$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69443f6a-8bd2-4736-89a3-0ee50ce8685a/290a539d-c1c2-3e25-b2ec-60a5f2eb3e9a.roa File: 290a539d-c1c2-3e25-b2ec-60a5f2eb3e9a.roa (raw, json) Hash identifier: C+zC2J01QpFFz/NInfXRVfj+Z5lau+zaJJg/nKRRxRQ= Subject key identifier: 3A:13:42:00:9D:83:B2:BC:B8:AA:0E:B3:1A:7E:A2:B8:37:BE:CD:DE Certificate issuer: /CN=69443f6a-8bd2-4736-89a3-0ee50ce8685a Certificate serial: 010D0C9F4328584F0ED22B6536398B42CEF50480 Authority key identifier: F6:03:01:DE:B3:A1:BD:21:66:CF:9C:D5:87:27:95:09:B8:BC:B9:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69443f6a-8bd2-4736-89a3-0ee50ce8685a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69443f6a-8bd2-4736-89a3-0ee50ce8685a/290a539d-c1c2-3e25-b2ec-60a5f2eb3e9a.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 11071 IP address blocks: 192.148.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69443f6a-8bd2-4736-89a3-0ee50ce8685a/69443f6a-8bd2-4736-89a3-0ee50ce8685a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69443f6a-8bd2-4736-89a3-0ee50ce8685a/69443f6a-8bd2-4736-89a3-0ee50ce8685a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69443f6a-8bd2-4736-89a3-0ee50ce8685a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:2b:65:36:39:8b:42:ce:f5:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69443f6a-8bd2-4736-89a3-0ee50ce8685a Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=6ef817f4-8307-4a75-ab0e-59b54669af7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ea:36:ff:59:dd:e6:70:12:29:40:00:e5:06: d2:05:01:23:1e:a9:01:87:c5:29:9d:6b:fe:49:c0: 02:38:8f:30:f0:1b:b2:3a:d0:11:44:5b:ca:fa:1e: d5:8b:c5:38:72:b3:4d:27:71:cd:a8:1d:42:ba:30: 7a:e4:02:fd:67:16:83:a1:51:5f:2b:56:ac:6f:91: c3:73:31:41:ad:09:30:fe:80:d5:46:63:7d:33:46: dd:ee:00:22:20:ce:7c:82:95:b9:bb:b8:f3:8f:bf: 0b:73:e7:b4:38:e8:a2:2b:3a:cb:34:c3:1d:87:74: d9:57:97:08:6a:64:d5:55:16:0e:7d:14:b8:6f:a9: c8:4e:6b:61:82:5f:69:9f:a7:ff:44:39:ab:cd:36: a8:69:6f:79:9c:3b:37:5b:af:6d:fa:4a:3e:b2:0b: 1d:39:b0:01:95:4d:4b:5f:dd:e5:15:ed:b5:4b:aa: 06:b7:ef:e2:90:6c:74:45:5d:f0:79:5c:a3:29:72: 9c:2d:43:7a:0c:f6:84:63:84:ec:64:55:f9:4d:06: ec:fc:ce:ed:da:3e:52:fe:92:96:6b:d7:b2:48:c3: a8:28:4d:92:24:0f:de:e3:90:d0:91:a8:fe:94:b7: a5:f3:9d:b2:7c:07:f5:58:09:5b:62:cb:77:ed:b8: 54:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:13:42:00:9D:83:B2:BC:B8:AA:0E:B3:1A:7E:A2:B8:37:BE:CD:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69443f6a-8bd2-4736-89a3-0ee50ce8685a/290a539d-c1c2-3e25-b2ec-60a5f2eb3e9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69443f6a-8bd2-4736-89a3-0ee50ce8685a/69443f6a-8bd2-4736-89a3-0ee50ce8685a.crl X509v3 Authority Key Identifier: keyid:F6:03:01:DE:B3:A1:BD:21:66:CF:9C:D5:87:27:95:09:B8:BC:B9:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69443f6a-8bd2-4736-89a3-0ee50ce8685a.cer sbgp-ipAddrBlock: critical IPv4: 192.148.