$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57b8f9da-4fe4-3196-a54c-5b842387a534.roa File: 57b8f9da-4fe4-3196-a54c-5b842387a534.roa (raw, json) Hash identifier: QbJWTVIF9csNKffMdl9NK9fBTON80A6FTM4x9JHhUTU= Subject key identifier: A2:3F:27:EB:4E:2F:D0:86:E5:BB:76:52:F0:DE:6B:5B:3A:AD:2F:8C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D143D973367B71F235FD6CD00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57b8f9da-4fe4-3196-a54c-5b842387a534.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 396591 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:97:33:67:b7:1f:23:5f:d6:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=8f183775-1435-42a2-8b6f-876fddaccd78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:85:f9:28:25:93:98:43:df:4e:d2:79:6e:be: 68:11:bd:5b:f5:7a:91:e0:8d:34:fd:82:bd:6c:28: b1:4b:57:91:5d:07:14:1a:46:de:11:f3:e0:95:c2: 5f:07:cf:a9:33:0e:38:cc:22:92:1f:48:20:46:e8: 89:7d:6f:50:f3:87:5e:60:17:bb:be:f5:33:ea:20: a2:ce:e8:fb:c1:fb:f0:a3:57:5c:c7:7a:9a:b6:c2: 7a:b0:d6:28:c4:68:87:16:50:50:ee:59:5e:c3:1e: e6:72:a3:4d:1d:92:09:f7:eb:91:c2:c6:a7:25:0a: 86:87:19:5b:c2:9c:dd:56:d6:23:bd:d6:4e:bb:8d: 82:2d:47:c0:cb:7c:5b:de:1b:fb:4a:8d:bf:68:d0: 6f:fc:5e:cc:11:4f:a0:18:8e:3d:c0:58:59:e0:e0: ac:f8:10:2e:5b:39:0d:c3:13:49:cc:d0:52:d3:26: 93:ca:ba:cc:07:ae:f4:f8:a0:d7:ff:4e:45:3c:d2: 98:97:7f:c8:77:47:34:f2:f7:46:b1:83:c6:c4:cd: 2c:f5:3b:bb:ae:ed:52:5d:48:fa:3d:85:22:98:49: 1a:d5:2a:72:34:89:e2:15:3b:a3:bb:7c:8c:ed:e5: 11:37:26:60:66:ce:b5:5e:43:f1:07:40:25:6d:da: a0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:3F:27:EB:4E:2F:D0:86:E5:BB:76:52:F0:DE:6B:5B:3A:AD:2F:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57b8f9da-4fe4-3196-a54c-5b842387a534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:17:5e:71:d9:fb:6e:30:0d:bb:43:b9:0b:5e:19:e6:86:cc: 63:7c:20:47:fc:95:15:07:24:96:01:db:5d:19:db:57:32:8c: fd:12:b6:46:a2:93:a6:92:76:68:6e:84:59:ce:3b:5b:dc:87: aa:82:39:3a:13:8f:10:f3:26:48:69:11:4c:c8:e1:23:c7:5a: 06:d1:3a:0d:ff:5d:c4:d8:82:ed:87:7d:a5:80:82:60:7b:dd: ea:99:b2:89:cf:f2:e2:6a:1c:a0:96:6a:34:9b:69:57:f3:04: de:a1:99:81:a1:0e:7f:49:6a:ec:71:b6:bd:c4:9a:e2:b5:70: 55:ac:30:ce:18:f1:b8:f7:b6:b4:32:a6:65:bc:db:11:e8:55: be:c1:ff:b5:4f:58:7c:00:f2:72:9e:c3:8a:e2:91:ab:b4:8b: fd:04:ae:df:1f:bd:4f:b3:5e:9a:c7:7b:40:6f:43:04:cc:00: ec:65:72:35:87:42:69:fc:3b:2d:1b:30:86:00:d6:61:07:f5: a8:0b:1b:23:fb:41:8b:6a:30:aa:80:ed:58:9b:af:30:d3:4d: ff:30:fa:57:f7:90:00:d9:0c:2d:64:4c:68:93:64:5b:df:9b: 35:c2:5e:d5:23:a9:b5:a0:7f:6f:34:a4:12:19:05:24:13:c8: 25:a8:11:bc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0UPZczZ7cfI1/WzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk OGYxODM3NzUtMTQzNS00MmEyLThiNmYtODc2ZmRkYWNjZDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIX5KCWTmEPfTtJ5br5oEb1b9XqR4I00/YK9 bCixS1eRXQcUGkbeEfPglcJfB8+pMw44zCKSH0ggRuiJfW9Q84deYBe7vvUz6iCi zuj7wfvwo1dcx3qatsJ6sNYoxGiHFlBQ7llewx7mcqNNHZIJ9+uRwsanJQqGhxlb wpzdVtYjvdZOu42CLUfAy3xb3hv7So2/aNBv/F7MEU+gGI49wFhZ4OCs+BAuWzkN wxNJzNBS0yaTyrrMB670+KDX/05FPNKYl3/Id0c08vdGsYPGxM0s9Tu7ru1SXUj6 PYUimEka1SpyNIniFTuju3yM7eURNyZgZs61XkPxB0AlbdqgOQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKI/J+tOL9CG5bt2UvDea1s6rS+MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTdiOGY5ZGEtNGZlNC0z MTk2LWE1NGMtNWI4NDIzODdhNTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCdF15x2ftuMA27Q7kLXhnmhsxjfCBH/JUVBySWAdtdGdtXMoz9ErZG opOmknZoboRZzjtb3Ieqgjk6E48Q8yZIaRFMyOEjx1oG0ToN/13E2ILth32lgIJg e93qmbKJz/Liahyglmo0m2lX8wTeoZmBoQ5/SWrscba9xJritXBVrDDOGPG497a0 MqZlvNsR6FW+wf+1T1h8APJynsOK4pGrtIv9BK7fH71Ps16ax3tAb0MEzADsZXI1 h0Jp/DstGzCGANZhB/WoCxsj+0GLajCqgO1Ym68w003/MPpX95AA2QwtZExok2Rb 35s1wl7VI6m1oH9vNKQSGQUkE8glqBG8 -----END CERTIFICATE-----Generated at Thu Mar 26 16:42:54 2026 by rpki-client