$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e3d05016-0787-4390-a993-bd2dc0c670bf/c457491b-d8ef-3b21-b888-1c0e88866f5a.roa File: c457491b-d8ef-3b21-b888-1c0e88866f5a.roa (raw, json) Hash identifier: as5lpT60iCi0dj+RyIJuIBAjo9l3WvhTUCn3QzlQu+8= Subject key identifier: C7:DB:36:DD:B8:14:2A:55:A8:48:31:9D:7C:83:0C:AF:E1:C1:62:15 Certificate issuer: /CN=e3d05016-0787-4390-a993-bd2dc0c670bf Certificate serial: 010D0C9F4328584F6CBB450DD9D2A572711B5D48 Authority key identifier: A6:59:BD:E0:A3:D2:37:A3:EC:89:DD:D3:00:F8:D5:8D:A2:C6:A2:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e3d05016-0787-4390-a993-bd2dc0c670bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e3d05016-0787-4390-a993-bd2dc0c670bf/c457491b-d8ef-3b21-b888-1c0e88866f5a.roa Signing time: Wed 07 Oct 2026 16:20:05 +0000 ROA not before: Wed 07 Oct 2026 16:20:05 +0000 ROA not after: Tue 05 Jan 2027 17:20:05 +0000 asID: 14618 IP address blocks: 192.225.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e3d05016-0787-4390-a993-bd2dc0c670bf/e3d05016-0787-4390-a993-bd2dc0c670bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e3d05016-0787-4390-a993-bd2dc0c670bf/e3d05016-0787-4390-a993-bd2dc0c670bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e3d05016-0787-4390-a993-bd2dc0c670bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:bb:45:0d:d9:d2:a5:72:71:1b:5d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3d05016-0787-4390-a993-bd2dc0c670bf Validity Not Before: Oct 7 16:20:05 2026 GMT Not After : Jan 5 17:20:05 2027 GMT Subject: CN=89aea537-4b09-419f-86d0-093887ac3bb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d4:a4:cc:48:3d:35:77:bd:ac:a3:9e:e5:67: 0b:0b:4d:f1:60:e4:74:63:be:40:72:6d:59:68:b7: 32:fc:96:0f:f6:b1:a1:61:3b:fc:6e:57:71:b5:bf: 0a:e7:44:a5:76:72:80:63:81:09:b5:d7:a1:f8:ee: db:f6:6a:22:00:9b:98:c0:07:68:18:01:c5:bd:48: ed:9d:b7:e5:eb:95:64:78:fe:cc:e5:f2:27:a6:81: d5:05:ff:45:bc:6f:91:28:e5:5f:08:05:25:b3:b8: 0c:4b:c5:42:9b:bd:cc:2f:78:ee:71:3e:f6:0f:f3: 44:f7:b6:6a:d9:7c:b5:86:de:bc:22:54:5d:73:00: b7:9a:f1:e8:6b:e3:51:0c:49:75:2b:01:4d:e3:e1: 39:b8:de:cb:8c:0a:38:0b:41:7e:c4:80:05:b0:b8: 33:b9:8e:83:a9:cf:40:42:72:9e:af:14:14:38:8a: b8:70:ea:c5:75:de:c5:1c:14:23:b3:1c:ef:b8:89: fa:89:59:c1:6d:9a:68:e2:b0:d1:1a:61:04:e5:2a: 44:82:02:8d:92:ba:d1:4a:b4:91:32:d4:4a:07:8a: 11:9c:de:c8:d0:d1:1e:79:8d:46:ad:0d:e9:ca:2b: 4f:de:88:c0:80:c2:47:50:91:af:b0:a5:a0:e0:6d: 8a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:DB:36:DD:B8:14:2A:55:A8:48:31:9D:7C:83:0C:AF:E1:C1:62:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e3d05016-0787-4390-a993-bd2dc0c670bf/c457491b-d8ef-3b21-b888-1c0e88866f5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e3d05016-0787-4390-a993-bd2dc0c670bf/e3d05016-0787-4390-a993-bd2dc0c670bf.crl X509v3 Authority Key Identifier: keyid:A6:59:BD:E0:A3:D2:37:A3:EC:89:DD:D3:00:F8:D5:8D:A2:C6:A2:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e3d05016-0787-4390-a993-bd2dc0c670bf.cer sbgp-ipAddrBlock: critical IPv4: 192.225.