$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/0999b1e3-4785-38ae-a00d-63b70427c4f0.roa File: 0999b1e3-4785-38ae-a00d-63b70427c4f0.roa (raw, json) Hash identifier: rhzxBfZfG4xEmGfvvqi2khR8B+/jlxnaYUa6vUocFQs= Subject key identifier: 52:49:DB:BA:4D:E0:AA:58:F9:F1:53:99:38:4D:38:6B:C3:5E:E0:B3 Certificate issuer: /CN=822ab581-a0b4-4f01-9ab1-8dac6d881508 Certificate serial: 010D0C9F4328584F4975ABFB4A1F7C09591C0180 Authority key identifier: 41:AB:0B:AD:05:EC:30:E9:3C:36:D9:74:0F:59:A2:B6:07:1D:5A:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/0999b1e3-4785-38ae-a00d-63b70427c4f0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 192.190.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/822ab581-a0b4-4f01-9ab1-8dac6d881508.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/822ab581-a0b4-4f01-9ab1-8dac6d881508.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:ab:fb:4a:1f:7c:09:59:1c:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=822ab581-a0b4-4f01-9ab1-8dac6d881508 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=186f2bfc-758e-4e56-aefd-bdd1d9b472b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3b:53:84:73:1d:32:cc:69:5e:3a:e0:be:8f: ca:b0:c3:56:f2:e5:9d:6e:fd:c1:3c:a1:1e:ae:03: e6:04:fb:da:ba:96:af:95:ba:78:4d:00:29:43:81: bf:85:6a:2f:15:6b:08:a5:7d:92:e6:d4:ef:56:ff: f4:75:3d:d0:69:e7:be:a5:31:2e:d1:6f:10:94:e4: a4:dc:2f:05:95:e3:26:3d:96:e4:ff:f5:c3:39:02: 74:90:e4:f0:c6:42:dc:62:6f:6e:ea:f7:37:96:4a: 4f:4d:a7:9c:ec:d4:2b:11:3b:c9:b1:48:2f:23:d8: db:08:01:90:2a:c7:55:22:3b:cd:fa:37:88:4c:2c: 45:ba:19:87:fa:9f:15:18:dd:bd:5d:6e:5c:1f:a3: 22:fd:a9:45:a7:70:d3:be:67:68:04:21:5e:d2:f2: e2:bd:0e:5a:ab:f0:98:85:96:bf:0c:64:61:13:16: 53:9c:49:f1:17:67:96:fc:12:26:7d:96:85:07:9c: 5e:ed:c1:aa:1c:f8:60:0b:01:88:c4:45:00:04:dc: c8:6d:f2:dd:8f:1a:db:98:04:95:82:99:f7:dd:78: 9b:ef:d3:18:db:b9:26:7d:83:91:cf:40:5c:79:88: 7f:57:6c:64:4e:b5:f2:41:d0:a4:d8:24:d3:28:bb: 67:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:49:DB:BA:4D:E0:AA:58:F9:F1:53:99:38:4D:38:6B:C3:5E:E0:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/0999b1e3-4785-38ae-a00d-63b70427c4f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/822ab581-a0b4-4f01-9ab1-8dac6d881508.crl X509v3 Authority Key Identifier: keyid:41:AB:0B:AD:05:EC:30:E9:3C:36:D9:74:0F:59:A2:B6:07:1D:5A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508.cer sbgp-ipAddrBlock: critical IPv4: 192.190.