$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ea28398-8073-3986-b9c4-d7442e5e46e2.roa File: 5ea28398-8073-3986-b9c4-d7442e5e46e2.roa (raw, json) Hash identifier: dkznkYIAWYuZ7IG4YdYGwtZPUdqgqc3FJ9Rrux/UbEM= Subject key identifier: 06:64:75:50:6F:0E:61:E5:36:7A:7E:B9:E3:01:3E:09:7A:DC:B0:6F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D300A3A2338BE8015C86569C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ea28398-8073-3986-b9c4-d7442e5e46e2.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 396546 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:3a:23:38:be:80:15:c8:65:69:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=34a5a096-19da-48ee-98ba-c98df51f6468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:1e:83:66:c0:22:c4:71:5c:c2:0a:11:78:f8: 0f:89:76:87:b9:2a:23:32:0e:02:f0:0f:c5:a4:1c: 80:69:19:96:e3:84:09:88:47:23:73:e9:3f:61:7c: 57:16:d5:f4:29:9a:c8:0d:d4:dd:2a:18:1e:95:5f: fe:58:ec:ea:bc:aa:0e:6a:06:0d:31:a6:2b:4c:b3: 1d:2f:a6:a6:8a:49:5b:cc:23:2c:19:ff:97:0f:f7: e4:a5:41:2d:85:23:89:8c:6a:e7:db:fe:a2:5e:2c: 4b:22:e9:83:50:f1:70:b9:a1:ab:4d:9f:8d:dd:32: 7d:e0:25:f8:35:3c:3f:9e:4e:68:2c:77:20:e8:54: 72:89:f6:ea:a5:77:f6:1c:0b:e4:bb:ae:09:6f:d6: c0:a9:37:10:6b:f5:3d:64:04:20:74:8e:d3:fa:f5: a2:b9:c3:ba:8d:02:99:02:36:0b:f3:53:89:71:32: 07:4d:83:01:82:67:b6:77:31:34:13:30:be:1c:ea: bf:bb:9a:f9:3a:50:cd:9b:9f:c5:ce:fd:86:90:46: d0:43:ab:97:6c:eb:a6:0e:8a:39:34:83:43:3b:77: 04:8f:cf:c2:1a:a9:6b:40:64:67:f0:97:ee:d1:09: 2c:86:7c:9a:d5:76:41:a6:da:88:cc:fd:32:84:7c: 78:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:64:75:50:6F:0E:61:E5:36:7A:7E:B9:E3:01:3E:09:7A:DC:B0:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ea28398-8073-3986-b9c4-d7442e5e46e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:42:24:b7:a0:19:f9:ad:98:2b:7f:e5:a3:9c:15:60:e0:81: 22:bf:74:2f:ff:76:4c:11:66:1c:26:6c:08:42:6b:4c:32:e7: 55:31:d7:ad:68:e2:80:0d:ae:d0:4d:91:aa:82:21:9d:d7:fd: e4:a2:12:3e:df:60:ca:c1:4a:80:92:8a:45:4a:3c:83:94:f4: 08:40:cb:b0:69:63:be:a5:c6:14:25:81:0e:45:bb:3d:3e:71: 13:6e:aa:79:54:80:85:65:43:55:47:6c:4f:be:3d:db:69:f3: 01:68:03:73:80:a8:0a:33:d2:dd:f7:82:a4:0f:2f:2b:b6:78: 00:83:e4:a3:25:9c:6b:73:ce:3c:af:a6:03:80:f8:f7:b4:55: a6:1b:75:a6:33:74:aa:47:0c:69:63:e3:56:19:77:29:0c:5d: 39:61:1d:e5:50:6f:6c:2d:bd:61:2b:2d:78:c1:ee:ec:dc:8d: 6b:9c:22:e3:bc:1a:cf:5f:74:32:b7:6d:08:3e:49:0f:7f:d2: ae:ed:40:1c:92:40:06:fc:26:e6:5b:be:ac:66:15:00:c9:69: 1c:70:c5:e8:df:cd:d1:26:db:e9:0b:64:ff:43:22:4f:39:d0: d3:f7:61:38:85:2a:3d:1a:ac:19:02:79:89:06:c4:11:8c:5d: 10:be:d9:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCjojOL6AFchlacAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MzRhNWEwOTYtMTlkYS00OGVlLTk4YmEtYzk4ZGY1MWY2NDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8B6DZsAixHFcwgoRePgPiXaHuSojMg4C8A/F pByAaRmW44QJiEcjc+k/YXxXFtX0KZrIDdTdKhgelV/+WOzqvKoOagYNMaYrTLMd L6amiklbzCMsGf+XD/fkpUEthSOJjGrn2/6iXixLIumDUPFwuaGrTZ+N3TJ94CX4 NTw/nk5oLHcg6FRyifbqpXf2HAvku64Jb9bAqTcQa/U9ZAQgdI7T+vWiucO6jQKZ AjYL81OJcTIHTYMBgme2dzE0EzC+HOq/u5r5OlDNm5/Fzv2GkEbQQ6uXbOumDoo5 NINDO3cEj8/CGqlrQGRn8Jfu0Qkshnya1XZBptqIzP0yhHx4GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZkdVBvDmHlNnp+ueMBPgl63LBvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWVhMjgzOTgtODA3My0z OTg2LWI5YzQtZDc0NDJlNWU0NmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9CJLegGfmtmCt/5aOcFWDggSK/dC//dkwRZhwmbAhCa0wy51Ux161o 4oANrtBNkaqCIZ3X/eSiEj7fYMrBSoCSikVKPIOU9AhAy7BpY76lxhQlgQ5Fuz0+ cRNuqnlUgIVlQ1VHbE++Pdtp8wFoA3OAqAoz0t33gqQPLyu2eACD5KMlnGtzzjyv pgOA+Pe0VaYbdaYzdKpHDGlj41YZdykMXTlhHeVQb2wtvWErLXjB7uzcjWucIuO8 Gs9fdDK3bQg+SQ9/0q7tQBySQAb8JuZbvqxmFQDJaRxwxejfzdEm2+kLZP9DIk85 0NP3YTiFKj0arBkCeYkGxBGMXRC+2SI= -----END CERTIFICATE-----Generated at Thu Mar 26 13:11:03 2026 by rpki-client