$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce13cd65-cc2f-4c94-9d69-2a6db846736d/31f1afc6-a9a6-3f1e-a946-4c5157abf4aa.roa File: 31f1afc6-a9a6-3f1e-a946-4c5157abf4aa.roa (raw, json) Hash identifier: Nt8pVIuo5Ov4cgUFrDTFP6CurB9Lv4FR3rKNPsYEGjc= Subject key identifier: 99:4E:44:3B:C8:96:57:5F:0C:53:51:F5:6D:1F:84:49:FD:29:67:45 Certificate issuer: /CN=ce13cd65-cc2f-4c94-9d69-2a6db846736d Certificate serial: 010D0C9F4328584EA78FDCBED166AEC9D4802480 Authority key identifier: 09:3F:74:3A:18:E7:71:42:8E:0B:0F:83:23:7E:63:24:97:34:A0:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce13cd65-cc2f-4c94-9d69-2a6db846736d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce13cd65-cc2f-4c94-9d69-2a6db846736d/31f1afc6-a9a6-3f1e-a946-4c5157abf4aa.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 14598 IP address blocks: 192.245.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce13cd65-cc2f-4c94-9d69-2a6db846736d/ce13cd65-cc2f-4c94-9d69-2a6db846736d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce13cd65-cc2f-4c94-9d69-2a6db846736d/ce13cd65-cc2f-4c94-9d69-2a6db846736d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce13cd65-cc2f-4c94-9d69-2a6db846736d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:dc:be:d1:66:ae:c9:d4:80:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce13cd65-cc2f-4c94-9d69-2a6db846736d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5cac0251-b51b-4eab-b0fa-e0de6bbdb7bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:30:a0:d8:b3:ed:3c:b3:b9:5c:06:bb:aa:fd: c2:2b:04:b3:95:49:6d:65:d2:d7:d2:25:aa:ab:4e: d3:56:80:f5:6b:af:2b:bd:03:13:a3:9a:b1:56:3f: 21:d3:9a:2f:12:b5:70:1f:c2:a1:fb:4a:c8:df:48: 17:81:65:f4:2f:b4:85:2c:b9:b1:15:db:c0:16:86: 21:c1:85:f5:2e:6e:5c:f9:4e:29:a3:8e:b5:79:9f: 72:7f:e2:aa:85:bf:60:7e:4a:f5:8f:cd:7c:d5:bf: 8b:1a:cd:8d:f8:a9:17:bb:ee:4b:3c:89:89:7b:ef: 4d:fa:8d:95:1a:8e:d9:99:59:90:d9:45:16:7e:a4: f8:49:7a:35:ed:c4:21:f6:a9:fd:e4:71:fa:48:aa: a5:0e:85:61:41:4b:36:2f:f0:4f:b6:13:df:9a:92: 3d:ec:81:1d:f6:fc:62:6d:19:d4:b7:b9:6c:97:ee: 57:74:36:58:e4:e2:31:84:11:47:ba:f3:02:8d:96: 44:08:21:5b:af:dc:c7:b1:b4:79:d1:76:25:a2:87: 7f:5c:4f:e9:6d:aa:fa:54:7b:84:32:ab:79:c5:20: 3f:4d:8b:00:35:09:32:4a:69:d5:56:15:38:8b:ca: 5b:e6:32:b3:93:6e:d5:53:7d:80:73:a3:8d:5b:48: bb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:4E:44:3B:C8:96:57:5F:0C:53:51:F5:6D:1F:84:49:FD:29:67:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce13cd65-cc2f-4c94-9d69-2a6db846736d/31f1afc6-a9a6-3f1e-a946-4c5157abf4aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce13cd65-cc2f-4c94-9d69-2a6db846736d/ce13cd65-cc2f-4c94-9d69-2a6db846736d.crl X509v3 Authority Key Identifier: keyid:09:3F:74:3A:18:E7:71:42:8E:0B:0F:83:23:7E:63:24:97:34:A0:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce13cd65-cc2f-4c94-9d69-2a6db846736d.cer sbgp-ipAddrBlock: critical IPv4: 192.245.