$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f933df2-b286-30f1-805c-5c83aa006e1d.roa File: 2f933df2-b286-30f1-805c-5c83aa006e1d.roa (raw, json) Hash identifier: OVTz06TGyEhjwQdwVEOUlbO0ptQVmoh0ChPz9wpBd5Y= Subject key identifier: ED:C9:14:0D:26:FA:0B:D8:7F:76:DC:D8:7B:0E:2F:C1:C7:58:85:A6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F497DA79B7CB0BD5088E66760 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f933df2-b286-30f1-805c-5c83aa006e1d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36620 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:a7:9b:7c:b0:bd:50:88:e6:67:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=523aaf6b-6d26-475d-b56c-551b8691f0ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ca:8b:4f:a5:3e:97:00:5b:b0:7b:81:06:34: 74:c7:54:26:42:42:98:6c:36:90:d0:04:67:6a:38: a5:bc:95:ce:cf:64:6a:dc:27:87:b1:19:aa:b6:71: b6:87:09:a2:e1:be:ae:79:dc:2d:18:d0:a4:dd:a1: 94:7d:ea:85:40:cf:0f:8d:58:fc:99:50:bd:0c:00: 4b:1a:3f:a5:2b:41:47:1d:bb:a7:59:9f:0f:13:a0: 1d:b8:82:03:e0:da:d4:da:5a:63:f2:2c:b5:70:06: 90:cc:52:8e:3b:55:6f:c1:50:50:7f:1b:11:9d:5b: 53:a1:cc:b8:38:49:79:13:7e:40:5a:f5:6e:b9:24: 4c:57:fe:2b:58:85:3b:c8:ab:06:7e:bc:60:28:b7: 2c:61:9c:36:9b:af:3a:e0:e4:a2:c0:4e:19:11:62: 6b:73:d7:2d:2a:77:40:09:f4:a5:61:88:21:48:12: 34:6f:c7:46:9a:63:eb:42:b1:98:ac:bc:c0:98:96: 1a:3e:09:a8:96:a0:d8:a5:47:3c:fd:89:ad:63:5c: ee:a4:dd:eb:66:e3:b8:1c:5a:ca:d5:ec:70:4f:ad: 8d:ed:d1:8a:44:44:46:7c:81:e2:7b:f3:b0:e6:f0: e1:b7:21:e0:41:b1:07:1d:01:42:35:2d:67:66:c0: cd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C9:14:0D:26:FA:0B:D8:7F:76:DC:D8:7B:0E:2F:C1:C7:58:85:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f933df2-b286-30f1-805c-5c83aa006e1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:31:c8:d1:db:8e:e8:c7:3e:1b:23:19:1f:cd:6c:5d:3c:95: db:21:f9:5a:1c:be:33:eb:81:fd:91:46:58:5a:4b:7d:9d:70: 97:91:c1:d1:a7:99:83:6c:b2:27:0f:41:67:23:ab:fe:1a:09: a1:fb:9a:5a:55:37:37:98:52:a4:50:2e:80:0c:58:71:fa:8d: b6:50:7b:14:af:79:69:e0:60:fd:f6:81:11:24:a1:3e:77:f4: c9:91:fc:24:3b:c7:f1:b9:df:cd:29:ce:2f:da:f3:c0:28:87: 82:7e:ad:d8:db:21:e9:df:b6:86:63:4f:48:31:6a:42:09:65: ec:b0:08:a4:a6:15:47:b0:6d:8e:ca:4b:36:d0:40:38:ca:83: d5:f7:0b:95:10:b0:23:51:f3:4c:6f:47:ae:a0:a0:31:2c:7d: 50:3d:fd:47:79:b3:c7:8f:13:c2:fc:5a:96:45:ea:ef:dc:b8: 94:a3:0f:fb:a6:86:78:8e:d1:46:47:0b:75:34:0f:3d:80:17: a5:70:a7:6e:e4:2d:1a:84:4e:13:4c:27:3a:26:d8:64:9f:8f: 39:57:1a:02:2f:6a:1c:81:cd:33:09:db:02:94:4c:56:af:18: be:c1:69:cf:f8:39:dc:58:4b:d9:90:db:da:15:36:76:60:7e: bc:7a:83:2d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JfaebfLC9UIjmZ2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTIzYWFmNmItNmQyNi00NzVkLWI1NmMtNTUxYjg2OTFmMGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8qLT6U+lwBbsHuBBjR0x1QmQkKYbDaQ0ARn ajilvJXOz2Rq3CeHsRmqtnG2hwmi4b6uedwtGNCk3aGUfeqFQM8PjVj8mVC9DABL Gj+lK0FHHbunWZ8PE6AduIID4NrU2lpj8iy1cAaQzFKOO1VvwVBQfxsRnVtTocy4 OEl5E35AWvVuuSRMV/4rWIU7yKsGfrxgKLcsYZw2m6864OSiwE4ZEWJrc9ctKndA CfSlYYghSBI0b8dGmmPrQrGYrLzAmJYaPgmolqDYpUc8/YmtY1zupN3rZuO4HFrK 1exwT62N7dGKRERGfIHie/Ow5vDhtyHgQbEHHQFCNS1nZsDNlQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFO3JFA0m+gvYf3bc2HsOL8HHWIWmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmY5MzNkZjItYjI4Ni0z MGYxLTgwNWMtNWM4M2FhMDA2ZTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCYMcjR247oxz4bIxkfzWxdPJXbIflaHL4z64H9kUZYWkt9nXCXkcHR p5mDbLInD0FnI6v+Ggmh+5paVTc3mFKkUC6ADFhx+o22UHsUr3lp4GD99oERJKE+ d/TJkfwkO8fxud/NKc4v2vPAKIeCfq3Y2yHp37aGY09IMWpCCWXssAikphVHsG2O yks20EA4yoPV9wuVELAjUfNMb0euoKAxLH1QPf1HebPHjxPC/FqWRerv3LiUow/7 poZ4jtFGRwt1NA89gBelcKdu5C0ahE4TTCc6Jthkn485VxoCL2ocgc0zCdsClExW rxi+wWnP+DncWEvZkNvaFTZ2YH68eoMt -----END CERTIFICATE-----Generated at Fri Sep 25 18:11:44 2026 by rpki-client