$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/97f6a99c-5994-36e5-96af-33d5a5e18816.roa File: 97f6a99c-5994-36e5-96af-33d5a5e18816.roa (raw, json) Hash identifier: MSnCWBlkNC6+92YMTeo0rJ2ZoRYkE/dCRHoF6BtuxfY= Subject key identifier: 2C:9C:36:D5:08:98:CC:C8:AC:EF:4D:55:98:BF:F6:72:6D:AF:50:C8 Certificate issuer: /CN=798448e2-55be-4c24-8014-28c2c70dfc84 Certificate serial: 010D0C9F4328584F9BCDC13F36277FB3C9CFE700 Authority key identifier: C6:70:25:5D:39:7D:E7:0D:25:72:01:A7:2B:BD:EB:72:84:D2:D6:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/97f6a99c-5994-36e5-96af-33d5a5e18816.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 36601 IP address blocks: 192.109.92.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:c1:3f:36:27:7f:b3:c9:cf:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798448e2-55be-4c24-8014-28c2c70dfc84 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=2c4bc059-8b98-4099-aa8d-024aa24cfe66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:99:7b:eb:0c:da:ae:9f:63:37:78:fd:d0:43: 5c:73:ad:c6:88:81:a8:f1:8d:c7:45:1f:19:85:90: dd:ae:f1:a8:6e:2b:4c:1e:23:d8:65:4c:dc:ff:ec: 55:57:96:8b:e1:82:72:fb:43:26:77:e6:4e:56:cb: 39:96:1a:b0:71:89:f5:67:91:d8:e2:31:e2:84:27: 0e:c9:c1:9b:82:97:09:e8:4a:c0:40:24:c1:a7:34: 56:7b:c8:45:61:eb:90:49:f3:3d:11:bf:6e:6c:d4: ea:11:99:d3:89:e2:d5:a3:bb:e6:dd:27:a3:2c:b0: cc:7f:b9:23:b3:20:a9:c1:f2:dc:cf:37:e9:cf:7a: 02:27:f4:76:5b:40:27:31:39:cc:23:6e:da:fb:a3: af:8a:ae:ff:b7:dc:44:bc:50:0a:be:e4:d7:fd:f0: 69:44:1f:2a:76:fd:f9:7e:60:a7:86:74:f2:32:58: 48:6b:35:be:d5:c7:35:74:82:59:c4:b1:ba:8a:15: 9c:5f:f1:30:00:d6:8f:21:d7:8b:dc:4f:5d:3a:39: 00:f7:c0:4f:cb:ce:ee:03:df:22:e4:a1:28:6e:8b: e7:a2:eb:2b:2a:f9:41:f9:82:92:1f:fa:e1:57:11: d0:79:d7:7c:2b:4e:76:ae:24:ae:6a:99:0e:ad:87: b1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9C:36:D5:08:98:CC:C8:AC:EF:4D:55:98:BF:F6:72:6D:AF:50:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/97f6a99c-5994-36e5-96af-33d5a5e18816.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.crl X509v3 Authority Key Identifier: keyid:C6:70:25:5D:39:7D:E7:0D:25:72:01:A7:2B:BD:EB:72:84:D2:D6:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84.cer sbgp-ipAddrBlock: critical IPv4: 192.109.92.