$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b6de8f6-a015-3146-b901-c80a9d1208c1.roa File: 5b6de8f6-a015-3146-b901-c80a9d1208c1.roa (raw, json) Hash identifier: 690QL1O8E20Q/k51sPGE0fYOBhJTjLR0jFHe0/bW8Bw= Subject key identifier: 38:27:15:0F:DA:7D:5C:03:F0:60:C3:C8:AB:A3:D1:33:B4:E8:E5:0C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F497F5693E59BD5F57D9C99B8 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b6de8f6-a015-3146-b901-c80a9d1208c1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 32651 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:56:93:e5:9b:d5:f5:7d:9c:99:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1ea819ad-9acc-4c3b-b23c-3441ac0c0df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e5:30:21:29:e9:68:71:cc:c7:85:50:24:6d: ee:8a:fa:42:25:08:19:83:cf:74:ee:27:98:8d:a7: 89:c6:a7:a2:32:1b:cf:96:e2:ac:36:2d:98:c1:2a: 22:ba:a2:f8:3c:87:b7:04:26:d0:ee:3c:a6:33:4a: 54:58:7d:f9:bf:5c:54:6d:e4:41:60:5a:3b:83:36: 0f:f4:f4:11:48:24:ba:9b:fa:fc:fa:fc:90:17:42: b0:0a:18:43:13:41:ba:5c:87:07:32:63:22:e1:9e: ad:3c:6a:57:e1:5e:6b:55:ae:3e:99:62:79:b4:79: e5:ed:80:d8:7b:44:cb:b1:67:fd:42:b7:1a:3d:1a: 85:90:28:b0:c3:3d:f5:52:71:bb:a2:dd:75:ac:ca: 17:65:2e:00:13:9f:45:e1:0d:39:5a:a7:d2:a9:43: b3:0c:57:5e:b3:2e:57:c2:cd:c5:68:b8:ac:9a:5d: 1d:5c:e0:46:f8:1d:a3:5f:04:7b:b8:74:ad:9f:e1: 97:8f:82:1d:93:ca:47:d8:02:1c:07:b2:52:6e:52: c4:0d:fc:14:c1:eb:35:26:ec:f7:75:2f:ce:e5:ac: f0:70:d3:c8:56:27:8b:18:43:fa:f9:e0:ad:2c:6f: 98:f6:88:91:72:9b:2e:7d:7c:f3:37:05:b0:85:a0: ac:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:27:15:0F:DA:7D:5C:03:F0:60:C3:C8:AB:A3:D1:33:B4:E8:E5:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b6de8f6-a015-3146-b901-c80a9d1208c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:05:6c:97:0a:0c:52:c3:ee:b8:cc:59:dd:2d:93:c5:92:6e: a3:f8:cf:1e:24:88:dd:f3:46:c7:44:9b:aa:43:ef:2e:fa:d3: 90:b1:35:b4:8d:5c:78:63:89:54:17:7d:9b:ec:e3:83:8b:44: f5:01:8d:04:da:d9:55:74:2f:23:77:dd:36:03:6e:cd:da:8e: 2e:11:fa:80:ed:f3:1f:15:38:da:e2:04:25:9a:a9:31:59:db: 8e:ae:fe:6b:d2:b5:e6:ef:6d:ae:e1:40:9e:2a:a4:f5:13:f1: be:98:fe:5d:01:92:ca:65:28:27:d0:f1:1a:c2:7c:9e:55:46: fc:df:99:81:2d:3b:5b:ca:ad:39:b8:92:98:9a:bf:d8:4a:27: 4e:ef:35:36:f7:ce:38:d5:71:56:70:33:9c:49:05:73:58:eb: 1a:e8:06:c3:99:ff:b7:17:d9:fe:c2:79:3a:38:a5:48:42:04: 4e:7f:56:a6:5f:c7:71:11:f8:ac:18:40:e8:c9:e7:22:0b:02: e1:e3:c5:1a:cd:35:f2:9d:c2:b2:e2:7d:72:6c:03:43:62:70: c6:da:2e:b8:95:2f:bd:77:03:f1:99:5b:8a:b5:66:64:9a:6b: ef:c3:67:aa:60:57:0d:4e:9c:3d:bc:50:df:42:10:89:d6:45: 5b:c6:3c:42 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jf1aT5ZvV9X2cmbgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWVhODE5YWQtOWFjYy00YzNiLWIyM2MtMzQ0MWFjMGMwZGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuUwISnpaHHMx4VQJG3uivpCJQgZg8907ieY jaeJxqeiMhvPluKsNi2YwSoiuqL4PIe3BCbQ7jymM0pUWH35v1xUbeRBYFo7gzYP 9PQRSCS6m/r8+vyQF0KwChhDE0G6XIcHMmMi4Z6tPGpX4V5rVa4+mWJ5tHnl7YDY e0TLsWf9QrcaPRqFkCiwwz31UnG7ot11rMoXZS4AE59F4Q05WqfSqUOzDFdesy5X ws3FaLisml0dXOBG+B2jXwR7uHStn+GXj4Idk8pH2AIcB7JSblLEDfwUwes1Juz3 dS/O5azwcNPIVieLGEP6+eCtLG+Y9oiRcpsufXzzNwWwhaCs2wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDgnFQ/afVwD8GDDyKuj0TO06OUMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWI2ZGU4ZjYtYTAxNS0z MTQ2LWI5MDEtYzgwYTlkMTIwOGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA3BWyXCgxSw+64zFndLZPFkm6j+M8eJIjd80bHRJuqQ+8u+tOQsTW0 jVx4Y4lUF32b7OODi0T1AY0E2tlVdC8jd902A27N2o4uEfqA7fMfFTja4gQlmqkx WduOrv5r0rXm722u4UCeKqT1E/G+mP5dAZLKZSgn0PEawnyeVUb835mBLTtbyq05 uJKYmr/YSidO7zU298441XFWcDOcSQVzWOsa6AbDmf+3F9n+wnk6OKVIQgROf1am X8dxEfisGEDoyeciCwLh48UazTXyncKy4n1ybANDYnDG2i64lS+9dwPxmVuKtWZk mmvvw2eqYFcNTpw9vFDfQhCJ1kVbxjxC -----END CERTIFICATE-----Generated at Mon Sep 28 21:40:09 2026 by rpki-client