$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/884b7d34-d438-4755-8e96-f046e8b77dab/19318cc5-4e5e-3977-b788-af45e7c8c028.roa File: 19318cc5-4e5e-3977-b788-af45e7c8c028.roa (raw, json) Hash identifier: V+Gss1v0GjtJnSuB2tCRI9ukBp8FlNNPp7hGyBA9dIw= Subject key identifier: A8:2A:DB:67:BA:07:32:53:6C:D7:ED:DB:FA:96:4D:99:C4:4B:79:BC Certificate issuer: /CN=884b7d34-d438-4755-8e96-f046e8b77dab Certificate serial: 010D0C9F4328584F92085CDDBD26195EF8F41080 Authority key identifier: B7:F5:36:39:6C:D6:8A:75:38:CC:19:B4:AB:AE:38:8D:80:30:86:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/884b7d34-d438-4755-8e96-f046e8b77dab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/884b7d34-d438-4755-8e96-f046e8b77dab/19318cc5-4e5e-3977-b788-af45e7c8c028.roa Signing time: Wed 21 Oct 2026 01:00:12 +0000 ROA not before: Wed 21 Oct 2026 01:00:12 +0000 ROA not after: Tue 19 Jan 2027 02:00:12 +0000 asID: 399220 IP address blocks: 192.230.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/884b7d34-d438-4755-8e96-f046e8b77dab/884b7d34-d438-4755-8e96-f046e8b77dab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/884b7d34-d438-4755-8e96-f046e8b77dab/884b7d34-d438-4755-8e96-f046e8b77dab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/884b7d34-d438-4755-8e96-f046e8b77dab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:92:08:5c:dd:bd:26:19:5e:f8:f4:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884b7d34-d438-4755-8e96-f046e8b77dab Validity Not Before: Oct 21 01:00:12 2026 GMT Not After : Jan 19 02:00:12 2027 GMT Subject: CN=1276ddb1-8f71-4de4-8675-b43bfa0be950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c0:2a:8d:86:a1:ed:c4:84:81:d6:be:f9:25: 36:2c:63:97:56:db:64:cc:ff:4f:d0:06:d5:74:df: 22:a3:09:81:20:79:04:63:58:36:24:84:f1:87:ec: 11:ae:05:35:9d:15:ae:c7:f2:79:c5:94:88:39:2c: cf:e3:f2:8d:a5:55:3b:ea:b1:b0:df:5a:44:b3:81: 81:e6:82:2b:32:15:88:87:58:e2:ba:da:e9:56:10: 3c:ec:8f:1e:5f:2a:5e:1d:c8:ec:d8:9b:e7:c8:07: de:6c:00:e1:69:c8:c3:7b:77:06:d6:f2:68:4a:bd: 8d:66:f2:a5:4e:17:02:fd:cb:97:2a:73:3a:2d:c1: 0a:07:10:17:d6:0c:b0:74:c5:96:da:a7:69:a7:15: ab:17:9d:4b:81:72:39:c1:07:96:a7:11:25:3e:9d: 53:bf:6b:9d:0f:7a:fa:06:2f:89:ef:60:86:eb:3b: 3f:ac:67:ea:0b:3e:f0:13:72:fa:f2:5e:de:2d:34: 9b:cc:05:67:2f:ea:3e:7a:bf:0e:f2:7a:37:2d:21: ac:b1:e7:a6:09:3c:4d:fd:33:9b:1e:85:34:36:4d: c9:cd:ee:77:c8:70:22:fc:07:0f:3a:48:83:3b:54: 1a:9a:32:c6:aa:0e:15:fe:b9:ec:82:f8:0c:e1:93: a7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:2A:DB:67:BA:07:32:53:6C:D7:ED:DB:FA:96:4D:99:C4:4B:79:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/884b7d34-d438-4755-8e96-f046e8b77dab/19318cc5-4e5e-3977-b788-af45e7c8c028.