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:b7:1a:c8:bd:1e:c0:dc:60:b1:aa:16:c4:c0:85:93:1e:31: 0f:b9:76:0b:59:8f:b3:72:08:62:42:8c:ea:56:08:16:17:49: ae:ae:10:0e:95:78:52:9f:1d:3a:ba:1b:bd:c8:38:52:92:1a: 37:f7:8e:08:0d:d7:a5:e9:6d:2f:9c:a5:3b:ab:75:52:e1:4a: 90:42:e9:2f:cb:bc:7c:31:98:4b:cb:bb:5d:37:66:64:0e:e8: 14:1b:11:8f:67:2a:83:4e:c5:ea:08:df:ca:d4:5d:8d:2a:d9: e9:3e:3e:20:5d:7a:f1:5d:9b:5e:0e:95:73:21:b1:6e:22:b5: 4b:8c:a4:10:bd:70:28:d3:e9:28:dd:28:d8:b4:54:8f:2f:88: 03:f7:52:4f:71:61:28:a8:5b:99:60:4b:54:6c:db:3a:d3:4b: 6f:98:df:5e:90:09:00:8f:23:84:31:ab:98:19:82:9b:d1:f4: d6:dc:fb:b9:fd:44:0b:4c:eb:c8:92:ee:78:ae:7b:4d:25:16: af:a9:5a:60:7b:1a:5d:48:3b:01:37:18:5c:c6:d1:f2:fc:60: 1b:06:4b:a7:88:5c:1d:f5:9a:74:42:d9:26:de:c6:89:65:f1: ef:45:ca:0a:e5:6d:d9:7a:58:0d:f4:26:15:d8:fb:b4:0f:9b: 43:74:3e:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzcE/Nid/s8nP5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzk4NDQ4ZTItNTViZS00YzI0LTgwMTQtMjhjMmM3MGRm Yzg0MB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk MmM0YmMwNTktOGI5OC00MDk5LWFhOGQtMDI0YWEyNGNmZTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJl76wzarp9jN3j90ENcc63GiIGo8Y3HRR8Z hZDdrvGobitMHiPYZUzc/+xVV5aL4YJy+0Mmd+ZOVss5lhqwcYn1Z5HY4jHihCcO ycGbgpcJ6ErAQCTBpzRWe8hFYeuQSfM9Eb9ubNTqEZnTieLVo7vm3SejLLDMf7kj syCpwfLczzfpz3oCJ/R2W0AnMTnMI27a+6Oviq7/t9xEvFAKvuTX/fBpRB8qdv35 fmCnhnTyMlhIazW+1cc1dIJZxLG6ihWcX/EwANaPIdeL3E9dOjkA98BPy87uA98i 5KEobovnousrKvlB+YKSH/rhVxHQedd8K052riSuapkOrYexYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCycNtUImMzIrO9NVZi/9nJtr1DIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83OTg0 NDhlMi01NWJlLTRjMjQtODAxNC0yOGMyYzcwZGZjODQvOTdmNmE5OWMtNTk5NC0z NmU1LTk2YWYtMzNkNWE1ZTE4ODE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzk4NDQ4ZTItNTViZS00YzI0LTgw MTQtMjhjMmM3MGRmYzg0Lzc5ODQ0OGUyLTU1YmUtNGMyNC04MDE0LTI4YzJjNzBk ZmM4NC5jcmwwHwYDVR0jBBgwFoAUxnAlXTl95w0lcgGnK73rcoTS1tcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83OTg0NDhlMi01NWJlLTRjMjQtODAxNC0yOGMy YzcwZGZjODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwG1cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFq3Gsi9HsDcYLGqFsTAhZMeMQ+5dgtZj7NyCGJCjOpWCBYXSa6uEA6V eFKfHTq6G73IOFKSGjf3jggN16XpbS+cpTurdVLhSpBC6S/LvHwxmEvLu103ZmQO 6BQbEY9nKoNOxeoI38rUXY0q2ek+PiBdevFdm14OlXMhsW4itUuMpBC9cCjT6Sjd KNi0VI8viAP3Uk9xYSioW5lgS1Rs2zrTS2+Y316QCQCPI4Qxq5gZgpvR9Nbc+7n9 RAtM68iS7niue00lFq+pWmB7Gl1IOwE3GFzG0fL8YBsGS6eIXB31mnRC2Sbexoll 8e9Fygrlbdl6WA30JhXY+7QPm0N0PqI= -----END CERTIFICATE-----Generated at Mon Oct 26 23:16:54 2026 by rpki-client