$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/476ccef9-db67-314e-982a-f04e9cdec3b1.roa File: 476ccef9-db67-314e-982a-f04e9cdec3b1.roa (raw, json) Hash identifier: QDOLrg4iArl8SsiBkTuoCvJrdaSh4w0CvjSUDjJSBI4= Subject key identifier: 43:C1:FD:61:9F:9D:F3:66:09:77:A2:D0:58:68:A0:07:DC:94:31:9F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D07AD08730CD64F3001B7DB00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/476ccef9-db67-314e-982a-f04e9cdec3b1.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 397194 IP address blocks: 192.68.126.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ad:08:73:0c:d6:4f:30:01:b7:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=0038f608-bc51-4539-910a-3609b31106ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:28:b6:88:d9:3a:4a:10:3e:9a:61:55:c6:09: c3:ff:6c:38:83:ec:66:c1:46:90:a7:2e:77:ea:9b: 49:dd:ee:ca:99:c6:5e:f0:79:d1:ba:f3:27:28:92: c3:a3:53:c0:b2:e1:fc:08:62:ed:2e:77:ca:a0:73: 64:2c:b0:76:53:c0:33:3e:2f:5b:c3:9c:d1:70:e0: 0f:f6:67:01:40:9b:90:a8:4f:96:28:01:15:18:ae: f5:f3:2e:d5:67:00:9d:74:41:15:9b:d4:68:82:e9: e8:cf:c9:0c:18:f6:13:5e:04:00:dc:e3:8b:da:75: fa:4b:7d:45:81:72:95:a1:f2:15:55:e8:7c:b4:23: 27:56:87:97:2d:9f:13:a2:6c:5e:fc:3d:63:8c:b7: 6f:13:ae:ca:bb:8b:2b:24:0d:0c:51:8d:6f:ef:dd: 96:5e:fa:d5:c9:e6:5c:16:35:3a:e1:b4:68:25:00: 78:d5:04:84:63:12:f0:17:cf:e2:02:72:ba:48:b1: fe:ce:c6:86:7d:2e:e8:f9:b0:08:44:2c:3b:aa:3c: 75:27:72:bf:8a:09:41:20:f9:30:ae:a4:c9:ef:14: 22:f3:0d:e8:b9:53:3a:b1:d6:47:b6:a1:86:5c:0e: 41:49:22:3d:53:b6:1a:d3:76:4d:d5:48:65:9e:50: ba:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C1:FD:61:9F:9D:F3:66:09:77:A2:D0:58:68:A0:07:DC:94:31:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/476ccef9-db67-314e-982a-f04e9cdec3b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:7f:eb:59:22:d6:e1:7c:95:6f:bd:4f:c1:d6:c8:07:b6:1d: 8f:14:cb:a1:64:06:bf:13:e2:b9:51:15:a6:70:39:dd:d8:e7: 92:d3:4b:70:c6:38:bf:f8:00:38:d7:5b:6e:dd:d9:4c:60:3f: a3:f6:2b:7b:f8:66:90:57:a4:38:f2:2d:74:2e:d4:79:40:1f: 12:f4:2b:a7:35:8d:35:80:76:a6:ba:96:33:2b:a3:5f:b9:2a: c9:eb:c1:df:a6:6d:3e:36:44:a5:2a:ce:e5:92:34:e6:23:87: ac:91:23:f7:d0:41:23:88:ed:da:ac:df:d0:fd:45:0c:81:7b: e6:c7:51:16:31:83:90:3a:97:24:26:6b:11:19:d0:1e:3b:99: 16:88:0e:29:b6:02:f7:ca:9f:f3:4a:74:01:7f:11:47:e9:4f: 21:51:05:76:3b:39:ef:a3:ab:7a:af:79:49:c4:25:6b:51:cd: c9:95:cb:21:23:6c:10:e6:a6:64:d2:29:2b:b0:4a:56:54:87: 3e:96:a9:73:97:9e:b4:32:f9:03:8a:df:b5:bb:a2:e1:50:0a: 68:34:28:50:fd:6c:43:46:df:75:eb:0a:33:6f:59:c9:03:b2: cd:d5:62:5f:46:0f:cd:ab:38:ae:cc:e4:4a:21:91:f9:63:21: 53:b8:f0:1c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0HrQhzDNZPMAG32wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk MDAzOGY2MDgtYmM1MS00NTM5LTkxMGEtMzYwOWIzMTEwNmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyi2iNk6ShA+mmFVxgnD/2w4g+xmwUaQpy53 6ptJ3e7KmcZe8HnRuvMnKJLDo1PAsuH8CGLtLnfKoHNkLLB2U8AzPi9bw5zRcOAP 9mcBQJuQqE+WKAEVGK718y7VZwCddEEVm9Rogunoz8kMGPYTXgQA3OOL2nX6S31F gXKVofIVVeh8tCMnVoeXLZ8Tomxe/D1jjLdvE67Ku4srJA0MUY1v792WXvrVyeZc FjU64bRoJQB41QSEYxLwF8/iAnK6SLH+zsaGfS7o+bAIRCw7qjx1J3K/iglBIPkw rqTJ7xQi8w3ouVM6sdZHtqGGXA5BSSI9U7Ya03ZN1UhlnlC6gQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEPB/WGfnfNmCXei0FhooAfclDGfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDc2Y2NlZjktZGI2Ny0z MTRlLTk4MmEtZjA0ZTljZGVjM2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA0f+tZItbhfJVvvU/B1sgHth2PFMuhZAa/E+K5URWmcDnd2OeS00tw xji/+AA411tu3dlMYD+j9it7+GaQV6Q48i10LtR5QB8S9CunNY01gHamupYzK6Nf uSrJ68Hfpm0+NkSlKs7lkjTmI4eskSP30EEjiO3arN/Q/UUMgXvmx1EWMYOQOpck JmsRGdAeO5kWiA4ptgL3yp/zSnQBfxFH6U8hUQV2Oznvo6t6r3lJxCVrUc3Jlcsh I2wQ5qZk0ikrsEpWVIc+lqlzl560MvkDit+1u6LhUApoNChQ/WxDRt916wozb1nJ A7LN1WJfRg/NqziuzORKIZH5YyFTuPAc -----END CERTIFICATE-----Generated at Mon Mar 2 08:18:22 2026 by rpki-client