$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa9fd22c-13f2-3b32-ae2d-7b16049363ca.roa File: aa9fd22c-13f2-3b32-ae2d-7b16049363ca.roa (raw, json) Hash identifier: /bOa5gLm9SPFTTejQY/xKgr4dhuJ839V5YoDZdpFJvA= Subject key identifier: 90:85:49:C3:0D:63:2E:36:1B:DD:B0:14:9C:FF:82:A2:EB:FB:82:4D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F497F5D727C9BD2FCF536B980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa9fd22c-13f2-3b32-ae2d-7b16049363ca.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396544 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:5d:72:7c:9b:d2:fc:f5:36:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cdc4e839-0c32-42a8-87b1-fe6c97ac81d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1d:9e:ae:d1:db:fa:c7:94:f7:2c:09:1f:ae: f5:66:66:e0:f8:7e:09:86:69:93:ec:3a:74:34:e6: 91:a4:76:d1:27:cf:38:7c:9b:e7:3d:e6:af:f7:58: dc:17:ec:84:41:ac:4f:e4:a2:5d:ad:b0:e5:e7:9f: d9:d1:e0:6c:6c:e1:d4:a9:ee:22:48:1e:f0:91:74: b7:d0:ff:33:d5:93:58:ea:b5:75:4d:9a:94:23:db: c2:df:7c:e9:25:97:5a:0b:53:1f:ac:7b:2d:b2:50: 65:8a:a4:e2:9a:4c:1c:85:1f:f4:99:cb:0c:7c:2f: 76:25:e7:e6:c0:3f:d9:8a:06:f4:b9:4e:45:8a:88: 22:7e:eb:6e:ad:d0:29:98:fa:fe:64:ea:23:d9:f5: 38:b6:cb:71:7b:42:38:1f:cc:97:fd:d7:a5:cc:7f: 50:a9:e1:6d:e0:c0:7e:1e:f6:17:0f:7b:ef:f7:6c: 5f:98:84:59:65:65:90:fe:08:70:fb:82:1c:2b:00: 58:9e:d4:6d:b9:ae:89:71:9b:67:ca:7b:9c:13:ea: 09:18:ef:53:57:83:cf:66:73:d0:cd:4b:bb:08:9e: 4d:da:38:13:3f:63:a8:c0:7a:e8:91:5f:ff:ad:24: 9a:97:77:6a:a5:3f:42:77:2c:59:e0:d9:bb:e2:3e: 75:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:85:49:C3:0D:63:2E:36:1B:DD:B0:14:9C:FF:82:A2:EB:FB:82:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa9fd22c-13f2-3b32-ae2d-7b16049363ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:96:be:3a:33:17:c2:da:59:b3:98:72:42:91:9b:c2:95:ad: 24:59:df:e7:dc:54:3e:f4:52:fe:fb:00:41:23:60:12:25:fc: 2e:4e:01:d0:b1:6a:c8:76:bf:ab:d6:ed:7a:80:67:34:c7:36: e0:1f:7a:80:06:a7:ad:91:0c:f9:e8:9c:36:c9:f9:29:93:25: a1:83:79:2e:54:8d:12:79:51:ad:a7:33:67:8a:5c:47:10:24: 7c:25:1f:e8:55:75:f5:13:32:0e:e1:c5:9a:79:ab:a5:61:29: 46:7b:60:71:4a:c0:d6:24:6d:ad:c4:72:ae:98:78:ed:4e:ae: a8:14:c9:21:80:0c:2e:b6:bc:fc:d7:c8:b2:9a:ea:49:79:46: 72:76:66:55:75:89:7a:05:a6:fb:ea:2d:6b:6b:85:5b:d7:50: 10:e1:1a:c8:de:49:c2:3e:97:c2:c6:eb:11:63:9c:5d:4e:eb: 3a:da:71:ed:92:9e:d9:b6:dc:de:da:24:e1:14:23:2b:2a:80: e3:58:73:38:8b:89:b0:01:9e:7c:eb:59:76:3f:5d:d7:a9:3c: 99:43:66:cf:44:ae:b6:7c:33:d2:50:7e:fa:77:34:6a:0b:d5: 9c:31:84:8a:69:c5:31:3f:ee:fa:79:7c:aa:fe:0b:55:e5:26: 9e:aa:bc:8a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jf11yfJvS/PU2uYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2RjNGU4MzktMGMzMi00MmE4LTg3YjEtZmU2Yzk3YWM4MWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR2ertHb+seU9ywJH671Zmbg+H4JhmmT7Dp0 NOaRpHbRJ884fJvnPeav91jcF+yEQaxP5KJdrbDl55/Z0eBsbOHUqe4iSB7wkXS3 0P8z1ZNY6rV1TZqUI9vC33zpJZdaC1MfrHstslBliqTimkwchR/0mcsMfC92Jefm wD/Zigb0uU5FiogifuturdApmPr+ZOoj2fU4tstxe0I4H8yX/delzH9QqeFt4MB+ HvYXD3vv92xfmIRZZWWQ/ghw+4IcKwBYntRtua6JcZtnynucE+oJGO9TV4PPZnPQ zUu7CJ5N2jgTP2OowHrokV//rSSal3dqpT9CdyxZ4Nm74j51PwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJCFScMNYy42G92wFJz/gqLr+4JNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWE5ZmQyMmMtMTNmMi0z YjMyLWFlMmQtN2IxNjA0OTM2M2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC8lr46MxfC2lmzmHJCkZvCla0kWd/n3FQ+9FL++wBBI2ASJfwuTgHQ sWrIdr+r1u16gGc0xzbgH3qABqetkQz56Jw2yfkpkyWhg3kuVI0SeVGtpzNnilxH ECR8JR/oVXX1EzIO4cWaeaulYSlGe2BxSsDWJG2txHKumHjtTq6oFMkhgAwutrz8 18iymupJeUZydmZVdYl6Bab76i1ra4Vb11AQ4RrI3knCPpfCxusRY5xdTus62nHt kp7Zttze2iThFCMrKoDjWHM4i4mwAZ5861l2P13XqTyZQ2bPRK62fDPSUH76dzRq C9WcMYSKacUxP+76eXyq/gtV5SaeqryK -----END CERTIFICATE-----Generated at Tue Oct 6 20:01:36 2026 by rpki-client