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:81:ce:0e:dc:a3:54:ef:a6:46:6a:96:dc:b7:21:be:17:d8: e5:80:68:de:83:85:58:b0:d7:35:cd:02:66:bb:80:19:c6:41: ca:b9:08:21:4e:ad:a5:a9:11:01:eb:01:55:aa:a6:84:a5:65: 7a:ad:51:f5:c8:d5:b3:a8:b4:b9:ca:09:5d:63:2c:03:b9:48: 88:8f:92:33:37:91:c7:fd:a3:7b:ad:24:c6:b4:80:7a:da:c5: 20:6b:1e:d5:83:1f:43:34:de:f7:03:57:cd:18:cd:54:f1:07: 22:84:7d:a6:a7:c4:5e:17:11:41:98:48:5e:a5:3e:de:92:c2: 0c:27:25:59:05:50:ad:e1:0f:86:4e:97:f3:0e:b1:24:b1:6d: dd:a9:4d:1f:d8:a3:f1:fb:4f:28:dc:28:a3:a6:51:ca:9a:f3: 37:b4:9c:34:b8:e3:92:31:e8:e2:f6:07:75:3a:8e:43:60:5c: 85:a5:47:5e:88:ab:05:08:67:40:9d:80:cb:52:8a:44:e2:68: 52:cb:f4:7e:c1:d0:70:74:1f:30:5d:52:fd:f4:50:07:93:7d: da:a9:b3:c1:92:a0:64:48:4d:05:7f:49:c1:8a:3c:a7:8c:9e: 77:c3:de:61:5d:d0:63:44:bd:b0:ae:1e:26:33:7d:66:b5:31: 09:ba:87:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdav7Sh98CVkcAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIyYWI1ODEtYTBiNC00ZjAxLTlhYjEtOGRhYzZkODgx NTA4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTg2ZjJiZmMtNzU4ZS00ZTU2LWFlZmQtYmRkMWQ5YjQ3MmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTtThHMdMsxpXjrgvo/KsMNW8uWdbv3BPKEe rgPmBPvaupavlbp4TQApQ4G/hWovFWsIpX2S5tTvVv/0dT3Qaee+pTEu0W8QlOSk 3C8FleMmPZbk//XDOQJ0kOTwxkLcYm9u6vc3lkpPTaec7NQrETvJsUgvI9jbCAGQ KsdVIjvN+jeITCxFuhmH+p8VGN29XW5cH6Mi/alFp3DTvmdoBCFe0vLivQ5aq/CY hZa/DGRhExZTnEnxF2eW/BImfZaFB5xe7cGqHPhgCwGIxEUABNzIbfLdjxrbmASV gpn33Xib79MY27kmfYORz0BceYh/V2xkTrXyQdCk2CTTKLtnCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJJ27pN4KpY+fFTmThNOGvDXuCzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84MjJh YjU4MS1hMGI0LTRmMDEtOWFiMS04ZGFjNmQ4ODE1MDgvMDk5OWIxZTMtNDc4NS0z OGFlLWEwMGQtNjNiNzA0MjdjNGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODIyYWI1ODEtYTBiNC00ZjAxLTlh YjEtOGRhYzZkODgxNTA4LzgyMmFiNTgxLWEwYjQtNGYwMS05YWIxLThkYWM2ZDg4 MTUwOC5jcmwwHwYDVR0jBBgwFoAUQasLrQXsMOk8Ntl0D1mitgcdWtEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84MjJhYjU4MS1hMGI0LTRmMDEtOWFiMS04ZGFj NmQ4ODE1MDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL7tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiBzg7co1TvpkZqlty3Ib4X2OWAaN6DhViw1zXNAma7gBnGQcq5CCFO raWpEQHrAVWqpoSlZXqtUfXI1bOotLnKCV1jLAO5SIiPkjM3kcf9o3utJMa0gHra xSBrHtWDH0M03vcDV80YzVTxByKEfaanxF4XEUGYSF6lPt6SwgwnJVkFUK3hD4ZO l/MOsSSxbd2pTR/Yo/H7TyjcKKOmUcqa8ze0nDS445Ix6OL2B3U6jkNgXIWlR16I qwUIZ0CdgMtSikTiaFLL9H7B0HB0HzBdUv30UAeTfdqps8GSoGRITQV/ScGKPKeM nnfD3mFd0GNEvbCuHiYzfWa1MQm6h50= -----END CERTIFICATE-----Generated at Fri Oct 9 21:57:40 2026 by rpki-client