$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86602a7a-684d-38a0-82cf-28a53840329e.roa File: 86602a7a-684d-38a0-82cf-28a53840329e.roa (raw, json) Hash identifier: gevgGT8DKSUy45PIupJkT7dWDJwMvZXBqLZXLEg/hc8= Subject key identifier: BD:FA:0D:B2:CF:52:44:E2:CA:3F:6A:7A:86:3E:B4:F8:D3:A5:D2:07 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EA791CD82D53EFE56048FF480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86602a7a-684d-38a0-82cf-28a53840329e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396595 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:cd:82:d5:3e:fe:56:04:8f:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5982aa04-c4f3-490b-bddc-65a77b7ea25d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:84:a3:d8:52:db:71:a7:47:5f:94:e2:e2:f3: b9:5d:a4:6e:6f:87:d3:a6:e7:58:bc:81:f2:42:ad: 06:76:42:17:9a:73:8e:e8:43:28:41:b5:94:99:0a: b2:b3:15:f0:ad:ce:37:c2:9d:ed:29:15:a7:22:a6: 28:09:aa:e4:50:0b:c4:b8:56:28:6d:9b:d7:5c:7a: 58:96:a4:f4:44:4b:86:63:ab:51:16:3a:6b:8c:94: 34:08:7a:4a:86:98:ae:f7:b6:2d:85:92:b6:71:96: 9a:64:cb:34:ea:ba:60:f4:39:90:8e:3b:0b:6c:95: e5:45:e1:66:aa:9d:67:0e:e2:92:7d:33:33:ec:91: 0d:47:c6:2b:43:b5:f5:91:0e:0e:15:75:d1:81:c9: f9:7f:fd:3c:30:92:96:ae:ff:24:87:47:51:e6:e1: 65:d1:5e:06:9e:0f:b5:bf:a2:b0:b8:1f:d0:46:33: c8:ea:f5:5e:5b:5b:0c:73:44:47:f7:95:9b:1e:bb: 75:7c:90:d9:6f:f9:ba:2a:d8:4d:a2:f2:59:a1:da: 40:ec:75:01:2e:c0:cc:53:dc:b9:50:06:cd:2a:49: 43:90:29:a8:91:13:84:43:ca:4c:4f:1e:6a:56:20: db:17:e8:4d:1c:b7:f8:f7:45:5a:be:8c:59:be:da: 65:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:FA:0D:B2:CF:52:44:E2:CA:3F:6A:7A:86:3E:B4:F8:D3:A5:D2:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86602a7a-684d-38a0-82cf-28a53840329e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:0d:91:16:62:22:1f:55:b6:de:ba:fb:86:21:2e:d9:09:18: 67:88:0a:03:75:d5:da:54:51:a4:b8:50:8d:aa:fc:e8:e5:13: 3a:9f:52:5a:c4:eb:05:47:a1:32:ba:b2:d3:e0:d1:e0:36:18: ae:f4:b8:fb:65:e1:4c:c5:81:7d:f4:d1:a1:94:c7:c7:12:d4: 69:3c:73:a0:87:3a:23:f6:a2:92:2d:5a:12:f5:0c:63:96:cb: 0c:0e:0e:63:0e:6c:6c:c4:61:2f:da:1f:21:8d:42:0e:4a:8c: 2f:b4:ec:4f:8e:0a:cf:f7:72:d7:55:f6:3b:28:14:6a:7e:27: 74:63:b5:9e:45:32:08:d5:72:d7:ba:58:7a:79:6c:65:2d:ec: 89:26:11:8a:19:e4:01:2b:9f:f6:cc:ca:e7:fd:55:7e:d3:23: 98:03:27:d7:66:67:ef:92:b0:0c:ab:54:c6:f0:e8:70:a8:03: f8:cb:81:a1:4f:64:af:b7:6d:3e:47:a8:16:f5:7a:5d:21:37: 93:6d:0d:a6:c5:fd:6d:7e:0a:31:ea:51:04:7e:7b:56:84:37: 2b:42:63:3e:00:04:c7:32:4f:d5:21:e4:74:49:70:27:4e:93: 0a:87:ec:01:3f:27:8c:a9:fe:4b:98:69:03:77:34:e0:40:4e: 72:86:51:68 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkc2C1T7+VgSP9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTk4MmFhMDQtYzRmMy00OTBiLWJkZGMtNjVhNzdiN2VhMjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiISj2FLbcadHX5Ti4vO5XaRub4fTpudYvIHy Qq0GdkIXmnOO6EMoQbWUmQqysxXwrc43wp3tKRWnIqYoCarkUAvEuFYobZvXXHpY lqT0REuGY6tRFjprjJQ0CHpKhpiu97YthZK2cZaaZMs06rpg9DmQjjsLbJXlReFm qp1nDuKSfTMz7JENR8YrQ7X1kQ4OFXXRgcn5f/08MJKWrv8kh0dR5uFl0V4Gng+1 v6KwuB/QRjPI6vVeW1sMc0RH95WbHrt1fJDZb/m6KthNovJZodpA7HUBLsDMU9y5 UAbNKklDkCmokROEQ8pMTx5qViDbF+hNHLf490VavoxZvtplbQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFL36DbLPUkTiyj9qeoY+tPjTpdIHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODY2MDJhN2EtNjg0ZC0z OGEwLTgyY2YtMjhhNTM4NDAzMjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCXDZEWYiIfVbbeuvuGIS7ZCRhniAoDddXaVFGkuFCNqvzo5RM6n1Ja xOsFR6EyurLT4NHgNhiu9Lj7ZeFMxYF99NGhlMfHEtRpPHOghzoj9qKSLVoS9Qxj lssMDg5jDmxsxGEv2h8hjUIOSowvtOxPjgrP93LXVfY7KBRqfid0Y7WeRTII1XLX ulh6eWxlLeyJJhGKGeQBK5/2zMrn/VV+0yOYAyfXZmfvkrAMq1TG8OhwqAP4y4Gh T2Svt20+R6gW9XpdITeTbQ2mxf1tfgox6lEEfntWhDcrQmM+AATHMk/VIeR0SXAn TpMKh+wBPyeMqf5LmGkDdzTgQE5yhlFo -----END CERTIFICATE-----Generated at Wed Jul 29 04:59:13 2026 by rpki-client