$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cf2ea11-4acc-3241-9293-e3e075c3dc18.roa File: 1cf2ea11-4acc-3241-9293-e3e075c3dc18.roa (raw, json) Hash identifier: lwER3yoAmMklM1Tnyjmrc6cpwzXhlPGgK8XRUiTN6z0= Subject key identifier: 55:77:37:B1:E3:BC:ED:1B:DA:3D:20:C4:77:29:6E:34:C6:8B:DC:8D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D07AD0EFFCAF919ABBE085A00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cf2ea11-4acc-3241-9293-e3e075c3dc18.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 397196 IP address blocks: 192.68.126.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ad:0e:ff:ca:f9:19:ab:be:08:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=ebdd85ec-2520-4c7b-b343-c80ddb914029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ca:f6:8b:e5:ef:5a:c2:33:1d:93:02:da:12: 6a:35:c6:03:c4:7f:3b:00:d2:8b:ab:76:87:f7:7d: db:b3:fb:9a:24:52:e4:ad:68:86:88:8d:43:ff:70: 7d:0d:50:e5:53:97:93:82:34:d8:c3:12:53:dc:ec: fc:68:c7:16:5c:22:f6:2d:95:92:ad:28:24:64:b9: 1c:d3:a8:02:19:fe:b5:16:45:99:4a:b6:0c:ba:aa: 1b:78:e5:63:d0:4a:6c:54:d3:57:7e:16:bf:4d:3b: c1:10:0a:16:44:d4:c4:ae:4f:1d:ba:2a:3c:fb:51: 48:a1:58:06:37:be:40:fc:a4:50:77:00:f2:12:b3: 55:af:dd:a6:fe:f1:31:51:4f:6b:a2:ce:32:61:a2: 25:9f:b7:d5:2b:4e:12:24:82:41:81:e1:91:9c:68: ed:d5:ea:45:6a:36:36:01:35:c0:ff:1f:72:66:9d: e4:f6:80:94:d0:c5:80:a0:3a:07:8e:ed:3c:77:5a: 9a:5b:29:e1:db:ce:71:29:6d:4f:6b:04:b9:23:6c: 31:c1:8c:a2:2d:d0:68:13:34:ef:db:7e:23:55:18: 88:7e:32:ea:d3:88:56:7b:ca:1f:e3:2f:79:cf:f9: ad:d0:83:75:58:09:54:a9:f9:18:f4:1b:fc:1d:f5: 20:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:77:37:B1:E3:BC:ED:1B:DA:3D:20:C4:77:29:6E:34:C6:8B:DC:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cf2ea11-4acc-3241-9293-e3e075c3dc18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:7d:80:93:bf:16:a2:a2:60:e9:da:4a:8f:f2:0a:65:61:79: f9:5c:17:65:73:91:33:4f:4d:ed:f1:1a:55:cd:0f:a0:ef:86: 6f:d4:db:21:d7:bb:26:a1:80:d7:1c:c6:40:6b:2f:b7:5b:66: a7:64:1c:ad:18:fc:d3:fd:0c:de:e2:3e:fb:c9:08:7d:26:15: 6d:0b:62:46:1f:e9:4b:0b:27:6b:aa:14:98:d8:37:e9:96:09: 8b:d9:2b:46:17:56:e5:74:e1:78:08:18:11:ab:70:6a:d6:dd: d1:19:47:ff:a3:7c:0c:2e:fc:46:bb:69:bf:69:c7:f5:55:34: dd:40:7b:b6:24:bd:b1:d1:cd:b9:c4:ef:4f:71:6b:d3:34:e9: 35:1c:a5:06:e4:29:f5:b2:aa:0d:e5:b8:2c:a3:3b:dd:0a:e2: 59:f8:d7:1e:3b:d7:c5:2c:ef:0b:67:53:f9:c0:8c:61:21:d4: 85:15:47:c2:6e:d3:4c:fb:5c:f0:f1:49:54:32:e5:39:63:76: 79:0f:57:12:dd:37:aa:d1:ed:36:78:2a:ef:d2:e0:cf:ed:13: ac:ec:af:12:54:80:c8:6d:40:94:3c:2b:6d:31:38:ba:78:91: 7f:69:84:84:8f:60:03:99:0f:dd:38:23:e1:ff:4b:ce:20:cb: 92:18:57:35 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0HrQ7/yvkZq74IWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk ZWJkZDg1ZWMtMjUyMC00YzdiLWIzNDMtYzgwZGRiOTE0MDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcr2i+XvWsIzHZMC2hJqNcYDxH87ANKLq3aH 933bs/uaJFLkrWiGiI1D/3B9DVDlU5eTgjTYwxJT3Oz8aMcWXCL2LZWSrSgkZLkc 06gCGf61FkWZSrYMuqobeOVj0EpsVNNXfha/TTvBEAoWRNTErk8duio8+1FIoVgG N75A/KRQdwDyErNVr92m/vExUU9ros4yYaIln7fVK04SJIJBgeGRnGjt1epFajY2 ATXA/x9yZp3k9oCU0MWAoDoHju08d1qaWynh285xKW1PawS5I2wxwYyiLdBoEzTv 234jVRiIfjLq04hWe8of4y95z/mt0IN1WAlUqfkY9Bv8HfUgCwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFV3N7HjvO0b2j0gxHcpbjTGi9yNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWNmMmVhMTEtNGFjYy0z MjQxLTkyOTMtZTNlMDc1YzNkYzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCDfYCTvxaiomDp2kqP8gplYXn5XBdlc5EzT03t8RpVzQ+g74Zv1Nsh 17smoYDXHMZAay+3W2anZBytGPzT/Qze4j77yQh9JhVtC2JGH+lLCydrqhSY2Dfp lgmL2StGF1bldOF4CBgRq3Bq1t3RGUf/o3wMLvxGu2m/acf1VTTdQHu2JL2x0c25 xO9PcWvTNOk1HKUG5Cn1sqoN5bgsozvdCuJZ+NceO9fFLO8LZ1P5wIxhIdSFFUfC btNM+1zw8UlUMuU5Y3Z5D1cS3Teq0e02eCrv0uDP7ROs7K8SVIDIbUCUPCttMTi6 eJF/aYSEj2ADmQ/dOCPh/0vOIMuSGFc1 -----END CERTIFICATE-----Generated at Mon Mar 2 07:49:06 2026 by rpki-client