$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/baa8b4ff-ee72-3f3f-8396-82a61a96ba82.roa File: baa8b4ff-ee72-3f3f-8396-82a61a96ba82.roa (raw, json) Hash identifier: BAWFa7R/RoqiY14iGdG6HrztSGg9QXCa2MqUjiRC46E= Subject key identifier: AA:3D:30:88:F4:7E:04:99:B1:D3:C0:D7:F3:9D:DD:5E:00:50:86:6B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EA79224757A1415C128FF70F0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/baa8b4ff-ee72-3f3f-8396-82a61a96ba82.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396547 IP address blocks: 192.68.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:92:24:75:7a:14:15:c1:28:ff:70:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=765ab441-f3ff-46d2-bbc7-253dd0bb5ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:39:ce:78:c5:96:25:6e:4b:c1:a8:79:47:c2: b2:26:e4:e4:dc:1a:f9:91:82:93:03:63:14:91:e7: b9:a9:61:4d:69:4e:7b:75:17:c0:bf:05:2b:0e:ca: ff:5b:c3:5c:92:a4:90:a3:c1:54:82:c2:2c:c2:28: 3c:9c:ca:d7:35:00:38:d6:c0:74:64:16:75:1d:83: 94:f4:0f:2b:fc:d5:ba:57:f2:0c:fa:ea:55:60:c4: 64:96:da:10:46:dc:68:1b:e6:cb:44:cf:e8:11:9b: ac:dd:9f:54:a5:eb:5b:f5:07:e7:8a:26:54:39:c2: 1e:d0:17:af:53:20:81:ed:03:14:d4:cf:91:2a:84: 76:11:58:3a:16:0e:5a:4a:52:a3:62:ef:5b:e2:1e: 9e:e1:e8:3e:d2:7d:b3:95:1b:c7:f7:46:07:05:f1: d9:26:63:7b:83:76:54:30:ec:8a:5d:59:a0:80:03: e2:2e:00:4c:44:4d:0b:8d:ed:7e:9a:3c:d2:df:85: 13:98:4f:f1:48:aa:d0:34:93:1a:04:42:47:ef:59: 05:3c:26:ae:9d:21:ff:d5:92:a5:b4:f1:63:82:ad: 7a:3f:50:b6:ec:29:a6:4b:53:a9:88:83:aa:e6:f4: b1:19:23:87:1d:71:be:8a:bb:4b:e3:a3:0c:26:bc: 17:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:3D:30:88:F4:7E:04:99:B1:D3:C0:D7:F3:9D:DD:5E:00:50:86:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/baa8b4ff-ee72-3f3f-8396-82a61a96ba82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:62:26:4d:c2:7b:c2:f2:bd:74:61:64:c5:8b:64:3d:3a:b1: f5:a2:76:25:18:c4:56:5d:9f:30:1c:c3:51:b3:db:a6:e9:5c: aa:75:72:52:2b:37:be:d6:17:72:52:05:8b:e4:d7:ca:0e:66: f4:22:2c:ce:1f:13:37:f7:34:f7:28:26:dc:fb:9b:f2:2e:3a: c0:3c:e0:16:82:87:07:ee:44:25:ab:d1:7a:f5:87:89:fd:67: f9:c7:1b:f5:4a:46:61:9f:52:70:db:a5:d1:6e:f7:de:3d:98: c8:ca:11:64:84:8f:0c:4d:ad:bd:79:a3:b3:1b:d1:28:4e:fb: 5c:8d:8b:71:d3:6e:cd:c1:0c:bc:90:5a:e7:4e:cf:5f:e3:5c: 58:78:f7:81:34:c1:0f:81:69:e3:ca:d8:48:65:63:1e:32:dc: 86:e6:e6:a9:db:ae:a8:f0:33:0c:f3:8c:d9:cd:da:62:57:da: 32:f9:6b:c3:d8:38:53:7d:a6:98:46:b8:35:59:fc:b6:54:68: 93:97:83:ae:60:22:28:98:f3:36:bf:a9:51:c5:77:73:ec:c9: 85:d3:ae:d2:70:40:66:b0:4b:ec:f2:d4:2e:8c:15:9d:26:8d: 4e:f9:6f:27:de:d7:f7:90:0b:26:b4:be:3e:4e:f4:68:1d:fc: 33:f6:aa:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkiR1ehQVwSj/cPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzY1YWI0NDEtZjNmZi00NmQyLWJiYzctMjUzZGQwYmI1Y2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgznOeMWWJW5Lwah5R8KyJuTk3Br5kYKTA2MU kee5qWFNaU57dRfAvwUrDsr/W8NckqSQo8FUgsIswig8nMrXNQA41sB0ZBZ1HYOU 9A8r/NW6V/IM+upVYMRkltoQRtxoG+bLRM/oEZus3Z9Upetb9QfniiZUOcIe0Bev UyCB7QMU1M+RKoR2EVg6Fg5aSlKjYu9b4h6e4eg+0n2zlRvH90YHBfHZJmN7g3ZU MOyKXVmggAPiLgBMRE0Lje1+mjzS34UTmE/xSKrQNJMaBEJH71kFPCaunSH/1ZKl tPFjgq16P1C27CmmS1OpiIOq5vSxGSOHHXG+irtL46MMJrwX0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKo9MIj0fgSZsdPA1/Od3V4AUIZrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmFhOGI0ZmYtZWU3Mi0z ZjNmLTgzOTYtODJhNjFhOTZiYTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwESCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJiJk3Ce8LyvXRhZMWLZD06sfWidiUYxFZdnzAcw1Gz26bpXKp1clIr N77WF3JSBYvk18oOZvQiLM4fEzf3NPcoJtz7m/IuOsA84BaChwfuRCWr0Xr1h4n9 Z/nHG/VKRmGfUnDbpdFu9949mMjKEWSEjwxNrb15o7Mb0ShO+1yNi3HTbs3BDLyQ WudOz1/jXFh494E0wQ+BaePK2EhlYx4y3Ibm5qnbrqjwMwzzjNnN2mJX2jL5a8PY OFN9pphGuDVZ/LZUaJOXg65gIiiY8za/qVHFd3PsyYXTrtJwQGawS+zy1C6MFZ0m jU75byfe1/eQCya0vj5O9Ggd/DP2qg8= -----END CERTIFICATE-----Generated at Wed Jul 29 03:31:47 2026 by rpki-client