$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/a1b7b8d1-44b5-3966-b053-c661a6fa3494.roa File: a1b7b8d1-44b5-3966-b053-c661a6fa3494.roa (raw, json) Hash identifier: vxWkNPlrZNpfzDLRW6QUAFKvqPJfIFveMzbU8Hd7eso= Subject key identifier: A8:83:A1:01:E5:F8:44:6C:C0:04:77:9B:4E:C2:99:6D:BD:DE:FB:47 Certificate issuer: /CN=8bb8bd36-b264-4279-a16e-360f4a33eb80 Certificate serial: 010D0C9F4328584EEEB75BE594A20058CDEAB300 Authority key identifier: 9A:14:65:DF:F1:9B:5E:23:25:AB:9B:30:D0:F1:24:8C:6C:27:AD:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/a1b7b8d1-44b5-3966-b053-c661a6fa3494.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 29764 IP address blocks: 192.48.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:5b:e5:94:a2:00:58:cd:ea:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bb8bd36-b264-4279-a16e-360f4a33eb80 Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=f541cb9e-7292-49b3-be44-39f4e2a96c80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2a:ca:8a:b7:0f:a2:ef:cc:6b:3b:c3:f8:68: 1c:c7:6c:97:b8:9e:43:f0:d6:b2:78:9a:8b:49:4f: a0:14:81:d2:27:1d:0d:82:5f:c6:96:2a:1b:fd:83: 81:09:e6:4a:b2:a6:f5:8e:63:ea:53:6d:e1:99:01: 85:d0:ef:64:6f:af:1f:64:18:30:f3:e1:44:3e:c4: e0:7f:6a:4d:1f:62:9a:34:89:ee:fe:e7:0a:8b:fb: 73:81:c5:97:28:4f:d8:60:e0:4d:1f:7d:5e:06:25: fd:70:2f:df:4d:e6:f6:51:f7:c7:16:4a:59:6f:6c: 3e:af:2e:3f:3a:3b:17:35:06:a7:4e:26:95:b9:c5: f6:f1:18:b0:db:2c:2a:7a:7c:f3:32:8f:5d:cd:e2: 81:f3:c1:3f:2d:a0:0f:a8:61:39:5d:f4:06:4f:c4: 95:8d:c0:69:1f:9a:a0:7e:a3:ed:cb:95:8a:37:33: dc:d1:a2:56:d2:6a:7a:ce:92:18:1b:44:8b:8f:fd: a9:4e:a3:4b:b0:50:b5:5c:f0:32:c7:a2:93:cb:40: f7:74:18:ec:43:7d:5c:bf:77:80:1b:51:64:4a:00: 4c:9b:4b:70:cb:49:5c:e5:dd:6a:99:6b:56:20:02: 83:19:37:df:ed:8f:8b:50:15:c7:27:cb:25:97:d7: 1e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:83:A1:01:E5:F8:44:6C:C0:04:77:9B:4E:C2:99:6D:BD:DE:FB:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/a1b7b8d1-44b5-3966-b053-c661a6fa3494.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.crl X509v3 Authority Key Identifier: keyid:9A:14:65:DF:F1:9B:5E:23:25:AB:9B:30:D0:F1:24:8C:6C:27:AD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer sbgp-ipAddrBlock: critical IPv4: 192.48.