$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9059d3f8-5b82-4dd8-954c-fa17db590d36/a0ea6c63-2bbc-3404-8547-448ac09f84da.roa File: a0ea6c63-2bbc-3404-8547-448ac09f84da.roa (raw, json) Hash identifier: lxqPV1kdtOMzgJ6WIFzd18JWLTUgwrCTYWqwdrFQres= Subject key identifier: C0:9B:12:BA:9E:EF:A5:83:65:BD:2F:D6:48:6E:F2:10:B3:FA:1E:A3 Certificate issuer: /CN=9059d3f8-5b82-4dd8-954c-fa17db590d36 Certificate serial: 010D0C9F4328584ED6FC7E27E558D8A47A8061C0 Authority key identifier: FE:3B:4A:0E:A0:6D:47:C5:7D:7D:07:AD:49:2C:9D:9B:D2:4A:9C:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9059d3f8-5b82-4dd8-954c-fa17db590d36.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9059d3f8-5b82-4dd8-954c-fa17db590d36/a0ea6c63-2bbc-3404-8547-448ac09f84da.roa Signing time: Sat 15 Aug 2026 01:00:12 +0000 ROA not before: Sat 15 Aug 2026 01:00:12 +0000 ROA not after: Fri 13 Nov 2026 02:00:12 +0000 asID: 174 IP address blocks: 192.152.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9059d3f8-5b82-4dd8-954c-fa17db590d36/9059d3f8-5b82-4dd8-954c-fa17db590d36.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9059d3f8-5b82-4dd8-954c-fa17db590d36/9059d3f8-5b82-4dd8-954c-fa17db590d36.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9059d3f8-5b82-4dd8-954c-fa17db590d36.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d6:fc:7e:27:e5:58:d8:a4:7a:80:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9059d3f8-5b82-4dd8-954c-fa17db590d36 Validity Not Before: Aug 15 01:00:12 2026 GMT Not After : Nov 13 02:00:12 2026 GMT Subject: CN=30d803a2-b4e5-4da3-ac8d-f7cc6523f2ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1e:c8:1b:0b:57:d8:56:b3:d6:10:b4:84:f1: 5b:a1:71:86:ea:a9:c1:92:c2:eb:c2:68:37:00:2a: 44:a3:91:c4:1d:7d:bf:50:e6:a3:10:32:e2:c4:f7: e2:2d:37:be:d9:c0:e3:eb:72:61:05:94:07:b8:21: ce:53:76:33:d2:4d:92:05:cc:2e:03:f7:66:d0:52: 16:33:17:d2:65:9a:a4:8c:fe:9c:f7:60:e7:11:44: 90:ad:27:b9:bf:c4:5f:8c:35:f6:f9:35:ab:80:0b: c3:27:19:39:dc:db:b4:8a:56:79:2d:f1:39:c8:39: 1b:5e:b4:b0:02:8f:2f:d0:8d:2b:d1:52:1d:42:e7: 70:25:0a:54:d3:ca:f4:fe:ef:f6:a7:3b:47:67:27: 34:90:71:bf:d3:21:5c:7d:13:46:11:a1:c3:67:f5: 4c:01:46:df:1c:b5:71:e7:e4:9a:be:df:cb:5e:1b: 45:63:41:a2:5c:40:97:12:3c:78:b7:6f:14:d2:bd: 62:77:5a:3f:53:f8:dd:b1:8c:70:25:6d:f5:0b:88: 65:7f:d2:55:99:1a:68:61:de:65:ec:d9:e9:27:4a: 6f:53:ec:ba:3d:77:2b:c0:f6:f3:e0:25:f0:c9:6f: 7c:38:0d:a5:b9:cd:3b:04:99:2a:44:2c:8e:35:89: 51:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:9B:12:BA:9E:EF:A5:83:65:BD:2F:D6:48:6E:F2:10:B3:FA:1E:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9059d3f8-5b82-4dd8-954c-fa17db590d36/a0ea6c63-2bbc-3404-8547-448ac09f84da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9059d3f8-5b82-4dd8-954c-fa17db590d36/9059d3f8-5b82-4dd8-954c-fa17db590d36.crl X509v3 Authority Key Identifier: keyid:FE:3B:4A:0E:A0:6D:47:C5:7D:7D:07:AD:49:2C:9D:9B:D2:4A:9C:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9059d3f8-5b82-4dd8-954c-fa17db590d36.cer sbgp-ipAddrBlock: critical IPv4: 192.152.