$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9fc1d8b-304d-3457-a05a-3e36f6a74a4c.roa File: d9fc1d8b-304d-3457-a05a-3e36f6a74a4c.roa (raw, json) Hash identifier: ivx0k1h+tN26GuQk8w+/j8LEfvRVDrQlvfG3+KvNm54= Subject key identifier: 9F:5E:1A:B1:C3:66:F5:A4:68:5F:8B:8C:C0:89:62:40:61:23:72:63 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F549D6197CAEA5C2223901D80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9fc1d8b-304d-3457-a05a-3e36f6a74a4c.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 211369 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:61:97:ca:ea:5c:22:23:90:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=dac402b1-93ca-4d96-bbbe-e7885b94c23b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5b:84:a4:39:c2:24:81:87:c2:a0:4a:b8:63: bc:e2:6e:ef:d9:4f:56:64:51:2b:30:5c:0b:54:e6: 1d:30:68:4c:3c:95:3e:37:7f:e5:49:12:93:4e:38: bf:2c:95:65:05:9f:ac:5f:0d:94:a4:d4:ae:53:fc: 62:cc:95:ef:6f:5a:48:11:26:48:53:26:7a:d3:5e: 0f:06:2f:a5:a5:39:27:ec:2a:90:11:ea:80:3a:b8: 9a:be:fd:92:55:89:ed:eb:73:0e:91:43:30:3f:c9: 48:0c:d4:22:14:68:6e:05:b5:37:ab:50:cd:e3:e4: 71:b7:09:2d:02:af:0d:56:dd:19:88:e6:74:03:5e: c6:74:24:88:43:f3:dd:eb:7f:01:be:0d:4b:b9:03: 19:19:cc:4d:d9:df:35:6c:53:2e:f8:08:2b:6d:e5: 04:26:94:ae:ea:f8:af:34:4b:73:f6:e2:ad:06:43: e6:f1:02:f2:2d:d6:14:d8:01:db:1e:b2:aa:5c:9f: 07:e1:bd:af:90:d2:da:dc:1f:ee:70:6f:4a:ad:1f: e2:07:e1:1f:27:bb:fd:d9:a0:8f:61:2a:e7:d2:15: 14:e5:ad:29:aa:b3:70:41:be:da:5f:67:b1:83:32: 04:b0:cc:d4:13:d3:89:7d:1e:26:39:66:05:b6:e9: af:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5E:1A:B1:C3:66:F5:A4:68:5F:8B:8C:C0:89:62:40:61:23:72:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9fc1d8b-304d-3457-a05a-3e36f6a74a4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:4b:27:5c:3f:b9:c2:e1:58:d8:05:63:c3:77:da:6d:9e:8c: 36:09:06:5d:66:83:e6:b1:d3:11:68:11:e5:39:43:b1:6e:5a: 16:97:e1:17:e0:3f:e7:d5:52:27:4f:18:77:ca:2e:74:83:06: 77:45:95:10:e0:3b:a1:a5:b7:ff:69:a2:5a:d0:d7:1b:5e:28: f2:e1:34:dc:dd:29:1b:e5:69:57:df:28:d1:5b:e3:1a:c2:29: 84:e8:a4:39:dd:6d:d2:40:32:59:b6:70:ab:ec:47:3d:e6:94: cb:e2:9a:1b:2e:60:86:51:19:40:ae:20:cb:45:29:f3:54:66: 74:ff:77:a7:94:d8:d5:5b:9e:cb:3e:55:4c:f2:5d:9e:23:c4: a4:2d:8e:6d:c8:d2:7a:1e:9a:f0:66:2e:b0:e4:27:a7:ee:8e: 9a:75:07:9c:88:cd:59:2c:5d:b6:0d:3a:f8:4b:b2:dc:7d:ec: 8d:8b:96:bb:13:3a:09:4f:33:1b:2d:a5:8f:ce:3c:23:b0:ef: 1f:ee:ed:1c:67:21:f6:1d:e7:b0:db:ed:bc:0c:74:b6:aa:8c: 67:c4:10:28:20:83:12:e1:e9:d1:c2:f1:f5:14:a7:86:a3:cf: 3a:43:7e:94:ed:d6:f7:b3:86:6b:c6:29:f1:63:cd:09:4b:6d: 71:5d:60:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnWGXyupcIiOQHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ZGFjNDAyYjEtOTNjYS00ZDk2LWJiYmUtZTc4ODViOTRjMjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVuEpDnCJIGHwqBKuGO84m7v2U9WZFErMFwL VOYdMGhMPJU+N3/lSRKTTji/LJVlBZ+sXw2UpNSuU/xizJXvb1pIESZIUyZ6014P Bi+lpTkn7CqQEeqAOriavv2SVYnt63MOkUMwP8lIDNQiFGhuBbU3q1DN4+Rxtwkt Aq8NVt0ZiOZ0A17GdCSIQ/Pd638Bvg1LuQMZGcxN2d81bFMu+AgrbeUEJpSu6viv NEtz9uKtBkPm8QLyLdYU2AHbHrKqXJ8H4b2vkNLa3B/ucG9KrR/iB+EfJ7v92aCP YSrn0hUU5a0pqrNwQb7aX2exgzIEsMzUE9OJfR4mOWYFtumvIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9eGrHDZvWkaF+LjMCJYkBhI3JjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDlmYzFkOGItMzA0ZC0z NDU3LWEwNWEtM2UzNmY2YTc0YTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdLJ1w/ucLhWNgFY8N32m2ejDYJBl1mg+ax0xFoEeU5Q7FuWhaX4Rfg P+fVUidPGHfKLnSDBndFlRDgO6Glt/9polrQ1xteKPLhNNzdKRvlaVffKNFb4xrC KYTopDndbdJAMlm2cKvsRz3mlMvimhsuYIZRGUCuIMtFKfNUZnT/d6eU2NVbnss+ VUzyXZ4jxKQtjm3I0noemvBmLrDkJ6fujpp1B5yIzVksXbYNOvhLstx97I2LlrsT OglPMxstpY/OPCOw7x/u7RxnIfYd57Db7bwMdLaqjGfEECgggxLh6dHC8fUUp4aj zzpDfpTt1vezhmvGKfFjzQlLbXFdYJ0= -----END CERTIFICATE-----Generated at Thu Oct 8 01:04:10 2026 by rpki-client