$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bf9da31-4608-3c64-ae6f-0770467becb2.roa File: 0bf9da31-4608-3c64-ae6f-0770467becb2.roa (raw, json) Hash identifier: xtaoH0kueI4/KosT04z/CaHcb/bgj/qtw84kCMd/2qM= Subject key identifier: EC:91:14:37:88:9C:3E:77:BA:4D:34:B1:60:06:98:38:21:B2:FA:F4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F49734E0B4028271732A46280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bf9da31-4608-3c64-ae6f-0770467becb2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36618 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:4e:0b:40:28:27:17:32:a4:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8b246ed7-7250-47dd-8d7e-8b50e212314d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7d:a9:7f:d2:da:91:b0:78:0f:0b:94:b8:63: 65:10:73:62:21:3d:d4:36:4a:ad:d8:d0:f2:21:8d: 92:fa:30:6d:09:39:b4:df:c3:e5:5c:b7:a4:37:8e: 59:bd:00:8e:ca:a0:49:5a:16:21:f7:08:22:2e:e2: 76:f6:2f:62:76:ab:d2:b8:42:d6:ad:61:b3:47:42: 83:59:0a:09:35:11:7d:43:79:e0:ff:8a:ed:a5:10: f2:7f:d2:83:14:10:e2:6b:2e:d6:ef:92:f8:46:50: d8:9f:9b:4f:02:5f:78:96:a3:c9:5d:2a:8b:21:40: ee:bc:ed:3e:bc:92:d5:6a:da:d3:79:8c:15:61:14: 2f:b8:6f:80:39:5f:53:06:af:ea:0a:bf:f4:94:fc: dc:b1:ff:95:75:21:19:da:41:7c:c4:de:76:0a:46: f4:a4:5c:fd:eb:75:8b:e2:c6:a0:1b:99:59:88:6e: b5:24:98:ca:e4:f0:f5:e4:33:12:20:a4:2b:1e:e3: ab:12:ac:5a:48:fa:94:70:c4:43:2c:ac:5a:9a:fa: 60:0c:e0:e6:f9:20:9d:cd:eb:44:7b:d9:43:d3:8b: 3c:f2:5f:72:d7:0f:ef:71:c5:44:27:d1:2c:d8:d8: 9d:65:ec:cf:53:6c:df:4b:3a:d1:6f:55:af:eb:45: 94:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:91:14:37:88:9C:3E:77:BA:4D:34:B1:60:06:98:38:21:B2:FA:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bf9da31-4608-3c64-ae6f-0770467becb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:f5:7e:b4:63:30:da:b0:4e:73:72:8c:62:be:7f:15:a5:f8: 80:27:ef:c5:99:95:f7:ae:a3:63:e9:a5:31:b2:c0:d7:0b:4d: c2:79:67:2e:9b:80:76:05:fd:fb:53:94:20:59:ba:20:49:5a: df:be:c3:12:c7:63:16:4c:01:d4:ce:5d:cc:85:79:ec:ce:8a: 83:3c:b0:a9:6d:06:72:b0:c6:11:be:92:33:8d:87:3d:0f:cd: a2:22:21:5c:01:70:c3:d9:5a:ab:c8:fb:69:ee:d5:db:df:c6: bd:a0:d8:dd:bd:f6:0c:21:67:c6:74:36:0a:70:32:77:1e:61: 55:a8:e1:87:f7:99:9e:1c:70:f1:6d:b6:4d:cb:20:28:66:00: 47:fb:8c:f1:19:97:71:7e:8f:ec:9a:03:af:d6:98:88:38:d2: 0e:b5:dc:5a:a8:e9:9e:08:f6:1e:51:61:6a:bb:e0:86:b6:89: 6b:ce:15:31:27:2d:5f:f5:a7:9e:63:5d:f6:b3:0f:8d:10:13: 97:fa:b9:4a:d0:d8:cc:be:67:e0:e7:b9:81:74:3d:6a:67:b7: 95:26:91:dc:12:ed:88:fa:7f:a0:63:a5:52:2b:a7:47:5d:d2: 41:0b:46:8b:33:08:67:8f:19:20:06:98:a0:64:28:3c:e2:f9: 41:46:c7:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc04LQCgnFzKkYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGIyNDZlZDctNzI1MC00N2RkLThkN2UtOGI1MGUyMTIzMTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5H2pf9LakbB4DwuUuGNlEHNiIT3UNkqt2NDy IY2S+jBtCTm038PlXLekN45ZvQCOyqBJWhYh9wgiLuJ29i9idqvSuELWrWGzR0KD WQoJNRF9Q3ng/4rtpRDyf9KDFBDiay7W75L4RlDYn5tPAl94lqPJXSqLIUDuvO0+ vJLVatrTeYwVYRQvuG+AOV9TBq/qCr/0lPzcsf+VdSEZ2kF8xN52Ckb0pFz963WL 4sagG5lZiG61JJjK5PD15DMSIKQrHuOrEqxaSPqUcMRDLKxamvpgDODm+SCdzetE e9lD04s88l9y1w/vccVEJ9Es2NidZezPU2zfSzrRb1Wv60WUBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOyRFDeInD53uk00sWAGmDghsvr0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGJmOWRhMzEtNDYwOC0z YzY0LWFlNmYtMDc3MDQ2N2JlY2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEv1frRjMNqwTnNyjGK+fxWl+IAn78WZlfeuo2PppTGywNcLTcJ5Zy6b gHYF/ftTlCBZuiBJWt++wxLHYxZMAdTOXcyFeezOioM8sKltBnKwxhG+kjONhz0P zaIiIVwBcMPZWqvI+2nu1dvfxr2g2N299gwhZ8Z0NgpwMnceYVWo4Yf3mZ4ccPFt tk3LIChmAEf7jPEZl3F+j+yaA6/WmIg40g613Fqo6Z4I9h5RYWq74Ia2iWvOFTEn LV/1p55jXfazD40QE5f6uUrQ2My+Z+DnuYF0PWpnt5UmkdwS7Yj6f6BjpVIrp0dd 0kELRoszCGePGSAGmKBkKDzi+UFGx30= -----END CERTIFICATE-----Generated at Tue Oct 6 18:14:34 2026 by rpki-client