$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/45d8ac5b-ae72-3db4-b9db-5c636be8b01c.roa File: 45d8ac5b-ae72-3db4-b9db-5c636be8b01c.roa (raw, json) Hash identifier: iEHjNHljfGfhTBHxa0f8kZTpocKXtFwComRPp/XOMB0= Subject key identifier: A3:A5:59:33:42:56:C6:B1:E6:17:84:29:03:9A:5A:8A:C2:7D:D9:39 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D300A227ADE79C19C390E7180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/45d8ac5b-ae72-3db4-b9db-5c636be8b01c.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 396587 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:22:7a:de:79:c1:9c:39:0e:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=450afad1-4ab2-4ca5-8ed0-eb43d6cbbe71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:45:7b:5f:e2:7e:bc:34:95:7c:c0:ba:b3:04: 74:a4:fa:a0:12:ff:e6:37:8b:4c:2b:05:18:35:7c: 0c:87:28:47:f3:aa:b5:b4:bf:2f:36:00:e3:90:78: a4:5f:c4:e6:a7:91:32:d8:d5:b0:72:3f:1f:97:31: d1:02:0f:c3:45:d2:38:7e:fd:c9:a6:13:45:15:3e: a3:54:d0:4b:69:37:8f:df:32:c5:31:a9:64:b6:55: e3:74:c9:04:f2:c0:3f:09:9c:80:20:75:1c:97:b0: cc:e9:47:50:a8:d0:e8:d1:b2:5e:4a:6a:22:63:12: 7b:b9:d5:18:68:45:92:59:d8:0b:43:aa:b9:56:29: d0:0b:58:f1:8b:21:7e:ab:ff:37:ee:58:af:40:b0: e6:69:6a:f3:8d:fe:e9:b6:ff:81:6c:93:fa:18:c4: 5e:a9:a1:43:08:b8:02:de:5f:c3:a7:d2:3b:a0:87: 6c:6d:e9:ce:d5:52:fe:8e:1b:e5:21:35:a7:3c:cb: 49:89:ce:be:fe:17:3e:3a:c9:4c:73:e9:da:67:9c: 41:f5:66:7c:d8:28:f4:4a:04:89:28:dd:21:cf:a2: da:66:c7:77:73:5d:37:95:a5:10:8d:5b:e6:08:12: a4:28:51:5e:b7:49:77:f6:32:78:94:05:96:1a:f6: 48:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A5:59:33:42:56:C6:B1:E6:17:84:29:03:9A:5A:8A:C2:7D:D9:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/45d8ac5b-ae72-3db4-b9db-5c636be8b01c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:8e:56:b1:8f:33:fa:81:11:03:02:5a:32:e4:05:c8:0e:49: 8c:d3:44:27:1b:4a:d2:51:2d:f7:7e:4e:51:09:58:a1:0f:4e: 2f:56:94:b9:8b:4d:cf:13:28:6c:2c:48:0a:bc:ca:48:b7:0e: af:11:1f:7c:47:14:1d:82:f1:71:82:65:dd:01:bb:52:d6:92: 9f:98:84:6d:fa:ca:51:f9:9b:28:63:26:06:61:f9:35:af:22: 39:89:7a:89:47:eb:49:70:3d:1b:f6:18:aa:ed:b9:91:65:cb: 29:e3:1e:d1:ed:34:c0:78:11:2a:5d:82:c4:00:d8:39:be:c5: 8e:b4:30:98:78:a8:5a:82:63:f8:60:70:66:43:20:37:ac:70: ba:12:6d:a5:89:7f:3c:cb:4d:1c:6f:ea:ad:13:13:2b:81:66: b7:72:f2:8b:af:24:72:58:3e:a6:26:1d:ba:fa:36:dd:0b:10: c9:a0:e4:59:1b:cc:6f:53:6e:5a:c9:63:00:0c:6f:27:0e:3c: 54:7a:5b:01:e0:21:00:93:6f:47:8a:36:de:16:b4:b7:c6:a0: 9a:38:44:d4:76:bc:9f:fa:0e:40:bc:7b:7d:2e:45:9b:d9:ab: 6f:67:39:31:c4:b5:20:d9:eb:7b:65:cc:e0:a4:cf:f9:8d:9e: 0a:78:30:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCiJ63nnBnDkOcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NDUwYWZhZDEtNGFiMi00Y2E1LThlZDAtZWI0M2Q2Y2JiZTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0V7X+J+vDSVfMC6swR0pPqgEv/mN4tMKwUY NXwMhyhH86q1tL8vNgDjkHikX8Tmp5Ey2NWwcj8flzHRAg/DRdI4fv3JphNFFT6j VNBLaTeP3zLFMalktlXjdMkE8sA/CZyAIHUcl7DM6UdQqNDo0bJeSmoiYxJ7udUY aEWSWdgLQ6q5VinQC1jxiyF+q/837livQLDmaWrzjf7ptv+BbJP6GMReqaFDCLgC 3l/Dp9I7oIdsbenO1VL+jhvlITWnPMtJic6+/hc+OslMc+naZ5xB9WZ82Cj0SgSJ KN0hz6LaZsd3c103laUQjVvmCBKkKFFet0l39jJ4lAWWGvZIYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOlWTNCVsax5heEKQOaWorCfdk5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDVkOGFjNWItYWU3Mi0z ZGI0LWI5ZGItNWM2MzZiZThiMDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqOVrGPM/qBEQMCWjLkBcgOSYzTRCcbStJRLfd+TlEJWKEPTi9WlLmL Tc8TKGwsSAq8yki3Dq8RH3xHFB2C8XGCZd0Bu1LWkp+YhG36ylH5myhjJgZh+TWv IjmJeolH60lwPRv2GKrtuZFlyynjHtHtNMB4ESpdgsQA2Dm+xY60MJh4qFqCY/hg cGZDIDescLoSbaWJfzzLTRxv6q0TEyuBZrdy8ouvJHJYPqYmHbr6Nt0LEMmg5Fkb zG9TblrJYwAMbycOPFR6WwHgIQCTb0eKNt4WtLfGoJo4RNR2vJ/6DkC8e30uRZvZ q29nOTHEtSDZ63tlzOCkz/mNngp4MMQ= -----END CERTIFICATE-----Generated at Thu Mar 26 13:54:24 2026 by rpki-client