$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/15e02cc2-d32c-413d-941a-a52b64c4f317/123bdcb8-cd2c-3492-91a2-2f0a31353d54.roa File: 123bdcb8-cd2c-3492-91a2-2f0a31353d54.roa (raw, json) Hash identifier: WGuYR8CkwrXb+PGsbHPM+OqOukxxXP0yS9kg9clicI8= Subject key identifier: 98:49:54:B9:C2:1D:1C:F4:C9:6C:FB:62:E5:BC:02:E2:57:74:CC:D3 Certificate issuer: /CN=15e02cc2-d32c-413d-941a-a52b64c4f317 Certificate serial: 010D0C9F4328584F9A6C02A009801831AB39D020 Authority key identifier: BC:97:9F:6B:A6:63:DE:F0:A6:BB:56:12:E6:62:EE:2B:F0:8F:71:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/15e02cc2-d32c-413d-941a-a52b64c4f317.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/15e02cc2-d32c-413d-941a-a52b64c4f317/123bdcb8-cd2c-3492-91a2-2f0a31353d54.roa Signing time: Sat 24 Oct 2026 01:07:34 +0000 ROA not before: Sat 24 Oct 2026 01:07:34 +0000 ROA not after: Fri 22 Jan 2027 02:07:34 +0000 asID: 16557 IP address blocks: 192.42.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/15e02cc2-d32c-413d-941a-a52b64c4f317/15e02cc2-d32c-413d-941a-a52b64c4f317.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/15e02cc2-d32c-413d-941a-a52b64c4f317/15e02cc2-d32c-413d-941a-a52b64c4f317.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/15e02cc2-d32c-413d-941a-a52b64c4f317.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:6c:02:a0:09:80:18:31:ab:39:d0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15e02cc2-d32c-413d-941a-a52b64c4f317 Validity Not Before: Oct 24 01:07:34 2026 GMT Not After : Jan 22 02:07:34 2027 GMT Subject: CN=43e8a010-a732-4902-9752-ad783e0b8474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:11:d3:ae:7b:52:fb:62:fe:0c:a2:2b:c3:52: c2:71:fc:de:72:ea:52:3e:3d:55:18:70:c7:28:6d: 90:b1:1f:66:fe:25:fd:87:b3:2f:9d:57:15:36:4f: 4c:ff:8b:74:72:d7:a4:3a:eb:90:53:3b:90:9d:4d: ba:e5:bd:97:95:bc:fd:aa:63:82:9f:a8:7b:13:1c: f4:ba:f7:bf:f8:20:90:ae:df:c2:82:66:dc:03:3a: a6:0b:da:fb:c7:cb:f4:44:3d:73:f5:a9:0e:cb:be: 84:13:7a:2b:ab:17:a1:2a:f6:aa:61:cb:3e:e2:9e: 30:c5:4e:75:62:2b:a8:ca:ab:89:4b:ce:d0:eb:6b: 04:fa:c0:95:83:29:55:99:8c:03:fc:f8:eb:e8:ec: 6b:f3:ac:fd:e3:c6:53:e3:ce:7e:3b:a8:66:2e:1e: 65:53:11:b4:e4:e9:b0:b5:46:0f:1a:87:0f:fa:3d: 4f:f1:b7:88:a9:49:63:3c:dd:1e:ed:63:ea:47:f8: 66:00:09:a2:b0:2b:61:85:28:b0:ec:ea:90:bc:c1: a7:c6:c7:0f:82:2d:b5:5f:16:e7:1d:1a:ef:f6:51: e2:e3:39:1d:d1:a7:1f:89:2d:4c:b3:b0:6e:f0:cd: 6b:c8:c1:b1:81:c0:9c:15:32:17:7b:5a:82:82:b6: 26:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:49:54:B9:C2:1D:1C:F4:C9:6C:FB:62:E5:BC:02:E2:57:74:CC:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/15e02cc2-d32c-413d-941a-a52b64c4f317/123bdcb8-cd2c-3492-91a2-2f0a31353d54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/15e02cc2-d32c-413d-941a-a52b64c4f317/15e02cc2-d32c-413d-941a-a52b64c4f317.crl X509v3 Authority Key Identifier: keyid:BC:97:9F:6B:A6:63:DE:F0:A6:BB:56:12:E6:62:EE:2B:F0:8F:71:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/15e02cc2-d32c-413d-941a-a52b64c4f317.cer sbgp-ipAddrBlock: critical IPv4: 192.42.