$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc7a9908-f092-3c01-a8a5-53d0b5959127.roa File: cc7a9908-f092-3c01-a8a5-53d0b5959127.roa (raw, json) Hash identifier: 5O0uMpOwuOJyQg7JMRLLk7NfI3TevwAMFKpQ6NNxa4I= Subject key identifier: CC:5A:59:C0:82:F8:33:71:6C:97:C3:46:9D:07:CF:0E:B1:22:C5:71 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D143D9866BDD7C3442923CEC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc7a9908-f092-3c01-a8a5-53d0b5959127.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 40717 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:98:66:bd:d7:c3:44:29:23:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=818475ff-0e46-418e-a7a9-9a450b02e646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ab:ea:cd:64:f1:94:37:43:b4:75:1b:18:ea: f5:65:16:32:ca:27:4f:59:bb:63:ec:2c:1e:03:31: 5f:fc:d0:3d:99:16:90:4e:36:0b:d3:17:fb:bc:51: 29:54:3f:e3:94:b7:c7:6e:b0:b9:d9:f5:72:8e:a7: 11:f7:df:9a:fd:b5:e1:13:32:8f:76:f1:4e:1c:55: 3b:aa:ce:e8:81:f5:3c:53:d2:ab:df:71:8c:72:70: 3c:41:85:1f:e7:f6:fc:dc:be:a8:9c:3b:af:0f:6c: 62:3f:43:7d:13:eb:69:25:06:e8:e6:85:3c:ef:0c: 5b:53:12:27:f2:09:35:57:af:7d:15:8a:fd:33:54: 83:ac:ba:94:be:c6:ef:23:d3:8d:52:7d:c8:21:1b: 12:39:36:3a:03:fb:fc:dd:78:b5:f1:f7:f1:b8:2d: a9:1e:bc:59:1b:48:43:38:a2:05:ee:de:36:25:3e: 18:0f:89:02:27:91:a3:be:f0:49:f8:d3:7d:f3:f4: c8:1d:dc:76:f0:9a:ae:93:8a:c5:49:70:82:21:b2: 93:bb:db:a1:67:92:3e:64:8e:7e:88:9b:b1:33:7b: 6c:9b:5a:d9:49:23:e3:c9:12:5b:92:06:2c:02:c4: 30:17:6b:b4:ab:14:05:b2:bc:e1:4a:44:d6:ae:83: 61:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:5A:59:C0:82:F8:33:71:6C:97:C3:46:9D:07:CF:0E:B1:22:C5:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc7a9908-f092-3c01-a8a5-53d0b5959127.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:ec:85:db:3a:72:7b:7d:32:a4:4a:8f:d7:5f:1e:9a:3a:a4: 73:5b:77:4b:fa:06:bc:dd:3c:5c:58:96:33:d3:89:34:f4:02: 81:2a:ad:f8:bd:4c:5f:1a:52:74:a8:4e:b6:c6:3a:7a:37:16: 36:bf:2a:f1:e9:23:d9:d5:01:9e:44:27:1d:9a:a9:41:5a:93: 83:15:d8:5c:e6:c7:62:57:18:f1:e4:56:be:b9:2a:47:3b:18: 9a:3f:5e:ff:81:30:df:8d:ff:32:ed:7f:eb:3e:b8:10:0f:9e: 92:b8:f5:6d:ac:30:61:c5:87:28:08:9a:7c:35:5b:2a:34:e6: 95:2c:00:a2:c4:0d:19:89:bb:1d:a4:b5:31:ce:2e:b1:cb:3f: 5e:d9:d5:d7:be:23:41:24:a3:0b:c3:be:5a:30:01:58:da:49: 43:48:08:64:fd:ce:67:89:7b:91:a8:ea:07:4b:dc:5a:85:7d: b3:8f:69:78:92:a9:a7:09:8c:25:ef:ac:70:0d:8c:9b:d3:81: c4:21:d7:98:c6:8f:5d:95:24:0e:6e:27:b2:95:41:20:95:17: c3:a0:37:07:94:93:d5:00:d8:e6:56:35:ca:8a:71:49:eb:6d: d3:13:c6:14:cd:a3:e1:63:65:05:1e:a2:e7:3d:21:e6:ec:a0: 6c:9d:97:47 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0UPZhmvdfDRCkjzsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ODE4NDc1ZmYtMGU0Ni00MThlLWE3YTktOWE0NTBiMDJlNjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6vqzWTxlDdDtHUbGOr1ZRYyyidPWbtj7Cwe AzFf/NA9mRaQTjYL0xf7vFEpVD/jlLfHbrC52fVyjqcR99+a/bXhEzKPdvFOHFU7 qs7ogfU8U9Kr33GMcnA8QYUf5/b83L6onDuvD2xiP0N9E+tpJQbo5oU87wxbUxIn 8gk1V699FYr9M1SDrLqUvsbvI9ONUn3IIRsSOTY6A/v83Xi18ffxuC2pHrxZG0hD OKIF7t42JT4YD4kCJ5GjvvBJ+NN98/TIHdx28Jquk4rFSXCCIbKTu9uhZ5I+ZI5+ iJuxM3tsm1rZSSPjyRJbkgYsAsQwF2u0qxQFsrzhSkTWroNhywIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMxaWcCC+DNxbJfDRp0Hzw6xIsVxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2M3YTk5MDgtZjA5Mi0z YzAxLWE4YTUtNTNkMGI1OTU5MTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBm7IXbOnJ7fTKkSo/XXx6aOqRzW3dL+ga83TxcWJYz04k09AKBKq34 vUxfGlJ0qE62xjp6NxY2vyrx6SPZ1QGeRCcdmqlBWpODFdhc5sdiVxjx5Fa+uSpH OxiaP17/gTDfjf8y7X/rPrgQD56SuPVtrDBhxYcoCJp8NVsqNOaVLACixA0Zibsd pLUxzi6xyz9e2dXXviNBJKMLw75aMAFY2klDSAhk/c5niXuRqOoHS9xahX2zj2l4 kqmnCYwl76xwDYyb04HEIdeYxo9dlSQObieylUEglRfDoDcHlJPVANjmVjXKinFJ 623TE8YUzaPhY2UFHqLnPSHm7KBsnZdH -----END CERTIFICATE-----Generated at Thu Mar 26 17:26:06 2026 by rpki-client