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:a0:07:a7:6c:0e:85:bd:7e:38:bb:78:6f:ac:80:80:67:e3: b3:c8:2e:10:6c:47:e3:e8:33:0c:c9:0e:69:f1:c7:1d:5b:e0: fa:85:66:58:4f:dc:e5:f2:6f:b5:be:66:07:40:72:8f:f2:20: 37:83:ef:ed:93:21:33:33:17:2a:b2:27:24:81:13:84:b8:fe: 63:38:6b:f5:8d:80:59:f4:e8:de:19:35:46:a9:2c:67:03:e3: f2:1a:bb:e4:5f:2b:a5:f0:dd:08:89:b0:6d:1b:d1:db:46:65: 14:81:42:1b:1c:2b:07:cd:2f:ce:81:4c:fe:eb:ab:c8:fc:2c: 0b:67:16:a2:84:3f:af:79:66:a8:4b:93:3a:34:bd:e6:aa:4f: 96:40:23:3a:9c:d0:ba:17:28:c8:8b:ee:e8:49:b5:7c:e0:13: 0f:2b:6e:61:33:6e:2c:00:23:21:1e:bd:5e:a6:36:a3:a2:43: 9c:db:a1:c4:c3:40:e6:38:f3:7f:78:e9:e9:d4:49:53:a7:24: f0:72:86:a8:03:0e:69:c9:9d:6d:da:d1:21:df:ec:5f:3a:d7: a3:27:f8:01:e6:15:8c:b5:09:18:52:9f:38:f1:01:d6:23:86: 37:ca:d8:68:65:77:43:3a:95:8e:fe:53:72:0e:1f:e3:ed:84: 91:18:92:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0itlNjmLQs71BIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjk0NDNmNmEtOGJkMi00NzM2LTg5YTMtMGVlNTBjZTg2 ODVhMB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk NmVmODE3ZjQtODMwNy00YTc1LWFiMGUtNTliNTQ2NjlhZjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+o2/1nd5nASKUAA5QbSBQEjHqkBh8UpnWv+ ScACOI8w8BuyOtARRFvK+h7Vi8U4crNNJ3HNqB1CujB65AL9ZxaDoVFfK1asb5HD czFBrQkw/oDVRmN9M0bd7gAiIM58gpW5u7jzj78Lc+e0OOiiKzrLNMMdh3TZV5cI amTVVRYOfRS4b6nITmthgl9pn6f/RDmrzTaoaW95nDs3W69t+ko+sgsdObABlU1L X93lFe21S6oGt+/ikGx0RV3weVyjKXKcLUN6DPaEY4TsZFX5TQbs/M7t2j5S/pKW a9eySMOoKE2SJA/e45DQkaj+lLel852yfAf1WAlbYst37bhUMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoTQgCdg7K8uKoOsxp+org3vs3eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82OTQ0 M2Y2YS04YmQyLTQ3MzYtODlhMy0wZWU1MGNlODY4NWEvMjkwYTUzOWQtYzFjMi0z ZTI1LWIyZWMtNjBhNWYyZWIzZTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjk0NDNmNmEtOGJkMi00NzM2LTg5 YTMtMGVlNTBjZTg2ODVhLzY5NDQzZjZhLThiZDItNDczNi04OWEzLTBlZTUwY2U4 Njg1YS5jcmwwHwYDVR0jBBgwFoAU9gMB3rOhvSFmz5zVhyeVCbi8uXUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82OTQ0M2Y2YS04YmQyLTQ3MzYtODlhMy0wZWU1 MGNlODY4NWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJStMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqgB6dsDoW9fji7eG+sgIBn47PILhBsR+PoMwzJDmnxxx1b4PqFZlhP 3OXyb7W+ZgdAco/yIDeD7+2TITMzFyqyJySBE4S4/mM4a/WNgFn06N4ZNUapLGcD 4/Iau+RfK6Xw3QiJsG0b0dtGZRSBQhscKwfNL86BTP7rq8j8LAtnFqKEP695ZqhL kzo0veaqT5ZAIzqc0LoXKMiL7uhJtXzgEw8rbmEzbiwAIyEevV6mNqOiQ5zbocTD QOY483946enUSVOnJPByhqgDDmnJnW3a0SHf7F8616Mn+AHmFYy1CRhSnzjxAdYj hjfK2Ghld0M6lY7+U3IOH+PthJEYkkA= -----END CERTIFICATE-----Generated at Fri Oct 2 10:48:48 2026 by rpki-client