$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/04da0af8-7c12-3869-a040-797710feccc2.roa File: 04da0af8-7c12-3869-a040-797710feccc2.roa (raw, json) Hash identifier: ioJ06nIz6DGTjJ1LcW6Z2hwaUe8fHA6aTbHnLGWpUgs= Subject key identifier: 3A:81:9C:4B:10:0D:3F:F7:6B:39:AF:96:C8:65:67:25:EC:AC:52:A1 Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F4328584F6F22E1806000F2FB1038E800 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/04da0af8-7c12-3869-a040-797710feccc2.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 1206 IP address blocks: 192.101.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:e1:80:60:00:f2:fb:10:38:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=90e95f67-8009-4455-b07b-dc53de81330b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c8:73:d6:74:d7:19:e1:7d:8c:b9:8c:49:65: 13:33:97:a4:d9:8c:c9:15:be:e1:ac:9c:7d:bb:65: 61:a0:c7:6c:76:79:22:ec:20:2e:6a:37:b7:d0:f6: ee:b5:4d:dc:4b:5f:35:fd:9b:cf:e4:97:cb:c4:b7: a0:b8:a5:49:1e:39:a7:c3:42:21:81:66:25:1a:fa: 54:d4:c9:72:69:8c:97:1a:dd:58:84:e1:16:a8:ef: 26:2b:6d:d8:50:7f:97:17:f2:9d:5e:c1:18:09:2f: b9:00:f1:b1:d4:cb:e1:5c:4d:d2:41:34:6d:46:2e: 65:c2:a5:b1:6e:28:60:71:7d:dc:90:aa:e8:ee:01: 65:aa:ad:00:40:b6:e1:2c:e3:d0:c4:ee:c2:f2:8a: c5:ff:9e:e6:59:52:76:e7:46:81:ea:35:dc:e9:db: 4a:dd:59:ca:35:c2:49:be:ee:86:22:7f:91:f7:cb: 6b:5e:3f:e4:aa:b0:dd:de:c1:b5:97:b9:f1:bd:6e: e7:56:68:c3:43:e1:4c:9d:5e:4e:1c:b6:a4:21:f2: 1b:2f:6b:b6:72:1f:cf:53:27:49:74:e1:eb:0b:f4: 0d:9c:f8:e5:44:c8:ab:2c:f5:2f:b6:cd:de:78:51: b0:aa:a3:36:5f:73:15:76:58:3b:4a:74:03:c4:4c: b5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:81:9C:4B:10:0D:3F:F7:6B:39:AF:96:C8:65:67:25:EC:AC:52:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/04da0af8-7c12-3869-a040-797710feccc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 192.101.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:8e:c9:70:ce:32:83:98:02:47:88:09:87:86:1b:0b:3f:d6: aa:68:b9:f7:8e:9a:13:55:cf:cb:f1:10:ab:de:a2:fb:8c:f6: b8:df:34:7c:7d:21:e2:7a:39:e9:67:9e:7d:95:aa:0e:af:71: a0:24:a1:57:9e:6a:94:a8:fa:96:64:7c:1c:c2:41:68:5b:0e: 25:4f:e7:0b:8d:df:87:23:84:8b:55:c0:24:ff:39:f4:54:93: fe:a0:6f:91:4f:17:ac:f2:e3:96:3f:14:2d:d5:7b:d3:fb:2c: 8a:0d:3a:c3:5d:fa:18:b3:6f:01:14:36:61:fd:ec:50:72:37: 63:d0:0e:92:e8:fe:50:a6:f0:82:7f:fd:78:ec:8e:18:47:62: 7a:03:34:13:bb:55:55:e6:9d:31:ce:2d:77:22:0a:e9:ee:8f: 2a:c5:ce:90:e1:bc:6a:95:43:9d:86:07:53:69:ac:62:7f:cc: ff:3a:8f:51:35:f7:b4:0c:df:3b:ba:22:dc:46:f2:31:ef:cf: e0:c0:da:01:cc:99:07:63:94:9c:e3:59:d3:c0:7f:6a:05:51: 39:26:de:40:0e:a8:15:45:13:50:f9:3c:1d:c0:21:8a:cf:f3: 87:d3:7f:f7:f4:24:4f:89:ef:e6:56:34:47:13:54:4f:65:02: 5b:52:c3:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIuGAYADy+xA46AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk OTBlOTVmNjctODAwOS00NDU1LWIwN2ItZGM1M2RlODEzMzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAychz1nTXGeF9jLmMSWUTM5ek2YzJFb7hrJx9 u2VhoMdsdnki7CAuaje30PbutU3cS181/ZvP5JfLxLeguKVJHjmnw0IhgWYlGvpU 1MlyaYyXGt1YhOEWqO8mK23YUH+XF/KdXsEYCS+5APGx1MvhXE3SQTRtRi5lwqWx bihgcX3ckKro7gFlqq0AQLbhLOPQxO7C8orF/57mWVJ250aB6jXc6dtK3VnKNcJJ vu6GIn+R98trXj/kqrDd3sG1l7nxvW7nVmjDQ+FMnV5OHLakIfIbL2u2ch/PUydJ dOHrC/QNnPjlRMirLPUvts3eeFGwqqM2X3MVdlg7SnQDxEy1FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqBnEsQDT/3azmvlshlZyXsrFKhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvMDRkYTBhZjgtN2MxMi0z ODY5LWEwNDAtNzk3NzEwZmVjY2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGWLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCOyXDOMoOYAkeICYeGGws/1qpoufeOmhNVz8vxEKveovuM9rjfNHx9 IeJ6Oelnnn2Vqg6vcaAkoVeeapSo+pZkfBzCQWhbDiVP5wuN34cjhItVwCT/OfRU k/6gb5FPF6zy45Y/FC3Ve9P7LIoNOsNd+hizbwEUNmH97FByN2PQDpLo/lCm8IJ/ /XjsjhhHYnoDNBO7VVXmnTHOLXciCunujyrFzpDhvGqVQ52GB1NprGJ/zP86j1E1 97QM3zu6ItxG8jHvz+DA2gHMmQdjlJzjWdPAf2oFUTkm3kAOqBVFE1D5PB3AIYrP 84fTf/f0JE+J7+ZWNEcTVE9lAltSw9k= -----END CERTIFICATE-----Generated at Wed Nov 4 12:21:31 2026 by rpki-client