$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afcd9b55-66b8-3950-9d7d-1ebdff728f50.roa File: afcd9b55-66b8-3950-9d7d-1ebdff728f50.roa (raw, json) Hash identifier: LAUfWrKLT+YlB9BJaCQgWUUoGEaBXCJM4IU+WPveVQg= Subject key identifier: FF:13:BD:53:4A:7F:E1:D3:7C:AA:6E:A8:5B:41:EF:2D:65:23:95:FD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D07AD11833D098A081328D580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afcd9b55-66b8-3950-9d7d-1ebdff728f50.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 396602 IP address blocks: 192.68.126.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ad:11:83:3d:09:8a:08:13:28:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=0288a91e-63f2-4093-bdbe-056fad2bdfff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:87:dd:ee:f6:3d:85:58:31:dc:c3:82:ed:ed: 39:a8:b7:64:09:27:af:c2:35:e3:0b:44:66:61:01: ff:e1:e5:52:c8:73:1b:12:7f:74:92:b6:35:53:10: e2:0a:11:63:f6:20:95:77:48:78:95:96:0f:43:65: 8a:ed:ee:b8:21:28:78:5d:c9:05:ad:dd:0d:d5:d9: 42:58:99:4f:64:bc:44:ce:3b:75:ae:71:1c:be:96: 56:40:97:e2:ed:2c:57:e8:07:09:7b:65:49:d0:93: 12:8e:29:a5:ad:c0:ed:7f:77:1d:d6:e7:11:cc:c8: 57:b7:48:df:5e:f3:7b:39:b3:0a:93:a6:02:70:35: 34:6c:81:89:c4:09:22:45:db:bf:a9:3d:56:5e:c6: e1:ca:5f:ab:d3:2c:63:2d:12:31:7f:3e:2d:c9:9f: 06:f7:a6:b5:32:dc:af:57:95:1d:b9:6f:6d:84:b8: ab:62:5a:17:27:54:ad:cb:f7:7d:eb:11:81:e5:33: d5:a4:a2:20:30:d9:f7:2a:0e:da:16:a6:b0:e4:79: 8b:69:97:dd:b9:32:56:4b:b0:b0:82:95:b6:9c:20: db:32:6a:2c:15:12:7f:53:6f:1f:94:04:f6:ad:0c: d2:f4:d4:a8:f1:60:0c:32:c1:75:ef:64:61:3f:ba: 1d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:13:BD:53:4A:7F:E1:D3:7C:AA:6E:A8:5B:41:EF:2D:65:23:95:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afcd9b55-66b8-3950-9d7d-1ebdff728f50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:05:f1:c1:b1:f7:2c:d3:63:17:ab:ca:51:5f:c7:75:f4:56: 6c:2c:a1:a5:2a:ef:ed:92:e2:f9:f1:0b:6b:4d:08:18:7f:48: b3:53:24:f9:73:d8:bb:4d:e7:36:f5:91:f9:3d:8e:90:7d:3a: 4b:8d:01:75:c0:86:f0:29:77:aa:98:b1:28:b2:ff:2c:ab:6e: 81:dc:d3:8f:06:1b:9a:3b:df:31:a0:a8:9f:c8:47:db:13:c8: f7:78:3e:46:2e:be:a6:51:c4:75:4b:50:ed:6d:b6:d2:fb:ba: 9c:cd:b2:24:66:c9:e1:06:06:f5:af:36:c5:a3:f8:df:af:17: e0:17:81:e3:3f:fd:80:de:df:81:8a:6e:15:a2:b9:dd:32:ab: 25:50:e5:6f:37:23:9b:13:34:01:f6:62:61:bf:2d:18:0b:41: fe:d5:b5:46:8e:a8:78:5e:40:4d:0e:45:89:3b:98:4c:09:13: cc:b7:8e:c4:7c:60:11:e1:7f:56:99:73:0d:57:24:be:03:08: db:7a:88:e7:e6:8a:cb:bf:96:6d:70:66:f0:ed:d5:84:ea:51: 88:59:c5:24:d3:81:4d:1a:82:cf:35:3b:e4:94:df:de:5d:4b: 3d:2a:dd:c4:79:6b:13:d5:c1:33:2c:cb:a8:96:5d:4a:74:15: fb:a6:af:a1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0HrRGDPQmKCBMo1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk MDI4OGE5MWUtNjNmMi00MDkzLWJkYmUtMDU2ZmFkMmJkZmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhofd7vY9hVgx3MOC7e05qLdkCSevwjXjC0Rm YQH/4eVSyHMbEn90krY1UxDiChFj9iCVd0h4lZYPQ2WK7e64ISh4XckFrd0N1dlC WJlPZLxEzjt1rnEcvpZWQJfi7SxX6AcJe2VJ0JMSjimlrcDtf3cd1ucRzMhXt0jf XvN7ObMKk6YCcDU0bIGJxAkiRdu/qT1WXsbhyl+r0yxjLRIxfz4tyZ8G96a1Mtyv V5UduW9thLirYloXJ1Sty/d96xGB5TPVpKIgMNn3Kg7aFqaw5HmLaZfduTJWS7Cw gpW2nCDbMmosFRJ/U28flAT2rQzS9NSo8WAMMsF172RhP7odMwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFP8TvVNKf+HTfKpuqFtB7y1lI5X9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWZjZDliNTUtNjZiOC0z OTUwLTlkN2QtMWViZGZmNzI4ZjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCYBfHBsfcs02MXq8pRX8d19FZsLKGlKu/tkuL58QtrTQgYf0izUyT5 c9i7Tec29ZH5PY6QfTpLjQF1wIbwKXeqmLEosv8sq26B3NOPBhuaO98xoKifyEfb E8j3eD5GLr6mUcR1S1DtbbbS+7qczbIkZsnhBgb1rzbFo/jfrxfgF4HjP/2A3t+B im4VorndMqslUOVvNyObEzQB9mJhvy0YC0H+1bVGjqh4XkBNDkWJO5hMCRPMt47E fGAR4X9WmXMNVyS+Awjbeojn5orLv5ZtcGbw7dWE6lGIWcUk04FNGoLPNTvklN/e XUs9Kt3EeWsT1cEzLMuoll1KdBX7pq+h -----END CERTIFICATE-----Generated at Mon Mar 2 06:52:46 2026 by rpki-client