$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f13fc02f-a824-3a53-a360-617f1ec4209c.roa File: f13fc02f-a824-3a53-a360-617f1ec4209c.roa (raw, json) Hash identifier: av7kTTQR+CDD9iyzNMjknJ4qhCcZHB6rW8fbNQhuwx4= Subject key identifier: 2E:34:6E:BE:EF:24:DB:B8:32:45:17:0C:CB:D6:59:F9:64:6A:35:38 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F9A687416916BBB4B5D5C7C00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f13fc02f-a824-3a53-a360-617f1ec4209c.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 202 IP address blocks: 192.46.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:74:16:91:6b:bb:4b:5d:5c:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=5f9c2f19-982e-456c-85fc-df572d2cede4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:42:50:2a:92:92:9b:7a:cd:c4:83:40:f5:75: 3d:a9:0b:14:0e:68:c5:ce:1e:a2:16:14:d8:89:ab: f5:fe:e9:82:9b:3b:6f:7d:48:bd:e9:1a:a2:3d:1d: 79:86:30:6f:55:c9:fa:3d:25:2d:3e:fc:18:89:0f: ed:b1:01:aa:f7:83:e0:d4:b2:fc:51:4b:c0:fa:e5: b7:d7:10:3d:74:f0:95:23:57:b2:2f:dc:ce:89:a2: a6:4e:bc:8f:ab:e3:78:ae:07:02:08:99:72:61:d4: a6:52:da:2f:6d:4d:e0:3c:5e:d5:40:84:93:a8:0e: a1:32:68:11:8d:42:45:b1:02:b7:62:67:b8:16:2e: fc:db:d7:62:0f:02:13:df:50:9e:d4:55:7f:80:e2: 22:ea:fd:c8:ee:0f:7f:9c:7c:3a:98:45:c2:a7:d7: 94:4d:b5:8c:03:4f:a9:89:f6:db:47:d0:c4:72:5d: 58:43:d0:de:c6:f1:17:17:b9:c5:bf:40:09:94:3a: 83:90:b3:35:56:34:9d:36:68:5f:ab:b7:23:1b:b9: 7d:f5:be:10:33:c9:bc:2a:9e:bd:0c:a1:25:da:b4: 55:92:fb:54:9e:39:a7:f8:bb:c1:c2:21:a8:eb:2f: ed:82:45:b5:c6:05:77:48:7d:fc:15:74:26:d0:59: 32:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:34:6E:BE:EF:24:DB:B8:32:45:17:0C:CB:D6:59:F9:64:6A:35:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f13fc02f-a824-3a53-a360-617f1ec4209c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 192.46.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:9f:38:b5:15:f6:91:c9:19:76:1f:7c:04:97:b1:5c:66:53: 8b:6a:e5:ce:9e:81:8a:dd:02:0a:77:8e:fd:bd:6b:81:6e:8c: f8:13:bd:1f:4e:54:a5:3f:cf:55:3c:8a:c4:fc:ff:7a:05:4f: 6c:9d:ae:f3:49:c3:bf:55:e9:cb:de:f4:b5:c5:ec:f9:b4:0a: c8:03:94:9b:b2:b7:28:1c:85:7a:8f:ce:1f:8a:50:a6:65:e3: 96:85:db:c6:ed:f4:93:5f:91:3e:ab:33:cc:0b:3f:c9:a4:c1: fb:f4:b8:17:c1:aa:b0:33:31:bd:88:7e:47:38:dc:99:39:ce: 38:7a:ef:60:db:0d:12:a7:31:bf:19:bb:fc:7a:6e:ac:ac:9c: 9c:38:df:d2:6b:ae:7a:b2:4c:e5:ab:14:aa:7e:69:3c:21:97: 80:78:26:f9:1e:6a:1a:8f:6b:d3:46:00:f8:42:cb:ac:71:a8: 76:68:bb:3d:90:ef:6d:e4:5a:e7:93:58:db:90:0f:ba:7f:92: f5:92:f8:41:42:6e:94:bd:9e:80:86:b4:10:bd:53:ce:57:d5: 92:4f:e6:2f:24:b5:90:cf:26:d0:71:bf:fe:d8:98:e8:a8:68: b8:d6:c1:32:36:49:59:0a:5e:ee:be:7e:1a:3b:20:cb:c7:7a: d2:ee:b9:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaHQWkWu7S11cfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk NWY5YzJmMTktOTgyZS00NTZjLTg1ZmMtZGY1NzJkMmNlZGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EJQKpKSm3rNxINA9XU9qQsUDmjFzh6iFhTY iav1/umCmztvfUi96RqiPR15hjBvVcn6PSUtPvwYiQ/tsQGq94Pg1LL8UUvA+uW3 1xA9dPCVI1eyL9zOiaKmTryPq+N4rgcCCJlyYdSmUtovbU3gPF7VQISTqA6hMmgR jUJFsQK3Yme4Fi7829diDwIT31Ce1FV/gOIi6v3I7g9/nHw6mEXCp9eUTbWMA0+p ifbbR9DEcl1YQ9DexvEXF7nFv0AJlDqDkLM1VjSdNmhfq7cjG7l99b4QM8m8Kp69 DKEl2rRVkvtUnjmn+LvBwiGo6y/tgkW1xgV3SH38FXQm0FkyZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC40br7vJNu4MkUXDMvWWflkajU4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZjEzZmMwMmYtYTgyNC0z YTUzLWEzNjAtNjE3ZjFlYzQyMDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwC7MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSfOLUV9pHJGXYffASXsVxmU4tq5c6egYrdAgp3jv29a4FujPgTvR9O VKU/z1U8isT8/3oFT2ydrvNJw79V6cve9LXF7Pm0CsgDlJuytygchXqPzh+KUKZl 45aF28bt9JNfkT6rM8wLP8mkwfv0uBfBqrAzMb2Ifkc43Jk5zjh672DbDRKnMb8Z u/x6bqysnJw439JrrnqyTOWrFKp+aTwhl4B4JvkeahqPa9NGAPhCy6xxqHZouz2Q 723kWueTWNuQD7p/kvWS+EFCbpS9noCGtBC9U85X1ZJP5i8ktZDPJtBxv/7YmOio aLjWwTI2SVkKXu6+fho7IMvHetLuub4= -----END CERTIFICATE-----Generated at Wed Oct 28 11:48:18 2026 by rpki-client