$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e6435659-5d7f-3300-bb29-809a4762f437.roa File: e6435659-5d7f-3300-bb29-809a4762f437.roa (raw, json) Hash identifier: FcVRGTMHFWitw5WQ3L5or8cXLVgAJS2bdSNDxE9iSFY= Subject key identifier: 12:BF:D1:53:BE:00:70:CD:4C:97:2A:EB:41:94:85:3C:46:38:FA:55 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584EE38CB2ED4BF89C3BB7AAA900 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e6435659-5d7f-3300-bb29-809a4762f437.roa Signing time: Wed 19 Aug 2026 13:00:11 +0000 ROA not before: Wed 19 Aug 2026 13:00:11 +0000 ROA not after: Tue 17 Nov 2026 14:00:11 +0000 asID: 2129 IP address blocks: 192.53.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:8c:b2:ed:4b:f8:9c:3b:b7:aa:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 19 13:00:11 2026 GMT Not After : Nov 17 14:00:11 2026 GMT Subject: CN=fa2e3c59-62a3-4eef-a1fa-9b5dbdb82096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:78:c7:02:1d:38:54:f2:32:d0:a6:28:28:eb: 67:01:72:50:e8:d6:28:2c:95:b3:e0:38:66:a3:5f: 93:7a:19:92:19:45:e8:a4:f3:41:9a:05:c0:0e:0b: ed:9d:de:1f:c6:72:e4:19:ee:dd:a5:d6:17:a9:d6: e3:09:8f:5b:ea:f0:ce:a5:cf:ce:20:ba:68:4c:c5: 00:11:6d:43:4c:f3:42:af:9a:e9:4d:e1:b6:1b:e8: 83:95:59:74:f3:98:e3:0b:5b:e4:be:d1:2d:6f:6b: 79:85:6b:df:1c:8f:dd:21:10:e7:de:18:a9:aa:ba: 5c:57:31:39:c4:66:d7:77:08:90:b5:51:a6:bc:19: 87:d6:6e:08:6e:9a:6b:92:2b:86:1f:9a:94:93:a3: 1f:c2:e4:52:83:5f:aa:f3:8e:c6:24:d2:77:f6:bc: 9f:a9:d3:17:06:5f:51:ed:68:13:73:aa:ef:80:f6: 32:8b:70:d6:4d:c0:d8:2f:76:7a:4e:f3:3c:da:09: 82:11:46:f9:d3:87:10:99:68:1d:bd:02:15:f5:c7: 1f:9f:1e:a9:ad:7d:03:c2:74:df:42:7b:8c:ee:81: e4:ae:85:b5:e1:ea:34:9a:22:28:f8:88:13:5a:fb: 22:9b:b6:30:34:47:71:cd:3d:b5:64:10:da:c1:34: 36:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:BF:D1:53:BE:00:70:CD:4C:97:2A:EB:41:94:85:3C:46:38:FA:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e6435659-5d7f-3300-bb29-809a4762f437.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 192.53.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:97:93:8d:71:db:92:a6:51:58:e4:d8:43:03:1f:b1:af:97: 8b:da:a0:1d:86:58:5b:4e:95:0a:31:17:bd:e3:70:71:99:3d: 34:1a:9c:9d:66:d7:6d:05:aa:cf:90:a0:f8:fb:e1:aa:2b:ee: 73:71:9d:d6:cd:07:57:0d:03:7d:df:2a:4f:53:68:53:91:1a: 87:f2:54:79:a2:e1:20:d0:1e:3b:55:11:40:1e:d4:c9:68:81: 5f:57:50:e0:27:e9:35:7e:a0:4e:f1:5e:67:d0:13:8e:eb:2f: bd:7a:83:bb:0b:8c:a0:0e:7e:d2:a2:0e:9e:78:3b:cf:9b:33: 64:c3:78:1c:31:83:39:b9:5d:14:52:69:ab:1e:ff:1b:bb:53: 13:14:70:a9:ad:50:e4:6c:5d:d8:cf:2a:d8:aa:2a:c0:61:4c: 87:a1:89:9e:92:6a:82:3e:b1:77:b5:9d:37:f2:cb:9a:a6:d7: b3:94:e3:1d:2a:30:de:fa:29:d8:c5:e5:23:5e:7c:a7:87:c0: 07:ba:11:90:c9:79:64:71:eb:2f:3a:7a:23:a8:d5:b7:c7:9d: 37:6e:fd:34:b5:b4:80:fc:37:7c:dc:53:10:f5:38:0b:a3:0b: e4:c5:5f:ea:7f:25:46:d9:7f:70:ec:71:97:16:7c:c7:7c:15: 31:20:e1:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjLLtS/icO7eqqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk ZmEyZTNjNTktNjJhMy00ZWVmLWExZmEtOWI1ZGJkYjgyMDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3jHAh04VPIy0KYoKOtnAXJQ6NYoLJWz4Dhm o1+TehmSGUXopPNBmgXADgvtnd4fxnLkGe7dpdYXqdbjCY9b6vDOpc/OILpoTMUA EW1DTPNCr5rpTeG2G+iDlVl085jjC1vkvtEtb2t5hWvfHI/dIRDn3hipqrpcVzE5 xGbXdwiQtVGmvBmH1m4IbpprkiuGH5qUk6MfwuRSg1+q847GJNJ39ryfqdMXBl9R 7WgTc6rvgPYyi3DWTcDYL3Z6TvM82gmCEUb504cQmWgdvQIV9ccfnx6prX0DwnTf QnuM7oHkroW14eo0miIo+IgTWvsim7YwNEdxzT21ZBDawTQ21QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBK/0VO+AHDNTJcq60GUhTxGOPpVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZTY0MzU2NTktNWQ3Zi0z MzAwLWJiMjktODA5YTQ3NjJmNDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwDUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKXk41x25KmUVjk2EMDH7Gvl4vaoB2GWFtOlQoxF73jcHGZPTQanJ1m 120Fqs+QoPj74aor7nNxndbNB1cNA33fKk9TaFORGofyVHmi4SDQHjtVEUAe1Mlo gV9XUOAn6TV+oE7xXmfQE47rL716g7sLjKAOftKiDp54O8+bM2TDeBwxgzm5XRRS aase/xu7UxMUcKmtUORsXdjPKtiqKsBhTIehiZ6SaoI+sXe1nTfyy5qm17OU4x0q MN76KdjF5SNefKeHwAe6EZDJeWRx6y86eiOo1bfHnTdu/TS1tID8N3zcUxD1OAuj C+TFX+p/JUbZf3DscZcWfMd8FTEg4Tg= -----END CERTIFICATE-----Generated at Sun Oct 11 07:57:13 2026 by rpki-client