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/884b7d34-d438-4755-8e96-f046e8b77dab/884b7d34-d438-4755-8e96-f046e8b77dab.crl X509v3 Authority Key Identifier: keyid:B7:F5:36:39:6C:D6:8A:75:38:CC:19:B4:AB:AE:38:8D:80:30:86:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/884b7d34-d438-4755-8e96-f046e8b77dab.cer sbgp-ipAddrBlock: critical IPv4: 192.230.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d0:48:d0:b7:06:be:60:e1:3e:b1:c7:2d:6f:8f:63:06:67: 3c:52:7e:43:a9:4e:d7:95:bd:57:61:83:e5:ff:ed:53:7a:16: 85:cb:d3:93:93:23:7f:fc:2d:1a:51:69:62:fe:dc:96:7e:f3: ac:59:d4:83:a1:78:d5:a7:c8:ba:88:16:57:31:fb:df:fe:4c: f4:54:6b:db:a1:56:3b:de:e6:e5:44:98:77:45:fc:07:a4:cd: a8:59:ba:e4:7b:54:e6:7d:2e:c8:5f:fe:71:e6:26:bb:79:39: e3:e0:cf:2a:79:b6:d6:0a:90:0f:1a:a8:56:10:0e:a1:44:e7: 7f:33:67:a8:ef:b2:65:52:fd:85:9e:cb:76:29:f5:42:26:7b: 28:dc:6a:9d:99:46:cf:2a:df:58:e1:56:37:b1:d8:65:41:18: 4f:07:d8:89:2d:6a:8e:ad:a6:f9:ec:21:3e:02:44:f6:f5:81: 7c:71:74:a3:cf:b0:c2:e3:07:de:a9:a3:32:4f:76:a8:5d:93: 2c:3d:34:10:aa:e6:37:c6:67:30:2f:e1:0e:8c:af:18:e2:ac: 96:d8:3f:87:79:b7:e4:1b:b2:33:a6:31:a5:99:7d:96:92:68: 32:a4:37:f9:a8:e7:30:54:b6:c3:54:66:d9:2e:f5:b6:1a:97: a3:f5:71:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+SCFzdvSYZXvj0EIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0YjdkMzQtZDQzOC00NzU1LThlOTYtZjA0NmU4Yjc3 ZGFiMB4XDTI2MTAyMTAxMDAxMloXDTI3MDExOTAyMDAxMlowLzEtMCsGA1UEAxMk MTI3NmRkYjEtOGY3MS00ZGU0LTg2NzUtYjQzYmZhMGJlOTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMAqjYah7cSEgda++SU2LGOXVttkzP9P0AbV dN8iowmBIHkEY1g2JITxh+wRrgU1nRWux/J5xZSIOSzP4/KNpVU76rGw31pEs4GB 5oIrMhWIh1jiutrpVhA87I8eXypeHcjs2JvnyAfebADhacjDe3cG1vJoSr2NZvKl ThcC/cuXKnM6LcEKBxAX1gywdMWW2qdppxWrF51LgXI5wQeWpxElPp1Tv2udD3r6 Bi+J72CG6zs/rGfqCz7wE3L68l7eLTSbzAVnL+o+er8O8no3LSGsseemCTxN/TOb HoU0Nk3Jze53yHAi/AcPOkiDO1QamjLGqg4V/rnsgvgM4ZOnLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgq22e6BzJTbNft2/qWTZnES3m8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84ODRi N2QzNC1kNDM4LTQ3NTUtOGU5Ni1mMDQ2ZThiNzdkYWIvMTkzMThjYzUtNGU1ZS0z OTc3LWI3ODgtYWY0NWU3YzhjMDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvODg0YjdkMzQtZDQzOC00NzU1LThl OTYtZjA0NmU4Yjc3ZGFiLzg4NGI3ZDM0LWQ0MzgtNDc1NS04ZTk2LWYwNDZlOGI3 N2RhYi5jcmwwHwYDVR0jBBgwFoAUt/U2OWzWinU4zBm0q644jYAwhv0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84ODRiN2QzNC1kNDM4LTQ3NTUtOGU5Ni1mMDQ2 ZThiNzdkYWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwOaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrQSNC3Br5g4T6xxy1vj2MGZzxSfkOpTteVvVdhg+X/7VN6FoXL05OT I3/8LRpRaWL+3JZ+86xZ1IOheNWnyLqIFlcx+9/+TPRUa9uhVjve5uVEmHdF/Aek zahZuuR7VOZ9Lshf/nHmJrt5OePgzyp5ttYKkA8aqFYQDqFE538zZ6jvsmVS/YWe y3Yp9UImeyjcap2ZRs8q31jhVjex2GVBGE8H2Iktao6tpvnsIT4CRPb1gXxxdKPP sMLjB96pozJPdqhdkyw9NBCq5jfGZzAv4Q6MrxjirJbYP4d5t+QbsjOmMaWZfZaS aDKkN/mo5zBUtsNUZtku9bYal6P1cS8= -----END CERTIFICATE-----Generated at Tue Oct 27 22:49:40 2026 by rpki-client