$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7f65d0f7-be43-4783-8e32-1d77693ab915/0a73ebe0-9e79-39c7-91e7-e309c4cc20dd.roa File: 0a73ebe0-9e79-39c7-91e7-e309c4cc20dd.roa (raw, json) Hash identifier: /0/TMomrnAMNdMWT9x2zLKtCcog+z3eVEeE4TBzoku0= Subject key identifier: 6C:D6:80:4F:07:00:E8:3B:B5:5B:E0:FE:A8:9B:9C:EA:78:D9:89:CE Certificate issuer: /CN=7f65d0f7-be43-4783-8e32-1d77693ab915 Certificate serial: 010D0C9F4328584F915E9E74B6A186DF966AC900 Authority key identifier: 74:AB:C0:A6:5D:F1:32:F0:E7:71:5E:72:8A:9A:31:45:1E:43:1B:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7f65d0f7-be43-4783-8e32-1d77693ab915.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7f65d0f7-be43-4783-8e32-1d77693ab915/0a73ebe0-9e79-39c7-91e7-e309c4cc20dd.roa Signing time: Tue 20 Oct 2026 19:18:18 +0000 ROA not before: Tue 20 Oct 2026 19:18:18 +0000 ROA not after: Mon 18 Jan 2027 20:18:18 +0000 asID: 35901 IP address blocks: 192.119.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7f65d0f7-be43-4783-8e32-1d77693ab915/7f65d0f7-be43-4783-8e32-1d77693ab915.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7f65d0f7-be43-4783-8e32-1d77693ab915/7f65d0f7-be43-4783-8e32-1d77693ab915.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7f65d0f7-be43-4783-8e32-1d77693ab915.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:91:5e:9e:74:b6:a1:86:df:96:6a:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f65d0f7-be43-4783-8e32-1d77693ab915 Validity Not Before: Oct 20 19:18:18 2026 GMT Not After : Jan 18 20:18:18 2027 GMT Subject: CN=a4832b4f-d79d-470b-96c9-d34258a4f0f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ba:55:04:1a:3b:7d:19:62:1e:80:17:29:ff: 0a:e3:9a:40:be:95:48:c9:0b:f5:ab:05:2b:e4:7d: 40:6d:8c:3c:f5:5e:fa:e9:84:24:52:86:13:da:3f: b9:cd:c2:fc:f8:e1:19:2e:4a:43:42:3b:19:ca:bc: a0:25:8b:d1:92:82:ed:80:d0:b1:97:f1:5c:93:75: 0c:bb:b6:66:45:31:60:a2:36:ad:42:d9:e7:f4:79: 15:be:74:db:fe:dc:53:88:88:51:66:09:e8:d5:8e: bf:91:ec:ae:10:f6:c5:07:94:51:6c:f2:5e:2e:f0: 8e:05:25:22:5a:35:b4:5a:d2:0e:98:a9:c0:8e:ee: 87:b0:2c:25:35:cd:83:a2:fd:65:27:15:c7:a1:93: ff:30:ef:b3:d7:ba:95:56:3c:40:25:a9:05:49:b2: 21:fd:56:43:53:56:76:30:30:1e:b6:b8:b0:3c:64: dd:96:fe:af:df:73:92:be:f3:cb:e0:20:23:61:49: 2d:bc:9b:6e:f8:e9:4c:13:ca:ce:d9:64:07:d7:03: 7f:84:54:ad:06:a0:6f:f0:6c:47:93:db:ec:96:24: 0d:b7:b7:04:af:13:f1:5d:15:6b:ee:aa:ad:7e:53: fc:c5:75:31:27:e4:7f:64:61:0c:6e:90:ec:1b:ed: 99:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D6:80:4F:07:00:E8:3B:B5:5B:E0:FE:A8:9B:9C:EA:78:D9:89:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7f65d0f7-be43-4783-8e32-1d77693ab915/0a73ebe0-9e79-39c7-91e7-e309c4cc20dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7f65d0f7-be43-4783-8e32-1d77693ab915/7f65d0f7-be43-4783-8e32-1d77693ab915.crl X509v3 Authority Key Identifier: keyid:74:AB:C0:A6:5D:F1:32:F0:E7:71:5E:72:8A:9A:31:45:1E:43:1B:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7f65d0f7-be43-4783-8e32-1d77693ab915.cer sbgp-ipAddrBlock: critical IPv4: 192.119.