$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7db2025-2a8e-3249-a77e-acea5b95df9a.roa File: a7db2025-2a8e-3249-a77e-acea5b95df9a.roa (raw, json) Hash identifier: 5ECU4v4E2/h6p/P6vHPF0paE5ucmaEaVRBnbtVn6BqU= Subject key identifier: 62:AC:40:1D:75:37:11:90:33:36:AE:C8:E3:55:0C:95:8D:6C:EF:B6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D143D9BF71F400F7CFC7C6F00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7db2025-2a8e-3249-a77e-acea5b95df9a.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 396572 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:9b:f7:1f:40:0f:7c:fc:7c:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=aa42b681-f8e5-454f-8522-8905892a8d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ba:27:89:20:43:11:12:7c:5b:d7:bd:aa:76: a8:53:70:51:52:f5:5b:0d:7d:ce:96:9e:1c:6c:19: f6:5e:78:ec:da:b4:a8:30:e5:bf:3b:bc:34:95:ae: fa:42:87:57:05:f2:61:30:b3:85:03:1c:80:e0:9d: a0:31:35:85:1c:fc:03:da:73:81:e2:bb:6a:a9:ac: e3:4c:be:40:dc:a4:40:84:9c:3e:10:58:eb:7f:33: e5:21:d2:ba:1a:ea:f9:91:0e:b8:c3:52:79:0f:47: dd:7e:42:ec:8a:f3:9e:92:eb:68:ec:5f:31:e8:02: f0:44:57:c7:ee:02:5d:5c:83:68:33:8d:04:42:4c: 1a:7b:80:9a:41:83:1d:1e:d4:e2:21:e3:88:f2:09: 72:be:42:27:01:77:3b:58:57:95:26:bb:87:f9:3a: b5:93:97:8e:1c:94:a0:f8:b7:9c:ba:c0:95:21:1d: b4:c0:c6:cc:23:89:75:a8:c0:1e:04:2c:a0:80:5e: f0:64:88:87:ed:f5:5f:a9:36:df:5d:34:76:aa:9b: af:a7:4e:be:c2:cb:1d:02:d8:d1:7e:5a:a5:f2:86: 66:4d:5f:a1:e9:4a:af:73:70:3c:2f:01:09:99:da: b8:db:57:0e:70:e6:42:f5:b1:23:a5:7e:32:f3:35: 2a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:AC:40:1D:75:37:11:90:33:36:AE:C8:E3:55:0C:95:8D:6C:EF:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7db2025-2a8e-3249-a77e-acea5b95df9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:8a:41:bb:54:ae:6a:35:72:b6:38:38:e6:ae:b5:b1:31:05: 9e:9c:fa:52:a6:d1:3c:2e:5e:29:fb:49:44:20:e4:1d:b6:2e: 7f:23:31:68:dd:f0:f3:3f:85:fc:33:da:c3:55:1a:39:2d:df: c4:d6:c8:16:18:25:53:6a:8d:88:81:b8:53:e4:13:25:af:2a: a7:7e:40:5b:be:be:17:c1:b2:86:4c:be:de:d0:72:9b:49:e6: 44:d1:35:cd:3a:ba:1e:9c:5d:4c:6d:07:80:4f:11:5a:ee:3e: 3c:00:f9:5b:09:7a:7e:36:6a:ab:a8:09:2c:a0:9a:dc:12:ae: c9:fb:05:4d:b2:a5:6b:f3:1c:b3:17:e8:52:d0:f8:49:ce:74: f3:12:b0:29:13:c1:b7:41:a9:5e:b5:3e:04:5f:01:85:4c:f2: 1e:ba:04:e9:a7:bb:b1:31:8d:57:6b:ae:92:cc:ef:7c:3e:92: 88:44:c8:2e:0e:7e:5a:83:33:50:33:20:ef:d9:27:38:6a:e1: 3f:6c:35:83:8f:b3:90:6f:89:1f:40:c2:3b:08:36:54:bd:62: db:04:eb:e6:3c:65:47:cd:ca:b4:4d:31:57:24:37:1c:7b:02: 76:18:bb:fd:46:3b:a1:ff:2b:58:50:cc:a2:c1:59:ee:67:8b: cd:14:70:1b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0UPZv3H0APfPx8bwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk YWE0MmI2ODEtZjhlNS00NTRmLTg1MjItODkwNTg5MmE4ZDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LoniSBDERJ8W9e9qnaoU3BRUvVbDX3Olp4c bBn2Xnjs2rSoMOW/O7w0la76QodXBfJhMLOFAxyA4J2gMTWFHPwD2nOB4rtqqazj TL5A3KRAhJw+EFjrfzPlIdK6Gur5kQ64w1J5D0fdfkLsivOekuto7F8x6ALwRFfH 7gJdXINoM40EQkwae4CaQYMdHtTiIeOI8glyvkInAXc7WFeVJruH+Tq1k5eOHJSg +LecusCVIR20wMbMI4l1qMAeBCyggF7wZIiH7fVfqTbfXTR2qpuvp06+wssdAtjR flql8oZmTV+h6Uqvc3A8LwEJmdq421cOcOZC9bEjpX4y8zUqmQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGKsQB11NxGQMzauyONVDJWNbO+2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTdkYjIwMjUtMmE4ZS0z MjQ5LWE3N2UtYWNlYTViOTVkZjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC5ikG7VK5qNXK2ODjmrrWxMQWenPpSptE8Ll4p+0lEIOQdti5/IzFo 3fDzP4X8M9rDVRo5Ld/E1sgWGCVTao2IgbhT5BMlryqnfkBbvr4XwbKGTL7e0HKb SeZE0TXNOroenF1MbQeATxFa7j48APlbCXp+NmqrqAksoJrcEq7J+wVNsqVr8xyz F+hS0PhJznTzErApE8G3QaletT4EXwGFTPIeugTpp7uxMY1Xa66SzO98PpKIRMgu Dn5agzNQMyDv2Sc4auE/bDWDj7OQb4kfQMI7CDZUvWLbBOvmPGVHzcq0TTFXJDcc ewJ2GLv9Rjuh/ytYUMyiwVnuZ4vNFHAb -----END CERTIFICATE-----Generated at Thu Mar 26 18:19:23 2026 by rpki-client