$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b4a201e-b0b5-352b-9e05-ced1e601fe35.roa File: 8b4a201e-b0b5-352b-9e05-ced1e601fe35.roa (raw, json) Hash identifier: qUE2YhyH2b+CoAN/A9JsW7XJ1d7PNXdLaY55YpIoRCE= Subject key identifier: E2:8B:26:A3:19:0E:EA:ED:1F:07:AA:CF:72:CE:76:A2:50:78:72:B3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584DAC457FEF61FF71F08A079600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b4a201e-b0b5-352b-9e05-ced1e601fe35.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 0 IP address blocks: 192.68.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:7f:ef:61:ff:71:f0:8a:07:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=988af93a-3a6d-4993-a47e-98e73e9277a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:cd:5e:91:3c:9d:66:d6:cc:cd:95:3f:cc:ca: b9:db:44:36:0c:28:92:15:bc:2f:78:c2:b4:62:5c: 2c:3b:cb:0c:d3:60:75:6f:51:67:97:a2:60:78:23: d2:52:cf:ce:b4:6f:32:74:8b:2c:8d:e1:41:13:b9: 2c:79:db:b6:66:9b:cc:c0:ae:83:e9:52:2b:ab:d5: 48:49:5a:6d:40:a1:f0:6e:cc:36:ea:5b:3e:ce:2a: 36:d4:3c:68:c6:c2:e8:89:70:6c:ce:fe:e4:ee:17: d1:cf:29:e5:a0:cb:d3:c5:1e:96:d2:ff:19:40:08: 2a:e9:cd:51:77:c1:a1:4b:01:10:ab:8e:2d:03:c4: 86:a6:be:3c:cd:1a:ba:e1:cf:ca:19:4f:1f:a4:24: fb:f9:c6:49:82:b8:87:8c:8a:07:e0:42:5d:68:73: 1e:56:74:df:fa:72:2b:d8:94:a8:24:b0:ab:ff:e5: 3f:04:2b:98:ec:82:56:33:54:43:1c:3c:b7:bf:18: 6a:c3:b7:b7:6b:ae:78:af:cf:57:4b:f8:dd:0b:7b: 49:9b:ee:0d:ab:14:c4:d0:20:ef:ff:32:a9:a9:83: 67:4a:21:93:b7:7f:16:0f:36:95:b5:12:29:3b:44: 6c:21:be:e8:c7:01:00:f5:d4:65:30:45:23:55:3c: 48:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:8B:26:A3:19:0E:EA:ED:1F:07:AA:CF:72:CE:76:A2:50:78:72:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b4a201e-b0b5-352b-9e05-ced1e601fe35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:ea:53:44:86:e2:f7:df:3c:8b:1f:e9:a8:32:0c:da:e1:a4: 1f:18:5a:9f:4f:5e:f9:69:77:12:2e:fb:1b:da:70:78:6d:ef: df:91:a8:4b:82:df:35:bc:b9:69:e5:0e:8a:31:53:7d:7a:bb: eb:6f:a5:2c:2b:86:72:93:49:70:6c:9c:a2:e0:93:c2:71:cb: 44:94:09:38:e3:45:59:95:82:8d:df:25:31:0e:ea:56:dd:e7: bb:75:24:fd:48:8a:29:2a:39:92:e9:08:b1:f2:50:84:6c:17: c4:65:78:8d:08:e5:13:f3:2b:93:ab:77:6b:40:89:a3:04:82: fe:47:bc:36:26:1b:ef:18:a7:ac:33:2d:12:58:ba:fc:4e:f7: 47:67:1a:22:ce:31:66:eb:91:cc:87:1b:a0:d0:cd:20:c0:c7: f6:ab:70:0c:ca:14:8f:05:5b:53:38:30:bb:ea:90:be:05:76: 42:fa:1b:b8:7c:26:82:5f:4a:38:2d:96:d2:92:ec:37:92:9b: e9:85:b5:86:2c:f1:0c:d3:b6:f7:1a:e2:50:e0:ca:15:4a:83: 26:84:24:7f:ca:d9:85:83:0d:2b:32:89:39:34:c7:9b:17:f2: aa:01:ad:9b:45:5c:29:37:d9:67:79:69:a6:43:b6:49:1e:a5: b4:d5:e4:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRX/vYf9x8IoHlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk OTg4YWY5M2EtM2E2ZC00OTkzLWE0N2UtOThlNzNlOTI3N2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiM1ekTydZtbMzZU/zMq520Q2DCiSFbwveMK0 YlwsO8sM02B1b1Fnl6JgeCPSUs/OtG8ydIssjeFBE7ksedu2ZpvMwK6D6VIrq9VI SVptQKHwbsw26ls+zio21DxoxsLoiXBszv7k7hfRzynloMvTxR6W0v8ZQAgq6c1R d8GhSwEQq44tA8SGpr48zRq64c/KGU8fpCT7+cZJgriHjIoH4EJdaHMeVnTf+nIr 2JSoJLCr/+U/BCuY7IJWM1RDHDy3vxhqw7e3a654r89XS/jdC3tJm+4NqxTE0CDv /zKpqYNnSiGTt38WDzaVtRIpO0RsIb7oxwEA9dRlMEUjVTxIGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKLJqMZDurtHweqz3LOdqJQeHKzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGI0YTIwMWUtYjBiNS0z NTJiLTllMDUtY2VkMWU2MDFmZTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwESBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALqU0SG4vffPIsf6agyDNrhpB8YWp9PXvlpdxIu+xvacHht79+RqEuC 3zW8uWnlDooxU316u+tvpSwrhnKTSXBsnKLgk8Jxy0SUCTjjRVmVgo3fJTEO6lbd 57t1JP1IiikqOZLpCLHyUIRsF8RleI0I5RPzK5Ord2tAiaMEgv5HvDYmG+8Yp6wz LRJYuvxO90dnGiLOMWbrkcyHG6DQzSDAx/arcAzKFI8FW1M4MLvqkL4FdkL6G7h8 JoJfSjgtltKS7DeSm+mFtYYs8QzTtvca4lDgyhVKgyaEJH/K2YWDDSsyiTk0x5sX 8qoBrZtFXCk32Wd5aaZDtkkepbTV5Is= -----END CERTIFICATE-----Generated at Wed May 13 06:39:44 2026 by rpki-client