$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85497cef-91a5-381c-a19b-effb204a9361.roa File: 85497cef-91a5-381c-a19b-effb204a9361.roa (raw, json) Hash identifier: 8R06/F0d7lPgQdpWv8WBIGwZzKy3qxDh59two4gm01o= Subject key identifier: 62:B7:70:BD:DE:E0:74:7B:22:A5:5D:EA:05:81:BB:86:25:5E:B2:C3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F6292BE04228954E5C55DA940 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85497cef-91a5-381c-a19b-effb204a9361.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396740 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:be:04:22:89:54:e5:c5:5d:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=f3ae2831-b8af-4e64-986a-fd53db6d2ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:45:c9:1f:9f:7a:85:25:9a:ec:0d:b7:9c:bb: c1:78:4f:21:52:49:ea:8e:4f:e8:03:17:e7:98:ba: de:67:1f:d5:37:89:8f:cd:33:e6:dd:ec:68:83:03: ff:48:38:f5:c6:55:2f:d9:a9:66:37:c2:7c:c0:d9: 85:32:38:cc:c7:fc:c6:77:50:e0:ca:62:f4:8e:42: 32:48:a0:ad:ed:76:38:51:29:c6:87:56:89:df:37: 65:28:9e:90:43:ba:a7:ce:81:28:25:9f:79:05:64: dc:8c:be:a7:87:5b:11:f8:c4:5e:39:13:29:02:01: 51:b3:63:89:ef:9b:a0:f7:a8:d9:5e:20:98:a2:9b: a5:db:f2:0f:62:cd:0a:d8:e5:84:b3:61:03:74:d3: 74:be:a3:6e:50:57:70:c2:71:89:9a:c9:2b:e5:ae: 60:c9:f1:82:9a:79:20:df:94:ab:ea:a0:d6:5f:12: b1:d5:83:24:9d:7e:9b:15:e6:ba:6b:16:c0:18:de: 6a:02:2a:25:c0:c6:01:da:c9:a2:c2:b1:c7:b7:37: 0b:d0:7b:28:6e:06:bc:d0:d0:c5:cb:99:8f:43:7c: 71:7c:ed:b0:e0:a8:d3:a5:8c:2f:83:82:a5:6e:d0: b7:f6:64:17:32:a6:f6:1c:92:ee:8e:f4:87:02:fa: bd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B7:70:BD:DE:E0:74:7B:22:A5:5D:EA:05:81:BB:86:25:5E:B2:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85497cef-91a5-381c-a19b-effb204a9361.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:16:1e:5b:ed:69:c8:16:56:bc:c5:7a:da:c5:67:fc:71:53: 40:48:83:c4:5d:1d:25:c3:f7:6e:c4:f1:6a:ad:26:57:b3:20: 44:0a:55:2a:3c:c7:f0:cb:9e:cd:b2:c7:72:93:2b:a9:e9:d8: e2:3f:98:80:c4:bd:1c:ea:ac:31:9a:27:4a:16:ea:b4:71:dd: 7d:a5:4a:87:bd:ea:7e:c6:d4:bd:05:3c:2d:5b:27:52:2f:ba: a7:79:0a:d6:cb:2e:af:d8:23:1e:80:b6:ff:7e:7e:01:aa:8e: 8b:13:21:74:64:03:5a:4f:68:9a:e7:a5:1b:f4:06:94:17:bc: 94:50:0c:bb:74:e7:96:66:cb:6e:c0:be:8b:e5:b6:f9:b7:7a: b3:46:38:c6:09:5c:ed:8c:4b:ee:60:14:9d:bd:10:8a:2e:0d: c3:1a:6b:53:2b:8a:49:92:da:0b:3b:34:e5:b5:19:c6:8c:24: ef:d6:ae:8f:12:1e:46:b2:d6:c7:36:55:f1:ff:b3:dc:19:73: 2b:e2:e3:a8:21:0b:a3:37:ee:b9:5d:8c:93:6e:ea:c0:3f:81: 10:0f:78:69:33:e9:c2:6a:5f:ae:ca:2b:2f:c3:8d:05:50:48: 7e:9d:5a:a9:39:49:68:e5:a0:34:d5:45:2b:2c:76:d9:f5:39: 2f:fb:3b:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikr4EIolU5cVdqUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZjNhZTI4MzEtYjhhZi00ZTY0LTk4NmEtZmQ1M2RiNmQyYWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0XJH596hSWa7A23nLvBeE8hUknqjk/oAxfn mLreZx/VN4mPzTPm3exogwP/SDj1xlUv2almN8J8wNmFMjjMx/zGd1DgymL0jkIy SKCt7XY4USnGh1aJ3zdlKJ6QQ7qnzoEoJZ95BWTcjL6nh1sR+MReORMpAgFRs2OJ 75ug96jZXiCYopul2/IPYs0K2OWEs2EDdNN0vqNuUFdwwnGJmskr5a5gyfGCmnkg 35Sr6qDWXxKx1YMknX6bFea6axbAGN5qAiolwMYB2smiwrHHtzcL0Hsobga80NDF y5mPQ3xxfO2w4KjTpYwvg4KlbtC39mQXMqb2HJLujvSHAvq92wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGK3cL3e4HR7IqVd6gWBu4YlXrLDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODU0OTdjZWYtOTFhNS0z ODFjLWExOWItZWZmYjIwNGE5MzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsWHlvtacgWVrzFetrFZ/xxU0BIg8RdHSXD927E8WqtJlezIEQKVSo8 x/DLns2yx3KTK6np2OI/mIDEvRzqrDGaJ0oW6rRx3X2lSoe96n7G1L0FPC1bJ1Iv uqd5CtbLLq/YIx6Atv9+fgGqjosTIXRkA1pPaJrnpRv0BpQXvJRQDLt055Zmy27A vovltvm3erNGOMYJXO2MS+5gFJ29EIouDcMaa1MrikmS2gs7NOW1GcaMJO/Wro8S Hkay1sc2VfH/s9wZcyvi46ghC6M37rldjJNu6sA/gRAPeGkz6cJqX67KKy/DjQVQ SH6dWqk5SWjloDTVRSssdtn1OS/7O4E= -----END CERTIFICATE-----Generated at Thu Oct 8 07:18:21 2026 by rpki-client