$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/fd2a405a-47c5-3d61-a85d-a24a5c5ec6d3.roa File: fd2a405a-47c5-3d61-a85d-a24a5c5ec6d3.roa (raw, json) Hash identifier: Q8hDThVgXkf+8ZfVr5D9inXsyVR2PX25ErpOIWFqjQQ= Subject key identifier: B8:EA:1A:97:C2:86:17:55:D2:33:F7:A2:CD:B8:D5:70:94:CB:9B:64 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584F086416C0BD7127C40F9503C0 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/fd2a405a-47c5-3d61-a85d-a24a5c5ec6d3.roa Signing time: Tue 01 Sep 2026 17:43:35 +0000 ROA not before: Tue 01 Sep 2026 17:43:35 +0000 ROA not after: Mon 30 Nov 2026 18:43:35 +0000 asID: 397423 IP address blocks: 192.48.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:08:64:16:c0:bd:71:27:c4:0f:95:03:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Sep 1 17:43:35 2026 GMT Not After : Nov 30 18:43:35 2026 GMT Subject: CN=e5cb7bb3-2d45-47f0-b735-7a2b43a13a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:63:0c:62:39:d7:25:d6:9a:ce:11:67:ef:57: f0:2e:ea:8f:fd:96:27:fa:cc:3c:fc:fa:59:b9:cf: ff:0f:b8:99:62:5e:55:42:eb:56:f7:62:d7:f6:b5: 14:ad:c4:41:75:01:e3:94:87:5c:50:5e:cf:a4:4c: 33:75:ae:74:3c:d8:dc:32:52:f7:38:4a:28:e6:00: 8e:66:34:43:66:30:53:68:a9:da:d2:c9:d1:d2:69: 08:89:f6:e4:06:92:1a:76:60:97:aa:68:56:58:39: 53:7a:ab:8a:3d:c5:7b:e1:5e:75:35:f9:dd:14:46: 56:8d:81:0b:c2:d5:d4:9d:b2:88:4b:a1:e3:02:3a: 1e:e9:5f:fa:23:b7:7d:ab:69:7f:a0:2d:e1:73:02: d3:b0:d1:81:39:18:e2:29:a1:7c:34:d8:32:c8:81: b0:4b:85:36:1c:53:c3:39:65:85:50:9f:6e:9b:a3: 4c:e7:af:ea:21:05:2a:85:04:d1:ac:3d:eb:45:3e: 72:d7:f6:fd:02:2c:64:9a:86:e5:a8:28:c0:9b:2f: 2e:48:d9:ca:ca:dc:c9:a4:53:5d:6c:04:1b:f3:9a: e2:e1:10:3b:b5:f5:1b:41:26:3e:f0:97:e3:51:6b: 53:b4:1e:c5:b6:de:a5:e4:a3:38:de:2e:10:05:99: eb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:EA:1A:97:C2:86:17:55:D2:33:F7:A2:CD:B8:D5:70:94:CB:9B:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/fd2a405a-47c5-3d61-a85d-a24a5c5ec6d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 192.48.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:c2:78:5e:f7:25:48:d6:48:41:6d:2e:a8:8f:36:5f:6a:70: 0a:76:d2:8d:a3:44:4f:e9:91:a0:80:6e:34:c1:74:a3:c1:53: 2e:9f:4b:98:a6:d5:a3:b1:77:64:eb:4b:dd:9b:6a:74:d0:71: 04:db:83:e0:1f:ff:d9:26:24:83:10:f2:82:e3:e0:e3:fa:a5: fd:ed:e7:f4:92:ea:24:7b:4f:3e:56:8b:0c:2c:00:cc:29:50: ee:3a:ea:5e:36:98:f5:7c:76:de:4c:56:43:52:f3:7f:23:8d: 08:fe:fe:3e:55:a5:b9:84:0d:07:c2:94:bc:22:74:cd:66:01: 11:50:83:00:0e:91:9b:38:4e:18:49:d6:5c:09:21:cf:79:fb: 7a:00:d3:d6:4f:d1:15:01:c6:c4:a1:27:44:76:f0:2c:92:d6: b8:2b:21:f8:01:68:03:a1:2d:8c:64:19:53:97:8d:e8:1d:bf: eb:5e:3b:3f:8d:48:82:c4:53:6e:86:31:28:71:37:95:63:ca: 0f:e1:40:c7:bd:fc:6e:44:3f:42:08:ec:b9:e2:48:f4:e0:49: 75:91:6d:b4:7a:c7:87:9d:ea:4c:e5:f9:f6:c0:8b:46:3e:c3: 28:f8:09:40:bf:ff:f8:5c:d6:ad:b9:38:10:4b:ed:06:55:4d: eb:33:3d:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8IZBbAvXEnxA+VA8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDkwMTE3NDMzNVoXDTI2MTEzMDE4NDMzNVowLzEtMCsGA1UEAxMk ZTVjYjdiYjMtMmQ0NS00N2YwLWI3MzUtN2EyYjQzYTEzYTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmMMYjnXJdaazhFn71fwLuqP/ZYn+sw8/PpZ uc//D7iZYl5VQutW92LX9rUUrcRBdQHjlIdcUF7PpEwzda50PNjcMlL3OEoo5gCO ZjRDZjBTaKna0snR0mkIifbkBpIadmCXqmhWWDlTequKPcV74V51NfndFEZWjYEL wtXUnbKIS6HjAjoe6V/6I7d9q2l/oC3hcwLTsNGBORjiKaF8NNgyyIGwS4U2HFPD OWWFUJ9um6NM56/qIQUqhQTRrD3rRT5y1/b9AixkmoblqCjAmy8uSNnKytzJpFNd bAQb85ri4RA7tfUbQSY+8JfjUWtTtB7Ftt6l5KM43i4QBZnryQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjqGpfChhdV0jP3os241XCUy5tkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvZmQyYTQwNWEtNDdjNS0z ZDYxLWE4NWQtYTI0YTVjNWVjNmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDDHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTCeF73JUjWSEFtLqiPNl9qcAp20o2jRE/pkaCAbjTBdKPBUy6fS5im 1aOxd2TrS92banTQcQTbg+Af/9kmJIMQ8oLj4OP6pf3t5/SS6iR7Tz5WiwwsAMwp UO466l42mPV8dt5MVkNS838jjQj+/j5VpbmEDQfClLwidM1mARFQgwAOkZs4ThhJ 1lwJIc95+3oA09ZP0RUBxsShJ0R28CyS1rgrIfgBaAOhLYxkGVOXjegdv+teOz+N SILEU26GMShxN5Vjyg/hQMe9/G5EP0II7LniSPTgSXWRbbR6x4ed6kzl+fbAi0Y+ wyj4CUC///hc1q25OBBL7QZVTeszPaA= -----END CERTIFICATE-----Generated at Sun Sep 13 07:04:47 2026 by rpki-client