$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa9fd22c-13f2-3b32-ae2d-7b16049363ca.roa File: aa9fd22c-13f2-3b32-ae2d-7b16049363ca.roa (raw, json) Hash identifier: Et2U/dvWzgPZNa/r5kyvLcWORPKNl05Rtfee7dZED3w= Subject key identifier: 0B:A9:7E:FB:12:B9:38:95:77:3E:A8:67:A5:02:5F:CF:50:CE:6F:34 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D143D9B1A755881185CC70960 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa9fd22c-13f2-3b32-ae2d-7b16049363ca.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 396544 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:9b:1a:75:58:81:18:5c:c7:09:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=602dee56-6b5b-40e9-afe1-260134fb0b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:db:08:69:0e:6c:5e:be:00:29:15:d6:c2:32: 04:23:c1:f0:ba:82:3c:3e:20:06:fd:62:a9:a8:19: 81:72:55:ab:b1:f2:61:92:4e:33:e0:e2:48:a4:b2: 6a:df:fe:e2:20:d8:b2:6c:d4:d1:55:5b:64:82:2e: 35:ad:c7:ef:bf:98:30:15:48:5c:3c:1a:94:3d:c4: 4e:bb:84:3e:93:fe:70:a4:8d:6c:20:ae:7b:45:1c: ba:6d:e8:77:76:48:8d:e0:9e:0f:36:26:19:ec:e5: a3:7b:3a:3c:e1:7f:cc:81:7f:4a:40:89:01:75:95: e6:c1:5a:0e:20:5d:52:8c:c4:d3:4d:f1:5c:fb:0c: 7c:ac:d2:2d:60:ad:cf:31:a5:89:38:7a:28:09:61: be:ef:6f:4f:9e:54:27:3e:78:ef:0b:67:4c:83:93: 29:ac:2a:b8:47:cd:ea:3a:e8:04:25:2d:73:5a:2a: f7:a1:ca:e2:e0:49:09:d6:2a:8c:bd:2d:34:b8:c4: f8:50:80:88:bf:43:f1:af:2c:6a:bc:58:bd:f9:0d: af:b0:0d:02:c9:4f:56:f0:52:52:c9:56:91:fd:24: 80:3e:6e:50:d8:25:5b:5c:1a:eb:9e:06:eb:7e:71: 77:fa:e1:c1:e0:c9:4a:d4:98:7c:8f:4d:df:91:e7: 2d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A9:7E:FB:12:B9:38:95:77:3E:A8:67:A5:02:5F:CF:50:CE:6F:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa9fd22c-13f2-3b32-ae2d-7b16049363ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:9e:2d:56:a5:69:5a:a3:c8:86:14:d5:5b:35:23:af:c2:ed: 27:4d:3b:09:4f:0e:dc:55:6e:0d:6e:d8:1f:34:68:f3:cc:36: 37:58:22:23:f0:33:eb:0f:b1:d2:6e:fa:0c:13:e5:36:40:ce: 8d:9b:e9:49:15:a4:36:70:90:25:c8:71:27:4c:2e:a3:bd:ed: cb:f0:1e:4c:a1:30:41:60:95:81:cc:c8:70:7e:1e:98:c5:a9: 07:07:6d:bd:b1:ca:43:2a:b7:5c:d6:41:0e:5a:2d:2f:f9:41: f5:3f:a8:b7:9d:28:8b:3d:ad:82:37:bc:cd:89:3f:9b:2b:c7: a8:e8:f6:e5:08:ad:b9:e2:dd:4b:17:f4:93:cc:2e:28:82:ff: e2:2e:d1:2f:70:f1:fa:f3:05:e2:1f:84:9e:50:f4:99:65:a4: 1f:4a:a5:51:b5:e9:a6:14:36:67:3c:f4:12:0f:d4:71:d2:38: b5:c1:54:ac:6f:9b:1a:bc:66:70:e0:7c:fe:bc:8e:67:59:b0: 01:64:2a:f2:8e:96:04:0c:ec:78:1b:c3:c9:fb:c1:bf:c1:3e: d2:c2:3f:31:e9:50:ca:6c:11:81:8e:c6:e3:0c:7e:27:b8:e5: 4d:25:53:a5:db:f9:e8:1b:f5:af:2e:46:e4:a8:6c:35:de:90: 00:92:9b:95 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0UPZsadViBGFzHCWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk NjAyZGVlNTYtNmI1Yi00MGU5LWFmZTEtMjYwMTM0ZmIwYjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdsIaQ5sXr4AKRXWwjIEI8HwuoI8PiAG/WKp qBmBclWrsfJhkk4z4OJIpLJq3/7iINiybNTRVVtkgi41rcfvv5gwFUhcPBqUPcRO u4Q+k/5wpI1sIK57RRy6beh3dkiN4J4PNiYZ7OWjezo84X/MgX9KQIkBdZXmwVoO IF1SjMTTTfFc+wx8rNItYK3PMaWJOHooCWG+729PnlQnPnjvC2dMg5MprCq4R83q OugEJS1zWir3ocri4EkJ1iqMvS00uMT4UICIv0PxryxqvFi9+Q2vsA0CyU9W8FJS yVaR/SSAPm5Q2CVbXBrrngbrfnF3+uHB4MlK1Jh8j03fkect4QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAupfvsSuTiVdz6oZ6UCX89Qzm80MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWE5ZmQyMmMtMTNmMi0z YjMyLWFlMmQtN2IxNjA0OTM2M2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAJni1WpWlao8iGFNVbNSOvwu0nTTsJTw7cVW4NbtgfNGjzzDY3WCIj 8DPrD7HSbvoME+U2QM6Nm+lJFaQ2cJAlyHEnTC6jve3L8B5MoTBBYJWBzMhwfh6Y xakHB229scpDKrdc1kEOWi0v+UH1P6i3nSiLPa2CN7zNiT+bK8eo6PblCK254t1L F/STzC4ogv/iLtEvcPH68wXiH4SeUPSZZaQfSqVRtemmFDZnPPQSD9Rx0ji1wVSs b5savGZw4Hz+vI5nWbABZCryjpYEDOx4G8PJ+8G/wT7Swj8x6VDKbBGBjsbjDH4n uOVNJVOl2/noG/WvLkbkqGw13pAAkpuV -----END CERTIFICATE-----Generated at Thu Mar 26 10:40:16 2026 by rpki-client