$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/95c38de3-af72-4334-87b9-ab2e5c049c89/3a3c26b0-7645-3189-8ff9-8f9a43d8d65a.roa File: 3a3c26b0-7645-3189-8ff9-8f9a43d8d65a.roa (raw, json) Hash identifier: 6+4KNYI8rkbcnO53eX8bFO8F7f6zu8K7zPWlH0oF9kw= Subject key identifier: F5:FA:94:42:0A:72:AE:39:75:D5:AC:4D:65:BA:30:6A:DA:8F:26:5C Certificate issuer: /CN=95c38de3-af72-4334-87b9-ab2e5c049c89 Certificate serial: 010D0C9F4328584F6FF598B164771365E462C8C0 Authority key identifier: 25:43:75:05:3B:D7:63:07:70:4B:68:46:AF:7D:43:98:5F:B9:F2:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/95c38de3-af72-4334-87b9-ab2e5c049c89.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/95c38de3-af72-4334-87b9-ab2e5c049c89/3a3c26b0-7645-3189-8ff9-8f9a43d8d65a.roa Signing time: Thu 08 Oct 2026 20:05:01 +0000 ROA not before: Thu 08 Oct 2026 20:05:01 +0000 ROA not after: Wed 06 Jan 2027 21:05:01 +0000 asID: 14618 IP address blocks: 192.124.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/95c38de3-af72-4334-87b9-ab2e5c049c89/95c38de3-af72-4334-87b9-ab2e5c049c89.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/95c38de3-af72-4334-87b9-ab2e5c049c89/95c38de3-af72-4334-87b9-ab2e5c049c89.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/95c38de3-af72-4334-87b9-ab2e5c049c89.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:f5:98:b1:64:77:13:65:e4:62:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95c38de3-af72-4334-87b9-ab2e5c049c89 Validity Not Before: Oct 8 20:05:01 2026 GMT Not After : Jan 6 21:05:01 2027 GMT Subject: CN=2c0d24eb-9491-4d02-9fee-3f7f718d146f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:14:f5:7d:d2:f0:0c:0d:3b:5f:de:16:fd:56: f2:c0:1e:e3:0c:72:cd:de:6e:4f:b0:e5:87:b8:4c: f7:d3:47:76:34:06:21:df:50:1b:14:00:80:73:00: a4:1e:13:6e:15:62:b3:77:b8:e3:cc:bd:5f:84:3e: 72:28:6a:32:53:b5:f2:d4:fd:0d:46:3c:e0:fa:f1: 4c:75:57:6e:fe:3e:ed:96:c0:9a:99:a6:2c:23:a2: 65:b3:e0:40:3a:35:f3:73:e0:96:e3:f0:c8:e4:61: e2:8c:63:e7:47:ee:b0:33:4f:1e:a3:bb:58:f0:e0: 54:6f:1c:15:d8:da:fa:bc:99:6a:63:7f:51:80:de: d0:22:ae:ef:fa:a6:4e:91:9e:00:0b:4d:f2:96:0b: b8:58:aa:23:4f:fe:28:4b:9c:00:3c:7b:b3:d3:a1: 42:54:e5:de:bf:4f:04:e5:38:3e:28:21:60:64:98: 73:6d:94:1e:06:97:d9:6d:6e:eb:96:3c:49:ab:74: 4e:22:dd:2f:fe:0b:d0:9c:3b:10:72:cc:3c:fb:7f: c1:fc:d0:32:05:28:aa:06:9a:b8:ff:d6:31:be:b6: 30:13:eb:58:b0:ec:60:07:04:3b:aa:f4:98:8f:ea: c8:52:5f:cc:29:68:35:ab:da:99:7b:15:1d:25:69: c2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:FA:94:42:0A:72:AE:39:75:D5:AC:4D:65:BA:30:6A:DA:8F:26:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/95c38de3-af72-4334-87b9-ab2e5c049c89/3a3c26b0-7645-3189-8ff9-8f9a43d8d65a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/95c38de3-af72-4334-87b9-ab2e5c049c89/95c38de3-af72-4334-87b9-ab2e5c049c89.crl X509v3 Authority Key Identifier: keyid:25:43:75:05:3B:D7:63:07:70:4B:68:46:AF:7D:43:98:5F:B9:F2:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/95c38de3-af72-4334-87b9-ab2e5c049c89.cer sbgp-ipAddrBlock: critical IPv4: 192.124.