$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/affa538b-2647-32f3-870f-d84cb213a3c1.roa File: affa538b-2647-32f3-870f-d84cb213a3c1.roa (raw, json) Hash identifier: D/3hWaSHbg2hA3Zl4X1es8nDMFDCMf2LAJRub0xi6f0= Subject key identifier: FB:81:FA:0F:EE:3A:E1:7A:06:F1:1F:F0:57:AD:75:92:4F:D6:DA:65 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D143D968AD2B751B4FFB85380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/affa538b-2647-32f3-870f-d84cb213a3c1.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 397203 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:96:8a:d2:b7:51:b4:ff:b8:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=e3c6ec97-ed33-4f26-82cc-176d3aca0ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:52:cb:c2:d9:ee:6b:f7:a2:d7:04:29:d3:d6: da:23:dc:01:eb:d5:79:7a:3e:53:1e:91:c4:05:75: a8:a9:9d:e0:73:50:bb:f7:24:8a:24:27:3f:ae:c7: dd:cb:85:e3:6c:ef:09:0b:e5:6b:9e:ab:ab:5c:41: e7:f0:af:53:83:df:e6:ec:16:8f:c8:72:75:a4:db: ad:80:7b:13:80:a5:4b:d6:f1:38:57:a2:dc:6d:1f: cf:9b:33:f4:df:80:a3:fa:20:c7:d1:4d:13:33:7b: 51:a5:7b:0b:3b:24:04:0d:75:2b:5c:45:55:85:8b: 1f:6f:0e:de:81:17:d5:41:25:ea:8a:55:00:41:9e: 4e:a2:34:75:79:d5:05:89:5b:ef:4e:3e:aa:47:3e: 17:d3:50:6b:8d:9b:64:d6:9d:3f:2e:77:1d:bc:dd: 41:a5:25:59:0a:4c:83:57:b7:a0:81:31:3d:fd:29: 70:8a:ee:28:04:ed:46:1b:14:33:c7:b0:3b:58:ac: 74:9d:40:c3:50:c2:8b:45:72:95:92:6f:56:42:cb: c1:a5:5e:b4:7e:28:d9:2e:db:3c:a4:f7:90:50:e2: 2b:60:b8:f6:9b:bf:7f:10:b7:29:6f:05:2b:77:be: e5:aa:0b:de:38:30:85:32:14:23:ad:52:bb:91:e6: c5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:81:FA:0F:EE:3A:E1:7A:06:F1:1F:F0:57:AD:75:92:4F:D6:DA:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/affa538b-2647-32f3-870f-d84cb213a3c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:77:1e:fa:ba:ee:2f:5f:dd:b4:c1:7e:d2:c8:8c:42:ab:b0: 14:64:8f:b4:01:b4:b0:97:7d:76:1a:22:85:46:81:7b:38:2d: ee:3e:ca:b0:ac:77:25:9b:60:7b:f0:1a:f0:4d:ec:30:15:20: 2d:68:44:c6:23:0b:c8:76:53:79:5e:3f:7c:e7:c9:9e:01:51: 88:cd:65:10:db:2a:46:43:b7:01:10:14:c8:75:a8:a5:87:08: aa:08:14:d5:8a:4e:9b:96:a6:a4:c1:17:29:f6:a9:17:22:e8: f1:25:7e:e6:12:5b:28:db:60:f4:fa:dc:5e:2f:ac:24:39:1a: 8e:a5:91:b6:8a:b4:41:65:64:56:51:8b:74:48:52:4e:26:ab: a3:6c:f8:04:7e:89:dc:1b:9b:86:8d:88:54:cc:cf:1d:31:2f: 8b:a5:4c:39:ef:50:85:9d:92:00:07:05:ce:10:3e:cb:db:c5: cf:b3:fb:0a:5e:d6:21:ce:0d:59:c2:1a:ae:f7:48:5a:a2:f2: bc:ab:d6:de:d8:fb:42:05:a3:47:4b:29:de:46:13:00:c9:7f: 79:9c:df:0e:7b:ad:58:ba:c1:aa:7d:d3:0a:40:7c:43:95:e4: 76:af:61:77:50:4f:f1:6a:6a:41:95:de:f6:ad:d0:06:16:8c: 8c:5a:54:6e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0UPZaK0rdRtP+4U4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZTNjNmVjOTctZWQzMy00ZjI2LTgyY2MtMTc2ZDNhY2EwY2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FLLwtnua/ei1wQp09baI9wB69V5ej5THpHE BXWoqZ3gc1C79ySKJCc/rsfdy4XjbO8JC+VrnqurXEHn8K9Tg9/m7BaPyHJ1pNut gHsTgKVL1vE4V6LcbR/PmzP034Cj+iDH0U0TM3tRpXsLOyQEDXUrXEVVhYsfbw7e gRfVQSXqilUAQZ5OojR1edUFiVvvTj6qRz4X01BrjZtk1p0/LncdvN1BpSVZCkyD V7eggTE9/Slwiu4oBO1GGxQzx7A7WKx0nUDDUMKLRXKVkm9WQsvBpV60fijZLts8 pPeQUOIrYLj2m79/ELcpbwUrd77lqgveODCFMhQjrVK7kebF6QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPuB+g/uOuF6BvEf8FetdZJP1tplMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWZmYTUzOGItMjY0Ny0z MmYzLTg3MGYtZDg0Y2IyMTNhM2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCwdx76uu4vX920wX7SyIxCq7AUZI+0AbSwl312GiKFRoF7OC3uPsqw rHclm2B78BrwTewwFSAtaETGIwvIdlN5Xj9858meAVGIzWUQ2ypGQ7cBEBTIdail hwiqCBTVik6blqakwRcp9qkXIujxJX7mElso22D0+txeL6wkORqOpZG2irRBZWRW UYt0SFJOJqujbPgEfoncG5uGjYhUzM8dMS+LpUw571CFnZIABwXOED7L28XPs/sK XtYhzg1Zwhqu90haovK8q9be2PtCBaNHSyneRhMAyX95nN8Oe61YusGqfdMKQHxD leR2r2F3UE/xampBld72rdAGFoyMWlRu -----END CERTIFICATE-----Generated at Thu Mar 26 17:58:21 2026 by rpki-client