$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4b98ffd-9332-374a-82aa-4b68879fd5b2.roa File: b4b98ffd-9332-374a-82aa-4b68879fd5b2.roa (raw, json) Hash identifier: hwGmi1PgCh6FsFSEoh0z96myOEoCILRi+536xTkbehs= Subject key identifier: 18:BD:55:BC:5B:6D:B3:5B:0E:B9:41:D2:F8:28:1E:A0:73:A9:8A:F0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D143D94A739CC80637AB44FE0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4b98ffd-9332-374a-82aa-4b68879fd5b2.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 396566 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:94:a7:39:cc:80:63:7a:b4:4f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=1f73d622-7658-443b-a976-34b145760e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:90:c3:75:bc:d2:aa:5d:08:00:31:39:be:96: 4a:62:0d:b1:74:02:0f:b6:94:35:7f:67:02:52:8a: 9e:4e:d7:87:60:8d:ed:42:98:90:bc:d2:db:98:d2: 7c:57:15:46:c0:9c:ad:58:9c:7e:62:fa:26:24:db: 74:71:a2:cc:79:f1:8a:41:24:96:67:85:9f:0d:0b: bb:fb:dd:6d:be:6e:14:e8:06:0d:0e:2a:a6:3e:32: be:0a:08:5c:ee:f3:f1:33:0b:64:8a:b2:66:88:57: b5:72:9b:b4:8c:7a:f0:71:c0:e0:22:98:ee:f8:be: 25:6b:03:00:55:e0:75:f9:7d:41:35:8a:f5:16:08: 43:70:a3:d8:8f:f0:09:1c:8e:95:8b:93:44:13:64: f7:c7:08:f2:ed:b4:fb:9a:c4:82:91:e7:6b:0a:54: c9:d9:a4:f6:16:01:43:af:b8:64:cc:88:70:f1:53: fb:39:e4:aa:6f:a2:19:dd:ee:93:58:5c:d7:7b:d9: 50:60:48:3e:39:0c:a2:bd:f2:e1:48:37:34:ff:e4: ba:dc:f2:a1:0b:b6:b1:37:95:14:89:3c:85:4e:85: f2:da:c1:54:02:58:33:c0:e0:c9:65:6d:79:b7:71: 64:5f:2a:86:27:d5:ef:3c:30:d6:12:40:7c:81:f5: b4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:BD:55:BC:5B:6D:B3:5B:0E:B9:41:D2:F8:28:1E:A0:73:A9:8A:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4b98ffd-9332-374a-82aa-4b68879fd5b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:e5:78:b6:a3:07:04:8e:59:09:ea:54:ee:91:2f:7d:8c:67: 62:f1:cf:1d:61:aa:eb:f1:25:40:85:fc:78:08:26:63:b6:5a: d3:7e:81:0d:e1:ab:1b:b2:65:d3:ae:ab:9e:06:e6:c2:1c:05: 3d:ce:f1:8d:44:c7:e3:ad:93:d7:65:b9:6a:31:aa:f1:e8:04: 11:21:73:86:1a:77:0f:79:2d:01:85:5a:9f:f5:8b:b0:c7:1e: 34:95:9d:e6:b7:5d:52:b1:30:ac:cd:b0:d9:15:e4:fe:7b:9d: aa:f6:7a:81:28:19:d9:49:8d:5f:7a:c4:50:e2:6a:7d:fa:d7: 62:61:c5:81:c3:17:81:f4:47:20:3b:27:e2:54:56:4b:75:06: ad:ac:a4:00:33:29:40:5d:e3:7c:60:31:66:17:25:ac:52:4a: 87:ba:4d:6a:1c:4a:50:01:ff:c7:35:75:6b:74:ab:59:7e:5f: 39:a1:7f:43:52:1e:88:b4:d5:7d:21:22:33:97:11:81:ba:4c: 0e:83:3b:d8:52:2f:f2:86:39:ef:e9:20:cd:dd:18:8e:3e:79: 2b:07:44:5c:41:49:f6:68:ca:08:08:c9:5d:43:30:eb:95:2b: 45:e9:04:c4:a5:73:8b:89:82:2d:70:e5:38:71:87:7a:07:74: d8:1d:4e:6e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0UPZSnOcyAY3q0T+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MWY3M2Q2MjItNzY1OC00NDNiLWE5NzYtMzRiMTQ1NzYwZTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJDDdbzSql0IADE5vpZKYg2xdAIPtpQ1f2cC UoqeTteHYI3tQpiQvNLbmNJ8VxVGwJytWJx+YvomJNt0caLMefGKQSSWZ4WfDQu7 +91tvm4U6AYNDiqmPjK+Cghc7vPxMwtkirJmiFe1cpu0jHrwccDgIpju+L4lawMA VeB1+X1BNYr1FghDcKPYj/AJHI6Vi5NEE2T3xwjy7bT7msSCkedrClTJ2aT2FgFD r7hkzIhw8VP7OeSqb6IZ3e6TWFzXe9lQYEg+OQyivfLhSDc0/+S63PKhC7axN5UU iTyFToXy2sFUAlgzwODJZW15t3FkXyqGJ9XvPDDWEkB8gfW0tQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBi9VbxbbbNbDrlB0vgoHqBzqYrwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjRiOThmZmQtOTMzMi0z NzRhLTgyYWEtNGI2ODg3OWZkNWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAU5Xi2owcEjlkJ6lTukS99jGdi8c8dYarr8SVAhfx4CCZjtlrTfoEN 4asbsmXTrqueBubCHAU9zvGNRMfjrZPXZblqMarx6AQRIXOGGncPeS0BhVqf9Yuw xx40lZ3mt11SsTCszbDZFeT+e52q9nqBKBnZSY1fesRQ4mp9+tdiYcWBwxeB9Ecg OyfiVFZLdQatrKQAMylAXeN8YDFmFyWsUkqHuk1qHEpQAf/HNXVrdKtZfl85oX9D Uh6ItNV9ISIzlxGBukwOgzvYUi/yhjnv6SDN3RiOPnkrB0RcQUn2aMoICMldQzDr lStF6QTEpXOLiYItcOU4cYd6B3TYHU5u -----END CERTIFICATE-----Generated at Thu Mar 26 12:42:21 2026 by rpki-client