$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cf012d4-7697-30ff-8006-4fd63859eee3.roa File: 1cf012d4-7697-30ff-8006-4fd63859eee3.roa (raw, json) Hash identifier: cSgXEXNU1/rxLL/xZBP926x2qENINMFGsyWl2eIUMgE= Subject key identifier: DC:9E:E4:4A:51:5F:8C:8C:80:74:1C:81:43:31:5F:CC:A6:6A:4C:99 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EA791D42BBC2A279D915D8600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cf012d4-7697-30ff-8006-4fd63859eee3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 397200 IP address blocks: 192.68.126.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:d4:2b:bc:2a:27:9d:91:5d:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d9300a5f-a745-4930-9895-4599c6f9c79f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:89:4f:ce:ac:2d:79:68:df:3c:d9:0f:a1:3a: 64:47:e6:d5:db:74:25:ae:e5:61:8d:e3:1e:90:5e: 1b:61:fc:a5:0e:4e:68:60:ac:5a:1e:bc:35:c8:39: 2c:3d:a0:0b:2d:a6:4d:4c:e3:ba:00:bd:8f:d2:85: 1c:01:12:f9:5e:f3:dd:49:c8:43:08:69:03:fa:39: 21:49:e3:db:de:3b:4a:79:68:f4:45:85:5f:83:f4: 13:8d:9d:49:fe:76:63:bb:1a:6b:81:69:18:3d:55: 90:4f:4d:47:3c:dc:40:23:30:3b:7f:ee:3c:1b:10: 5e:d1:39:20:02:cb:e2:44:af:5b:fc:81:1b:a4:e6: a9:49:a6:f1:46:dd:16:d8:c6:a9:1f:1d:04:99:3b: 9f:2f:bf:4f:02:11:e0:ac:d2:5c:50:8e:51:d8:29: a8:f7:e4:95:eb:27:19:0b:1b:6e:5e:32:68:03:d9: 28:ea:f8:59:95:01:aa:0d:e8:15:f0:37:f3:9e:e9: 72:4d:ba:2b:14:9b:b9:93:3f:b3:6e:8e:07:d9:86: 2f:ce:f7:4c:59:65:df:52:04:ed:f0:02:bb:60:19: ce:59:cf:df:06:66:58:24:d0:fc:39:6a:22:ee:ba: bf:bb:45:48:67:de:c6:74:88:2c:04:d8:0f:80:00: 3a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:9E:E4:4A:51:5F:8C:8C:80:74:1C:81:43:31:5F:CC:A6:6A:4C:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cf012d4-7697-30ff-8006-4fd63859eee3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:26:a9:90:38:f6:b1:91:91:c8:ed:2c:44:eb:b1:bc:a9:10: 2f:36:c6:ed:ac:55:ff:04:46:b4:e2:1e:89:f7:e0:1c:df:0f: b0:d9:62:12:11:c5:a3:48:24:c0:c8:ec:e4:4d:84:f9:93:ca: 76:3b:a6:39:83:aa:f0:61:c3:b9:a2:ce:fe:32:0f:90:24:b0: a1:e3:80:43:1a:2c:73:a8:45:dc:96:4d:57:aa:84:d7:86:6d: bb:aa:b5:73:1c:7c:df:c0:5e:61:7b:82:ed:01:68:b1:6c:9d: a3:97:4e:dd:81:f0:11:57:47:19:77:e5:43:19:9f:32:dc:11: 35:8d:70:2b:75:fa:fc:69:a9:8f:06:9e:fd:ca:d1:57:71:71: 0f:b0:6d:75:b1:b5:b0:86:87:a3:b7:ab:7e:bc:f5:a8:72:ed: 63:67:a5:88:af:54:75:0d:10:04:f2:d9:92:b5:a2:29:ef:2c: f1:74:d5:f3:51:9e:10:f4:a4:8a:33:ec:30:d5:bf:ae:d6:00: 25:c8:19:11:8b:7d:10:79:09:5b:b8:60:c5:d1:a7:46:fe:6b: 07:e1:0b:a5:e4:7c:b9:8d:3e:f9:a1:f6:3a:fb:cd:f0:69:9a: 37:8a:99:08:ae:50:9c:7a:6d:5e:23:f2:c9:3b:bf:00:a2:df: 34:72:a5:73 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkdQrvConnZFdhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDkzMDBhNWYtYTc0NS00OTMwLTk4OTUtNDU5OWM2ZjljNzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4lPzqwteWjfPNkPoTpkR+bV23QlruVhjeMe kF4bYfylDk5oYKxaHrw1yDksPaALLaZNTOO6AL2P0oUcARL5XvPdSchDCGkD+jkh SePb3jtKeWj0RYVfg/QTjZ1J/nZjuxprgWkYPVWQT01HPNxAIzA7f+48GxBe0Tkg AsviRK9b/IEbpOapSabxRt0W2MapHx0EmTufL79PAhHgrNJcUI5R2Cmo9+SV6ycZ CxtuXjJoA9ko6vhZlQGqDegV8DfznulyTborFJu5kz+zbo4H2YYvzvdMWWXfUgTt 8AK7YBnOWc/fBmZYJND8OWoi7rq/u0VIZ97GdIgsBNgPgAA6tQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNye5EpRX4yMgHQcgUMxX8ymakyZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWNmMDEyZDQtNzY5Ny0z MGZmLTgwMDYtNGZkNjM4NTllZWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAgJqmQOPaxkZHI7SxE67G8qRAvNsbtrFX/BEa04h6J9+Ac3w+w2WIS EcWjSCTAyOzkTYT5k8p2O6Y5g6rwYcO5os7+Mg+QJLCh44BDGixzqEXclk1XqoTX hm27qrVzHHzfwF5he4LtAWixbJ2jl07dgfARV0cZd+VDGZ8y3BE1jXArdfr8aamP Bp79ytFXcXEPsG11sbWwhoejt6t+vPWocu1jZ6WIr1R1DRAE8tmStaIp7yzxdNXz UZ4Q9KSKM+ww1b+u1gAlyBkRi30QeQlbuGDF0adG/msH4Qul5Hy5jT75ofY6+83w aZo3ipkIrlCcem1eI/LJO78Aot80cqVz -----END CERTIFICATE-----Generated at Wed Aug 19 17:06:13 2026 by rpki-client