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:da:2a:1f:71:1d:a3:b7:20:3a:7d:87:0d:ff:11:06:54:79: 48:b1:90:17:4b:f9:ba:eb:c3:41:7b:41:5a:7d:6f:1f:fc:9f: a5:27:a8:fa:b7:f2:0b:d5:d9:29:9e:2f:d3:3e:93:39:02:77: 4a:85:cd:c6:75:36:dd:0c:c9:3f:2e:9b:e1:9c:38:58:4c:38: e6:f4:09:d2:9b:08:ba:f6:ec:97:4a:51:17:53:2b:f8:1c:c7: a1:54:00:06:6c:a0:9d:83:2f:95:e3:87:21:4b:22:d4:6b:a7: d9:40:0d:ad:03:62:ae:c4:4e:64:66:f0:ab:f1:5d:de:df:4f: 1b:b9:39:8a:50:04:7f:fd:d8:57:43:98:e0:4b:af:25:cd:58: 99:92:09:d8:3b:f3:1d:d9:7f:97:30:bc:54:b8:3f:5c:48:4e: e7:b2:d3:07:1c:67:73:22:96:8d:ca:5d:04:d1:8e:ca:61:5e: 15:d8:5c:d9:c8:3b:47:d8:ce:40:8c:36:48:d6:45:5d:c5:56: ef:93:67:1f:66:cc:70:1c:0d:8a:9c:32:f1:74:fb:a8:6f:89: eb:c3:1a:88:ca:26:f2:b0:34:9d:05:41:67:38:98:b4:aa:3e: a9:22:22:0b:48:83:f9:9b:d3:49:16:13:6a:16:60:f7:96:48: 50:5e:e7:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+abAKgCYAYMas50CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTVlMDJjYzItZDMyYy00MTNkLTk0MWEtYTUyYjY0YzRm MzE3MB4XDTI2MTAyNDAxMDczNFoXDTI3MDEyMjAyMDczNFowLzEtMCsGA1UEAxMk NDNlOGEwMTAtYTczMi00OTAyLTk3NTItYWQ3ODNlMGI4NDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBHTrntS+2L+DKIrw1LCcfzecupSPj1VGHDH KG2QsR9m/iX9h7MvnVcVNk9M/4t0ctekOuuQUzuQnU265b2Xlbz9qmOCn6h7Exz0 uve/+CCQrt/CgmbcAzqmC9r7x8v0RD1z9akOy76EE3orqxehKvaqYcs+4p4wxU51 YiuoyquJS87Q62sE+sCVgylVmYwD/Pjr6Oxr86z948ZT485+O6hmLh5lUxG05Omw tUYPGocP+j1P8beIqUljPN0e7WPqR/hmAAmisCthhSiw7OqQvMGnxscPgi21Xxbn HRrv9lHi4zkd0acfiS1Ms7Bu8M1ryMGxgcCcFTIXe1qCgrYmJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhJVLnCHRz0yWz7YuW8AuJXdMzTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8xNWUw MmNjMi1kMzJjLTQxM2QtOTQxYS1hNTJiNjRjNGYzMTcvMTIzYmRjYjgtY2QyYy0z NDkyLTkxYTItMmYwYTMxMzUzZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvMTVlMDJjYzItZDMyYy00MTNkLTk0 MWEtYTUyYjY0YzRmMzE3LzE1ZTAyY2MyLWQzMmMtNDEzZC05NDFhLWE1MmI2NGM0 ZjMxNy5jcmwwHwYDVR0jBBgwFoAUvJefa6Zj3vCmu1YS5mLuK/CPcd0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi8xNWUwMmNjMi1kMzJjLTQxM2QtOTQxYS1hNTJi NjRjNGYzMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCr/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHaKh9xHaO3IDp9hw3/EQZUeUixkBdL+brrw0F7QVp9bx/8n6UnqPq3 8gvV2SmeL9M+kzkCd0qFzcZ1Nt0MyT8um+GcOFhMOOb0CdKbCLr27JdKURdTK/gc x6FUAAZsoJ2DL5XjhyFLItRrp9lADa0DYq7ETmRm8KvxXd7fTxu5OYpQBH/92FdD mOBLryXNWJmSCdg78x3Zf5cwvFS4P1xITuey0wccZ3Milo3KXQTRjsphXhXYXNnI O0fYzkCMNkjWRV3FVu+TZx9mzHAcDYqcMvF0+6hvievDGojKJvKwNJ0FQWc4mLSq PqkiIgtIg/mb00kWE2oWYPeWSFBe51U= -----END CERTIFICATE-----Generated at Sun Nov 1 14:36:56 2026 by rpki-client