$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/87f5be57-4fb6-326f-a7a7-31888f0e6a87.roa File: 87f5be57-4fb6-326f-a7a7-31888f0e6a87.roa (raw, json) Hash identifier: m5S5s6/Y2fXAr242jFsXQjLMquhvUl2GbHoYE6DzopU= Subject key identifier: 81:B4:4B:A9:73:54:38:AF:7D:E2:10:85:14:57:5D:C8:24:FB:AB:42 Certificate issuer: /CN=324346b5-3875-43b0-bb0d-8052274567d4 Certificate serial: 010D0C9F4328584F093CDCDD271C178EBB772814 Authority key identifier: 4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/87f5be57-4fb6-326f-a7a7-31888f0e6a87.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 55 IP address blocks: 192.84.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:dc:dd:27:1c:17:8e:bb:77:28:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324346b5-3875-43b0-bb0d-8052274567d4 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=af041b50-15e3-4245-bf41-9a8aa39cdcfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e1:d9:57:49:91:f2:48:db:48:3c:ed:de:a9: bd:ac:31:3a:97:c6:5f:0f:dd:0e:f4:45:5f:93:4b: cc:3a:dc:e1:b0:5c:0f:1a:0f:93:64:d7:a5:29:13: 64:d4:63:8e:8b:c4:63:75:97:90:cd:30:8a:9b:d7: 68:66:08:eb:67:7b:96:f1:32:be:81:57:c6:ca:39: 06:fd:50:4c:85:4d:8b:db:24:1e:f8:d2:17:c1:6e: 4b:fc:4a:ab:4c:26:5b:f0:d6:4c:7a:be:c8:da:8b: 76:61:43:e7:38:48:31:60:1f:e1:a1:ae:3f:15:e6: ee:a8:c3:a4:e6:62:2f:d4:b5:9b:af:f3:4d:58:bf: a5:f7:d7:bf:6b:48:72:63:97:60:d3:0e:25:37:a2: 87:e2:6b:39:26:43:88:28:f7:d8:74:65:1a:2f:53: f1:b2:d5:23:eb:61:d3:c3:a4:d3:1c:8f:d5:33:0a: 53:89:86:32:9c:c4:77:58:c2:d5:3d:f7:ff:ba:bb: 59:72:4a:30:94:4c:7d:c3:61:aa:89:af:b1:2c:b9: a4:7b:f6:0b:fd:93:de:70:58:dc:f0:92:e4:fc:8a: 3e:8c:5c:34:b6:5d:f6:1e:ed:af:e1:25:52:2b:2d: 2a:f9:df:92:4b:c3:a5:6e:3e:2d:e9:eb:45:f5:f2: 02:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B4:4B:A9:73:54:38:AF:7D:E2:10:85:14:57:5D:C8:24:FB:AB:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/87f5be57-4fb6-326f-a7a7-31888f0e6a87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl X509v3 Authority Key Identifier: keyid:4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer sbgp-ipAddrBlock: critical IPv4: 192.84.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:02:dd:66:4f:65:1f:ff:e8:95:5e:67:12:a0:ad:f2:ba:2e: 8b:9a:a9:a7:1b:55:9e:5d:5b:4f:47:50:59:91:9b:ed:5e:46: 5d:28:da:d1:75:77:e4:6a:2a:67:d3:15:db:66:a9:3d:70:94: 21:8f:91:75:9c:69:9d:93:1a:7c:99:86:41:97:19:22:1c:b7: a0:d4:ee:e4:0a:a9:39:d0:a7:8c:bd:19:08:4e:05:ab:87:63: 4f:1b:c9:0d:2b:be:35:c0:bc:94:cc:c3:14:ca:8e:52:f1:00: 67:94:f1:f7:95:3f:f3:49:17:7d:ff:9a:df:9f:f5:7c:24:7c: d0:2c:90:a9:c5:ba:b6:94:9f:cf:2e:80:a6:7b:ef:cd:d8:c4: 3a:a6:03:20:b4:f9:27:a5:32:7b:70:a3:67:10:52:b8:bd:83: b2:4d:2c:8c:9f:a4:0b:fc:c2:af:68:1e:83:73:bc:f3:d2:66: ff:ed:09:ad:1f:a7:fa:32:99:f2:fc:47:a9:9e:48:c6:da:3c: 90:6b:86:4e:09:e9:43:f0:f9:6a:c1:32:31:07:4a:af:ee:ae: 7c:04:a5:8d:5d:19:0e:08:c2:e9:81:9d:2f:c0:cd:a3:77:d9: 18:44:63:17:32:12:34:e8:2d:18:14:77:b4:75:28:02:c0:90: 4d:e3:9c:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPNzdJxwXjrt3KBQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0MzQ2YjUtMzg3NS00M2IwLWJiMGQtODA1MjI3NDU2 N2Q0MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk YWYwNDFiNTAtMTVlMy00MjQ1LWJmNDEtOWE4YWEzOWNkY2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuHZV0mR8kjbSDzt3qm9rDE6l8ZfD90O9EVf k0vMOtzhsFwPGg+TZNelKRNk1GOOi8RjdZeQzTCKm9doZgjrZ3uW8TK+gVfGyjkG /VBMhU2L2yQe+NIXwW5L/EqrTCZb8NZMer7I2ot2YUPnOEgxYB/hoa4/FebuqMOk 5mIv1LWbr/NNWL+l99e/a0hyY5dg0w4lN6KH4ms5JkOIKPfYdGUaL1PxstUj62HT w6TTHI/VMwpTiYYynMR3WMLVPff/urtZckowlEx9w2Gqia+xLLmke/YL/ZPecFjc 8JLk/Io+jFw0tl32Hu2v4SVSKy0q+d+SS8Olbj4t6etF9fIChwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIG0S6lzVDivfeIQhRRXXcgk+6tCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMjQz NDZiNS0zODc1LTQzYjAtYmIwZC04MDUyMjc0NTY3ZDQvODdmNWJlNTctNGZiNi0z MjZmLWE3YTctMzE4ODhmMGU2YTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzI0MzQ2YjUtMzg3NS00M2IwLWJi MGQtODA1MjI3NDU2N2Q0LzMyNDM0NmI1LTM4NzUtNDNiMC1iYjBkLTgwNTIyNzQ1 NjdkNC5jcmwwHwYDVR0jBBgwFoAUSik0xZJmeenp4Av+f7bw6Cl2XiQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMjQzNDZiNS0zODc1LTQzYjAtYmIwZC04MDUy Mjc0NTY3ZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFQCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoC3WZPZR//6JVeZxKgrfK6LouaqacbVZ5dW09HUFmRm+1eRl0o2tF1 d+RqKmfTFdtmqT1wlCGPkXWcaZ2TGnyZhkGXGSIct6DU7uQKqTnQp4y9GQhOBauH Y08byQ0rvjXAvJTMwxTKjlLxAGeU8feVP/NJF33/mt+f9XwkfNAskKnFuraUn88u gKZ7783YxDqmAyC0+SelMntwo2cQUri9g7JNLIyfpAv8wq9oHoNzvPPSZv/tCa0f p/oymfL8R6meSMbaPJBrhk4J6UPw+WrBMjEHSq/urnwEpY1dGQ4IwumBnS/AzaN3 2RhEYxcyEjToLRgUd7R1KALAkE3jnJk= -----END CERTIFICATE-----Generated at Sat Sep 26 13:53:25 2026 by rpki-client