$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb607bb4-2d4c-366e-a332-1315e4675481.roa File: cb607bb4-2d4c-366e-a332-1315e4675481.roa (raw, json) Hash identifier: 6e8u+E9BbYKLpME2qpdR+GM08HdoRg+wnEpyO8qclM4= Subject key identifier: AE:23:8A:2C:5E:50:1C:64:96:81:EE:6C:F7:26:5F:C8:F2:1E:B6:11 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584DF4DB75A068682877769A7B40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb607bb4-2d4c-366e-a332-1315e4675481.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 396567 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:75:a0:68:68:28:77:76:9a:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=551f5e73-91b0-49f5-bd71-7d2a31f943f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b2:34:e7:60:a8:39:95:e7:79:e7:9d:85:af: 8d:74:96:67:83:06:5a:35:8f:17:8a:0a:01:c2:24: c9:e6:d5:cd:f0:77:6c:2c:35:48:e6:ad:64:96:77: f7:21:62:a1:a7:72:c1:38:c2:96:a8:46:8a:a2:85: 06:2c:7d:d6:42:b1:b3:66:57:e8:59:5a:ac:74:2e: 04:19:7c:fc:c8:ae:f6:be:1a:5c:01:41:6f:ad:38: cc:2f:88:db:e1:1d:7a:f8:50:f3:52:03:ab:22:94: 52:34:99:0f:fa:4f:12:90:74:c1:0b:46:e2:6a:1b: 56:0b:c9:77:29:c9:97:16:6e:1d:88:d0:24:b7:2c: 93:c1:2f:29:92:a2:fd:ff:43:0c:7a:22:fa:a4:4a: 1d:83:5b:95:b1:9e:be:48:09:dc:31:f9:9c:3b:b4: 5a:20:75:66:b7:6e:6e:70:ac:fb:96:1d:80:33:f5: 1b:7c:aa:0a:cc:05:b5:09:5a:0c:e1:e3:23:83:8e: 97:86:6b:24:d3:20:fa:6a:2f:0c:d6:74:aa:95:85: f9:64:80:44:eb:cd:95:e6:53:cb:b0:0d:f7:86:74: ec:89:61:df:7f:67:36:ab:4d:13:cf:6e:15:92:db: c2:45:8f:d7:cd:aa:93:e2:14:5e:73:4c:29:92:2c: e1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:23:8A:2C:5E:50:1C:64:96:81:EE:6C:F7:26:5F:C8:F2:1E:B6:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb607bb4-2d4c-366e-a332-1315e4675481.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:f8:71:74:a5:d8:81:46:55:65:51:25:cb:7b:1c:f0:b8:b8: b3:a4:85:c0:e1:50:fc:38:a0:2c:a4:43:33:82:94:f3:c4:f6: 7b:66:76:4a:59:d0:bc:bd:d3:a5:04:cb:85:13:81:e9:f4:70: df:22:bf:64:ab:8c:a9:8e:d1:b5:90:f4:06:96:21:c8:c6:8e: 9e:35:5a:6b:71:ed:d9:27:e3:a9:63:0a:a9:c3:59:87:6b:77: 90:79:4d:7d:06:81:9e:52:32:c1:94:65:12:7a:28:26:46:36: ec:2b:d4:1e:0c:ec:ec:24:29:49:6f:de:47:7e:f5:15:a0:7f: 5e:72:6a:d0:ed:5b:91:8c:61:16:d3:ce:e1:47:22:5d:c0:82: f6:9b:fe:b9:f6:61:0a:a8:f1:62:2d:ae:73:73:97:49:33:f4: e4:75:c9:31:ef:e3:24:41:f9:7f:ef:bc:af:0a:be:5d:80:25: c3:a4:4a:84:62:11:39:06:aa:9e:c3:a3:f0:69:6e:32:b6:ea: 11:74:11:67:2a:86:f4:b3:af:62:f1:9c:f9:eb:d9:d8:98:7e: 1d:dd:3a:32:9d:ad:ff:3e:f2:13:0a:a3:62:1a:a8:fc:c5:91: c6:f3:7b:9d:98:99:f0:ef:dd:ea:7c:81:10:45:d6:f4:26:7f: f4:0b:13:bc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3023WgaGgod3aae0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk NTUxZjVlNzMtOTFiMC00OWY1LWJkNzEtN2QyYTMxZjk0M2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbI052CoOZXneeedha+NdJZngwZaNY8XigoB wiTJ5tXN8HdsLDVI5q1klnf3IWKhp3LBOMKWqEaKooUGLH3WQrGzZlfoWVqsdC4E GXz8yK72vhpcAUFvrTjML4jb4R16+FDzUgOrIpRSNJkP+k8SkHTBC0biahtWC8l3 KcmXFm4diNAktyyTwS8pkqL9/0MMeiL6pEodg1uVsZ6+SAncMfmcO7RaIHVmt25u cKz7lh2AM/UbfKoKzAW1CVoM4eMjg46Xhmsk0yD6ai8M1nSqlYX5ZIBE682V5lPL sA33hnTsiWHff2c2q00Tz24VktvCRY/XzaqT4hRec0wpkizhxQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK4jiixeUBxkloHubPcmX8jyHrYRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2I2MDdiYjQtMmQ0Yy0z NjZlLWEzMzItMTMxNWU0Njc1NDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCg+HF0pdiBRlVlUSXLexzwuLizpIXA4VD8OKAspEMzgpTzxPZ7ZnZK WdC8vdOlBMuFE4Hp9HDfIr9kq4ypjtG1kPQGliHIxo6eNVprce3ZJ+OpYwqpw1mH a3eQeU19BoGeUjLBlGUSeigmRjbsK9QeDOzsJClJb95HfvUVoH9ecmrQ7VuRjGEW 087hRyJdwIL2m/659mEKqPFiLa5zc5dJM/Tkdckx7+MkQfl/77yvCr5dgCXDpEqE YhE5Bqqew6PwaW4ytuoRdBFnKob0s69i8Zz569nYmH4d3Toyna3/PvITCqNiGqj8 xZHG83udmJnw793qfIEQRdb0Jn/0CxO8 -----END CERTIFICATE-----Generated at Sat Jun 13 15:40:42 2026 by rpki-client