$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28213a0a-1611-3f7f-994d-69a3d187a4c4.roa File: 28213a0a-1611-3f7f-994d-69a3d187a4c4.roa (raw, json) Hash identifier: kRbD/q1zn3S+kSQIXyzYgKP605a5jNLAmXsCT1CFM94= Subject key identifier: 2A:0D:30:4D:65:7C:09:4C:0E:D2:FC:B5:94:3B:7F:C5:E1:6C:B9:D2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584DE84B4ADBED3D1FA3F4117E00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28213a0a-1611-3f7f-994d-69a3d187a4c4.roa Signing time: Thu 21 May 2026 13:00:32 +0000 ROA not before: Thu 21 May 2026 13:00:32 +0000 ROA not after: Wed 19 Aug 2026 13:00:32 +0000 asID: 396578 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e8:4b:4a:db:ed:3d:1f:a3:f4:11:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 21 13:00:32 2026 GMT Not After : Aug 19 13:00:32 2026 GMT Subject: CN=e90ad2c3-f07d-4e6b-aa1f-d6696f4c92b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8c:7a:8f:e2:48:58:94:9d:b5:d9:8c:a6:a2: d6:4f:bd:9e:5a:3b:7b:f3:c0:75:05:62:d6:ec:e0: ad:61:0d:89:b9:6e:0e:28:58:8a:f1:62:d8:a9:41: ac:60:56:52:a0:16:b5:f9:4f:a4:61:6b:0d:fc:7f: c7:50:38:55:81:db:d4:a8:e0:2b:0c:07:94:12:6d: 38:e9:54:dd:e5:c7:8d:44:6b:cb:23:d6:6f:ce:f4: ec:79:7c:a8:47:67:c7:0c:fe:5a:a6:b2:46:9e:2f: 45:12:2b:a8:2d:5a:4c:bb:4d:17:46:d5:be:39:00: 19:c5:48:bc:35:77:92:51:91:14:4a:81:2f:39:93: 4c:07:05:e7:e1:27:80:c3:a0:68:4d:87:9b:50:33: 88:48:f5:eb:a7:95:fe:62:25:f9:7d:99:a8:78:3a: 91:6a:6b:75:35:de:16:93:e9:d2:d5:4d:fd:93:e7: f2:76:69:7b:7e:12:1b:e7:9f:23:8a:38:86:f2:9b: d8:62:a9:e3:76:e5:69:73:ac:70:71:a5:ce:c6:ed: db:c0:d7:98:56:7b:3c:a6:a5:07:f9:85:b7:fa:8a: 0a:7f:c1:bc:b5:f5:3a:00:f2:47:2e:60:1c:06:3d: a9:73:1c:b2:34:e6:de:02:03:42:85:34:da:71:37: df:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:0D:30:4D:65:7C:09:4C:0E:D2:FC:B5:94:3B:7F:C5:E1:6C:B9:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28213a0a-1611-3f7f-994d-69a3d187a4c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:58:4c:a9:df:d5:5a:26:18:af:4e:a5:1c:97:7a:e5:8d:94: 7e:9c:5a:dd:db:8b:ce:c9:1b:4c:dd:78:2a:23:54:8d:6d:9d: 8e:d7:6c:a4:16:d3:3c:07:cc:22:e5:5f:94:3b:09:b2:3e:34: 0e:ca:23:24:16:7c:eb:45:d0:ba:8f:e5:00:97:1f:78:98:62: 99:ef:eb:be:b0:37:8e:bd:7a:76:01:ec:c7:48:08:7f:7e:15: 3f:14:33:19:59:2d:a7:1b:d0:00:f5:4d:0b:b7:20:7e:ee:3b: 2c:73:b7:ae:34:c1:61:23:f9:58:e6:82:07:17:92:da:91:26: f6:7d:f7:5a:21:e3:00:1b:52:cd:1e:17:ea:87:db:6f:54:08: 15:ff:ef:4f:46:87:6c:65:ed:3b:76:df:37:50:bb:32:68:21: e7:cd:e9:37:91:7b:2a:8a:f4:66:ce:eb:44:83:1a:a3:e8:e4: 98:27:38:71:28:97:4d:95:e0:97:e9:20:21:9e:4f:6a:30:b3: fa:93:ee:ce:01:04:8b:da:85:b5:68:e5:f4:be:45:5e:ed:92: ac:37:9d:57:8f:47:8b:2a:38:db:67:7d:28:ea:51:f9:33:b0: 22:4f:df:4e:f4:9e:e2:a8:bc:28:b6:62:2f:0b:9a:0e:67:11: 69:3e:23:9d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3oS0rb7T0fo/QRfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDUyMTEzMDAzMloXDTI2MDgxOTEzMDAzMlowLzEtMCsGA1UEAxMk ZTkwYWQyYzMtZjA3ZC00ZTZiLWFhMWYtZDY2OTZmNGM5MmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYx6j+JIWJSdtdmMpqLWT72eWjt788B1BWLW 7OCtYQ2JuW4OKFiK8WLYqUGsYFZSoBa1+U+kYWsN/H/HUDhVgdvUqOArDAeUEm04 6VTd5ceNRGvLI9ZvzvTseXyoR2fHDP5aprJGni9FEiuoLVpMu00XRtW+OQAZxUi8 NXeSUZEUSoEvOZNMBwXn4SeAw6BoTYebUDOISPXrp5X+YiX5fZmoeDqRamt1Nd4W k+nS1U39k+fydml7fhIb558jijiG8pvYYqnjduVpc6xwcaXOxu3bwNeYVns8pqUH +YW3+ooKf8G8tfU6APJHLmAcBj2pcxyyNObeAgNChTTacTffpwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCoNME1lfAlMDtL8tZQ7f8XhbLnSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjgyMTNhMGEtMTYxMS0z ZjdmLTk5NGQtNjlhM2QxODdhNGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCcWEyp39VaJhivTqUcl3rljZR+nFrd24vOyRtM3XgqI1SNbZ2O12yk FtM8B8wi5V+UOwmyPjQOyiMkFnzrRdC6j+UAlx94mGKZ7+u+sDeOvXp2AezHSAh/ fhU/FDMZWS2nG9AA9U0LtyB+7jssc7euNMFhI/lY5oIHF5LakSb2ffdaIeMAG1LN Hhfqh9tvVAgV/+9PRodsZe07dt83ULsyaCHnzek3kXsqivRmzutEgxqj6OSYJzhx KJdNleCX6SAhnk9qMLP6k+7OAQSL2oW1aOX0vkVe7ZKsN51Xj0eLKjjbZ30o6lH5 M7AiT99O9J7iqLwotmIvC5oOZxFpPiOd -----END CERTIFICATE-----Generated at Sat Jun 13 22:34:37 2026 by rpki-client