$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/78a241a0-4d95-4e18-8459-11fa601d557b/c022910c-bebf-39d3-b15d-da89a4fed612.roa File: c022910c-bebf-39d3-b15d-da89a4fed612.roa (raw, json) Hash identifier: CQSUsoSUoE4zyXEXqDyv6kewEmWcttUIXDPEVaTc5aY= Subject key identifier: 3C:15:0A:C4:94:82:ED:24:D3:E8:3C:0D:16:7A:55:C5:03:93:CE:F2 Certificate issuer: /CN=78a241a0-4d95-4e18-8459-11fa601d557b Certificate serial: 010D0C9F4328584F87BDBF92F4AEDAB7CC0FBF80 Authority key identifier: 53:7E:7E:16:9F:8D:F9:29:10:A6:13:AD:43:E0:C6:84:5B:72:94:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/78a241a0-4d95-4e18-8459-11fa601d557b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/78a241a0-4d95-4e18-8459-11fa601d557b/c022910c-bebf-39d3-b15d-da89a4fed612.roa Signing time: Sat 17 Oct 2026 08:31:54 +0000 ROA not before: Sat 17 Oct 2026 08:31:54 +0000 ROA not after: Fri 15 Jan 2027 09:31:54 +0000 asID: 58026 IP address blocks: 192.225.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/78a241a0-4d95-4e18-8459-11fa601d557b/78a241a0-4d95-4e18-8459-11fa601d557b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/78a241a0-4d95-4e18-8459-11fa601d557b/78a241a0-4d95-4e18-8459-11fa601d557b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/78a241a0-4d95-4e18-8459-11fa601d557b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:87:bd:bf:92:f4:ae:da:b7:cc:0f:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a241a0-4d95-4e18-8459-11fa601d557b Validity Not Before: Oct 17 08:31:54 2026 GMT Not After : Jan 15 09:31:54 2027 GMT Subject: CN=97ac636b-78cc-4f4e-b984-7f7d3b68a475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0b:4d:f4:ed:18:19:93:e5:e4:04:a1:53:cd: 22:f2:5c:9e:ed:5d:4c:0f:92:c2:59:04:c8:e7:b1: c7:63:53:9f:bb:4b:f7:45:af:69:89:45:7f:55:dd: 6a:1f:62:d8:86:e8:92:be:9b:3c:b6:51:63:27:6b: 11:86:4e:1b:d7:54:1b:26:e6:7a:df:51:13:c7:ef: 52:97:54:40:22:6a:cd:0d:f4:42:ed:d6:eb:39:3e: 86:bb:6b:03:19:0f:32:39:80:f9:8d:d9:c9:d4:de: 20:7f:01:48:a5:a0:52:4a:4e:d4:d8:65:34:33:47: af:62:76:1d:3d:e9:9a:22:dd:69:12:05:74:b1:1b: e0:02:13:b1:84:c7:26:af:21:aa:41:17:91:a0:8d: c0:bc:af:74:b4:61:75:13:0a:5b:38:53:5a:68:d4: 63:89:41:41:a1:cc:6c:15:90:33:e0:69:1c:a0:e7: 8d:72:f8:44:e0:b9:37:c5:dc:c1:65:00:c6:0e:ce: 2a:eb:94:f4:f0:84:14:d0:04:f1:0f:2c:7c:be:48: 18:f5:c5:6f:be:a0:9d:d7:20:b8:e4:97:54:f2:e2: 46:0a:9a:ac:b9:bf:94:b0:01:75:b5:78:8e:b6:3e: ae:63:39:e2:a1:a8:0a:ae:bb:dc:f8:48:f3:92:25: e3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:15:0A:C4:94:82:ED:24:D3:E8:3C:0D:16:7A:55:C5:03:93:CE:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/78a241a0-4d95-4e18-8459-11fa601d557b/c022910c-bebf-39d3-b15d-da89a4fed612.