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:23:79:bc:57:37:b1:7f:e3:83:e7:59:64:51:92:f5:a4:c3: 6e:7d:e3:7f:66:aa:17:50:37:f5:20:f3:36:71:45:c2:53:5f: 1e:48:53:2b:1c:fb:bd:af:8f:23:d6:bf:ae:44:73:38:d9:b5: c5:32:f2:12:7e:ea:01:12:03:7e:01:6e:ed:b7:d5:24:dd:15: 83:1e:e7:e7:7b:bb:0c:a6:d9:c2:c7:87:f5:e5:34:e1:72:de: 04:5f:09:ba:de:81:60:8d:45:59:f5:54:6e:b8:0f:55:35:ba: 4b:73:ec:4a:f4:41:89:17:68:ca:e1:ac:db:90:ed:ea:ad:f5: 76:3c:15:e8:6d:89:13:7e:e5:5b:17:82:0d:41:34:33:01:ae: 6f:f2:c7:8e:5d:54:bd:b0:3d:e6:42:82:4e:54:8a:f8:e4:79: 08:71:0a:98:0c:60:cc:97:25:d9:25:96:79:45:53:40:be:4c: ea:4a:ac:10:99:8d:c6:71:e7:2c:2a:d7:09:08:46:9c:36:69: e8:1c:d1:c2:36:02:af:b3:ef:e6:00:e8:72:e1:ce:fe:dc:db: 2a:df:59:13:e3:8b:42:8c:ef:3f:d2:92:3b:01:7d:71:aa:e7: b5:aa:81:80:3b:dc:67:4a:b8:ad:e7:51:01:07:af:00:21:cc: a6:0f:70:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9v9ZixZHcTZeRiyMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVjMzhkZTMtYWY3Mi00MzM0LTg3YjktYWIyZTVjMDQ5 Yzg5MB4XDTI2MTAwODIwMDUwMVoXDTI3MDEwNjIxMDUwMVowLzEtMCsGA1UEAxMk MmMwZDI0ZWItOTQ5MS00ZDAyLTlmZWUtM2Y3ZjcxOGQxNDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRT1fdLwDA07X94W/VbywB7jDHLN3m5PsOWH uEz300d2NAYh31AbFACAcwCkHhNuFWKzd7jjzL1fhD5yKGoyU7Xy1P0NRjzg+vFM dVdu/j7tlsCamaYsI6Jls+BAOjXzc+CW4/DI5GHijGPnR+6wM08eo7tY8OBUbxwV 2Nr6vJlqY39RgN7QIq7v+qZOkZ4AC03ylgu4WKojT/4oS5wAPHuz06FCVOXev08E 5Tg+KCFgZJhzbZQeBpfZbW7rljxJq3ROIt0v/gvQnDsQcsw8+3/B/NAyBSiqBpq4 /9YxvrYwE+tYsOxgBwQ7qvSYj+rIUl/MKWg1q9qZexUdJWnCbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPX6lEIKcq45ddWsTWW6MGrajyZcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS85NWMz OGRlMy1hZjcyLTQzMzQtODdiOS1hYjJlNWMwNDljODkvM2EzYzI2YjAtNzY0NS0z MTg5LThmZjktOGY5YTQzZDhkNjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvOTVjMzhkZTMtYWY3Mi00MzM0LTg3 YjktYWIyZTVjMDQ5Yzg5Lzk1YzM4ZGUzLWFmNzItNDMzNC04N2I5LWFiMmU1YzA0 OWM4OS5jcmwwHwYDVR0jBBgwFoAUJUN1BTvXYwdwS2hGr31DmF+58t8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS85NWMzOGRlMy1hZjcyLTQzMzQtODdiOS1hYjJl NWMwNDljODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHycMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUjebxXN7F/44PnWWRRkvWkw259439mqhdQN/Ug8zZxRcJTXx5IUysc +72vjyPWv65EczjZtcUy8hJ+6gESA34Bbu231STdFYMe5+d7uwym2cLHh/XlNOFy 3gRfCbregWCNRVn1VG64D1U1uktz7Er0QYkXaMrhrNuQ7eqt9XY8FehtiRN+5VsX gg1BNDMBrm/yx45dVL2wPeZCgk5UivjkeQhxCpgMYMyXJdkllnlFU0C+TOpKrBCZ jcZx5ywq1wkIRpw2aegc0cI2Aq+z7+YA6HLhzv7c2yrfWRPji0KM7z/SkjsBfXGq 57WqgYA73GdKuK3nUQEHrwAhzKYPcLo= -----END CERTIFICATE-----Generated at Wed Nov 4 04:15:50 2026 by rpki-client