$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4754c8f4-78ec-3ee8-aaa8-6c283a4ec431.roa File: 4754c8f4-78ec-3ee8-aaa8-6c283a4ec431.roa (raw, json) Hash identifier: 9G/KxsOtJB/vJhct8IO3I+al6+O3E/Ckvq7KgDUhSX8= Subject key identifier: 51:ED:C5:5D:3B:A4:91:A8:CC:2B:C8:ED:78:D4:7A:45:81:16:92:A8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D143D9754FF57F969928FD680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4754c8f4-78ec-3ee8-aaa8-6c283a4ec431.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 396573 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:97:54:ff:57:f9:69:92:8f:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=9978607d-d439-477f-b168-c0006d634b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cb:47:a3:c7:f0:a1:a4:4a:8a:92:59:a3:74: 84:df:46:c3:56:ed:57:d4:31:ab:a8:fb:17:9c:13: 96:f2:20:df:ef:bc:52:57:44:b2:d2:90:86:3a:86: 72:fd:65:64:fc:e0:41:10:d1:90:b6:b5:a5:6c:e1: 44:8e:bc:5e:c2:47:39:58:fb:de:be:dc:9f:f8:ec: 14:78:0c:08:58:8d:8a:1c:c9:82:e4:4d:a5:50:ba: c2:28:16:31:73:fb:a5:26:72:52:f7:16:55:a4:c6: c5:6b:5c:18:53:7d:24:b4:a8:2e:4a:80:2d:d9:5c: 31:32:96:1c:5d:25:3a:ab:8b:8b:9f:7d:ff:e0:3b: e1:3e:d8:04:4c:47:1d:32:71:db:8f:32:c3:76:4b: 7c:d3:82:65:b8:05:e7:36:6a:54:44:3b:92:f6:1d: 7b:f1:d7:ad:69:10:44:eb:cd:72:d5:ec:d1:46:54: 03:b0:19:8f:ac:97:0b:54:f7:df:f3:d8:f0:5e:71: 4c:ba:91:4d:d6:12:f1:0a:f1:3b:2b:c6:12:52:12: 8f:01:3c:ae:e9:05:21:4e:b7:4f:05:4f:00:b8:52: 0e:3f:ed:dc:ce:55:60:f8:7e:37:34:5c:b1:3a:ad: 4c:8f:f0:2b:14:14:af:81:0a:77:3f:0d:5a:e1:6f: 3a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:ED:C5:5D:3B:A4:91:A8:CC:2B:C8:ED:78:D4:7A:45:81:16:92:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4754c8f4-78ec-3ee8-aaa8-6c283a4ec431.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:34:e4:ec:fe:9e:c3:5f:a3:cc:8b:cd:4b:9f:ef:14:24:ce: 0d:1c:35:2e:32:96:f8:3c:c8:83:51:29:5b:0e:ef:cb:7c:d7: f6:f7:c6:5d:5e:33:27:56:9d:80:5f:04:f1:74:68:fe:48:79: 7f:f6:56:02:0d:42:7b:97:de:8d:cd:bd:85:da:7f:41:2b:9c: 2c:41:a2:45:11:bd:e1:04:1f:ed:26:fd:d3:13:fd:26:39:ca: ab:98:a0:ef:6e:25:dd:7a:87:38:3b:82:d7:fe:cf:0a:ac:39: d2:92:84:72:04:dc:7a:da:af:f3:a8:d6:e2:ee:bb:3b:c2:dd: 4a:2e:15:6c:7d:8d:d5:bb:73:7c:1c:a1:5d:2b:cf:7b:22:33: 15:0b:3e:52:c9:ad:c3:b0:8e:2d:d0:7e:75:47:10:40:60:06: c7:d2:90:fc:ef:51:6f:fd:70:d5:55:1c:81:cb:62:b7:9b:33: 52:b7:6f:a7:76:33:5f:a1:35:fc:6d:37:a1:de:50:37:a5:2a: 26:48:6b:97:b4:a2:ef:5f:e4:d5:c3:0d:90:74:7a:e1:e7:9c: 65:e9:9f:63:21:69:5a:c5:3a:90:b7:97:79:e3:6f:c6:ae:db: ae:26:d0:37:62:02:5c:67:42:e7:60:06:f9:77:d7:6f:00:83: 59:57:9d:01 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0UPZdU/1f5aZKP1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk OTk3ODYwN2QtZDQzOS00NzdmLWIxNjgtYzAwMDZkNjM0YjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ctHo8fwoaRKipJZo3SE30bDVu1X1DGrqPsX nBOW8iDf77xSV0Sy0pCGOoZy/WVk/OBBENGQtrWlbOFEjrxewkc5WPvevtyf+OwU eAwIWI2KHMmC5E2lULrCKBYxc/ulJnJS9xZVpMbFa1wYU30ktKguSoAt2VwxMpYc XSU6q4uLn33/4DvhPtgETEcdMnHbjzLDdkt804JluAXnNmpURDuS9h178detaRBE 681y1ezRRlQDsBmPrJcLVPff89jwXnFMupFN1hLxCvE7K8YSUhKPATyu6QUhTrdP BU8AuFIOP+3czlVg+H43NFyxOq1Mj/ArFBSvgQp3Pw1a4W86fQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFHtxV07pJGozCvI7XjUekWBFpKoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDc1NGM4ZjQtNzhlYy0z ZWU4LWFhYTgtNmMyODNhNGVjNDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBmNOTs/p7DX6PMi81Ln+8UJM4NHDUuMpb4PMiDUSlbDu/LfNf298Zd XjMnVp2AXwTxdGj+SHl/9lYCDUJ7l96Nzb2F2n9BK5wsQaJFEb3hBB/tJv3TE/0m OcqrmKDvbiXdeoc4O4LX/s8KrDnSkoRyBNx62q/zqNbi7rs7wt1KLhVsfY3Vu3N8 HKFdK897IjMVCz5Sya3DsI4t0H51RxBAYAbH0pD871Fv/XDVVRyBy2K3mzNSt2+n djNfoTX8bTeh3lA3pSomSGuXtKLvX+TVww2QdHrh55xl6Z9jIWlaxTqQt5d542/G rtuuJtA3YgJcZ0LnYAb5d9dvAINZV50B -----END CERTIFICATE-----Generated at Thu Mar 26 10:54:23 2026 by rpki-client