$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/351e5898-2460-47d0-a912-241434a1533d/1267b599-2b46-3a74-8821-ef3344fa1ab9.roa File: 1267b599-2b46-3a74-8821-ef3344fa1ab9.roa (raw, json) Hash identifier: 0oENkXZqyNWRQmxyWmZO2VdbAiddhHKlx38pDg31+tI= Subject key identifier: 72:7A:46:51:B5:3F:69:4A:5B:B5:4E:F9:ED:6D:F4:5C:C3:92:26:1C Certificate issuer: /CN=351e5898-2460-47d0-a912-241434a1533d Certificate serial: 010D0C9F4328584F761D7C1D1E80831A9D10CF40 Authority key identifier: A8:88:04:8F:97:23:36:E4:2B:C1:23:A8:83:B6:35:97:A4:D9:65:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/351e5898-2460-47d0-a912-241434a1533d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/351e5898-2460-47d0-a912-241434a1533d/1267b599-2b46-3a74-8821-ef3344fa1ab9.roa Signing time: Sun 11 Oct 2026 01:00:13 +0000 ROA not before: Sun 11 Oct 2026 01:00:13 +0000 ROA not after: Sat 09 Jan 2027 02:00:13 +0000 asID: 29892 IP address blocks: 192.80.28.0/24 maxlen: 24 208.68.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/351e5898-2460-47d0-a912-241434a1533d/351e5898-2460-47d0-a912-241434a1533d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/351e5898-2460-47d0-a912-241434a1533d/351e5898-2460-47d0-a912-241434a1533d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/351e5898-2460-47d0-a912-241434a1533d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:76:1d:7c:1d:1e:80:83:1a:9d:10:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351e5898-2460-47d0-a912-241434a1533d Validity Not Before: Oct 11 01:00:13 2026 GMT Not After : Jan 9 02:00:13 2027 GMT Subject: CN=97df04c4-2ca7-4193-8569-59fa71da8e0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:65:db:d5:24:88:b8:67:01:f7:3c:c3:36:80: dd:ce:f1:6e:6f:88:e2:01:ce:c4:06:ea:e6:4c:a5: 2c:8e:d7:3b:6e:01:03:1d:9f:7c:09:b6:6b:71:4b: 67:37:a1:0f:be:8d:d7:bc:24:f8:08:b3:31:64:99: 94:93:a1:36:1b:ee:96:d9:2e:1f:8f:84:f4:34:15: cc:31:80:f5:e4:ad:4f:41:a5:d6:a8:65:76:17:3a: f2:e8:b2:49:dd:8a:d4:34:8b:73:f8:4b:81:45:c7: 65:33:04:06:d1:73:af:1e:f1:e9:53:ba:f1:5f:9e: fa:7e:00:7a:a4:58:ab:07:cc:35:60:29:03:71:bc: 49:dd:4a:f3:55:82:7b:77:64:72:db:28:b6:9a:04: c2:dd:40:03:cb:fa:f1:38:8f:c0:56:79:02:ff:2f: 78:63:ac:e5:47:f6:b4:5b:5a:b8:b2:a9:02:d4:97: 7b:8a:48:36:74:43:23:8b:f5:de:2f:44:e3:1b:04: 8e:8b:44:67:75:58:c7:49:7b:b8:3b:a8:d8:01:b8: fe:fb:4b:b3:10:4e:4c:e2:25:f9:9a:b7:f4:7b:4a: 70:6c:5b:b6:7e:a9:73:b2:fc:a7:20:9e:26:67:c9: 3b:42:5d:26:7a:c1:b7:88:81:ca:6e:00:5e:4b:87: 