$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49256786-84d1-385c-ac5a-fc594c08d975.roa File: 49256786-84d1-385c-ac5a-fc594c08d975.roa (raw, json) Hash identifier: o6lTOdqKqXKFbv5iHSe4ybPddfeYm2f6R0R95nPFnIg= Subject key identifier: B2:4E:F7:37:4D:CC:12:E9:DC:8B:8D:24:9C:E0:B3:BE:2B:E2:A2:88 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F497D93123C46ED901723A800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49256786-84d1-385c-ac5a-fc594c08d975.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396589 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:93:12:3c:46:ed:90:17:23:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b1841013-c787-4be7-afc1-97801a1b39d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:88:f0:ea:e8:c5:9b:f4:10:d2:12:d5:2c:a5: fe:c1:90:30:28:87:8d:d1:11:eb:35:ae:a3:18:ce: 75:2d:8f:4d:e5:93:4b:5e:60:dd:d0:08:81:d8:9e: d8:8a:31:5b:b2:5c:09:a8:c7:de:b1:fe:b3:08:d2: 37:80:50:96:e1:38:ad:99:75:dc:f0:4b:d0:97:9c: c3:26:4f:5e:89:81:f2:5e:ae:f5:25:62:ce:cf:d6: e7:93:2b:a9:ed:a7:7c:08:29:01:b3:52:4c:f6:74: 3f:21:25:6e:ee:1a:51:08:58:96:2c:aa:53:c0:71: 1e:80:3f:60:f0:64:ce:22:b9:30:16:ca:85:b1:87: 2f:29:5c:8f:63:c8:b9:29:19:0a:70:11:c0:04:bd: 68:87:04:b9:d2:81:2e:7e:42:ed:bc:9c:05:f7:a5: f5:4a:05:dd:9c:41:ca:24:71:c5:63:9e:e0:e6:bb: ee:fc:c8:f2:14:c0:5e:05:d3:5a:af:47:d6:ae:7f: 16:13:d3:3e:9f:c8:01:e6:a9:c7:bb:f8:8f:ca:57: 4f:67:5b:00:fa:40:05:46:12:61:4e:74:f7:55:d1: a2:ec:c4:64:a7:ee:10:36:3a:bf:77:9b:d7:a7:f1: 64:0e:c9:01:4f:15:76:61:98:0d:70:a6:96:d8:91: 75:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4E:F7:37:4D:CC:12:E9:DC:8B:8D:24:9C:E0:B3:BE:2B:E2:A2:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49256786-84d1-385c-ac5a-fc594c08d975.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:95:db:4f:aa:50:8d:d2:e0:05:b1:36:57:92:cd:19:48:13: fe:47:e9:f4:f3:00:e4:8f:10:db:1a:7c:22:59:b2:17:51:57: 7b:82:0f:f3:e7:34:8e:e6:75:16:46:84:84:89:11:5b:8d:02: 96:a4:f4:18:31:ba:3a:94:99:d8:fd:98:dc:20:51:69:c3:5d: a6:e4:26:f8:01:db:a5:e9:21:00:8e:47:6a:a9:0e:3a:ef:14: 63:6d:d1:f4:04:ee:4b:bd:6b:45:21:de:ca:81:6b:cd:8e:21: dc:f0:4a:f8:0e:d6:2b:69:49:d2:07:8b:12:de:96:03:d9:95: 5b:1f:49:88:4c:7c:a4:41:c5:df:b7:f1:ee:17:5b:0d:cc:44: 0a:d0:79:f9:1c:08:80:46:c0:45:19:35:6d:ce:60:d0:c1:fb: cc:5b:6b:a7:7f:71:0f:df:1f:c5:d6:3f:f4:7b:77:12:f0:9a: d7:09:27:9c:64:76:25:ef:bc:8b:3f:f2:c3:0f:cb:cd:a8:9b: b0:d6:61:85:9c:a5:d4:b0:2a:ff:1e:32:1f:af:f2:55:65:89: 00:d2:fe:be:e7:27:d0:ad:be:d4:75:2f:4e:ff:08:1f:5b:a2: 81:cf:ec:d5:fa:47:a2:6a:c9:11:06:b3:94:98:03:6e:3f:6d: bf:f5:12:0e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JfZMSPEbtkBcjqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjE4NDEwMTMtYzc4Ny00YmU3LWFmYzEtOTc4MDFhMWIzOWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYjw6ujFm/QQ0hLVLKX+wZAwKIeN0RHrNa6j GM51LY9N5ZNLXmDd0AiB2J7YijFbslwJqMfesf6zCNI3gFCW4TitmXXc8EvQl5zD Jk9eiYHyXq71JWLOz9bnkyup7ad8CCkBs1JM9nQ/ISVu7hpRCFiWLKpTwHEegD9g 8GTOIrkwFsqFsYcvKVyPY8i5KRkKcBHABL1ohwS50oEufkLtvJwF96X1SgXdnEHK JHHFY57g5rvu/MjyFMBeBdNar0fWrn8WE9M+n8gB5qnHu/iPyldPZ1sA+kAFRhJh TnT3VdGi7MRkp+4QNjq/d5vXp/FkDskBTxV2YZgNcKaW2JF13QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLJO9zdNzBLp3IuNJJzgs74r4qKIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDkyNTY3ODYtODRkMS0z ODVjLWFjNWEtZmM1OTRjMDhkOTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQClldtPqlCN0uAFsTZXks0ZSBP+R+n08wDkjxDbGnwiWbIXUVd7gg/z 5zSO5nUWRoSEiRFbjQKWpPQYMbo6lJnY/ZjcIFFpw12m5Cb4Adul6SEAjkdqqQ46 7xRjbdH0BO5LvWtFId7KgWvNjiHc8Er4DtYraUnSB4sS3pYD2ZVbH0mITHykQcXf t/HuF1sNzEQK0Hn5HAiARsBFGTVtzmDQwfvMW2unf3EP3x/F1j/0e3cS8JrXCSec ZHYl77yLP/LDD8vNqJuw1mGFnKXUsCr/HjIfr/JVZYkA0v6+5yfQrb7UdS9O/wgf W6KBz+zV+keiaskRBrOUmANuP22/9RIO -----END CERTIFICATE-----Generated at Tue Oct 6 21:41:25 2026 by rpki-client