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:67:89:f5:ae:98:08:72:95:7c:55:ac:cd:dc:c1:82:e8:23: 59:a5:82:bd:0a:97:37:83:10:e6:7a:2a:21:43:7f:65:92:1d: d7:19:48:df:a2:83:ed:40:1f:d5:48:fd:d4:86:fd:81:48:14: 30:bd:bf:79:e1:1d:29:c2:7d:fc:ed:d8:aa:7e:17:f9:4e:3a: 3a:ec:96:07:85:66:e0:23:97:60:d9:78:1a:ea:fd:31:da:9c: fc:12:7d:18:28:4f:c9:2d:8d:07:90:cf:c1:f5:73:90:9c:cb: 1b:50:88:99:9b:7d:9e:7e:15:80:3d:0c:7c:e3:a1:3c:88:a1: e6:3e:c6:de:de:6c:c4:b3:7b:90:19:01:d3:e9:35:52:40:93: a0:cd:df:b0:5a:a8:a7:4d:3c:b3:9d:89:fe:15:e9:2d:71:e4: ee:3c:9c:9d:a8:46:5b:6b:0b:71:2f:de:9f:45:c8:20:d4:fc: 58:cb:46:32:de:06:fd:5a:e7:a2:3e:12:7b:f4:49:30:e4:26: da:63:8e:26:d9:9c:0d:20:73:e3:20:cc:c7:ef:64:d1:c2:56: bd:37:45:88:aa:f9:a6:75:99:5b:84:f1:cb:73:58:a3:23:e0: 8e:e0:da:bc:6b:a7:f8:ad:cb:02:76:c5:25:68:a9:1c:95:b3: 97:49:53:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut1vllKIAWM3qswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJiOGJkMzYtYjI2NC00Mjc5LWExNmUtMzYwZjRhMzNl YjgwMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk ZjU0MWNiOWUtNzI5Mi00OWIzLWJlNDQtMzlmNGUyYTk2YzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApirKircPou/MazvD+Ggcx2yXuJ5D8NayeJqL SU+gFIHSJx0Ngl/Gliob/YOBCeZKsqb1jmPqU23hmQGF0O9kb68fZBgw8+FEPsTg f2pNH2KaNInu/ucKi/tzgcWXKE/YYOBNH31eBiX9cC/fTeb2UffHFkpZb2w+ry4/ OjsXNQanTiaVucX28Riw2ywqenzzMo9dzeKB88E/LaAPqGE5XfQGT8SVjcBpH5qg fqPty5WKNzPc0aJW0mp6zpIYG0SLj/2pTqNLsFC1XPAyx6KTy0D3dBjsQ31cv3eA G1FkSgBMm0twy0lc5d1qmWtWIAKDGTff7Y+LUBXHJ8sll9ceXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiDoQHl+ERswAR3m07CmW293vtHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84YmI4 YmQzNi1iMjY0LTQyNzktYTE2ZS0zNjBmNGEzM2ViODAvYTFiN2I4ZDEtNDRiNS0z OTY2LWIwNTMtYzY2MWE2ZmEzNDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGJiOGJkMzYtYjI2NC00Mjc5LWEx NmUtMzYwZjRhMzNlYjgwLzhiYjhiZDM2LWIyNjQtNDI3OS1hMTZlLTM2MGY0YTMz ZWI4MC5jcmwwHwYDVR0jBBgwFoAUmhRl3/GbXiMlq5sw0PEkjGwnrbowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84YmI4YmQzNi1iMjY0LTQyNzktYTE2ZS0zNjBm NGEzM2ViODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDDpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJnifWumAhylXxVrM3cwYLoI1mlgr0KlzeDEOZ6KiFDf2WSHdcZSN+i g+1AH9VI/dSG/YFIFDC9v3nhHSnCffzt2Kp+F/lOOjrslgeFZuAjl2DZeBrq/THa nPwSfRgoT8ktjQeQz8H1c5CcyxtQiJmbfZ5+FYA9DHzjoTyIoeY+xt7ebMSze5AZ AdPpNVJAk6DN37BaqKdNPLOdif4V6S1x5O48nJ2oRltrC3Ev3p9FyCDU/FjLRjLe Bv1a56I+Env0STDkJtpjjibZnA0gc+MgzMfvZNHCVr03RYiq+aZ1mVuE8ctzWKMj 4I7g2rxrp/itywJ2xSVoqRyVs5dJUxM= -----END CERTIFICATE-----Generated at Sun Sep 13 19:42:38 2026 by rpki-client