$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a23ebd9e-1b42-3dd6-a273-372fe06acd46.roa File: a23ebd9e-1b42-3dd6-a273-372fe06acd46.roa (raw, json) Hash identifier: 3U+xUJPd9OIJS8UXYT0W9ubji2aoo36H7ivzWsPCC4c= Subject key identifier: 22:A6:D8:D0:EF:D9:C5:94:CE:85:42:C0:79:A0:E2:1E:28:9C:9E:8B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D300A3C440EE63433BF2BC680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a23ebd9e-1b42-3dd6-a273-372fe06acd46.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 36620 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:3c:44:0e:e6:34:33:bf:2b:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=4cde8003-6558-443d-9cce-2b306c453386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:25:f8:f2:3d:fb:2f:e8:ad:ab:9d:4e:b9:5f: 03:e4:82:ca:2a:20:d0:11:79:34:02:df:1f:6a:86: d5:a2:27:c6:b7:99:4f:89:85:95:8b:3f:6e:01:ee: 85:7f:c8:24:a3:67:b5:3a:44:e2:68:e9:ef:fe:0c: 85:d1:a8:07:b3:75:50:69:10:1c:73:14:25:49:d0: cb:14:75:52:1a:9c:45:03:73:ee:c8:7b:31:72:9b: c6:8b:37:60:cf:e9:d3:71:3f:39:69:6b:c8:10:ee: c6:ae:0a:70:f4:1e:e9:9d:ad:7f:f8:17:a9:30:88: 1c:ab:6e:9d:a6:26:59:28:83:9a:d6:81:16:70:50: 3b:74:da:44:90:7d:4d:a6:52:e5:94:e9:6c:0c:e7: e6:f4:93:c3:10:38:33:57:51:05:74:f6:cf:f7:d5: 13:40:7e:40:1b:4c:10:b0:14:0e:94:3d:07:cb:76: 65:5a:f7:c9:07:74:52:10:ff:a6:42:05:fa:de:3a: 1c:4d:4b:99:a1:e5:b5:ae:cc:f3:a3:1c:08:3f:72: 4d:90:c6:dd:44:b6:5c:fd:51:1d:d1:d2:0d:d9:eb: 95:e5:41:e2:95:e5:20:c3:c4:5d:43:42:bf:51:b0: 96:cd:12:27:2f:f4:8e:5f:21:c0:0b:6b:cf:03:3d: 22:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A6:D8:D0:EF:D9:C5:94:CE:85:42:C0:79:A0:E2:1E:28:9C:9E:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a23ebd9e-1b42-3dd6-a273-372fe06acd46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:6f:38:78:e6:36:d5:25:d8:90:37:c0:5d:b7:09:d7:7b:86: c5:ec:4c:d3:04:cb:b7:09:b3:10:d0:46:d0:0f:00:be:ac:f3: 48:45:ca:ef:3a:b3:03:fc:48:eb:27:87:c6:e9:a3:b7:c2:66: 74:d1:d0:68:42:75:4b:ba:a5:df:8f:a2:3f:5e:4c:00:ea:ed: ca:6a:c9:31:4c:2d:20:b3:75:6a:27:44:a1:3b:16:cb:1d:6a: ca:78:d2:ac:87:69:ce:95:3f:d9:0e:aa:b2:b0:c0:88:ed:bc: 98:af:53:2d:e6:dd:fb:30:b6:69:5c:7d:e4:79:7d:33:66:02: d8:ef:9b:1f:c5:53:b8:3e:b1:33:1e:51:b3:16:4e:e0:ce:46: 0c:a9:6d:67:58:b8:3a:b0:88:74:e9:eb:fa:95:5e:da:73:46: b6:4e:54:60:29:f6:d1:16:d5:89:ba:78:4e:d4:1c:da:6d:cb: 8e:bd:1c:ad:7b:8c:bf:15:07:51:a4:4b:28:d1:de:9e:0f:ab: 9f:9c:dc:d0:5c:96:f1:3f:13:e1:27:2e:2f:3d:6d:6c:a5:b8: f9:c2:cf:1c:85:54:a1:f6:8d:96:a4:94:f1:c2:9a:f8:87:2a: 2d:85:9d:c7:4b:2c:7c:d5:e2:a6:bd:ff:9a:88:ed:06:b2:4d: 08:b5:0c:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCjxEDuY0M78rxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NGNkZTgwMDMtNjU1OC00NDNkLTljY2UtMmIzMDZjNDUzMzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SX48j37L+itq51OuV8D5ILKKiDQEXk0At8f aobVoifGt5lPiYWViz9uAe6Ff8gko2e1OkTiaOnv/gyF0agHs3VQaRAccxQlSdDL FHVSGpxFA3PuyHsxcpvGizdgz+nTcT85aWvIEO7Grgpw9B7pna1/+BepMIgcq26d piZZKIOa1oEWcFA7dNpEkH1NplLllOlsDOfm9JPDEDgzV1EFdPbP99UTQH5AG0wQ sBQOlD0Hy3ZlWvfJB3RSEP+mQgX63jocTUuZoeW1rszzoxwIP3JNkMbdRLZc/VEd 0dIN2euV5UHileUgw8RdQ0K/UbCWzRInL/SOXyHAC2vPAz0iTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKm2NDv2cWUzoVCwHmg4h4onJ6LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTIzZWJkOWUtMWI0Mi0z ZGQ2LWEyNzMtMzcyZmUwNmFjZDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlvOHjmNtUl2JA3wF23Cdd7hsXsTNMEy7cJsxDQRtAPAL6s80hFyu86 swP8SOsnh8bpo7fCZnTR0GhCdUu6pd+Poj9eTADq7cpqyTFMLSCzdWonRKE7Fssd asp40qyHac6VP9kOqrKwwIjtvJivUy3m3fswtmlcfeR5fTNmAtjvmx/FU7g+sTMe UbMWTuDORgypbWdYuDqwiHTp6/qVXtpzRrZOVGAp9tEW1Ym6eE7UHNpty469HK17 jL8VB1GkSyjR3p4Pq5+c3NBclvE/E+EnLi89bWyluPnCzxyFVKH2jZaklPHCmviH Ki2FncdLLHzV4qa9/5qI7QayTQi1DFo= -----END CERTIFICATE-----Generated at Thu Mar 26 12:44:06 2026 by rpki-client