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/78a241a0-4d95-4e18-8459-11fa601d557b/78a241a0-4d95-4e18-8459-11fa601d557b.crl X509v3 Authority Key Identifier: keyid:53:7E:7E:16:9F:8D:F9:29:10:A6:13:AD:43:E0:C6:84:5B:72:94:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/78a241a0-4d95-4e18-8459-11fa601d557b.cer sbgp-ipAddrBlock: critical IPv4: 192.225.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:99:e4:ac:0c:c2:93:c7:ab:b7:e0:1e:66:89:46:50:f3:5e: a6:3b:3c:ef:8d:27:8c:c2:e1:7b:4b:e6:66:45:f2:18:5b:52: 4f:50:5f:e6:4d:f9:07:79:c9:77:87:7d:60:99:72:32:1a:bb: f8:fd:f2:9b:dc:c3:6a:52:cb:dc:f8:13:07:10:1a:16:9a:f7: 49:85:cf:3e:c2:ca:18:eb:48:d3:45:a5:03:96:6f:6b:71:5d: f3:ca:8a:64:cc:44:be:13:a7:a3:5c:d3:e5:65:33:91:5c:5a: 8f:57:e3:fa:d8:e8:24:d5:ef:0f:87:86:4f:ff:1f:0a:f1:71: bd:9a:eb:41:da:c3:f8:61:65:73:9b:02:eb:95:f7:ec:21:67: ae:35:76:8c:eb:cb:78:3d:e4:10:81:7d:bc:b5:92:c2:a5:77: 87:30:7c:ef:b4:ae:86:a0:df:7d:83:4c:05:7a:ec:64:00:f6: 14:8f:46:8b:e3:fb:e7:b5:fe:3e:1b:76:5e:9b:f8:89:67:7f: 65:62:6e:2e:10:4b:d1:3f:9c:9e:7d:89:08:30:a6:a8:61:b6: d0:be:bf:4b:44:d7:24:f1:bb:79:a7:62:6e:e2:6a:21:01:12: 73:af:c5:cf:0d:4e:b7:97:70:84:43:be:4d:90:7d:11:e8:95: 56:5d:b4:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+Hvb+S9K7at8wPv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhMjQxYTAtNGQ5NS00ZTE4LTg0NTktMTFmYTYwMWQ1 NTdiMB4XDTI2MTAxNzA4MzE1NFoXDTI3MDExNTA5MzE1NFowLzEtMCsGA1UEAxMk OTdhYzYzNmItNzhjYy00ZjRlLWI5ODQtN2Y3ZDNiNjhhNDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAtN9O0YGZPl5AShU80i8lye7V1MD5LCWQTI 57HHY1Ofu0v3Ra9piUV/Vd1qH2LYhuiSvps8tlFjJ2sRhk4b11QbJuZ631ETx+9S l1RAImrNDfRC7dbrOT6Gu2sDGQ8yOYD5jdnJ1N4gfwFIpaBSSk7U2GU0M0evYnYd PemaIt1pEgV0sRvgAhOxhMcmryGqQReRoI3AvK90tGF1EwpbOFNaaNRjiUFBocxs FZAz4GkcoOeNcvhE4Lk3xdzBZQDGDs4q65T08IQU0ATxDyx8vkgY9cVvvqCd1yC4 5JdU8uJGCpqsub+UsAF1tXiOtj6uYznioagKrrvc+EjzkiXjwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwVCsSUgu0k0+g8DRZ6VcUDk87yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS83OGEy NDFhMC00ZDk1LTRlMTgtODQ1OS0xMWZhNjAxZDU1N2IvYzAyMjkxMGMtYmViZi0z OWQzLWIxNWQtZGE4OWE0ZmVkNjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvNzhhMjQxYTAtNGQ5NS00ZTE4LTg0 NTktMTFmYTYwMWQ1NTdiLzc4YTI0MWEwLTRkOTUtNGUxOC04NDU5LTExZmE2MDFk NTU3Yi5jcmwwHwYDVR0jBBgwFoAUU35+Fp+N+SkQphOtQ+DGhFtylLIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS83OGEyNDFhMC00ZDk1LTRlMTgtODQ1OS0xMWZh NjAxZDU1N2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwOHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeZ5KwMwpPHq7fgHmaJRlDzXqY7PO+NJ4zC4XtL5mZF8hhbUk9QX+ZN +Qd5yXeHfWCZcjIau/j98pvcw2pSy9z4EwcQGhaa90mFzz7CyhjrSNNFpQOWb2tx XfPKimTMRL4Tp6Nc0+VlM5FcWo9X4/rY6CTV7w+Hhk//Hwrxcb2a60Haw/hhZXOb AuuV9+whZ641dozry3g95BCBfby1ksKld4cwfO+0roag332DTAV67GQA9hSPRovj ++e1/j4bdl6b+Ilnf2Vibi4QS9E/nJ59iQgwpqhhttC+v0tE1yTxu3mnYm7iaiEB EnOvxc8NTreXcIRDvk2QfRHolVZdtBE= -----END CERTIFICATE-----Generated at Sun Nov 1 17:33:35 2026 by rpki-client