$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd3fabfe-3a72-3f59-82e5-9033dfcfa961.roa File: fd3fabfe-3a72-3f59-82e5-9033dfcfa961.roa (raw, json) Hash identifier: YKONuXMQangn8xSCGYWWvhLPxb5t679jDtQHI2a9NwQ= Subject key identifier: 24:EC:85:88:2D:CF:60:43:44:BF:68:F8:AB:70:84:63:71:55:38:BE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F497DA175C9128445D5448380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd3fabfe-3a72-3f59-82e5-9033dfcfa961.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396600 IP address blocks: 192.68.126.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:a1:75:c9:12:84:45:d5:44:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c86e71fa-c86d-4b9b-9328-614dea8f4dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6e:c5:1a:88:fa:b3:73:ad:6a:86:90:e7:b7: 95:49:90:5e:9c:61:cc:74:5c:02:4e:71:63:7a:7b: 92:5c:08:15:bc:e1:e5:b1:2e:49:1b:ce:95:f6:8a: f4:13:c9:45:59:63:cd:a3:93:3a:5a:03:0d:70:9b: 31:bb:37:9d:a5:a9:f6:49:e5:1a:5c:4a:ca:77:c3: d8:ec:bd:99:57:e3:4f:56:b0:a3:9b:43:12:ec:c2: a2:65:68:9a:ee:92:fb:92:40:f8:7f:e6:2f:d3:c0: 7d:a3:a3:81:63:24:da:3e:c5:c2:02:a6:c4:e7:33: 42:76:d8:9e:b5:33:93:ec:c9:16:3b:77:93:e5:b5: 3a:ea:34:1b:f3:a9:51:df:92:54:d0:01:4d:41:54: 0a:21:2e:4a:ba:97:70:fb:47:a8:5e:15:34:24:46: 3d:b6:0a:74:b2:08:9a:8b:5a:9e:60:01:63:a7:ee: b3:22:99:f5:83:ca:d8:87:80:83:a7:18:1c:7d:df: 4f:9f:06:f0:2c:d1:5e:3a:5a:73:2b:ef:da:e6:43: 50:b4:04:00:d0:40:ff:19:2e:68:0c:2b:95:c3:4c: 6e:d1:9f:89:6f:96:8e:ac:2d:1c:4f:18:e5:02:47: f9:43:4a:e9:99:15:8a:0a:8c:b6:22:dd:d8:15:d6: 46:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:EC:85:88:2D:CF:60:43:44:BF:68:F8:AB:70:84:63:71:55:38:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd3fabfe-3a72-3f59-82e5-9033dfcfa961.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:f7:7d:f8:56:25:0e:75:c3:40:b3:04:98:03:d3:a3:37:09: 31:f2:3d:07:c5:a5:31:44:23:0c:61:1f:78:56:26:cb:5e:3e: cd:8c:62:13:1f:d2:c0:cd:29:21:67:52:8b:7e:de:02:14:36: 81:c6:7d:5e:47:1e:7c:29:88:42:c8:97:8c:11:c4:55:7c:c3: 87:26:5c:58:53:14:80:d3:cf:41:b5:53:b5:d5:2b:1e:8c:26: b4:56:0d:94:e3:35:e6:3d:69:57:86:d5:fa:c8:cc:33:a9:ac: 75:d3:48:1b:ed:a9:ad:99:88:b8:8f:0f:8e:31:84:f0:e6:59: 63:cf:51:fa:ba:6b:a2:d5:ce:e5:ea:e1:98:dd:76:89:bd:8c: 99:e2:d0:29:5c:cc:88:92:23:46:c7:f2:07:ad:74:7a:7b:88: 41:4f:50:c2:6d:88:13:37:f1:95:e8:cb:ca:89:25:60:53:76: ff:af:1c:6f:d6:bb:6d:14:e3:2d:e9:70:17:d0:46:91:71:c2: b1:1b:cd:05:87:ef:87:8c:a8:e1:b4:04:59:58:9a:c3:e1:e2: ce:df:f4:1b:bc:0e:e6:51:bf:44:8c:bc:dc:8e:9b:94:11:24: 74:a8:ef:c9:a4:9d:05:08:27:69:e3:94:06:cb:7c:7d:a7:c2: 34:d3:24:4b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JfaF1yRKERdVEg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Yzg2ZTcxZmEtYzg2ZC00YjliLTkzMjgtNjE0ZGVhOGY0ZGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi27FGoj6s3OtaoaQ57eVSZBenGHMdFwCTnFj enuSXAgVvOHlsS5JG86V9or0E8lFWWPNo5M6WgMNcJsxuzedpan2SeUaXErKd8PY 7L2ZV+NPVrCjm0MS7MKiZWia7pL7kkD4f+Yv08B9o6OBYyTaPsXCAqbE5zNCdtie tTOT7MkWO3eT5bU66jQb86lR35JU0AFNQVQKIS5Kupdw+0eoXhU0JEY9tgp0sgia i1qeYAFjp+6zIpn1g8rYh4CDpxgcfd9PnwbwLNFeOlpzK+/a5kNQtAQA0ED/GS5o DCuVw0xu0Z+Jb5aOrC0cTxjlAkf5Q0rpmRWKCoy2It3YFdZGPwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCTshYgtz2BDRL9o+KtwhGNxVTi+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmQzZmFiZmUtM2E3Mi0z ZjU5LTgyZTUtOTAzM2RmY2ZhOTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBq9334ViUOdcNAswSYA9OjNwkx8j0HxaUxRCMMYR94VibLXj7NjGIT H9LAzSkhZ1KLft4CFDaBxn1eRx58KYhCyJeMEcRVfMOHJlxYUxSA089BtVO11Sse jCa0Vg2U4zXmPWlXhtX6yMwzqax100gb7amtmYi4jw+OMYTw5lljz1H6umui1c7l 6uGY3XaJvYyZ4tApXMyIkiNGx/IHrXR6e4hBT1DCbYgTN/GV6MvKiSVgU3b/rxxv 1rttFOMt6XAX0EaRccKxG80Fh++HjKjhtARZWJrD4eLO3/QbvA7mUb9EjLzcjpuU ESR0qO/JpJ0FCCdp45QGy3x9p8I00yRL -----END CERTIFICATE-----Generated at Tue Oct 6 18:02:44 2026 by rpki-client