$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3650bb1b-cfa2-3712-bac9-294757040513.roa File: 3650bb1b-cfa2-3712-bac9-294757040513.roa (raw, json) Hash identifier: F+5LU6PllM1qGDDf1JeEJNVTe8lrVH0zBOl1Vtk9zSg= Subject key identifier: E9:D1:72:66:DA:1D:B4:E1:51:58:65:EC:1D:69:37:5B:0F:3C:58:C8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D300A2D810855179E64A6A3F0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3650bb1b-cfa2-3712-bac9-294757040513.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 396547 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:2d:81:08:55:17:9e:64:a6:a3:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=c507f01c-d32b-4799-a8d7-1337a5676fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:54:f7:6c:cb:e9:f2:9f:81:c8:f8:cc:0e:79: 29:56:01:a2:39:1e:26:81:cf:7d:25:b7:78:97:61: 38:64:ba:29:39:bf:f1:6d:9a:d7:00:f0:f2:98:5b: 1b:b8:46:35:e3:49:38:7a:8b:65:38:99:9f:32:62: f2:9a:2d:0b:b6:ba:e5:9d:2d:7a:41:e7:24:b1:ec: 35:0f:09:a5:74:e1:25:2e:aa:71:7f:de:ff:51:ca: 53:9e:2f:23:35:58:b1:73:8d:14:2b:9c:e8:19:39: 94:c7:e8:6f:ef:0a:71:d0:23:a3:28:f9:2e:19:03: 74:48:a8:5e:2f:0d:ab:62:be:f3:b5:07:ae:e2:6e: fc:6f:5a:77:40:46:d9:39:c3:f6:a4:64:01:e8:b3: cf:34:3a:cf:4b:ea:1f:43:7e:ba:60:3e:e1:78:46: 8c:00:32:09:d0:75:87:05:2c:bc:2b:4d:05:63:90: 62:15:5d:56:e1:cf:46:79:77:0b:b6:79:ac:29:b1: 2b:52:09:44:f8:04:63:cb:62:34:d1:10:18:a8:22: 45:75:9d:0b:c2:e9:5b:9a:d0:be:8e:34:b4:c5:52: 2e:16:56:38:a2:42:83:0f:4a:b9:69:e0:46:bf:8e: 9d:66:e8:8c:60:96:26:6c:c0:f5:51:2f:1d:27:43: ab:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D1:72:66:DA:1D:B4:E1:51:58:65:EC:1D:69:37:5B:0F:3C:58:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3650bb1b-cfa2-3712-bac9-294757040513.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:02:77:57:65:17:bb:da:fc:fc:2e:2b:27:97:b8:fc:5f:6c: 45:9c:db:b7:4e:5e:5a:4c:6d:76:12:fa:2b:68:50:f0:87:9a: 58:e2:ea:01:49:63:c5:71:45:4f:97:cd:d3:20:58:c1:e4:33: 90:6d:ce:1d:90:e6:8c:ce:1b:47:11:01:5f:fd:a2:68:36:e9: d3:b1:1a:57:bc:60:f7:44:bb:9c:0e:70:d8:a1:d7:e0:ef:9a: 8f:b6:35:6f:e2:2f:9b:37:ec:5d:ce:54:21:b7:42:24:c4:33: a5:34:fe:eb:8a:c0:16:04:99:7d:38:92:bd:64:bf:1e:d7:b8: 6d:5f:4b:9f:90:d7:6c:d0:9a:a1:9c:ce:7a:cc:6e:cf:ce:c2: 84:86:29:f9:90:fe:0a:07:fd:95:9d:0b:33:52:b1:3f:1c:5d: 60:ad:d3:18:c0:97:29:2e:4b:88:24:c5:23:80:90:d1:41:f5: 4c:10:f8:92:01:35:7c:2b:90:ad:87:39:15:56:7a:1b:29:93: c7:3d:d9:52:2c:bd:d0:83:0e:dd:06:4c:64:e1:4d:52:c4:02: 07:9d:71:90:a6:fa:d9:c0:8c:cc:5e:02:94:27:a0:cd:5c:a0: b7:0c:a8:a5:78:11:89:0b:3b:f4:bf:46:4f:f6:c4:63:91:d1: 49:9b:db:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCi2BCFUXnmSmo/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YzUwN2YwMWMtZDMyYi00Nzk5LWE4ZDctMTMzN2E1Njc2ZmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVT3bMvp8p+ByPjMDnkpVgGiOR4mgc99Jbd4 l2E4ZLopOb/xbZrXAPDymFsbuEY140k4eotlOJmfMmLymi0LtrrlnS16Qecksew1 DwmldOElLqpxf97/UcpTni8jNVixc40UK5zoGTmUx+hv7wpx0COjKPkuGQN0SKhe Lw2rYr7ztQeu4m78b1p3QEbZOcP2pGQB6LPPNDrPS+ofQ366YD7heEaMADIJ0HWH BSy8K00FY5BiFV1W4c9GeXcLtnmsKbErUglE+ARjy2I00RAYqCJFdZ0LwulbmtC+ jjS0xVIuFlY4okKDD0q5aeBGv46dZuiMYJYmbMD1US8dJ0Or0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnRcmbaHbThUVhl7B1pN1sPPFjIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzY1MGJiMWItY2ZhMi0z NzEyLWJhYzktMjk0NzU3MDQwNTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYCd1dlF7va/PwuKyeXuPxfbEWc27dOXlpMbXYS+itoUPCHmlji6gFJ Y8VxRU+XzdMgWMHkM5Btzh2Q5ozOG0cRAV/9omg26dOxGle8YPdEu5wOcNih1+Dv mo+2NW/iL5s37F3OVCG3QiTEM6U0/uuKwBYEmX04kr1kvx7XuG1fS5+Q12zQmqGc znrMbs/OwoSGKfmQ/goH/ZWdCzNSsT8cXWCt0xjAlykuS4gkxSOAkNFB9UwQ+JIB NXwrkK2HORVWehspk8c92VIsvdCDDt0GTGThTVLEAgedcZCm+tnAjMxeApQnoM1c oLcMqKV4EYkLO/S/Rk/2xGOR0Umb26Q= -----END CERTIFICATE-----Generated at Thu Mar 26 14:45:00 2026 by rpki-client