$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/956769f8-cba8-37c2-be66-d1f23b4b7609.roa File: 956769f8-cba8-37c2-be66-d1f23b4b7609.roa (raw, json) Hash identifier: k2zw9DxKoQeYp5tzFx3PVptJ7uLvnTugbXZiLoI1nHI= Subject key identifier: 9B:1C:03:B9:E9:DD:65:1F:61:2F:C2:2A:70:39:4D:79:22:04:6E:8D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F497F577459BD9939C97E2480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/956769f8-cba8-37c2-be66-d1f23b4b7609.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396553 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:57:74:59:bd:99:39:c9:7e:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1a1234bb-1f97-4867-8117-da59709d4c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7f:db:14:65:c3:67:6a:a2:c4:ea:bf:a0:f6: aa:63:2f:b7:5b:39:b1:89:ad:14:9d:67:30:c8:ec: 28:98:28:a4:39:4c:27:f5:ff:0b:6b:fe:b9:2c:23: 54:de:82:93:3e:df:5e:c8:8a:c4:ae:5c:8e:07:01: 1e:06:81:7e:b4:c1:1b:a6:9f:b1:c7:67:ed:be:fd: ee:2c:e2:2c:83:3d:e7:2f:93:62:ec:3e:47:5b:e1: c5:08:93:d1:51:dd:2c:fa:d9:48:3f:19:7d:1c:14: 40:2f:f6:83:59:ca:dd:6c:7e:3c:08:6e:ff:ab:39: 6a:c0:f2:e4:08:1e:b4:5f:43:4a:43:4c:2d:5a:eb: 53:b9:97:60:c0:af:6f:37:98:b0:69:9b:38:cf:6e: dc:41:70:95:a9:2d:92:b6:b8:1e:ea:b1:d7:91:14: 2f:89:8c:f3:02:d2:3e:aa:f9:e5:28:0f:08:0f:59: 9a:58:89:af:2a:cb:81:0b:d5:7f:3a:13:f5:ce:89: a9:24:d0:11:1a:8d:41:ab:97:b1:11:20:2e:ef:b6: a8:59:4c:76:91:d9:0d:a7:06:c6:07:d5:07:9a:41: d3:d5:ff:e4:90:34:d0:4f:ac:7d:73:ed:f8:21:78: 4a:81:4e:f6:6f:0b:8e:ff:72:d0:8e:37:23:3e:5b: 17:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:1C:03:B9:E9:DD:65:1F:61:2F:C2:2A:70:39:4D:79:22:04:6E:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/956769f8-cba8-37c2-be66-d1f23b4b7609.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:33:96:54:1e:a8:82:55:89:da:97:1b:d4:ae:dd:b1:a6:67: bc:e2:fd:68:41:39:cf:cf:5c:0c:1d:50:1f:7d:7c:ab:37:c2: e0:fd:2b:22:12:c0:0f:28:67:54:6e:96:89:e6:5a:4b:2f:10: 37:3d:e7:a5:ff:1f:1e:a4:e8:31:5f:11:d0:51:22:bc:04:ee: 1a:66:9c:93:9f:71:bd:00:67:77:11:51:02:f9:60:cd:cc:8e: 8e:f4:3a:b3:c4:36:eb:60:ea:3a:62:75:83:47:91:56:f5:40: ad:e6:cb:7d:dc:d2:23:65:5b:64:7e:bb:b7:c3:c4:80:97:bf: 22:42:8d:67:8a:54:6c:32:9f:8f:43:eb:4e:89:a5:de:b6:2d: e8:7c:7f:57:1d:92:1b:d8:77:5c:a1:3b:66:0c:8e:4f:7c:4f: ad:4b:5d:64:0b:3f:d5:c8:40:72:fa:07:3d:1b:89:e4:e2:f2: 76:7b:92:09:07:6d:d7:2f:78:8d:e4:0c:7b:e3:3a:01:3f:2a: 3b:b3:8c:cb:22:18:21:28:ce:56:d7:4a:6d:7b:b5:86:01:05: bc:e4:c3:2c:ff:96:d7:dc:33:6e:94:55:a4:48:af:9c:c6:82: bf:5e:39:c2:f6:b8:c9:21:d7:71:f6:98:28:73:9c:9c:52:b0: cf:d2:03:d3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jf1d0Wb2ZOcl+JIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWExMjM0YmItMWY5Ny00ODY3LTgxMTctZGE1OTcwOWQ0YzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhH/bFGXDZ2qixOq/oPaqYy+3Wzmxia0UnWcw yOwomCikOUwn9f8La/65LCNU3oKTPt9eyIrErlyOBwEeBoF+tMEbpp+xx2ftvv3u LOIsgz3nL5Ni7D5HW+HFCJPRUd0s+tlIPxl9HBRAL/aDWcrdbH48CG7/qzlqwPLk CB60X0NKQ0wtWutTuZdgwK9vN5iwaZs4z27cQXCVqS2Strge6rHXkRQviYzzAtI+ qvnlKA8ID1maWImvKsuBC9V/OhP1zompJNARGo1Bq5exESAu77aoWUx2kdkNpwbG B9UHmkHT1f/kkDTQT6x9c+34IXhKgU72bwuO/3LQjjcjPlsXXwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJscA7np3WUfYS/CKnA5TXkiBG6NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTU2NzY5ZjgtY2JhOC0z N2MyLWJlNjYtZDFmMjNiNGI3NjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCKM5ZUHqiCVYnalxvUrt2xpme84v1oQTnPz1wMHVAffXyrN8Lg/Ssi EsAPKGdUbpaJ5lpLLxA3Peel/x8epOgxXxHQUSK8BO4aZpyTn3G9AGd3EVEC+WDN zI6O9DqzxDbrYOo6YnWDR5FW9UCt5st93NIjZVtkfru3w8SAl78iQo1nilRsMp+P Q+tOiaXeti3ofH9XHZIb2HdcoTtmDI5PfE+tS11kCz/VyEBy+gc9G4nk4vJ2e5IJ B23XL3iN5Ax74zoBPyo7s4zLIhghKM5W10pte7WGAQW85MMs/5bX3DNulFWkSK+c xoK/XjnC9rjJIddx9pgoc5ycUrDP0gPT -----END CERTIFICATE-----Generated at Sat Sep 26 03:50:41 2026 by rpki-client