$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d884fe2-6033-3876-a94c-533a438232ef.roa File: 5d884fe2-6033-3876-a94c-533a438232ef.roa (raw, json) Hash identifier: BBT6rWW90ng4kZSg2reW2MrCf5lvvRtxt1Rs1G3Zw+o= Subject key identifier: E0:68:B7:5E:13:A7:23:33:8D:C2:96:7F:0C:ED:D2:35:11:6E:52:19 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F497D9E4107FE8CB651AA4600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d884fe2-6033-3876-a94c-533a438232ef.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396596 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:9e:41:07:fe:8c:b6:51:aa:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=38f1b405-50cf-4808-bd39-129b12eebe9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:03:c0:96:aa:59:c1:86:b2:99:d9:5d:57:a8: c8:07:3e:75:a3:79:b9:5b:a9:e9:70:90:6b:37:ae: 1d:a2:97:b3:81:92:9f:08:22:6e:78:27:61:4e:74: de:eb:d4:c3:8b:9a:1a:0b:44:d6:6b:af:ec:36:7c: 72:22:97:a4:4f:e5:b7:ee:53:f0:27:15:1d:84:0e: b2:db:c9:22:e7:76:87:12:33:20:e2:39:2e:bd:35: 96:d8:2a:ba:92:42:3b:91:88:12:8d:6b:61:3b:03: 3e:1b:d6:7e:87:36:00:a4:90:69:3a:ba:ab:9b:68: 92:0e:e2:6a:7d:e4:08:8e:10:ed:f8:fc:5e:6e:3d: 13:b9:00:22:fc:d3:9f:00:0f:97:2f:9a:be:0b:95: 58:3e:0a:b2:b7:ad:1e:01:3c:02:c1:8e:df:6b:58: 33:56:8b:9c:67:af:86:3f:39:88:7e:68:dc:3f:7f: 14:e8:b9:73:fd:e6:d1:fa:6a:20:dd:e7:e6:ec:72: 69:b3:4f:63:41:63:69:c4:71:d1:1a:af:f6:b6:3a: ea:a9:23:e0:22:3e:42:a1:5d:90:15:c4:03:17:04: 5b:0e:b1:f0:6a:ba:08:89:aa:b1:2b:04:47:1d:26: a8:42:f6:9a:50:ba:fb:6b:53:2a:af:0c:40:e5:ea: 8a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:68:B7:5E:13:A7:23:33:8D:C2:96:7F:0C:ED:D2:35:11:6E:52:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d884fe2-6033-3876-a94c-533a438232ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:5d:0b:85:7e:f0:92:16:74:e7:10:21:47:28:fa:12:b6:22: 0a:7b:64:2b:80:f1:73:b3:40:a5:9a:33:1e:d9:2b:c7:48:49: 15:3a:30:7c:ab:71:58:6f:53:bc:7b:54:7c:06:c9:ad:9f:32: 0c:20:06:59:a4:6f:6a:b5:b9:7a:7a:37:92:24:a7:7b:a1:1c: 2a:74:a7:0c:32:8d:c6:d1:d7:c3:12:b8:c1:c2:2d:d5:fe:a6: 5d:36:7f:14:25:e9:a7:75:20:bc:ba:c9:4a:57:7f:16:8b:c4: 36:21:18:8e:99:b0:b0:ee:92:e3:14:81:cb:80:65:af:69:6a: 8a:ab:54:b5:05:04:a7:05:29:a1:d3:66:e6:1d:5c:4d:1e:a7: 50:20:64:98:ec:1f:96:cd:7e:7e:4c:84:25:cc:a6:3b:52:e6: 5f:95:05:3d:f9:be:62:e7:66:76:9a:4b:76:07:1d:6c:09:84: 6b:68:b8:b0:9a:b1:9b:3b:60:3e:67:14:73:18:a8:04:4c:44: 91:90:6f:35:79:39:79:b5:0d:7a:88:8e:60:2f:cf:c6:67:d8: 4a:ac:d2:c0:e1:70:05:dc:e8:18:97:a9:55:c5:6c:6d:e7:84: 34:7c:04:e0:a0:24:d9:57:2b:7b:93:6e:5a:f9:d8:43:0b:b2: c8:c9:50:01 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JfZ5BB/6MtlGqRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzhmMWI0MDUtNTBjZi00ODA4LWJkMzktMTI5YjEyZWViZTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAPAlqpZwYaymdldV6jIBz51o3m5W6npcJBr N64dopezgZKfCCJueCdhTnTe69TDi5oaC0TWa6/sNnxyIpekT+W37lPwJxUdhA6y 28ki53aHEjMg4jkuvTWW2Cq6kkI7kYgSjWthOwM+G9Z+hzYApJBpOrqrm2iSDuJq feQIjhDt+Pxebj0TuQAi/NOfAA+XL5q+C5VYPgqyt60eATwCwY7fa1gzVoucZ6+G PzmIfmjcP38U6Llz/ebR+mog3efm7HJps09jQWNpxHHRGq/2tjrqqSPgIj5CoV2Q FcQDFwRbDrHwaroIiaqxKwRHHSaoQvaaULr7a1MqrwxA5eqKswIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOBot14TpyMzjcKWfwzt0jURblIZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWQ4ODRmZTItNjAzMy0z ODc2LWE5NGMtNTMzYTQzODIzMmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCVXQuFfvCSFnTnECFHKPoStiIKe2QrgPFzs0ClmjMe2SvHSEkVOjB8 q3FYb1O8e1R8BsmtnzIMIAZZpG9qtbl6ejeSJKd7oRwqdKcMMo3G0dfDErjBwi3V /qZdNn8UJemndSC8uslKV38Wi8Q2IRiOmbCw7pLjFIHLgGWvaWqKq1S1BQSnBSmh 02bmHVxNHqdQIGSY7B+WzX5+TIQlzKY7UuZflQU9+b5i52Z2mkt2Bx1sCYRraLiw mrGbO2A+ZxRzGKgETESRkG81eTl5tQ16iI5gL8/GZ9hKrNLA4XAF3OgYl6lVxWxt 54Q0fATgoCTZVyt7k25a+dhDC7LIyVAB -----END CERTIFICATE-----Generated at Sat Sep 26 07:36:28 2026 by rpki-client