$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ad8cad5-9981-3473-8d3c-8d6da4134207.roa File: 2ad8cad5-9981-3473-8d3c-8d6da4134207.roa (raw, json) Hash identifier: cao8mOdUouFpkboajwNaXzhFRo225nQp5tDsca/M/d0= Subject key identifier: 77:31:79:D9:83:3C:8B:DE:1B:E3:F1:74:FD:A9:ED:9D:61:41:0A:8D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D300A2BEB92DFB86CAA8BA680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ad8cad5-9981-3473-8d3c-8d6da4134207.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 36631 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:2b:eb:92:df:b8:6c:aa:8b:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=1ceb7ac1-708d-4336-a1f4-4fca644608ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4e:2d:83:3f:f0:e1:55:fd:d3:75:36:26:75: 44:b1:13:d5:e1:28:8e:7d:19:70:f4:80:dc:db:9b: b0:28:db:93:3b:b0:21:a2:0a:2b:30:30:c2:01:d0: 73:75:d6:99:49:83:96:67:67:50:93:a8:d2:5b:4a: 86:d9:c4:8d:b6:12:c7:aa:7f:88:d5:ed:82:4f:e8: 20:f1:fe:8d:0e:bf:67:db:3a:b5:f8:f7:aa:d3:82: a0:46:d2:40:73:9c:19:8e:18:2f:d5:3a:87:30:4c: 30:01:04:c9:10:8c:e1:de:fe:c2:84:08:cf:8d:dc: c7:c9:d3:65:24:fd:72:5a:ac:4d:ff:96:87:5c:5c: 07:58:5b:da:71:55:56:ad:62:42:9f:4f:be:06:7b: 6d:69:19:78:2c:9b:49:c6:1e:01:09:a7:65:e6:8f: df:0f:8d:53:7c:8c:4c:a8:bd:c5:18:76:99:35:12: 1e:0a:b6:c6:69:03:17:7a:77:ef:68:2a:7a:b4:7f: 5e:e0:8c:c2:48:60:5a:57:4b:2a:87:cf:44:94:8e: 90:2d:3d:e1:f4:10:42:09:8b:44:a6:3d:5d:4c:e4: 3f:d6:3f:cb:15:3b:9e:e6:9e:0f:77:a1:90:e7:9a: a6:96:22:f4:57:dc:8d:72:ee:92:2f:03:9e:6e:ce: 19:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:31:79:D9:83:3C:8B:DE:1B:E3:F1:74:FD:A9:ED:9D:61:41:0A:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ad8cad5-9981-3473-8d3c-8d6da4134207.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:51:68:ee:f7:42:72:b2:52:49:80:d8:04:9f:79:93:52:1c: 93:9f:8e:66:08:94:20:9f:8a:86:37:27:42:bc:6c:81:43:bd: a9:00:4e:a9:b0:a4:99:26:28:21:84:58:f1:2c:8b:84:80:ea: 08:69:dc:24:09:0e:b2:94:95:90:65:bd:f2:d2:74:a6:05:15: 03:c7:d6:52:7a:bc:e5:7e:72:a4:fc:16:df:b6:25:40:55:dc: de:ff:b6:55:f7:3c:39:ec:ae:f9:d7:82:cf:ce:27:d1:ec:a6: 9e:3d:bd:32:5b:bd:9e:d3:87:ef:c1:9e:23:b2:6b:a3:d2:a0: 1d:07:03:2b:71:06:ca:11:0b:17:3e:3b:41:f5:83:d0:65:ed: 3e:79:c8:5b:2f:f2:f7:38:71:95:cb:24:f9:7e:1a:96:8b:da: 09:73:d3:15:59:22:e4:43:71:cf:c8:1f:fa:23:3c:69:4f:16: 0f:65:89:0c:d0:91:9c:c3:4b:71:cf:4d:e0:ae:fa:de:36:da: 10:41:c3:85:76:ae:4a:35:c2:76:53:8e:fe:a8:92:2e:8b:a5: 69:ba:df:b9:85:4c:45:0b:91:5e:2c:13:88:5c:76:5e:42:66: 52:7b:09:5c:08:fe:d3:de:da:70:0a:80:d0:ad:9e:50:be:1d: a5:12:be:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCivrkt+4bKqLpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MWNlYjdhYzEtNzA4ZC00MzM2LWExZjQtNGZjYTY0NDYwOGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmE4tgz/w4VX903U2JnVEsRPV4SiOfRlw9IDc 25uwKNuTO7AhogorMDDCAdBzddaZSYOWZ2dQk6jSW0qG2cSNthLHqn+I1e2CT+gg 8f6NDr9n2zq1+Peq04KgRtJAc5wZjhgv1TqHMEwwAQTJEIzh3v7ChAjPjdzHydNl JP1yWqxN/5aHXFwHWFvacVVWrWJCn0++BnttaRl4LJtJxh4BCadl5o/fD41TfIxM qL3FGHaZNRIeCrbGaQMXenfvaCp6tH9e4IzCSGBaV0sqh89ElI6QLT3h9BBCCYtE pj1dTOQ/1j/LFTue5p4Pd6GQ55qmliL0V9yNcu6SLwOebs4ZNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcxedmDPIveG+PxdP2p7Z1hQQqNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmFkOGNhZDUtOTk4MS0z NDczLThkM2MtOGQ2ZGE0MTM0MjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxRaO73QnKyUkmA2ASfeZNSHJOfjmYIlCCfioY3J0K8bIFDvakATqmw pJkmKCGEWPEsi4SA6ghp3CQJDrKUlZBlvfLSdKYFFQPH1lJ6vOV+cqT8Ft+2JUBV 3N7/tlX3PDnsrvnXgs/OJ9Hspp49vTJbvZ7Th+/BniOya6PSoB0HAytxBsoRCxc+ O0H1g9Bl7T55yFsv8vc4cZXLJPl+GpaL2glz0xVZIuRDcc/IH/ojPGlPFg9liQzQ kZzDS3HPTeCu+t422hBBw4V2rko1wnZTjv6oki6LpWm637mFTEULkV4sE4hcdl5C ZlJ7CVwI/tPe2nAKgNCtnlC+HaUSvqk= -----END CERTIFICATE-----Generated at Thu Mar 26 14:25:40 2026 by rpki-client