$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/a88af44d-0a00-33c4-b8d3-85ec3043892b.roa File: a88af44d-0a00-33c4-b8d3-85ec3043892b.roa (raw, json) Hash identifier: fsxm7mfhL1qRsS3MuALk3qEtV1PgeFm6ia44miFqd1s= Subject key identifier: 37:C7:3B:46:A9:3C:8C:53:29:14:D5:0C:EE:31:4E:03:A5:69:62:03 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584F53A72F47937D4128132F3480 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/a88af44d-0a00-33c4-b8d3-85ec3043892b.roa Signing time: Mon 28 Sep 2026 16:44:24 +0000 ROA not before: Mon 28 Sep 2026 16:44:24 +0000 ROA not after: Sun 27 Dec 2026 17:44:24 +0000 asID: 9009 IP address blocks: 192.48.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:a7:2f:47:93:7d:41:28:13:2f:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Sep 28 16:44:24 2026 GMT Not After : Dec 27 17:44:24 2026 GMT Subject: CN=5cbf21c9-0383-4987-96d9-f8f9623a7759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a6:96:32:1e:df:b7:b7:e6:92:f8:14:42:b0: 82:fd:0c:7b:33:01:ac:88:8c:2f:4f:80:f1:c8:1d: 19:fd:9d:2a:03:5f:84:84:69:7e:d2:ea:71:52:85: d9:02:82:6a:6d:7f:ff:64:19:2f:60:f3:38:ab:b4: 4f:85:82:0f:c1:55:c9:b9:1c:6a:6c:69:91:14:b3: 4b:54:fd:20:42:e5:55:ad:46:4e:0a:93:f1:96:86: 5b:a2:bc:e5:07:5d:8f:03:86:b5:6e:2d:1f:d6:88: fb:83:68:9f:9b:6d:b4:55:08:4a:76:d3:6b:a1:d0: d6:de:da:c3:06:db:93:c2:68:db:0b:ba:3f:f2:68: 76:3f:53:14:4c:9e:09:af:0b:d8:d0:ee:42:99:4e: 77:0b:4e:59:31:e0:38:7f:f4:c2:f2:77:75:7f:1d: 7e:be:8c:24:19:db:29:f4:0e:4e:e4:1b:02:2c:54: 31:2c:2d:a7:fc:93:0f:ef:f9:fc:66:5b:c1:5c:30: 1e:df:c9:fa:0b:b5:d5:2a:c9:e7:95:44:01:c5:dc: 32:41:70:46:06:6a:05:1d:ff:06:e6:6f:c8:14:3f: a5:91:c5:52:98:a0:d9:91:2d:84:8c:8f:af:da:bc: a1:d2:c2:20:9b:8f:15:dc:b0:21:70:f8:45:ce:5e: d6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C7:3B:46:A9:3C:8C:53:29:14:D5:0C:EE:31:4E:03:A5:69:62:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/a88af44d-0a00-33c4-b8d3-85ec3043892b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 192.48.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:85:83:a0:55:c3:4c:95:78:c2:4c:25:ec:ee:b1:37:46:cd: d7:78:42:05:56:07:ca:c7:c8:ab:f0:dc:b8:82:a9:a1:ad:a1: c7:d4:76:52:9a:57:8c:c5:5a:76:4c:32:3d:6a:e0:4d:24:bd: 88:5e:ff:96:e0:3c:8a:f6:f2:de:2c:15:ec:bb:ea:49:a7:ff: 8e:a8:3d:14:9a:37:b9:7e:98:4b:55:a8:ff:28:45:1a:ee:d7: 06:82:51:fc:c8:3e:38:cf:3e:e9:49:db:b0:a1:60:a8:a2:40: 78:b2:96:e3:6d:46:75:aa:2c:a0:04:18:15:0f:f4:0e:ed:13: 42:30:57:6e:0b:e0:26:80:46:fa:ce:1a:06:7b:e3:bc:b2:3c: 2d:45:ac:b2:23:9b:8b:5c:83:f7:2b:b7:3f:67:73:05:56:10: 68:a1:64:99:eb:ed:e6:b7:d0:4c:bd:71:4c:67:9f:15:6f:b6: a2:d4:e1:cb:6c:a0:ab:84:2e:32:11:50:f3:ec:8e:8e:15:1c: 19:65:ef:0f:f0:81:66:54:f5:44:71:7a:ae:a1:86:b3:a0:a9: 5c:f1:47:43:c8:94:48:46:c2:f4:4a:01:a8:1c:48:e2:01:dd: 8e:52:0d:90:f2:4a:16:28:f5:f6:05:2d:d0:a3:1b:00:58:b9: 67:47:5f:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Tpy9Hk31BKBMvNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDkyODE2NDQyNFoXDTI2MTIyNzE3NDQyNFowLzEtMCsGA1UEAxMk NWNiZjIxYzktMDM4My00OTg3LTk2ZDktZjhmOTYyM2E3NzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqaWMh7ft7fmkvgUQrCC/Qx7MwGsiIwvT4Dx yB0Z/Z0qA1+EhGl+0upxUoXZAoJqbX//ZBkvYPM4q7RPhYIPwVXJuRxqbGmRFLNL VP0gQuVVrUZOCpPxloZborzlB12PA4a1bi0f1oj7g2ifm220VQhKdtNrodDW3trD BtuTwmjbC7o/8mh2P1MUTJ4JrwvY0O5CmU53C05ZMeA4f/TC8nd1fx1+vowkGdsp 9A5O5BsCLFQxLC2n/JMP7/n8ZlvBXDAe38n6C7XVKsnnlUQBxdwyQXBGBmoFHf8G 5m/IFD+lkcVSmKDZkS2EjI+v2ryh0sIgm48V3LAhcPhFzl7WmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfHO0apPIxTKRTVDO4xTgOlaWIDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvYTg4YWY0NGQtMGEwMC0z M2M0LWI4ZDMtODVlYzMwNDM4OTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDCeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuFg6BVw0yVeMJMJezusTdGzdd4QgVWB8rHyKvw3LiCqaGtocfUdlKa V4zFWnZMMj1q4E0kvYhe/5bgPIr28t4sFey76kmn/46oPRSaN7l+mEtVqP8oRRru 1waCUfzIPjjPPulJ27ChYKiiQHiyluNtRnWqLKAEGBUP9A7tE0IwV24L4CaARvrO GgZ747yyPC1FrLIjm4tcg/crtz9ncwVWEGihZJnr7ea30Ey9cUxnnxVvtqLU4cts oKuELjIRUPPsjo4VHBll7w/wgWZU9URxeq6hhrOgqVzxR0PIlEhGwvRKAagcSOIB 3Y5SDZDyShYo9fYFLdCjGwBYuWdHX8g= -----END CERTIFICATE-----Generated at Mon Oct 19 20:58:19 2026 by rpki-client