$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7998c72e-fec1-3beb-9533-c523b2706f69.roa File: 7998c72e-fec1-3beb-9533-c523b2706f69.roa (raw, json) Hash identifier: yO085fexaqBxCX/yWU9thqmbLCuykFXNvlt0nflh/hw= Subject key identifier: 17:96:1C:C2:F9:79:F7:A8:FB:70:C9:A6:37:1D:B5:93:21:49:3B:31 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EB2B1FA00B3B9687C92063A00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7998c72e-fec1-3beb-9533-c523b2706f69.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 397209 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:fa:00:b3:b9:68:7c:92:06:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=ec43d71a-ada8-4d84-b0bc-ab28d8c79431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:06:5d:3e:fb:b1:95:0c:6a:b3:a4:34:bf:b0: 30:dc:aa:ff:c7:96:bb:20:ef:49:f0:9a:d6:79:70: 09:b7:17:c9:e7:b2:d3:04:f5:65:4e:13:70:c0:c5: 6a:38:80:66:cd:72:bf:5d:6a:ec:87:39:c2:d3:d2: 15:cb:54:0d:23:10:96:36:dd:8d:08:e1:46:75:dd: 5c:e1:34:aa:f6:af:d2:af:7a:69:84:ad:2a:da:03: 60:a9:78:00:4a:4c:bb:e3:79:dc:20:6a:d9:a2:b2: 0e:9c:d0:b1:01:27:71:83:b1:4c:53:d7:2d:7b:d8: 4d:7f:b0:ef:d8:03:e6:2d:06:e8:da:6b:97:36:b1: 5a:68:fe:23:40:59:1d:05:79:8f:30:41:91:db:f0: b1:a6:57:b3:47:a4:9e:23:93:22:ce:0c:77:ef:cb: 6e:f4:05:1d:f6:51:92:a6:05:72:19:59:e6:e5:53: e8:40:a4:36:99:95:12:4f:44:29:2d:ae:cc:0d:ac: b2:e0:19:e9:40:d1:c5:9a:6f:a3:ed:df:9e:d9:05: cf:9b:72:96:d0:0e:71:e1:2e:47:48:2e:7f:ea:7a: 0a:3a:81:cf:af:6b:d2:af:1b:10:1f:4d:fa:84:11: 5a:27:14:a6:b2:db:48:a7:a8:06:a2:00:87:ba:47: 74:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:96:1C:C2:F9:79:F7:A8:FB:70:C9:A6:37:1D:B5:93:21:49:3B:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7998c72e-fec1-3beb-9533-c523b2706f69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:47:15:a6:56:8b:ce:d9:45:93:96:31:23:27:14:da:7d:21: f8:55:b1:91:e5:bd:fd:44:24:8b:b4:61:5a:88:69:e6:24:2e: fd:e4:3c:22:fb:d5:09:c8:24:98:38:c8:14:38:e6:d3:07:03: e8:70:62:e5:fd:50:f4:45:e2:98:ee:16:63:57:c0:8e:86:32: 6c:e5:66:e7:97:6a:2d:de:7c:35:0a:b0:17:32:28:88:45:c2: 3a:97:8b:b8:6d:76:24:57:a7:6b:fa:e3:f9:a9:cd:a7:c4:be: d2:78:e9:3f:ca:a8:33:51:b2:d0:27:7c:41:8a:03:d9:ac:77: 2d:26:d6:a6:c5:67:d5:ae:81:d7:bc:02:dd:32:40:2c:d1:e5: de:0e:43:ba:58:54:9f:90:ab:d3:ac:da:ff:5a:af:cd:ba:2f: 07:76:c0:9d:6f:4d:68:57:4e:8a:78:9e:90:2b:4a:b4:f6:02: 54:23:53:da:8d:62:66:9e:62:7e:27:dc:50:9b:3d:0a:9c:cf: be:fc:6c:55:33:92:3a:07:b9:78:71:61:6c:d8:18:ea:e9:3e: d5:ea:c9:09:86:39:e0:7c:46:12:0c:3b:47:37:49:9a:b2:ef: 0e:88:ca:ad:59:0f:37:82:93:fe:76:26:40:e8:55:aa:29:8c: c4:b4:38:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysfoAs7lofJIGOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk ZWM0M2Q3MWEtYWRhOC00ZDg0LWIwYmMtYWIyOGQ4Yzc5NDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQZdPvuxlQxqs6Q0v7Aw3Kr/x5a7IO9J8JrW eXAJtxfJ57LTBPVlThNwwMVqOIBmzXK/XWrshznC09IVy1QNIxCWNt2NCOFGdd1c 4TSq9q/Sr3pphK0q2gNgqXgASky743ncIGrZorIOnNCxASdxg7FMU9cte9hNf7Dv 2APmLQbo2muXNrFaaP4jQFkdBXmPMEGR2/CxplezR6SeI5Mizgx378tu9AUd9lGS pgVyGVnm5VPoQKQ2mZUST0QpLa7MDayy4BnpQNHFmm+j7d+e2QXPm3KW0A5x4S5H SC5/6noKOoHPr2vSrxsQH036hBFaJxSmsttIp6gGogCHukd0aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeWHML5efeo+3DJpjcdtZMhSTsxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzk5OGM3MmUtZmVjMS0z YmViLTk1MzMtYzUyM2IyNzA2ZjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhHFaZWi87ZRZOWMSMnFNp9IfhVsZHlvf1EJIu0YVqIaeYkLv3kPCL7 1QnIJJg4yBQ45tMHA+hwYuX9UPRF4pjuFmNXwI6GMmzlZueXai3efDUKsBcyKIhF wjqXi7htdiRXp2v64/mpzafEvtJ46T/KqDNRstAnfEGKA9msdy0m1qbFZ9Wugde8 At0yQCzR5d4OQ7pYVJ+Qq9Os2v9ar826Lwd2wJ1vTWhXTop4npArSrT2AlQjU9qN YmaeYn4n3FCbPQqcz778bFUzkjoHuXhxYWzYGOrpPtXqyQmGOeB8RhIMO0c3SZqy 7w6Iyq1ZDzeCk/52JkDoVaopjMS0OBk= -----END CERTIFICATE-----Generated at Wed Aug 19 18:47:29 2026 by rpki-client