$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/631fa7a2-42d1-3539-b100-e323154e899a.roa File: 631fa7a2-42d1-3539-b100-e323154e899a.roa (raw, json) Hash identifier: U1xDdzS7ZIgkShBOpoAtkxq0T8q9vIJ7YBthXsQQDW4= Subject key identifier: 23:04:34:62:83:13:1B:A2:6D:37:81:2C:37:40:AE:32:57:CB:89:95 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D143D960D027E9A8D99B00D80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/631fa7a2-42d1-3539-b100-e323154e899a.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 396546 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:96:0d:02:7e:9a:8d:99:b0:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=8bb0028d-ec79-4786-a44a-c921b39d0a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:46:63:f3:05:31:b6:a4:ed:c7:70:fb:dc:b5: 90:a9:e5:14:70:15:85:7a:fc:77:33:ae:e3:85:7e: 30:1c:c0:8c:33:74:67:48:7c:bd:e5:b7:e8:01:d4: 25:ec:95:87:fc:58:a7:34:ce:c0:61:83:e5:c3:f9: 62:58:58:e6:b5:3e:47:9a:f2:43:bc:55:2c:ef:3c: 35:5f:3b:03:60:04:17:d8:69:0b:85:f7:e6:ac:7a: b1:8f:d9:a3:af:12:66:d0:05:5c:be:ac:ad:e9:3b: 69:8e:b5:d3:9a:34:37:56:5a:e8:95:29:0d:a6:94: 9d:08:76:d4:00:41:44:d2:51:f6:57:0c:c6:dd:0a: 11:6b:9f:9c:42:19:a1:00:e0:23:79:42:56:26:4a: bb:e4:7f:a9:12:83:f7:24:4f:05:20:93:67:30:11: 00:e9:c3:38:8d:9f:40:0d:40:29:ce:ca:e2:27:6c: a9:99:b1:2d:0c:3c:60:bc:58:41:8c:6e:55:1f:2b: 68:cb:3c:78:e4:60:3e:aa:64:2d:56:0f:63:60:4c: ac:ea:5e:33:70:34:d3:5f:39:64:8f:50:a0:15:79: 46:1b:3e:03:d2:e5:d8:88:0c:12:6b:d3:dd:20:11: c0:05:06:a0:17:1c:80:5f:5d:df:72:71:ea:e3:82: b6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:04:34:62:83:13:1B:A2:6D:37:81:2C:37:40:AE:32:57:CB:89:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/631fa7a2-42d1-3539-b100-e323154e899a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:43:a0:34:ab:ff:91:ff:09:39:21:a9:a5:6f:f0:86:0a:40: 71:5c:f3:3c:10:dc:b5:5e:da:d0:e0:22:9a:e4:23:8d:3d:d0: b7:39:68:a3:b9:f8:7f:6d:fe:94:b0:b8:bb:0f:88:3e:70:82: 72:e4:b6:4c:35:ec:fa:a6:a0:96:f9:aa:c4:ce:58:4e:68:c0: 19:40:c9:0a:19:bf:9e:2b:b8:bf:ac:49:8f:8a:b8:e1:8a:e8: e9:19:b4:2d:f7:67:ba:81:a1:32:57:10:c9:17:4d:38:3a:8a: d3:b0:66:a6:13:62:23:6a:0c:8f:31:c7:71:6b:44:8a:2c:ff: ed:5b:37:32:ca:3e:c9:ac:3e:fe:7c:b8:91:31:47:3a:75:9f: 34:76:f4:66:bb:89:10:1e:0b:c5:e2:de:a4:ba:4c:62:12:b3: fc:00:6f:20:0d:bd:98:61:1c:f7:67:c8:1a:35:5c:17:b4:62: 05:ec:d9:3f:b9:78:22:9a:b9:dd:a7:ad:4c:1f:5e:37:d7:77: 66:61:4d:51:d2:22:15:3b:29:32:12:96:e8:a0:eb:5b:04:14: 74:3c:64:6f:b6:c6:ff:aa:a4:6c:56:57:52:a1:91:68:07:03: 98:3f:1b:56:54:5f:eb:ec:f2:25:9e:62:3f:09:ba:bc:e8:d2: 38:a8:d3:d6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0UPZYNAn6ajZmwDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk OGJiMDAyOGQtZWM3OS00Nzg2LWE0NGEtYzkyMWIzOWQwYTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkZj8wUxtqTtx3D73LWQqeUUcBWFevx3M67j hX4wHMCMM3RnSHy95bfoAdQl7JWH/FinNM7AYYPlw/liWFjmtT5HmvJDvFUs7zw1 XzsDYAQX2GkLhffmrHqxj9mjrxJm0AVcvqyt6TtpjrXTmjQ3VlrolSkNppSdCHbU AEFE0lH2VwzG3QoRa5+cQhmhAOAjeUJWJkq75H+pEoP3JE8FIJNnMBEA6cM4jZ9A DUApzsriJ2ypmbEtDDxgvFhBjG5VHytoyzx45GA+qmQtVg9jYEys6l4zcDTTXzlk j1CgFXlGGz4D0uXYiAwSa9PdIBHABQagFxyAX13fcnHq44K29wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCMENGKDExuibTeBLDdArjJXy4mVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjMxZmE3YTItNDJkMS0z NTM5LWIxMDAtZTMyMzE1NGU4OTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBzQ6A0q/+R/wk5Iamlb/CGCkBxXPM8ENy1XtrQ4CKa5CONPdC3OWij ufh/bf6UsLi7D4g+cIJy5LZMNez6pqCW+arEzlhOaMAZQMkKGb+eK7i/rEmPirjh iujpGbQt92e6gaEyVxDJF004OorTsGamE2IjagyPMcdxa0SKLP/tWzcyyj7JrD7+ fLiRMUc6dZ80dvRmu4kQHgvF4t6kukxiErP8AG8gDb2YYRz3Z8gaNVwXtGIF7Nk/ uXgimrndp61MH14313dmYU1R0iIVOykyEpbooOtbBBR0PGRvtsb/qqRsVldSoZFo BwOYPxtWVF/r7PIlnmI/Cbq86NI4qNPW -----END CERTIFICATE-----Generated at Thu Mar 26 13:55:30 2026 by rpki-client