:35:f3:cb:4d:1a:ca:ad:90:fe:a9:9d:2a:ab:79: 85:a8:5f:f7:a4:82:69:03:ec:c5:84:80:a9:73:51:4d:cf:52: 69:68:df:ba:29:0c:7f:36:91:55:f5:4d:bb:72:ea:4f:b9:d0: 01:5f:a9:fc:31:89:de:23:e3:29:fb:46:82:33:8d:1b:f4:a5: ac:33:4f:2a:07:02:9f:d2:99:cf:89:05:ac:ab:05:7d:c8:7d: d3:cd:17:32:c6:10:6d:3f:d1:6c:0d:a2:00:08:b7:f9:c0:29: 71:85:87:ce:a8:a4:49:9a:20:aa:72:1f:77:39:7a:84:1f:9c: d2:24:2d:1c:41:52:e1:ed:c2:0c:af:fd:b2:2f:2b:fa:9b:18: 8e:6d:14:0b:8a:16:1e:83:15:1b:3d:d7:5f:f7:5c:ba:11:38: 95:7f:54:ad:94:64:5b:0c:d9:2c:21:34:b1:68:c7:d8:81:5d: ba:a3:fd:84:ee:7e:75:5c:fa:03:30:24:cb:ee:92:ad:60:62: ac:d2:5c:85 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JfZR5nZAi7fVBPUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDg1YTY4YjYtNzg5Yy00NmVlLTk5OWYtMTg0MzI0YTFlNzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmK794ipxDvd9AqnGgpfRkb7sERBnkNZdmE8R 7lW/tuwRFEGnIXtimycqhJWQlfX6ECJ8yi9pL3xGYLofmkwFxs744CIRggx003AH ZL2fzvuJ3yo+3cVtKCop5TVFiW478tbMhG6owDMd0J7pP++xKBz3koZkMGef16Td sHVIAc0c/hGvMGbEYCIilfTTpY4a56JbicWo3r9VdSSY0vBQfVqVDvip29rZOKfV +ez+8HDxSL8MC3pUYh/e9QpPWqqCgkrvwWj/c7i7vrAYG4q+/TIivR+I1OXIbYGq fsZ2QmTVH+qhMP61KZ9ef1LE3ZuKNK+xwPl8lluEjzu8z78XrQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEElCoqeJDjTET/i2esz0UtqjAGkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjljMjA3NzQtMDcwNC0z ZGFhLTk2N2YtNTljYmEzOTUyMjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBaoucBmJ4Lej4HwUXwYluao4ehQmExys3FOATnEhBpQ55q68bJVTwM 02x72rX9gnXfRVUf34vaNbAjNfPLTRrKrZD+qZ0qq3mFqF/3pIJpA+zFhICpc1FN z1JpaN+6KQx/NpFV9U27cupPudABX6n8MYneI+Mp+0aCM40b9KWsM08qBwKf0pnP iQWsqwV9yH3TzRcyxhBtP9FsDaIACLf5wClxhYfOqKRJmiCqch93OXqEH5zSJC0c QVLh7cIMr/2yLyv6mxiObRQLihYegxUbPddf91y6ETiVf1StlGRbDNksITSxaMfY gV26o/2E7n51XPoDMCTL7pKtYGKs0lyF -----END CERTIFICATE-----Generated at Sat Sep 26 11:32:54 2026 by rpki-client