$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/abc08a0d-fdbe-39bb-8eb0-75e76293422e.roa File: abc08a0d-fdbe-39bb-8eb0-75e76293422e.roa (raw, json) Hash identifier: 45dl/ybIqYhWFx7T6IGyU9/uNuC+QsnU+LDjCTV1I7s= Subject key identifier: D3:E4:B4:33:97:43:37:72:CD:12:B2:D0:EA:B2:2E:83:C7:55:28:C6 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F612D5A7A8980EBBFDED0E720 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/abc08a0d-fdbe-39bb-8eb0-75e76293422e.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 30036 IP address blocks: 192.119.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:5a:7a:89:80:eb:bf:de:d0:e7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=0462cdf4-d9d3-48b9-8021-7980b6707f2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c9:9d:fb:79:05:cb:e8:cc:ee:54:9f:84:d1: 14:08:52:46:74:ed:c4:48:a2:10:36:f8:9d:3f:9c: 1b:3c:e2:ce:71:1c:d3:82:b4:5c:25:88:9c:85:9d: 1f:cc:f5:e6:fd:45:56:11:ff:e1:b4:48:72:da:86: 05:3b:ea:90:c6:6e:b6:19:d1:7d:14:38:eb:18:86: 7a:0e:bf:95:49:47:01:b9:77:a9:e5:fa:a4:92:e0: ef:59:8c:15:e7:ed:4b:e8:c3:cd:d9:5c:dd:1b:71: 8e:1a:b8:9b:a0:0b:45:85:4f:5c:2f:5f:f1:fc:d2: a2:a4:61:21:a5:82:7b:f1:09:2c:ff:e3:ba:e0:b6: 47:dd:d0:c3:63:0e:e9:a9:05:c5:fa:5a:44:c5:8c: 25:a6:9c:dd:48:54:ef:b1:10:33:f2:16:65:84:24: 31:bc:da:8b:ab:a5:70:a4:2f:a3:f1:a7:93:41:03: 50:55:96:f1:a0:85:a9:db:4e:ea:66:5c:39:f5:ae: 3a:d5:5d:8b:ad:c0:fb:fe:be:40:1e:95:fc:55:ed: 31:a1:00:1f:4e:30:af:64:96:ed:46:28:84:00:2c: 0d:a3:7b:6d:af:d7:5e:35:20:7b:e5:a1:b8:87:36: 80:7f:5b:56:dd:eb:77:a0:24:83:f7:5d:c8:db:2e: 0d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E4:B4:33:97:43:37:72:CD:12:B2:D0:EA:B2:2E:83:C7:55:28:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/abc08a0d-fdbe-39bb-8eb0-75e76293422e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:ad:36:13:97:1c:3c:59:af:a8:7a:c0:aa:26:f1:38:ad:0b: 06:95:b1:4d:2c:22:a0:7f:6a:59:d0:37:30:cb:a5:d2:1d:fc: b2:c3:ae:46:f4:36:c8:e3:a3:7e:9c:38:6e:f0:e1:0c:f4:d4: 15:58:b0:8c:80:18:44:a5:d1:c5:72:4f:a5:61:b0:7e:b3:5e: 77:1c:77:af:87:cf:17:55:19:00:a7:bd:f7:5b:2f:1c:e9:6d: b8:f0:b0:22:d5:af:97:4b:50:05:3f:22:cb:a6:81:73:37:df: 20:19:27:39:c5:f1:08:de:ff:27:5a:31:40:11:05:c0:52:5b: 4b:fd:67:51:1a:62:5d:ae:93:ec:6b:f9:da:ea:65:8e:7a:61: 45:6b:89:d5:0d:f9:64:70:b6:5a:d5:75:db:23:4d:87:aa:17: 18:cb:10:4d:13:91:60:4c:9d:5d:e4:e5:a9:0a:1b:32:76:65: d3:b1:93:b3:40:1b:f1:aa:aa:4f:22:00:ea:dc:c1:f7:be:ca: d6:29:a0:73:33:16:a7:dc:f5:2e:7a:f4:33:fb:b3:24:25:e3: 59:f9:06:22:72:05:a7:eb:2a:3a:3e:74:ce:91:e3:5d:a6:8a: af:63:34:08:19:fd:d4:2b:49:ac:5c:47:6f:ee:2f:12:65:61: ab:42:2d:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hLVp6iYDrv97Q5yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk MDQ2MmNkZjQtZDlkMy00OGI5LTgwMjEtNzk4MGI2NzA3ZjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcmd+3kFy+jM7lSfhNEUCFJGdO3ESKIQNvid P5wbPOLOcRzTgrRcJYichZ0fzPXm/UVWEf/htEhy2oYFO+qQxm62GdF9FDjrGIZ6 Dr+VSUcBuXep5fqkkuDvWYwV5+1L6MPN2VzdG3GOGriboAtFhU9cL1/x/NKipGEh pYJ78Qks/+O64LZH3dDDYw7pqQXF+lpExYwlppzdSFTvsRAz8hZlhCQxvNqLq6Vw pC+j8aeTQQNQVZbxoIWp207qZlw59a461V2LrcD7/r5AHpX8Ve0xoQAfTjCvZJbt RiiEACwNo3ttr9deNSB75aG4hzaAf1tW3et3oCSD913I2y4NIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPktDOXQzdyzRKy0OqyLoPHVSjGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYWJjMDhhMGQtZmRiZS0z OWJiLThlYjAtNzVlNzYyOTM0MjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHf/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWtNhOXHDxZr6h6wKom8TitCwaVsU0sIqB/alnQNzDLpdId/LLDrkb0 Nsjjo36cOG7w4Qz01BVYsIyAGESl0cVyT6VhsH6zXnccd6+HzxdVGQCnvfdbLxzp bbjwsCLVr5dLUAU/IsumgXM33yAZJznF8Qje/ydaMUARBcBSW0v9Z1EaYl2uk+xr +drqZY56YUVridUN+WRwtlrVddsjTYeqFxjLEE0TkWBMnV3k5akKGzJ2ZdOxk7NA G/Gqqk8iAOrcwfe+ytYpoHMzFqfc9S569DP7syQl41n5BiJyBafrKjo+dM6R412m iq9jNAgZ/dQrSaxcR2/uLxJlYatCLfA= -----END CERTIFICATE-----Generated at Sun Oct 11 06:18:47 2026 by rpki-client