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:24:cc:5a:f3:bd:73:95:62:b9:a4:c2:f8:c3:d9:19:7e:4d: 5d:a9:09:4b:c5:5a:73:63:3b:21:fc:0f:6e:7c:92:be:30:b3: 66:d4:9f:73:84:a2:1b:78:30:1a:e3:2d:a2:fd:a0:39:1e:c1: 4b:4f:a9:70:e1:9c:6a:90:1b:7f:c5:a7:e6:19:59:1c:12:96: 54:4d:d9:c9:67:1b:01:56:cc:f5:b0:72:3a:78:cf:ec:8f:31: 70:d7:19:e3:e0:97:ec:fd:ac:ba:7c:61:18:71:45:f7:18:15: 2a:7a:50:8e:cb:eb:64:ff:61:c4:d0:36:52:38:10:0d:4e:60: 46:f0:f1:a9:14:c1:5b:9e:d9:ae:c7:59:6b:53:8c:80:4d:08: 37:7a:10:af:9b:a2:c9:63:cd:36:2e:32:0a:51:fc:61:d5:b9: 53:12:0d:ef:b2:88:05:33:03:52:9c:f5:b4:f9:ff:0a:65:26: d1:bd:cd:e4:8e:89:b4:6a:9c:3d:a7:45:02:17:5d:2b:d4:13: be:28:e4:4f:c4:fe:04:52:8e:8d:b0:39:c5:13:44:92:8c:80: e6:e8:c3:10:14:86:f9:db:0c:25:9c:8e:f8:2d:65:eb:aa:71: 38:9e:7d:8e:05:34:9c:15:32:53:a5:fc:60:62:f7:71:b0:8b: d5:c3:fa:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7W/H4n5VjYpHqAYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA1OWQzZjgtNWI4Mi00ZGQ4LTk1NGMtZmExN2RiNTkw ZDM2MB4XDTI2MDgxNTAxMDAxMloXDTI2MTExMzAyMDAxMlowLzEtMCsGA1UEAxMk MzBkODAzYTItYjRlNS00ZGEzLWFjOGQtZjdjYzY1MjNmMmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgB7IGwtX2Faz1hC0hPFboXGG6qnBksLrwmg3 ACpEo5HEHX2/UOajEDLixPfiLTe+2cDj63JhBZQHuCHOU3Yz0k2SBcwuA/dm0FIW MxfSZZqkjP6c92DnEUSQrSe5v8RfjDX2+TWrgAvDJxk53Nu0ilZ5LfE5yDkbXrSw Ao8v0I0r0VIdQudwJQpU08r0/u/2pztHZyc0kHG/0yFcfRNGEaHDZ/VMAUbfHLVx 5+Savt/LXhtFY0GiXECXEjx4t28U0r1id1o/U/jdsYxwJW31C4hlf9JVmRpoYd5l 7NnpJ0pvU+y6PXcrwPbz4CXwyW98OA2luc07BJkqRCyONYlRLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCbErqe76WDZb0v1khu8hCz+h6jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85MDU5 ZDNmOC01YjgyLTRkZDgtOTU0Yy1mYTE3ZGI1OTBkMzYvYTBlYTZjNjMtMmJiYy0z NDA0LTg1NDctNDQ4YWMwOWY4NGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOTA1OWQzZjgtNWI4Mi00ZGQ4LTk1 NGMtZmExN2RiNTkwZDM2LzkwNTlkM2Y4LTViODItNGRkOC05NTRjLWZhMTdkYjU5 MGQzNi5jcmwwHwYDVR0jBBgwFoAU/jtKDqBtR8V9fQetSSydm9JKnAswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi85MDU5ZDNmOC01YjgyLTRkZDgtOTU0Yy1mYTE3 ZGI1OTBkMzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJhhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4kzFrzvXOVYrmkwvjD2Rl+TV2pCUvFWnNjOyH8D258kr4ws2bUn3OE oht4MBrjLaL9oDkewUtPqXDhnGqQG3/Fp+YZWRwSllRN2clnGwFWzPWwcjp4z+yP MXDXGePgl+z9rLp8YRhxRfcYFSp6UI7L62T/YcTQNlI4EA1OYEbw8akUwVue2a7H WWtTjIBNCDd6EK+bosljzTYuMgpR/GHVuVMSDe+yiAUzA1Kc9bT5/wplJtG9zeSO ibRqnD2nRQIXXSvUE74o5E/E/gRSjo2wOcUTRJKMgObowxAUhvnbDCWcjvgtZeuq cTiefY4FNJwVMlOl/GBi93Gwi9XD+iQ= -----END CERTIFICATE-----Generated at Tue Aug 25 09:37:08 2026 by rpki-client