$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2157cc7f-b3e9-3ba7-86fb-33bedd8ac72f.roa File: 2157cc7f-b3e9-3ba7-86fb-33bedd8ac72f.roa (raw, json) Hash identifier: cmEU8kHomngWVLloorSe7wi9BFiFKDi0FUUCVspJuCc= Subject key identifier: 71:43:EF:C1:66:4B:E7:D6:1A:E3:64:5D:C4:F2:51:CB:D4:CB:F1:65 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EF87CD8F6E1DBB09E5D213200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2157cc7f-b3e9-3ba7-86fb-33bedd8ac72f.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 7342 IP address blocks: 192.68.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:d8:f6:e1:db:b0:9e:5d:21:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=0e437605-d494-4b58-87dd-39fe2a04c296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:00:78:3f:f2:e4:f0:8d:78:3d:6a:ec:d6:f4: 07:5a:39:f0:30:d5:94:ea:97:b7:30:36:c4:33:29: 87:8f:f0:07:4f:e8:f6:5d:f6:c7:bf:7f:01:5e:10: 0f:c9:f4:a1:54:5c:a8:b4:f5:72:7b:19:6f:1e:62: 46:ab:57:59:c0:08:25:5c:89:9d:97:19:c2:c9:37: 8b:07:44:85:67:b2:4d:99:15:b4:87:f8:4b:13:35: bd:24:03:58:b8:d4:05:b4:1d:ea:46:1d:27:bc:12: 4f:ed:ff:f7:f1:25:b9:3d:35:cc:f5:63:69:89:f7: 30:8c:3d:99:8b:d1:8f:c4:9a:e6:de:b3:f8:ef:f0: 3b:59:22:ae:c1:8c:36:a6:76:ea:82:72:68:c7:86: 5a:d8:7f:0e:35:18:a1:e2:a5:12:e3:e7:06:60:41: 3c:d2:7d:70:13:78:1d:ac:55:22:c4:b6:d9:8c:80: 0d:1c:54:9d:23:19:25:c0:88:c1:4b:ca:91:c4:69: 08:c5:b9:a0:d0:f5:dc:70:47:a3:ef:ce:51:83:e9: 0d:2a:7b:4f:53:cf:7a:ce:92:59:0b:29:53:ad:3a: 41:ae:fd:cb:a7:b1:87:55:64:0e:dd:a5:fe:e0:a0: 77:49:3c:0d:a9:b5:c8:61:ed:b8:f5:f2:42:0c:00: 85:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:43:EF:C1:66:4B:E7:D6:1A:E3:64:5D:C4:F2:51:CB:D4:CB:F1:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2157cc7f-b3e9-3ba7-86fb-33bedd8ac72f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:3a:17:8c:f0:2e:1c:17:a6:0a:7e:2d:9d:db:a3:8e:73:d3: b6:6d:d9:34:a1:ac:d4:58:8a:a1:ba:52:bc:05:d0:f2:db:bc: c6:be:37:af:58:0b:73:01:3c:f6:58:72:c8:c1:bc:4e:b2:96: 5a:a2:57:8c:dc:f2:d5:d2:53:c2:ad:ff:0d:73:4b:53:9e:b4: f1:d2:90:5d:91:b0:54:5a:36:6f:62:85:d6:7a:57:fb:be:74: 0d:55:39:f9:a3:cb:28:8b:a9:69:b0:68:95:64:b5:c8:00:79: 86:e4:63:15:25:0a:7e:1c:3a:73:4a:28:0e:fb:32:3e:02:13: 14:78:97:f7:8f:d2:7f:aa:de:8c:55:9d:d0:6c:0b:6c:51:b3: 10:1e:0a:d3:0d:1c:b5:4e:26:7e:f5:98:11:76:80:fe:a2:75: 62:b6:f2:5c:25:5a:52:15:5a:36:d4:78:d6:6a:e0:5e:89:38: e7:35:87:17:f2:6d:e9:23:f1:3c:46:9a:86:2f:07:2d:94:76: 17:61:db:88:35:15:38:e5:9f:e5:cd:87:67:14:e1:dc:ab:64: 06:56:03:b1:03:8f:e3:60:21:f3:b5:71:48:93:fa:1b:44:7a: 88:09:76:1e:8c:19:8d:e5:72:23:d7:8e:98:f9:c4:65:3b:2e: 37:94:20:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fNj24duwnl0hMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk MGU0Mzc2MDUtZDQ5NC00YjU4LTg3ZGQtMzlmZTJhMDRjMjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQB4P/Lk8I14PWrs1vQHWjnwMNWU6pe3MDbE MymHj/AHT+j2XfbHv38BXhAPyfShVFyotPVyexlvHmJGq1dZwAglXImdlxnCyTeL B0SFZ7JNmRW0h/hLEzW9JANYuNQFtB3qRh0nvBJP7f/38SW5PTXM9WNpifcwjD2Z i9GPxJrm3rP47/A7WSKuwYw2pnbqgnJox4Za2H8ONRih4qUS4+cGYEE80n1wE3gd rFUixLbZjIANHFSdIxklwIjBS8qRxGkIxbmg0PXccEej785Rg+kNKntPU896zpJZ CylTrTpBrv3Lp7GHVWQO3aX+4KB3STwNqbXIYe249fJCDACFRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFD78FmS+fWGuNkXcTyUcvUy/FlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjE1N2NjN2YtYjNlOS0z YmE3LTg2ZmItMzNiZWRkOGFjNzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwESAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK46F4zwLhwXpgp+LZ3bo45z07Zt2TShrNRYiqG6UrwF0PLbvMa+N69Y C3MBPPZYcsjBvE6yllqiV4zc8tXSU8Kt/w1zS1OetPHSkF2RsFRaNm9ihdZ6V/u+ dA1VOfmjyyiLqWmwaJVktcgAeYbkYxUlCn4cOnNKKA77Mj4CExR4l/eP0n+q3oxV ndBsC2xRsxAeCtMNHLVOJn71mBF2gP6idWK28lwlWlIVWjbUeNZq4F6JOOc1hxfy bekj8TxGmoYvBy2Udhdh24g1FTjln+XNh2cU4dyrZAZWA7EDj+NgIfO1cUiT+htE eogJdh6MGY3lciPXjpj5xGU7LjeUIKA= -----END CERTIFICATE-----Generated at Tue Sep 22 19:02:46 2026 by rpki-client