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:a0:f4:b7:db:46:8a:8c:35:10:98:86:5d:4e:00:d1:b6:3c: d3:e7:51:66:0f:e4:08:8b:eb:cd:a0:2d:71:7f:4d:f5:92:12: 22:70:95:5d:4c:57:f0:96:fa:14:5d:de:fa:c5:9c:27:38:2e: 1f:81:64:19:82:ce:51:78:34:b3:44:69:64:87:e7:33:bd:8f: 7f:ff:eb:ce:02:6e:ba:e3:25:70:c4:b0:f2:ec:5c:38:70:e8: fe:f7:7a:e1:88:36:b3:bf:1f:26:d1:67:3b:fb:57:6c:49:6a: e7:19:ae:4c:47:c0:33:8b:23:fb:33:a6:f6:29:7e:cc:e6:a2: a8:c5:14:52:03:a1:c8:90:db:9a:2a:7c:0b:e1:a7:b2:03:56: 0d:2a:4a:ba:b5:32:55:f4:f8:d6:c1:b9:07:da:ac:7b:78:4e: 49:a0:17:ed:ae:ad:99:d0:6e:b6:74:02:3a:b7:3e:3b:30:32: 45:74:29:cd:b1:e9:2b:69:bf:6c:d7:b0:f6:92:a8:e8:6e:48: 8c:8c:9c:0e:35:d2:ee:3b:f7:5d:b4:48:ab:08:f8:36:fb:9e: d7:1a:4c:91:c6:59:0d:89:5a:96:91:92:9e:a4:17:bb:97:46: 90:59:8d:20:e9:17:5f:9a:5c:8a:fe:c5:ff:19:e6:58:b0:19: 6d:cb:1f:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj9y+0WauydSAJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UxM2NkNjUtY2MyZi00Yzk0LTlkNjktMmE2ZGI4NDY3 MzZkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NWNhYzAyNTEtYjUxYi00ZWFiLWIwZmEtZTBkZTZiYmRiN2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzCg2LPtPLO5XAa7qv3CKwSzlUltZdLX0iWq q07TVoD1a68rvQMTo5qxVj8h05ovErVwH8Kh+0rI30gXgWX0L7SFLLmxFdvAFoYh wYX1Lm5c+U4po461eZ9yf+Kqhb9gfkr1j8181b+LGs2N+KkXu+5LPImJe+9N+o2V Go7ZmVmQ2UUWfqT4SXo17cQh9qn95HH6SKqlDoVhQUs2L/BPthPfmpI97IEd9vxi bRnUt7lsl+5XdDZY5OIxhBFHuvMCjZZECCFbr9zHsbR50XYlood/XE/pbar6VHuE Mqt5xSA/TYsANQkySmnVVhU4i8pb5jKzk27VU32Ac6ONW0i7tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlORDvIlldfDFNR9W0fhEn9KWdFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9jZTEz Y2Q2NS1jYzJmLTRjOTQtOWQ2OS0yYTZkYjg0NjczNmQvMzFmMWFmYzYtYTlhNi0z ZjFlLWE5NDYtNGM1MTU3YWJmNGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvY2UxM2NkNjUtY2MyZi00Yzk0LTlk NjktMmE2ZGI4NDY3MzZkL2NlMTNjZDY1LWNjMmYtNGM5NC05ZDY5LTJhNmRiODQ2 NzM2ZC5jcmwwHwYDVR0jBBgwFoAUCT90OhjncUKOCw+DI35jJJc0oDMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9jZTEzY2Q2NS1jYzJmLTRjOTQtOWQ2OS0yYTZk Yjg0NjczNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPVXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWg9LfbRoqMNRCYhl1OANG2PNPnUWYP5AiL682gLXF/TfWSEiJwlV1M V/CW+hRd3vrFnCc4Lh+BZBmCzlF4NLNEaWSH5zO9j3//684CbrrjJXDEsPLsXDhw 6P73euGINrO/HybRZzv7V2xJaucZrkxHwDOLI/szpvYpfszmoqjFFFIDociQ25oq fAvhp7IDVg0qSrq1MlX0+NbBuQfarHt4TkmgF+2urZnQbrZ0Ajq3PjswMkV0Kc2x 6Stpv2zXsPaSqOhuSIyMnA410u479120SKsI+Db7ntcaTJHGWQ2JWpaRkp6kF7uX RpBZjSDpF1+aXIr+xf8Z5liwGW3LH/0= -----END CERTIFICATE-----Generated at Sat Sep 5 05:20:50 2026 by rpki-client