$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/686a98bf-02f7-3f74-9cb5-20cea4b6f345.roa File: 686a98bf-02f7-3f74-9cb5-20cea4b6f345.roa (raw, json) Hash identifier: Ap7QUvVp6WagTJkSaCrelwZ0naNLamjagxcP3KcIy4c= Subject key identifier: B1:78:B4:BA:31:C9:7F:60:D2:B2:9B:3A:95:67:BF:72:C4:78:8E:51 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EC90721EE7AA7C41CA9A87250 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/686a98bf-02f7-3f74-9cb5-20cea4b6f345.roa Signing time: Mon 10 Aug 2026 01:00:12 +0000 ROA not before: Mon 10 Aug 2026 01:00:12 +0000 ROA not after: Sun 08 Nov 2026 02:00:12 +0000 asID: 396543 IP address blocks: 192.42.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c9:07:21:ee:7a:a7:c4:1c:a9:a8:72:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 10 01:00:12 2026 GMT Not After : Nov 8 02:00:12 2026 GMT Subject: CN=8ea32aa3-eb5a-44d6-a2d0-3c405e07e33f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1d:d4:d3:20:d9:7f:49:05:85:e4:3f:2c:85: 91:93:f5:d5:8b:34:5b:a7:30:e7:a8:b3:0a:87:9a: c1:4b:82:ba:93:9f:f3:40:89:3c:0e:61:46:bd:3b: 05:f3:8f:e9:77:db:b6:a8:10:64:62:f7:e3:fe:2b: d3:e9:95:83:6a:37:cb:58:5e:0b:67:ec:2c:6b:c5: 4f:e7:c5:75:1a:89:c2:32:06:74:9a:a1:8c:17:52: 40:5b:29:69:88:19:36:87:86:42:79:36:48:7e:ee: 5e:6e:61:55:90:02:b7:8a:bf:4b:36:9f:82:56:3c: f7:8b:2f:9c:8f:b3:d3:7a:06:60:d7:fe:34:87:6e: 54:7f:e2:b0:ce:99:e2:b1:55:b1:e3:d2:5b:87:1c: 24:d6:b2:42:7b:fc:b0:28:e1:c5:c6:f9:f3:80:19: 9e:5b:00:13:45:59:9c:a4:fa:41:9b:f4:e9:18:b8: f4:ee:c0:04:53:bc:be:75:1c:a7:33:e1:0a:9f:14: e4:49:b2:21:21:7d:e3:11:70:d6:ab:c8:f2:c5:00: fe:93:66:14:1f:52:18:1b:07:b9:d2:0b:eb:d7:44: 9a:e8:3e:c2:9d:0c:8e:f6:2f:f2:de:54:26:74:1c: 37:ff:ef:23:63:58:bf:c3:de:52:6e:08:65:c1:12: 95:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:78:B4:BA:31:C9:7F:60:D2:B2:9B:3A:95:67:BF:72:C4:78:8E:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/686a98bf-02f7-3f74-9cb5-20cea4b6f345.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:d7:e7:6d:36:d2:b1:30:e1:a3:03:ea:27:40:bd:6d:23:1b: 00:75:e3:e8:92:f9:79:91:6c:0a:c9:8c:a9:e0:6b:5c:2f:82: 37:23:91:fa:0a:0a:d5:04:02:ab:fe:7a:2a:ba:01:41:9e:bf: 6b:1d:97:61:1c:99:75:c3:f5:9c:d9:26:60:d2:1a:85:f1:d9: 9d:9b:2e:71:06:72:d5:29:7a:e0:30:a8:28:b0:0c:70:f9:71: 14:6b:47:01:7e:58:9a:b6:56:c7:6d:b3:6a:68:ca:4f:a6:6f: 8e:90:37:d9:54:62:af:7a:ae:5d:cb:b8:d0:4e:df:a5:d6:6e: 35:4c:86:7b:d7:6f:c0:b2:a5:3f:df:03:48:bd:55:2a:4c:db: 1f:4b:78:8f:83:e1:32:74:6b:c7:fb:de:db:ff:fa:40:8f:1d: 8f:ba:86:15:41:6a:57:29:ab:49:13:e5:0e:b0:1a:44:3a:3f: 15:56:31:88:5b:41:ff:16:0d:9f:64:a1:97:7c:06:5a:cc:c3: 41:2f:78:81:dc:a9:e1:6c:56:80:33:d5:b9:51:76:bc:df:a2: 44:9e:5d:cc:d6:5d:fb:65:27:9e:1c:34:36:04:61:88:51:1b: 1e:c5:9e:77:ae:6f:f6:19:b1:c2:af:84:8e:46:fa:3d:88:af: cd:8b:bd:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7JByHueqfEHKmoclAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgxMDAxMDAxMloXDTI2MTEwODAyMDAxMlowLzEtMCsGA1UEAxMk OGVhMzJhYTMtZWI1YS00NGQ2LWEyZDAtM2M0MDVlMDdlMzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh3U0yDZf0kFheQ/LIWRk/XVizRbpzDnqLMK h5rBS4K6k5/zQIk8DmFGvTsF84/pd9u2qBBkYvfj/ivT6ZWDajfLWF4LZ+wsa8VP 58V1GonCMgZ0mqGMF1JAWylpiBk2h4ZCeTZIfu5ebmFVkAK3ir9LNp+CVjz3iy+c j7PTegZg1/40h25Uf+KwzpnisVWx49Jbhxwk1rJCe/ywKOHFxvnzgBmeWwATRVmc pPpBm/TpGLj07sAEU7y+dRynM+EKnxTkSbIhIX3jEXDWq8jyxQD+k2YUH1IYGwe5 0gvr10Sa6D7CnQyO9i/y3lQmdBw3/+8jY1i/w95SbghlwRKVtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLF4tLoxyX9g0rKbOpVnv3LEeI5RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjg2YTk4YmYtMDJmNy0z Zjc0LTljYjUtMjBjZWE0YjZmMzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCquMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrX52020rEw4aMD6idAvW0jGwB14+iS+XmRbArJjKnga1wvgjcjkfoK CtUEAqv+eiq6AUGev2sdl2EcmXXD9ZzZJmDSGoXx2Z2bLnEGctUpeuAwqCiwDHD5 cRRrRwF+WJq2Vsdts2poyk+mb46QN9lUYq96rl3LuNBO36XWbjVMhnvXb8CypT/f A0i9VSpM2x9LeI+D4TJ0a8f73tv/+kCPHY+6hhVBalcpq0kT5Q6wGkQ6PxVWMYhb Qf8WDZ9koZd8BlrMw0EveIHcqeFsVoAz1blRdrzfokSeXczWXftlJ54cNDYEYYhR Gx7Fnneub/YZscKvhI5G+j2Ir82LvXo= -----END CERTIFICATE-----Generated at Wed Aug 19 20:27:46 2026 by rpki-client