$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/4af02535-bfd8-3de4-bd9a-711fb8ccc712.roa File: 4af02535-bfd8-3de4-bd9a-711fb8ccc712.roa (raw, json) Hash identifier: kKWRwOSLCnLuIuimSNgFEx52h66PzcXNCsLFJXo2N78= Subject key identifier: B3:0F:5B:38:3C:F8:C3:BC:17:E3:59:B8:F4:57:71:4F:C2:01:48:5B Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584F7DD85670C1C456BF34262B40 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/4af02535-bfd8-3de4-bd9a-711fb8ccc712.roa Signing time: Tue 13 Oct 2026 19:27:23 +0000 ROA not before: Tue 13 Oct 2026 19:27:23 +0000 ROA not after: Mon 11 Jan 2027 20:27:23 +0000 asID: 204770 IP address blocks: 192.48.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7d:d8:56:70:c1:c4:56:bf:34:26:2b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Oct 13 19:27:23 2026 GMT Not After : Jan 11 20:27:23 2027 GMT Subject: CN=19be406d-ed8b-466c-a0f4-3d6b975c4359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4c:f6:f5:cd:a0:d0:46:43:21:64:c3:ad:20: 57:36:c3:b8:8d:60:ad:0a:96:9c:67:f9:08:1b:68: 02:1d:46:40:73:22:4c:03:5c:c2:51:01:41:fd:bc: d8:48:b7:73:ff:c2:33:41:1b:b4:43:dc:88:39:79: 45:92:2e:75:cc:59:7b:dc:08:13:2d:e0:75:44:9b: 61:b5:19:85:1a:bc:63:ca:ee:fa:48:53:1a:a8:c7: cb:e5:58:be:20:63:58:e7:9e:a0:30:ca:b4:25:54: f6:1b:e7:1e:03:b1:af:14:f8:a6:45:3a:37:91:03: ed:f1:e7:dd:be:44:06:24:5c:a9:b0:08:23:16:45: 0a:4b:2f:7c:84:4b:df:44:d8:56:87:9e:26:39:6f: cd:fb:15:66:43:da:f2:5e:8d:f2:05:0f:32:87:a3: 92:92:87:77:11:d1:3e:3b:c1:fb:4a:a6:96:a2:8b: 82:e0:bb:ec:78:94:83:b7:32:bf:65:b2:e2:7f:a8: 11:60:8f:06:b5:b4:05:cb:bb:47:a9:31:d0:7b:b3: db:96:72:54:0b:a2:b9:58:b0:bc:b4:5d:74:20:c6: 9a:02:f7:28:3a:7d:a0:5b:92:82:d6:89:ed:99:bc: b7:8c:3d:4a:5f:69:51:57:ba:0e:11:51:cc:33:61: b1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:0F:5B:38:3C:F8:C3:BC:17:E3:59:B8:F4:57:71:4F:C2:01:48:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/4af02535-bfd8-3de4-bd9a-711fb8ccc712.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 192.48.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:e7:ca:91:32:7c:df:1f:8e:81:4b:b9:72:52:7b:c5:2d:16: 5f:dc:c3:f5:fa:d8:d7:1a:20:ad:1b:05:c9:78:b5:ca:30:57: de:65:75:e4:bb:33:21:b1:d6:70:01:95:1a:18:69:e0:95:79: 09:c3:7a:b7:00:28:9d:ec:3c:43:68:75:e1:27:9c:8f:fc:a7: 1f:d9:e8:c6:9b:cf:91:f5:c3:45:22:80:ae:b2:91:2e:9e:4c: 31:0c:47:cb:fa:08:9a:3a:75:c1:0f:d7:fb:6d:f4:70:df:52: ff:46:4b:06:d8:f1:57:b7:3b:c7:be:0d:d2:ab:9b:0a:47:57: 89:90:91:ab:34:8a:33:06:32:96:04:69:8c:c4:40:74:1e:51: 1b:ee:45:a1:b6:45:a5:35:e5:f7:dc:1c:0f:87:ac:fb:58:59: da:b5:a8:fd:37:ef:c8:c4:75:cb:87:cc:16:95:13:3f:b5:f1: f7:81:8d:fa:1c:75:07:3e:a1:18:4d:96:eb:46:76:00:c5:1a: c0:fb:c1:f7:66:0d:6b:a8:d6:65:0b:71:91:e9:b6:e3:cc:4d: ff:08:b2:60:4e:b6:4b:7f:cd:a3:c8:ef:48:9d:d3:93:30:30: 34:3d:be:3e:fb:c4:de:65:20:4d:1a:04:3e:6f:6c:15:30:a9: c7:23:25:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE992FZwwcRWvzQmK0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MTAxMzE5MjcyM1oXDTI3MDExMTIwMjcyM1owLzEtMCsGA1UEAxMk MTliZTQwNmQtZWQ4Yi00NjZjLWEwZjQtM2Q2Yjk3NWM0MzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkz29c2g0EZDIWTDrSBXNsO4jWCtCpacZ/kI G2gCHUZAcyJMA1zCUQFB/bzYSLdz/8IzQRu0Q9yIOXlFki51zFl73AgTLeB1RJth tRmFGrxjyu76SFMaqMfL5Vi+IGNY556gMMq0JVT2G+ceA7GvFPimRTo3kQPt8efd vkQGJFypsAgjFkUKSy98hEvfRNhWh54mOW/N+xVmQ9ryXo3yBQ8yh6OSkod3EdE+ O8H7SqaWoouC4LvseJSDtzK/ZbLif6gRYI8GtbQFy7tHqTHQe7PblnJUC6K5WLC8 tF10IMaaAvcoOn2gW5KC1ontmby3jD1KX2lRV7oOEVHMM2GxFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMPWzg8+MO8F+NZuPRXcU/CAUhbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvNGFmMDI1MzUtYmZkOC0z ZGU0LWJkOWEtNzExZmI4Y2NjNzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDDIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITnypEyfN8fjoFLuXJSe8UtFl/cw/X62NcaIK0bBcl4tcowV95ldeS7 MyGx1nABlRoYaeCVeQnDercAKJ3sPENodeEnnI/8px/Z6Mabz5H1w0UigK6ykS6e TDEMR8v6CJo6dcEP1/tt9HDfUv9GSwbY8Ve3O8e+DdKrmwpHV4mQkas0ijMGMpYE aYzEQHQeURvuRaG2RaU15ffcHA+HrPtYWdq1qP0378jEdcuHzBaVEz+18feBjfoc dQc+oRhNlutGdgDFGsD7wfdmDWuo1mULcZHptuPMTf8IsmBOtkt/zaPI70id05Mw MDQ9vj77xN5lIE0aBD5vbBUwqccjJTQ= -----END CERTIFICATE-----Generated at Sat Oct 31 20:40:20 2026 by rpki-client