$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/a9af6a4f-c817-33df-8d56-22afaab5c0a3.roa File: a9af6a4f-c817-33df-8d56-22afaab5c0a3.roa (raw, json) Hash identifier: JHJ511IK6VcV5fYG5g15xZvGOOkX/x4o7fQlOUnNayY= Subject key identifier: 85:A3:B9:33:F7:D2:09:2F:C4:14:DF:E2:54:F5:E1:EC:5F:ED:66:9B Certificate issuer: /CN=f3281a82-6c17-4658-80f7-ee1327b4779a Certificate serial: 010D0C9F4328584F655D7CCD86F583D479B63F00 Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/a9af6a4f-c817-33df-8d56-22afaab5c0a3.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 22418 IP address blocks: 192.157.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:7c:cd:86:f5:83:d4:79:b6:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=8def4bce-18fe-4fe6-b2e9-c1808dab403b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6d:61:2e:d3:17:57:73:52:3a:c8:ad:b5:31: 2a:ef:5d:40:c6:98:e0:c7:8f:63:d6:e0:0d:99:41: c2:05:7c:2c:45:90:ab:cc:da:f9:37:6a:8e:62:f1: f7:f4:bb:fc:db:62:35:06:e3:ef:1b:90:de:fa:dd: 14:12:57:de:c7:e8:01:41:8f:dd:9d:ee:e0:3b:9c: 7f:ea:6e:07:fd:e7:15:35:ee:04:7d:1f:e4:15:b3: 2b:11:d4:0d:b4:d3:ec:e7:e8:51:c3:93:b4:85:9e: cd:87:af:bd:38:4e:52:35:ba:42:9d:a3:ef:bb:99: 78:60:42:b7:7e:5e:d1:e2:3d:fd:6b:13:18:28:07: 50:df:89:a6:11:03:3c:8b:c9:78:c4:c9:c3:bc:57: 97:18:1c:bd:f2:80:b2:9d:e1:95:a8:fa:a1:32:c0: e2:d0:3c:d2:38:ac:80:52:61:fb:ff:e5:48:71:4c: 75:da:83:cf:1e:c0:e9:bf:bd:2f:63:dc:3d:f5:76: 9d:d3:80:64:be:8a:ca:96:f7:b8:24:f6:a1:10:6d: c3:fe:9a:c1:f7:51:48:a7:7a:7d:29:c9:29:81:95: ce:d9:ed:a4:6a:69:c1:33:a9:46:f5:15:1d:56:1b: ee:5e:da:ec:c0:c0:d6:04:eb:3f:ec:5c:21:23:3f: 44:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A3:B9:33:F7:D2:09:2F:C4:14:DF:E2:54:F5:E1:EC:5F:ED:66:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/a9af6a4f-c817-33df-8d56-22afaab5c0a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl X509v3 Authority Key Identifier: keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer sbgp-ipAddrBlock: critical IPv4: 192.157.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:e6:83:61:21:af:07:2b:e9:71:09:11:75:67:56:06:80:98: 8c:c1:6a:93:86:ee:5e:4f:f5:e3:34:cd:74:55:f8:38:6a:e7: bf:84:b1:d7:f5:12:4c:82:fc:89:99:c7:18:2c:f4:07:2c:dc: 29:8a:3f:bb:84:27:aa:1b:57:7a:48:96:12:c0:a8:07:a4:7b: a9:91:90:db:0b:6e:7b:60:c3:0e:1f:08:48:71:b3:c6:e5:b7: d3:e6:77:3a:7d:2f:2d:ae:2a:d0:e8:ee:2f:18:7c:e4:f7:1e: e2:28:52:85:c1:9a:a0:f4:28:fd:5b:8a:80:89:9c:cc:f0:63: 57:e8:2c:46:fb:8c:11:6a:9e:f1:fe:e7:59:e9:d6:c3:f2:90: 25:31:3a:5d:01:0d:a1:dc:15:ad:f2:7d:cb:d1:7c:a7:ce:59: 11:1f:6e:1a:5d:9b:a7:7b:33:21:89:55:a8:2e:95:b3:73:ca: 65:85:f9:7d:db:31:24:b4:b6:84:c7:20:56:42:7c:33:1e:ab: e1:f6:d1:9f:a3:c5:5c:fd:3b:9f:3b:89:5b:f1:40:2d:8f:7b: 39:f2:13:ed:c5:df:02:53:fe:8b:39:3d:f3:01:65:77:66:87: ce:4d:d6:4a:26:9b:4b:3b:ee:81:3c:68:4c:11:cb:53:92:34: 68:39:73:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXXzNhvWD1Hm2PwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjMyODFhODItNmMxNy00NjU4LTgwZjctZWUxMzI3YjQ3 NzlhMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk OGRlZjRiY2UtMThmZS00ZmU2LWIyZTktYzE4MDhkYWI0MDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG1hLtMXV3NSOsittTEq711Axpjgx49j1uAN mUHCBXwsRZCrzNr5N2qOYvH39Lv822I1BuPvG5De+t0UElfex+gBQY/dne7gO5x/ 6m4H/ecVNe4EfR/kFbMrEdQNtNPs5+hRw5O0hZ7Nh6+9OE5SNbpCnaPvu5l4YEK3 fl7R4j39axMYKAdQ34mmEQM8i8l4xMnDvFeXGBy98oCyneGVqPqhMsDi0DzSOKyA UmH7/+VIcUx12oPPHsDpv70vY9w99Xad04BkvorKlve4JPahEG3D/prB91FIp3p9 KckpgZXO2e2kamnBM6lG9RUdVhvuXtrswMDWBOs/7FwhIz9EuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWjuTP30gkvxBTf4lT14exf7WabMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4 MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEzMjdiNDc3OWEvYTlhZjZhNGYtYzgxNy0z M2RmLThkNTYtMjJhZmFhYjVjMGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjMyODFhODItNmMxNy00NjU4LTgw ZjctZWUxMzI3YjQ3NzlhL2YzMjgxYTgyLTZjMTctNDY1OC04MGY3LWVlMTMyN2I0 Nzc5YS5jcmwwHwYDVR0jBBgwFoAUnADJBPwikRxD9McDuOMXvvVr1YgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEz MjdiNDc3OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ1UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvmg2Ehrwcr6XEJEXVnVgaAmIzBapOG7l5P9eM0zXRV+Dhq57+Esdf1 EkyC/ImZxxgs9Acs3CmKP7uEJ6obV3pIlhLAqAeke6mRkNsLbntgww4fCEhxs8bl t9Pmdzp9Ly2uKtDo7i8YfOT3HuIoUoXBmqD0KP1bioCJnMzwY1foLEb7jBFqnvH+ 51np1sPykCUxOl0BDaHcFa3yfcvRfKfOWREfbhpdm6d7MyGJVagulbNzymWF+X3b MSS0toTHIFZCfDMeq+H20Z+jxVz9O587iVvxQC2PeznyE+3F3wJT/os5PfMBZXdm h85N1komm0s77oE8aEwRy1OSNGg5c+I= -----END CERTIFICATE-----Generated at Fri Oct 30 20:03:49 2026 by rpki-client