$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96d68f69-7621-37fa-9ab4-781426ad4448.roa File: 96d68f69-7621-37fa-9ab4-781426ad4448.roa (raw, json) Hash identifier: QHGlN3HB5CtvMrKeGVMwKLbdPWg+4Zz0nPmk+PvzVVc= Subject key identifier: F3:76:64:23:09:94:F2:D8:FE:D1:39:34:E0:6A:28:06:23:B0:FA:82 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D07AD11104CAECCD04CC35680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96d68f69-7621-37fa-9ab4-781426ad4448.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 396544 IP address blocks: 192.68.126.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ad:11:10:4c:ae:cc:d0:4c:c3:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=ae43670f-7459-4e3e-bccb-b9809ac360b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:54:c4:67:9a:cd:4b:77:e2:d9:f3:5d:ab:a3: f3:02:3d:ff:8a:c0:0e:30:5e:74:d1:97:9b:a2:bb: fa:79:ea:0d:b0:65:5f:43:c7:06:61:c5:9a:14:81: 01:8e:18:37:a4:ff:a8:0f:2c:77:13:26:85:db:d7: 3f:d9:f2:07:b5:3b:89:5b:14:16:dd:9f:e4:ff:46: 18:27:3e:ef:2b:5a:50:31:52:4f:ba:de:54:d7:b9: 57:be:44:c8:e5:1f:44:4f:0d:04:bf:c9:d2:25:5d: 3f:ec:36:5f:d3:53:0b:ce:3e:53:84:d6:46:e4:33: 14:83:c5:11:32:a5:41:7f:78:48:b1:e7:72:97:c8: db:b3:e0:5d:16:87:ff:ac:7f:02:07:23:b6:00:ed: 47:9f:6a:97:82:6c:ae:5d:65:07:fb:0f:6a:2e:d2: 51:8c:1d:8d:96:f3:96:49:41:7b:32:78:a8:e4:f5: 58:6a:69:98:0c:bf:3f:5b:6c:e3:a3:0f:c3:08:8f: 16:29:2a:d0:7b:6d:d0:c2:00:9b:5f:b1:18:60:1e: 85:d6:65:15:6a:8c:cf:52:03:39:8a:c8:8a:02:b7: b4:ab:98:b7:c1:9f:1c:44:05:5f:6e:0a:22:23:77: 75:04:1f:37:05:e3:89:aa:45:63:35:89:3d:a1:04: c1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:76:64:23:09:94:F2:D8:FE:D1:39:34:E0:6A:28:06:23:B0:FA:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96d68f69-7621-37fa-9ab4-781426ad4448.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:d4:40:b6:48:aa:75:fe:e5:30:13:a8:e4:9a:1d:e3:11:3a: 30:f1:9b:2c:bc:43:18:7d:7a:08:8c:30:34:2b:b0:86:79:83: 6c:5c:88:84:a6:c9:13:b2:43:a3:79:75:af:5a:56:fc:ba:25: a0:27:bb:72:5f:a8:dd:14:4e:63:eb:cb:a7:e1:aa:53:87:e4: f7:64:ef:07:44:cd:01:0a:f3:3b:49:18:af:d0:67:8f:02:6c: 95:57:0a:43:2c:ab:a3:69:c0:19:6e:ea:7a:47:41:96:f4:a7: 2a:41:65:4d:02:d2:e0:bc:84:49:b0:4d:38:93:d9:7f:8b:42: 46:a5:f7:4e:99:68:29:8f:37:df:f9:3c:bf:94:cc:61:69:1f: dc:28:94:f7:85:16:db:56:b3:27:a3:ab:64:4f:a8:29:b8:63: 2e:7a:1a:fd:98:41:54:32:4f:d0:cd:35:c4:59:11:c0:34:1f: 2c:37:db:53:1d:17:f7:7b:80:c3:d6:bb:61:62:66:eb:e2:1f: c8:e0:29:73:29:ad:bd:0e:86:0f:ec:79:42:f5:e8:d9:ac:72: 02:7a:d1:e1:c4:a3:9c:c5:1c:14:37:9c:9c:27:ec:d9:61:a1: 06:74:14:df:20:94:f3:df:b4:00:e0:b0:ef:d0:aa:da:04:93: 9e:42:04:82 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0HrREQTK7M0EzDVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk YWU0MzY3MGYtNzQ1OS00ZTNlLWJjY2ItYjk4MDlhYzM2MGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVTEZ5rNS3fi2fNdq6PzAj3/isAOMF500Zeb orv6eeoNsGVfQ8cGYcWaFIEBjhg3pP+oDyx3EyaF29c/2fIHtTuJWxQW3Z/k/0YY Jz7vK1pQMVJPut5U17lXvkTI5R9ETw0Ev8nSJV0/7DZf01MLzj5ThNZG5DMUg8UR MqVBf3hIsedyl8jbs+BdFof/rH8CByO2AO1Hn2qXgmyuXWUH+w9qLtJRjB2NlvOW SUF7Mnio5PVYammYDL8/W2zjow/DCI8WKSrQe23QwgCbX7EYYB6F1mUVaozPUgM5 isiKAre0q5i3wZ8cRAVfbgoiI3d1BB83BeOJqkVjNYk9oQTBzQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPN2ZCMJlPLY/tE5NOBqKAYjsPqCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTZkNjhmNjktNzYyMS0z N2ZhLTlhYjQtNzgxNDI2YWQ0NDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCq1EC2SKp1/uUwE6jkmh3jETow8ZssvEMYfXoIjDA0K7CGeYNsXIiE pskTskOjeXWvWlb8uiWgJ7tyX6jdFE5j68un4apTh+T3ZO8HRM0BCvM7SRiv0GeP AmyVVwpDLKujacAZbup6R0GW9KcqQWVNAtLgvIRJsE04k9l/i0JGpfdOmWgpjzff +Ty/lMxhaR/cKJT3hRbbVrMno6tkT6gpuGMuehr9mEFUMk/QzTXEWRHANB8sN9tT HRf3e4DD1rthYmbr4h/I4ClzKa29DoYP7HlC9ejZrHICetHhxKOcxRwUN5ycJ+zZ YaEGdBTfIJTz37QA4LDv0KraBJOeQgSC -----END CERTIFICATE-----Generated at Mon Mar 2 14:03:17 2026 by rpki-client