$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f2a8003-4538-332d-ab47-9b6c9d473df2.roa File: 7f2a8003-4538-332d-ab47-9b6c9d473df2.roa (raw, json) Hash identifier: pLwf0om6+prxmYiqijqWDguz2qBlRbNxGDnWmp28vRo= Subject key identifier: A5:D9:D4:5C:B3:91:CB:59:36:62:B4:1C:8D:9F:4F:24:5C:21:9A:2F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D143D9A75A8D8540970A5F6C8 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f2a8003-4538-332d-ab47-9b6c9d473df2.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 20431 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:9a:75:a8:d8:54:09:70:a5:f6:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=e68563ca-7374-4c7e-9d27-fd5ed45ee352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:97:2c:f7:42:02:db:c5:b3:4c:5b:b2:7c:82: 13:e4:61:b9:f6:74:58:b9:4a:56:1d:97:22:b5:42: 03:bd:f6:cf:24:f2:53:26:a3:24:41:62:7d:51:e5: df:6f:f5:b5:f3:a7:6d:99:08:ce:bc:f2:c4:a5:e0: e1:cc:b0:ea:22:a9:15:c4:d5:b5:4c:d1:40:ed:f4: af:6e:f7:c2:99:b4:8a:f7:9b:c3:50:14:5c:27:1f: 6c:1a:51:a8:6b:c0:59:4a:1e:7f:31:ba:bd:fa:16: 13:ef:11:99:58:50:6a:6e:d0:5f:79:3e:88:64:4a: 76:e2:1a:6a:07:5e:20:09:08:64:20:8a:ce:5d:5a: b0:80:a0:38:a0:b4:52:9e:24:ae:40:d4:b4:c0:85: e9:1e:8b:b8:e9:50:a1:14:52:d7:36:28:e7:e1:a1: d1:2f:ce:d2:86:a0:5c:68:65:17:6c:8b:6a:c5:fb: 08:ca:2c:79:40:89:46:d9:b2:6b:05:5d:f1:8a:6e: 4a:62:73:3a:94:06:5d:42:56:c9:f9:41:a1:00:f1: 4e:b2:65:ef:ad:f6:d2:5b:26:c5:97:4e:0f:b1:88: 36:d7:4a:cf:22:75:76:f6:69:9b:b2:62:ce:4c:55: ff:a0:0d:0e:24:29:c9:2c:09:59:fe:2f:4b:ed:00: 81:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D9:D4:5C:B3:91:CB:59:36:62:B4:1C:8D:9F:4F:24:5C:21:9A:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f2a8003-4538-332d-ab47-9b6c9d473df2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:0f:7c:ad:44:37:60:d8:53:ac:76:55:c0:07:89:f3:59:9b: 41:bc:62:4a:4c:25:67:32:f3:be:76:95:b0:13:87:c4:29:7e: c3:79:e2:58:58:b6:96:a6:10:ca:36:67:e5:ac:f6:7b:a7:30: fc:bb:93:f4:ad:13:b1:14:2e:82:01:b9:41:6e:4c:b0:12:b6: f5:9d:ad:64:fd:3f:b5:57:37:e3:b1:ab:34:bf:44:80:b0:22: d8:e8:f2:23:90:76:28:ae:e3:1f:b3:bd:ef:9d:00:b7:c1:d7: 4d:7a:7a:de:58:68:b3:fe:6b:8a:a3:a5:d4:8b:68:7a:14:df: 63:fd:cb:21:8b:e4:99:86:75:34:8a:f4:61:f2:69:f0:84:56: e0:99:0b:bd:54:ad:96:3d:74:4f:46:11:6a:f2:40:a0:e3:e7: 0f:bf:e2:27:16:2b:07:0e:70:98:1c:e4:96:c6:ac:0d:cf:fa: e6:29:0c:e0:1e:d5:08:ad:cd:3a:01:d3:14:e0:2e:5a:b4:97: 95:35:c4:25:30:16:7b:f1:bd:36:0a:65:f8:4f:c3:5a:8a:c5: c7:f4:15:8c:48:0b:bb:f0:96:67:95:2a:94:99:3b:c4:89:a1: d4:5e:62:c5:1e:90:80:47:e7:7b:b7:2e:2f:21:bf:80:c8:44: 4a:d5:fd:ac -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0UPZp1qNhUCXCl9sgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZTY4NTYzY2EtNzM3NC00YzdlLTlkMjctZmQ1ZWQ0NWVlMzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5cs90IC28WzTFuyfIIT5GG59nRYuUpWHZci tUIDvfbPJPJTJqMkQWJ9UeXfb/W186dtmQjOvPLEpeDhzLDqIqkVxNW1TNFA7fSv bvfCmbSK95vDUBRcJx9sGlGoa8BZSh5/Mbq9+hYT7xGZWFBqbtBfeT6IZEp24hpq B14gCQhkIIrOXVqwgKA4oLRSniSuQNS0wIXpHou46VChFFLXNijn4aHRL87ShqBc aGUXbItqxfsIyix5QIlG2bJrBV3xim5KYnM6lAZdQlbJ+UGhAPFOsmXvrfbSWybF l04PsYg210rPInV29mmbsmLOTFX/oA0OJCnJLAlZ/i9L7QCBlQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKXZ1FyzkctZNmK0HI2fTyRcIZovMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2YyYTgwMDMtNDUzOC0z MzJkLWFiNDctOWI2YzlkNDczZGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAeD3ytRDdg2FOsdlXAB4nzWZtBvGJKTCVnMvO+dpWwE4fEKX7DeeJY WLaWphDKNmflrPZ7pzD8u5P0rROxFC6CAblBbkywErb1na1k/T+1Vzfjsas0v0SA sCLY6PIjkHYoruMfs73vnQC3wddNenreWGiz/muKo6XUi2h6FN9j/cshi+SZhnU0 ivRh8mnwhFbgmQu9VK2WPXRPRhFq8kCg4+cPv+InFisHDnCYHOSWxqwNz/rmKQzg HtUIrc06AdMU4C5atJeVNcQlMBZ78b02CmX4T8NaisXH9BWMSAu78JZnlSqUmTvE iaHUXmLFHpCAR+d7ty4vIb+AyERK1f2s -----END CERTIFICATE-----Generated at Thu Mar 26 13:57:22 2026 by rpki-client