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:45:ac:c3:b3:6e:f6:1f:0c:1d:63:2f:49:9f:16:e5:94:82: a1:9b:c0:c7:39:70:ee:2e:a8:33:d9:c3:1a:a2:8c:dd:c2:20: ea:26:9f:08:2f:51:a9:db:8f:8a:5b:fd:48:33:2b:25:be:b2: 9a:1e:e0:75:8a:10:63:c0:f6:b3:f2:d2:c5:60:99:bd:5c:b6: ed:1d:b9:98:3b:97:eb:85:ab:58:57:b1:9b:21:50:78:9c:18: 86:23:f0:5c:c6:8c:bc:5d:5b:bb:05:7a:c4:a3:1e:62:06:72: 0d:c5:9f:10:d8:a1:de:5b:fc:5a:06:d1:1b:00:af:6a:73:39: 78:07:97:5c:6b:38:eb:62:14:0f:68:ec:17:b5:6d:d6:a2:a7: 1a:d6:0d:d1:87:41:cb:0c:39:cc:c3:e0:9b:5f:80:d9:58:e2: 96:a2:6f:47:0c:88:f2:24:17:5b:40:2e:de:c8:ff:2a:a8:61: dd:4b:83:53:bd:eb:64:f0:4b:b5:58:90:0b:8c:8d:bb:ea:d7: 52:ac:ab:9a:a7:68:34:51:c3:40:c2:f4:8e:b5:8b:80:9a:7a: 1b:d7:f2:94:2a:e6:b8:d1:c4:bf:34:be:9b:cc:e6:e7:cf:3e: b8:9e:99:88:93:6e:84:ed:8e:f4:5d:fc:22:4a:95:61:20:be: 2a:b8:53:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9su0UN2dKlcnEbXUgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNkMDUwMTYtMDc4Ny00MzkwLWE5OTMtYmQyZGMwYzY3 MGJmMB4XDTI2MTAwNzE2MjAwNVoXDTI3MDEwNTE3MjAwNVowLzEtMCsGA1UEAxMk ODlhZWE1MzctNGIwOS00MTlmLTg2ZDAtMDkzODg3YWMzYmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytSkzEg9NXe9rKOe5WcLC03xYOR0Y75Acm1Z aLcy/JYP9rGhYTv8bldxtb8K50SldnKAY4EJtdeh+O7b9moiAJuYwAdoGAHFvUjt nbfl65VkeP7M5fInpoHVBf9FvG+RKOVfCAUls7gMS8VCm73ML3jucT72D/NE97Zq 2Xy1ht68IlRdcwC3mvHoa+NRDEl1KwFN4+E5uN7LjAo4C0F+xIAFsLgzuY6Dqc9A QnKerxQUOIq4cOrFdd7FHBQjsxzvuIn6iVnBbZpo4rDRGmEE5SpEggKNkrrRSrSR MtRKB4oRnN7I0NEeeY1GrQ3pyitP3ojAgMJHUJGvsKWg4G2KHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfbNt24FCpVqEgxnXyDDK/hwWIVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9lM2Qw NTAxNi0wNzg3LTQzOTAtYTk5My1iZDJkYzBjNjcwYmYvYzQ1NzQ5MWItZDhlZi0z YjIxLWI4ODgtMWMwZTg4ODY2ZjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvZTNkMDUwMTYtMDc4Ny00MzkwLWE5 OTMtYmQyZGMwYzY3MGJmL2UzZDA1MDE2LTA3ODctNDM5MC1hOTkzLWJkMmRjMGM2 NzBiZi5jcmwwHwYDVR0jBBgwFoAUplm94KPSN6Psid3TAPjVjaLGorUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9lM2QwNTAxNi0wNzg3LTQzOTAtYTk5My1iZDJk YzBjNjcwYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOE5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlFrMOzbvYfDB1jL0mfFuWUgqGbwMc5cO4uqDPZwxqijN3CIOomnwgv Uanbj4pb/UgzKyW+spoe4HWKEGPA9rPy0sVgmb1ctu0duZg7l+uFq1hXsZshUHic GIYj8FzGjLxdW7sFesSjHmIGcg3FnxDYod5b/FoG0RsAr2pzOXgHl1xrOOtiFA9o 7Be1bdaipxrWDdGHQcsMOczD4JtfgNlY4paib0cMiPIkF1tALt7I/yqoYd1Lg1O9 62TwS7VYkAuMjbvq11Ksq5qnaDRRw0DC9I61i4CaehvX8pQq5rjRxL80vpvM5ufP PriemYiTboTtjvRd/CJKlWEgviq4U+Q= -----END CERTIFICATE-----Generated at Mon Nov 2 18:46:59 2026 by rpki-client