$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/cfba70da-77c2-3171-804a-062fa969a68d.roa File: cfba70da-77c2-3171-804a-062fa969a68d.roa (raw, json) Hash identifier: Bd3oAMPCArGCwgsRM/Q5rSbTHcCGniivGaxYPKl7H7c= Subject key identifier: F9:38:97:BA:AB:BE:AE:59:A6:9B:A2:E1:15:44:EA:AF:02:CF:98:62 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584F0AFDCC2E5BF12FCC914A1680 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/cfba70da-77c2-3171-804a-062fa969a68d.roa Signing time: Wed 02 Sep 2026 16:04:54 +0000 ROA not before: Wed 02 Sep 2026 16:04:54 +0000 ROA not after: Tue 01 Dec 2026 17:04:54 +0000 asID: 11138 IP address blocks: 192.26.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:fd:cc:2e:5b:f1:2f:cc:91:4a:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Sep 2 16:04:54 2026 GMT Not After : Dec 1 17:04:54 2026 GMT Subject: CN=ab110f0a-adfc-4b68-888e-cbdc9ac1af63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:88:25:cc:8a:62:af:c4:21:48:4f:c5:4c:1e: d0:e3:2b:86:2f:5d:61:33:98:3f:5b:df:52:58:67: 52:9c:fa:f4:67:45:ec:91:b0:c5:ad:20:2e:97:27: 92:c6:09:89:9e:5f:b2:7b:5f:8e:3b:63:2e:ed:a9: 15:d1:eb:02:f8:8f:1d:74:68:97:40:c8:6c:9a:a6: 11:9c:11:1d:0b:4f:de:92:d0:3c:7b:61:57:d3:78: 45:dd:bb:ec:4e:47:a5:cd:53:85:f5:cc:ea:5b:83: 95:c9:42:e5:9a:39:e0:62:99:88:ee:77:6d:a3:a8: d7:e6:8f:3d:36:43:fb:eb:d6:61:d0:73:ff:b6:a1: f2:52:12:20:21:af:b9:59:68:31:5e:92:44:4f:2a: 4b:a9:7c:4d:fe:00:80:b8:97:02:77:5d:5b:2a:70: 37:e4:25:22:9d:d2:e5:da:02:6b:ca:59:51:91:d3: 15:23:76:1e:82:b3:c4:31:cc:66:84:5b:e9:c9:39: 20:d6:de:48:4a:dc:e0:ce:05:1f:c1:ec:0d:04:99: 81:9d:d1:98:f3:27:32:05:8c:23:f9:72:07:92:d7: 2a:7f:66:a4:b8:db:b5:c6:48:ff:ff:13:c9:9a:08: a1:12:a3:5f:c5:b4:22:f7:a6:dd:3d:8b:87:0a:a9: 41:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:38:97:BA:AB:BE:AE:59:A6:9B:A2:E1:15:44:EA:AF:02:CF:98:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/cfba70da-77c2-3171-804a-062fa969a68d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 192.26.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:5d:f8:f9:51:66:03:22:60:a0:b6:70:b3:af:b4:1f:79:f0: 9e:6b:33:d9:71:c0:41:25:17:43:29:d4:e1:8a:bc:09:13:00: 7e:3d:53:f7:b4:89:7d:87:bb:82:98:40:65:f5:70:a7:e9:3b: f0:9f:3e:be:bf:1d:8b:ff:dc:83:47:cd:88:97:a5:fb:f3:fa: 18:c6:d7:1b:15:c8:53:3b:f8:c2:af:9a:ac:ac:e5:85:89:2c: 29:54:09:4b:46:f9:c7:d8:99:7f:d5:b9:86:1a:2f:4f:90:fb: b5:8c:d6:83:7b:91:32:cc:ee:cf:be:f7:ab:74:68:43:b3:aa: 3b:43:8a:95:bd:a2:a1:23:77:68:5e:2d:65:f2:05:2e:b1:68: e9:21:6f:54:c2:75:f3:26:68:02:49:b9:f3:d4:f9:2e:49:bd: 82:b3:76:e7:bd:31:2d:aa:90:50:6e:39:ef:09:3d:91:c3:59: b5:89:72:42:b4:8d:fd:85:60:10:8c:47:09:ee:55:a8:20:2d: 6e:06:c0:95:fc:61:d7:78:1b:10:72:1a:93:42:90:70:53:cf: 67:6c:2a:04:5c:50:ad:aa:38:84:70:32:d5:74:4a:86:97:5e: d9:0f:b6:d3:bf:52:8c:0a:76:7a:2d:0c:15:b5:01:14:00:4a: 19:32:e6:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8K/cwuW/EvzJFKFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDkwMjE2MDQ1NFoXDTI2MTIwMTE3MDQ1NFowLzEtMCsGA1UEAxMk YWIxMTBmMGEtYWRmYy00YjY4LTg4OGUtY2JkYzlhYzFhZjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24glzIpir8QhSE/FTB7Q4yuGL11hM5g/W99S WGdSnPr0Z0XskbDFrSAulyeSxgmJnl+ye1+OO2Mu7akV0esC+I8ddGiXQMhsmqYR nBEdC0/ektA8e2FX03hF3bvsTkelzVOF9czqW4OVyULlmjngYpmI7ndto6jX5o89 NkP769Zh0HP/tqHyUhIgIa+5WWgxXpJETypLqXxN/gCAuJcCd11bKnA35CUindLl 2gJryllRkdMVI3YegrPEMcxmhFvpyTkg1t5IStzgzgUfwewNBJmBndGY8ycyBYwj +XIHktcqf2akuNu1xkj//xPJmgihEqNfxbQi96bdPYuHCqlBSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPk4l7qrvq5Zppui4RVE6q8Cz5hiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvY2ZiYTcwZGEtNzdjMi0z MTcxLTgwNGEtMDYyZmE5NjlhNjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwBo6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZd+PlRZgMiYKC2cLOvtB958J5rM9lxwEElF0Mp1OGKvAkTAH49U/e0 iX2Hu4KYQGX1cKfpO/CfPr6/HYv/3INHzYiXpfvz+hjG1xsVyFM7+MKvmqys5YWJ LClUCUtG+cfYmX/VuYYaL0+Q+7WM1oN7kTLM7s++96t0aEOzqjtDipW9oqEjd2he LWXyBS6xaOkhb1TCdfMmaAJJufPU+S5JvYKzdue9MS2qkFBuOe8JPZHDWbWJckK0 jf2FYBCMRwnuVaggLW4GwJX8Ydd4GxByGpNCkHBTz2dsKgRcUK2qOIRwMtV0SoaX XtkPttO/UowKdnotDBW1ARQAShky5m8= -----END CERTIFICATE-----Generated at Sun Sep 13 07:05:02 2026 by rpki-client