$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7a373a6-bf58-316a-892d-158def1e7db8.roa File: d7a373a6-bf58-316a-892d-158def1e7db8.roa (raw, json) Hash identifier: o4OxJNDQsBume/HC+PKUCu/X9gPmaI5y4Q/BggTMXZU= Subject key identifier: 57:FE:30:6E:A9:E3:BB:B3:52:51:DC:F1:74:C9:8B:61:D3:11:41:CA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D07AD16677C368184CB7AEC40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7a373a6-bf58-316a-892d-158def1e7db8.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 397197 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ad:16:67:7c:36:81:84:cb:7a:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=a4f9a39a-20c3-4a03-9095-a8cc3c99b86c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3d:7d:b3:22:eb:fc:e3:7c:22:a1:d4:96:96: a3:6c:2b:4c:82:3f:29:aa:05:5e:94:2d:14:ea:1a: 15:75:3c:d4:a2:b5:27:1f:7a:ab:3d:04:ea:10:99: d5:35:42:bd:4c:6b:79:26:9e:9f:48:0f:86:34:c6: 6c:fd:c1:26:4d:ed:83:69:d6:3e:2d:e6:98:bb:99: bd:45:38:c0:99:36:52:11:33:3b:16:b7:2f:f5:fd: 2f:f1:7f:f4:24:0c:61:f8:8f:8c:ce:26:c2:91:76: 84:04:10:d0:ff:2c:61:b1:7c:07:2a:41:9d:46:65: f3:a3:dc:5f:d0:b3:27:6d:48:97:4a:8d:3f:57:24: 11:77:1e:b6:66:ef:f0:e7:a8:aa:da:47:68:b0:f7: be:c1:ad:c2:e3:55:ac:1f:8c:ce:5f:9a:08:8f:a0: ed:73:17:04:79:b9:bc:14:25:6a:af:bb:e3:2c:71: 26:25:a1:72:65:7c:f9:cf:4b:4f:44:34:65:0c:7c: a9:e2:40:61:7f:28:b4:44:de:29:b9:0f:39:21:43: 86:1f:12:b9:5d:8f:11:6d:98:92:a4:3f:36:b2:36: 77:03:00:d8:92:91:10:ac:32:77:11:7f:68:94:b3: ba:64:2a:13:77:3f:89:cc:24:df:58:98:4e:c4:06: e5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:FE:30:6E:A9:E3:BB:B3:52:51:DC:F1:74:C9:8B:61:D3:11:41:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7a373a6-bf58-316a-892d-158def1e7db8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:27:be:ce:f5:2f:45:34:b5:a8:4e:ea:27:8d:25:2d:cc:55: f4:06:81:bd:57:68:d0:60:aa:c7:94:40:4e:a4:05:60:08:88: 20:bc:d1:c1:b0:51:e4:02:5f:b4:ee:f0:48:36:23:05:dd:83: 90:57:02:c8:41:5a:d8:05:48:f0:70:77:32:ea:ce:9c:37:3c: 4a:e1:ee:61:9f:e9:35:9e:22:16:85:49:72:62:c5:c9:c2:db: 97:ed:15:24:7c:14:5d:b8:59:30:87:51:79:3f:99:00:93:65: 07:32:d7:2e:84:fd:9f:71:4a:d6:66:b8:d0:46:f6:6d:76:88: ae:d8:be:fe:8d:59:fa:6a:24:3d:95:81:4b:f7:75:a0:3b:42: a9:41:db:21:16:f6:d4:b5:57:dd:b9:ca:47:cf:fc:d7:99:81: 84:e0:e9:0d:d0:49:89:f7:10:69:be:2a:39:b8:7d:2c:60:4f: 34:6f:b9:b8:a0:c2:5c:18:58:0d:f6:0f:73:60:1a:fa:b5:57: 8c:c9:52:cc:d0:83:6f:16:e8:d0:b1:98:56:0f:49:36:39:9f: 78:bd:40:30:8f:b0:60:90:9f:19:5f:ab:87:f5:74:76:37:ba: b0:4f:00:8e:01:ca:0c:7e:ca:d5:6f:4e:4d:87:8c:48:28:f1: 21:80:70:a2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0HrRZnfDaBhMt67EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk YTRmOWEzOWEtMjBjMy00YTAzLTkwOTUtYThjYzNjOTliODZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhD19syLr/ON8IqHUlpajbCtMgj8pqgVelC0U 6hoVdTzUorUnH3qrPQTqEJnVNUK9TGt5Jp6fSA+GNMZs/cEmTe2DadY+LeaYu5m9 RTjAmTZSETM7Frcv9f0v8X/0JAxh+I+MzibCkXaEBBDQ/yxhsXwHKkGdRmXzo9xf 0LMnbUiXSo0/VyQRdx62Zu/w56iq2kdosPe+wa3C41WsH4zOX5oIj6DtcxcEebm8 FCVqr7vjLHEmJaFyZXz5z0tPRDRlDHyp4kBhfyi0RN4puQ85IUOGHxK5XY8RbZiS pD82sjZ3AwDYkpEQrDJ3EX9olLO6ZCoTdz+JzCTfWJhOxAblHQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFf+MG6p47uzUlHc8XTJi2HTEUHKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDdhMzczYTYtYmY1OC0z MTZhLTg5MmQtMTU4ZGVmMWU3ZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC4J77O9S9FNLWoTuonjSUtzFX0BoG9V2jQYKrHlEBOpAVgCIggvNHB sFHkAl+07vBINiMF3YOQVwLIQVrYBUjwcHcy6s6cNzxK4e5hn+k1niIWhUlyYsXJ wtuX7RUkfBRduFkwh1F5P5kAk2UHMtcuhP2fcUrWZrjQRvZtdoiu2L7+jVn6aiQ9 lYFL93WgO0KpQdshFvbUtVfducpHz/zXmYGE4OkN0EmJ9xBpvio5uH0sYE80b7m4 oMJcGFgN9g9zYBr6tVeMyVLM0INvFujQsZhWD0k2OZ94vUAwj7BgkJ8ZX6uH9XR2 N7qwTwCOAcoMfsrVb05Nh4xIKPEhgHCi -----END CERTIFICATE-----Generated at Mon Mar 2 06:53:11 2026 by rpki-client