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:66:d8:27:e8:21:34:47:48:87:cf:1c:e2:2c:59:7b:00:8e: c5:8b:4a:cf:6c:77:e8:d3:be:b4:ef:c7:1a:80:5b:79:af:b9: eb:7a:7e:ca:8a:73:0d:47:ec:84:eb:cc:74:40:1b:1c:9e:f4: db:f7:15:59:3b:c2:ed:2a:de:f1:9d:5c:77:4a:5c:e1:67:fb: 32:4a:c5:04:9e:6e:42:de:de:43:db:7f:c1:f2:e6:72:04:62: 48:30:e1:ed:2a:2f:6a:9f:64:b1:46:24:a2:2b:01:e0:bb:ac: 3e:48:5d:00:7a:32:3c:b3:92:b5:2a:ad:26:98:16:99:42:77: 98:a0:43:7b:8f:2f:7a:17:60:6c:9b:9d:ef:d9:6f:6a:ef:64: 90:35:09:d6:e9:7d:07:9f:86:26:77:8c:ad:b8:ee:54:ba:74: 5b:48:64:a1:b6:5d:80:3f:13:85:0c:7b:98:cf:88:33:c3:29: dd:cf:f8:52:ba:61:81:a1:91:b9:2a:ee:ab:c9:77:96:49:c1: e5:57:61:7f:40:22:13:3a:78:50:f9:1e:53:4d:20:2c:02:90: 32:21:5e:c7:ba:38:d8:35:cd:d3:27:38:25:b1:52:87:fb:81: d7:cd:05:8b:40:49:f3:ae:46:f1:b3:33:90:da:3f:18:5f:d6: 1b:b1:14:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+RXp50tqGG35ZqyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y2NWQwZjctYmU0My00NzgzLThlMzItMWQ3NzY5M2Fi OTE1MB4XDTI2MTAyMDE5MTgxOFoXDTI3MDExODIwMTgxOFowLzEtMCsGA1UEAxMk YTQ4MzJiNGYtZDc5ZC00NzBiLTk2YzktZDM0MjU4YTRmMGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrpVBBo7fRliHoAXKf8K45pAvpVIyQv1qwUr 5H1AbYw89V766YQkUoYT2j+5zcL8+OEZLkpDQjsZyrygJYvRkoLtgNCxl/Fck3UM u7ZmRTFgojatQtnn9HkVvnTb/txTiIhRZgno1Y6/keyuEPbFB5RRbPJeLvCOBSUi WjW0WtIOmKnAju6HsCwlNc2Dov1lJxXHoZP/MO+z17qVVjxAJakFSbIh/VZDU1Z2 MDAetriwPGTdlv6v33OSvvPL4CAjYUktvJtu+OlME8rO2WQH1wN/hFStBqBv8GxH k9vsliQNt7cErxPxXRVr7qqtflP8xXUxJ+R/ZGEMbpDsG+2ZQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzWgE8HAOg7tVvg/qibnOp42YnOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS83ZjY1 ZDBmNy1iZTQzLTQ3ODMtOGUzMi0xZDc3NjkzYWI5MTUvMGE3M2ViZTAtOWU3OS0z OWM3LTkxZTctZTMwOWM0Y2MyMGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvN2Y2NWQwZjctYmU0My00NzgzLThl MzItMWQ3NzY5M2FiOTE1LzdmNjVkMGY3LWJlNDMtNDc4My04ZTMyLTFkNzc2OTNh YjkxNS5jcmwwHwYDVR0jBBgwFoAUdKvApl3xMvDncV5yipoxRR5DG9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS83ZjY1ZDBmNy1iZTQzLTQ3ODMtOGUzMi0xZDc3 NjkzYWI5MTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpm2CfoITRHSIfPHOIsWXsAjsWLSs9sd+jTvrTvxxqAW3mvuet6fsqK cw1H7ITrzHRAGxye9Nv3FVk7wu0q3vGdXHdKXOFn+zJKxQSebkLe3kPbf8Hy5nIE Ykgw4e0qL2qfZLFGJKIrAeC7rD5IXQB6MjyzkrUqrSaYFplCd5igQ3uPL3oXYGyb ne/Zb2rvZJA1CdbpfQefhiZ3jK247lS6dFtIZKG2XYA/E4UMe5jPiDPDKd3P+FK6 YYGhkbkq7qvJd5ZJweVXYX9AIhM6eFD5HlNNICwCkDIhXse6ONg1zdMnOCWxUof7 gdfNBYtASfOuRvGzM5DaPxhf1huxFJE= -----END CERTIFICATE-----Generated at Sun Nov 1 19:34:21 2026 by rpki-client