$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9676fd5-305e-3317-bd0d-99ca96cb0836.roa File: f9676fd5-305e-3317-bd0d-99ca96cb0836.roa (raw, json) Hash identifier: CTZxEX/B2QsPWCgvjaAKGtv1v125Fk45UajR4vVC2uk= Subject key identifier: 3A:86:01:08:76:0E:D6:E8:26:39:E0:59:53:DD:E6:D0:78:DD:E5:92 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D07AD0E420650E4DC424D4D40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9676fd5-305e-3317-bd0d-99ca96cb0836.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 36628 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ad:0e:42:06:50:e4:dc:42:4d:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=1a971087-aa82-49a5-9af1-bc0bea549c3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9d:57:86:55:1b:63:af:3a:e6:87:f5:98:ce: 34:87:2a:ed:95:f8:10:4d:ce:fa:13:bb:e2:da:54: 1c:50:9b:c4:3e:2f:e0:c1:67:18:59:87:ac:fc:0b: 53:9c:da:84:21:d4:7a:3c:ab:f3:47:0a:b7:de:56: 26:ac:4c:77:e2:29:ec:33:2c:5e:7c:4a:17:bc:c7: 28:98:01:f1:df:f5:cf:94:a4:db:67:6b:48:f1:53: 5c:19:2f:2b:72:5f:2f:3e:76:8e:b7:fa:46:67:f3: 11:d6:2b:ac:e3:eb:fb:39:90:bb:3a:cb:1e:53:e2: f9:a7:61:36:67:b3:ca:3e:8c:21:f9:88:52:6e:53: 42:12:72:a5:69:f5:7d:ba:99:5e:f1:05:fd:41:52: c8:dc:78:2f:6e:f6:bf:7f:32:2e:5b:dc:b3:7d:5b: 78:32:8b:5f:78:db:d3:02:67:0a:f6:44:07:7c:e7: af:d7:72:07:18:41:6e:ed:03:7d:e2:92:76:df:0d: 32:c2:91:e0:84:44:b9:92:9c:71:3d:90:94:3c:62: f7:78:8c:77:17:da:1e:e7:98:6f:b4:10:7e:8c:09: 74:d9:28:f4:68:ab:c3:41:c6:1a:db:c9:55:a2:94: 54:fc:d5:3b:99:f9:fd:f5:71:75:63:91:8a:12:bf: f5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:86:01:08:76:0E:D6:E8:26:39:E0:59:53:DD:E6:D0:78:DD:E5:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9676fd5-305e-3317-bd0d-99ca96cb0836.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:84:f2:96:5a:e5:5d:60:ce:85:7d:ec:83:78:22:dd:c8:10: d1:4f:4d:13:09:86:c2:71:02:a2:04:55:16:54:4c:c6:62:08: ce:32:8c:e8:3c:42:61:ba:11:be:d5:0d:2d:0b:24:89:58:ba: 92:30:d4:05:75:b5:d3:16:e8:6c:20:f5:23:77:9c:d2:af:87: 08:df:bc:bb:45:05:d3:cd:b6:5e:21:b7:54:7e:0d:07:ad:d9: f4:76:93:e3:8f:4d:81:03:a9:de:56:22:3a:1e:15:11:a1:73: 63:b9:8e:1f:ef:5a:e3:22:88:fa:d9:0a:c7:69:b6:8c:ea:dc: 88:11:e6:5f:78:fe:ba:7e:0d:06:29:6c:bf:e9:5c:62:b9:10: 4e:16:b3:d7:37:cb:86:3e:c0:4e:38:96:7c:bd:b6:dc:be:d5: 44:d8:ec:43:a0:c1:14:6f:b3:03:35:3a:49:5f:a7:c4:78:a8: 90:7a:bc:51:77:8b:e4:71:ae:8c:dd:d9:42:91:79:7a:1a:b0: 05:d0:fc:4b:b4:04:b0:ec:b3:c7:c3:13:a6:f8:dc:98:84:fe: 89:72:16:c3:69:bd:1f:03:41:94:e0:8a:b4:c1:6b:04:65:01: 1e:21:6d:44:bd:07:63:7b:47:6c:a3:3e:c2:8f:82:a9:d7:fb: c4:9c:54:aa -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0HrQ5CBlDk3EJNTUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk MWE5NzEwODctYWE4Mi00OWE1LTlhZjEtYmMwYmVhNTQ5YzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJ1XhlUbY6865of1mM40hyrtlfgQTc76E7vi 2lQcUJvEPi/gwWcYWYes/AtTnNqEIdR6PKvzRwq33lYmrEx34insMyxefEoXvMco mAHx3/XPlKTbZ2tI8VNcGS8rcl8vPnaOt/pGZ/MR1ius4+v7OZC7OsseU+L5p2E2 Z7PKPowh+YhSblNCEnKlafV9uple8QX9QVLI3Hgvbva/fzIuW9yzfVt4MotfeNvT AmcK9kQHfOev13IHGEFu7QN94pJ23w0ywpHghES5kpxxPZCUPGL3eIx3F9oe55hv tBB+jAl02Sj0aKvDQcYa28lVopRU/NU7mfn99XF1Y5GKEr/1SwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDqGAQh2DtboJjngWVPd5tB43eWSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjk2NzZmZDUtMzA1ZS0z MzE3LWJkMGQtOTljYTk2Y2IwODM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB4hPKWWuVdYM6FfeyDeCLdyBDRT00TCYbCcQKiBFUWVEzGYgjOMozo PEJhuhG+1Q0tCySJWLqSMNQFdbXTFuhsIPUjd5zSr4cI37y7RQXTzbZeIbdUfg0H rdn0dpPjj02BA6neViI6HhURoXNjuY4f71rjIoj62QrHabaM6tyIEeZfeP66fg0G KWy/6VxiuRBOFrPXN8uGPsBOOJZ8vbbcvtVE2OxDoMEUb7MDNTpJX6fEeKiQerxR d4vkca6M3dlCkXl6GrAF0PxLtASw7LPHwxOm+NyYhP6JchbDab0fA0GU4Iq0wWsE ZQEeIW1EvQdje0dsoz7Cj4Kp1/vEnFSq -----END CERTIFICATE-----Generated at Thu Mar 26 10:59:04 2026 by rpki-client