$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8f3a7db-d471-3d4e-b8d0-6314379c1e98.roa File: f8f3a7db-d471-3d4e-b8d0-6314379c1e98.roa (raw, json) Hash identifier: gaqWkJ3YxBITzQ9NMFehp0mmb+WtDzmaAuRqV+ooYo0= Subject key identifier: BF:1C:31:37:4D:BA:EC:54:1E:03:60:04:7C:B4:84:E2:8C:2A:A8:6B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D143D967F6D4AF046D28CF200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8f3a7db-d471-3d4e-b8d0-6314379c1e98.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 396542 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:96:7f:6d:4a:f0:46:d2:8c:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=44e2cc4b-5e67-4f65-999b-3990c9724586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:27:f0:c3:98:9e:c7:c8:a1:a4:a3:aa:bc:e5: d4:49:ee:8b:8d:bf:a9:62:6b:d1:f4:6d:1d:b0:09: 49:69:3c:a1:eb:8c:14:d1:ba:4a:e1:b0:d4:98:e2: a2:28:e1:30:d0:57:47:78:db:f4:a5:99:2f:6b:f5: e0:de:39:b2:59:af:81:ce:e3:31:5e:ef:ba:2e:df: 01:17:31:57:5d:9f:41:78:3d:bc:3b:79:77:3c:8a: 95:ef:c7:35:36:91:8e:cb:ec:e1:c1:05:73:74:56: bb:fc:ac:0b:fd:ca:09:70:64:d2:74:c6:2a:f3:80: e2:d4:d8:75:b2:b3:d7:2c:19:8f:35:2e:01:e3:2d: 7b:b1:8e:69:ba:6e:75:ef:bd:55:ae:92:6c:9e:cc: 55:fd:e1:96:29:2a:26:b7:db:eb:d5:46:69:26:14: 31:cc:b0:a9:3a:87:db:e8:87:c8:17:f5:da:ff:1d: d3:b1:36:e3:c3:09:f9:08:10:84:7c:5d:cb:8d:a0: 7c:8d:10:28:53:ed:57:af:d4:6e:d5:3e:fe:19:25: a3:5c:7c:50:55:f0:b8:78:8e:1d:68:c6:a7:16:01: 77:81:b0:a4:9d:84:66:9f:86:ad:71:51:14:e4:cc: 51:a2:d3:aa:d7:e0:04:ea:b6:22:84:02:a0:7a:ad: f7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1C:31:37:4D:BA:EC:54:1E:03:60:04:7C:B4:84:E2:8C:2A:A8:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8f3a7db-d471-3d4e-b8d0-6314379c1e98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:e1:2c:03:a1:e2:fd:c5:d2:ee:2d:10:43:c1:5c:6c:af:6a: d8:48:a3:3c:71:71:7a:2a:87:24:5d:d2:b3:ae:e2:6d:da:fe: c8:59:c8:a5:75:36:cf:07:a6:05:40:44:e2:a0:67:1e:73:49: 9a:f4:63:10:1d:40:1e:bb:57:f6:28:8a:76:d7:cd:a4:ce:6e: 28:57:20:4b:1d:c1:24:b1:84:9c:fd:a8:63:e5:54:9f:e5:f4: 3c:7d:da:60:88:01:b5:28:e6:d5:a4:23:15:df:77:b4:ab:05: 57:ab:de:ec:04:71:b5:51:55:9b:eb:3c:15:dd:74:b5:e8:28: 09:77:21:cb:47:b7:4c:a7:de:6d:ae:1c:90:5e:67:d7:19:73: 00:58:2c:92:05:37:fb:21:48:4d:0c:6a:45:f3:44:44:31:7c: a4:be:83:0e:05:55:b7:32:8b:ef:51:eb:ff:a6:be:80:2a:dc: 84:d5:cc:9a:c6:67:e9:4e:ea:7c:ad:9c:6b:62:61:0c:9f:81: 48:fe:45:1a:d8:9f:b8:85:eb:c1:97:56:c5:43:bb:45:e5:11: af:16:0f:5a:d2:28:0e:69:f7:ca:23:00:d2:d1:51:8b:29:38: 1c:ec:d2:c5:34:cf:fb:e6:38:9b:49:07:57:d0:bd:e8:e8:06: 65:3a:ed:05 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0UPZZ/bUrwRtKM8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk NDRlMmNjNGItNWU2Ny00ZjY1LTk5OWItMzk5MGM5NzI0NTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoifww5iex8ihpKOqvOXUSe6Ljb+pYmvR9G0d sAlJaTyh64wU0bpK4bDUmOKiKOEw0FdHeNv0pZkva/Xg3jmyWa+BzuMxXu+6Lt8B FzFXXZ9BeD28O3l3PIqV78c1NpGOy+zhwQVzdFa7/KwL/coJcGTSdMYq84Di1Nh1 srPXLBmPNS4B4y17sY5pum51771VrpJsnsxV/eGWKSomt9vr1UZpJhQxzLCpOofb 6IfIF/Xa/x3TsTbjwwn5CBCEfF3LjaB8jRAoU+1Xr9Ru1T7+GSWjXHxQVfC4eI4d aManFgF3gbCknYRmn4atcVEU5MxRotOq1+AE6rYihAKgeq33HwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFL8cMTdNuuxUHgNgBHy0hOKMKqhrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjhmM2E3ZGItZDQ3MS0z ZDRlLWI4ZDAtNjMxNDM3OWMxZTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA14SwDoeL9xdLuLRBDwVxsr2rYSKM8cXF6KockXdKzruJt2v7IWcil dTbPB6YFQETioGcec0ma9GMQHUAeu1f2KIp2182kzm4oVyBLHcEksYSc/ahj5VSf 5fQ8fdpgiAG1KObVpCMV33e0qwVXq97sBHG1UVWb6zwV3XS16CgJdyHLR7dMp95t rhyQXmfXGXMAWCySBTf7IUhNDGpF80REMXykvoMOBVW3MovvUev/pr6AKtyE1cya xmfpTup8rZxrYmEMn4FI/kUa2J+4hevBl1bFQ7tF5RGvFg9a0igOaffKIwDS0VGL KTgc7NLFNM/75jibSQdX0L3o6AZlOu0F -----END CERTIFICATE-----Generated at Thu Mar 26 11:37:17 2026 by rpki-client