3b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:7A:46:51:B5:3F:69:4A:5B:B5:4E:F9:ED:6D:F4:5C:C3:92:26:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/351e5898-2460-47d0-a912-241434a1533d/1267b599-2b46-3a74-8821-ef3344fa1ab9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/351e5898-2460-47d0-a912-241434a1533d/351e5898-2460-47d0-a912-241434a1533d.crl X509v3 Authority Key Identifier: keyid:A8:88:04:8F:97:23:36:E4:2B:C1:23:A8:83:B6:35:97:A4:D9:65:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/351e5898-2460-47d0-a912-241434a1533d.cer sbgp-ipAddrBlock: critical IPv4: 192.80.28.0/24 208.68.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:28:43:48:4c:29:dc:f5:68:bc:44:46:42:3d:d0:66:a4:a1: dc:e4:77:e8:82:97:c7:72:41:fc:57:7e:9d:f2:85:4a:36:a3: 7d:b6:82:58:79:b0:84:f4:d9:05:15:c8:04:15:62:83:a7:1d: c7:40:71:18:6d:31:f4:75:4e:29:58:10:54:9a:14:cb:84:02: 73:73:c8:1d:3c:8d:ae:f0:54:41:22:45:36:01:68:84:0a:96: 20:0e:2f:37:d5:bd:fe:0f:da:b0:93:b2:2a:80:ea:9c:e1:ed: d1:cc:72:9f:e0:93:b1:ee:df:e4:c8:d0:5d:a1:44:09:c2:24: c6:40:f9:60:c2:39:28:6b:89:7e:fb:83:f6:73:60:77:f1:da: 63:a8:9b:e9:4a:fa:db:24:60:dd:30:04:9d:af:45:cc:95:63: ea:59:06:50:7a:bb:9e:19:4a:ce:cc:16:36:f5:d1:fb:dd:99: b1:8f:71:c1:ac:c7:f9:b9:62:a6:d4:81:59:27:66:f3:d6:ad: 37:5c:2d:16:8c:c2:4e:03:c2:c8:28:13:5e:b5:87:15:ba:cb: 42:24:19:d3:d1:3e:e0:a5:6b:66:a6:38:c8:2f:e1:0d:fe:d7: b1:77:c4:f9:90:ae:00:16:18:34:f6:71:8b:90:52:b8:e0:ed: d7:3f:fd:bc -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE92HXwdHoCDGp0Qz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzUxZTU4OTgtMjQ2MC00N2QwLWE5MTItMjQxNDM0YTE1 MzNkMB4XDTI2MTAxMTAxMDAxM1oXDTI3MDEwOTAyMDAxM1owLzEtMCsGA1UEAxMk OTdkZjA0YzQtMmNhNy00MTkzLTg1NjktNTlmYTcxZGE4ZTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWXb1SSIuGcB9zzDNoDdzvFub4jiAc7EBurm TKUsjtc7bgEDHZ98CbZrcUtnN6EPvo3XvCT4CLMxZJmUk6E2G+6W2S4fj4T0NBXM MYD15K1PQaXWqGV2Fzry6LJJ3YrUNItz+EuBRcdlMwQG0XOvHvHpU7rxX576fgB6 pFirB8w1YCkDcbxJ3UrzVYJ7d2Ry2yi2mgTC3UADy/rxOI/AVnkC/y94Y6zlR/a0 W1q4sqkC1Jd7ikg2dEMji/XeL0TjGwSOi0RndVjHSXu4O6jYAbj++0uzEE5M4iX5 mrf0e0pwbFu2fqlzsvynIJ4mZ8k7Ql0mesG3iIHKbgBeS4c7LQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHJ6RlG1P2lKW7VO+e1t9FzDkiYcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8zNTFl NTg5OC0yNDYwLTQ3ZDAtYTkxMi0yNDE0MzRhMTUzM2QvMTI2N2I1OTktMmI0Ni0z YTc0LTg4MjEtZWYzMzQ0ZmExYWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvMzUxZTU4OTgtMjQ2MC00N2QwLWE5 MTItMjQxNDM0YTE1MzNkLzM1MWU1ODk4LTI0NjAtNDdkMC1hOTEyLTI0MTQzNGEx NTMzZC5jcmwwHwYDVR0jBBgwFoAUqIgEj5cjNuQrwSOog7Y1l6TZZbcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi8zNTFlNTg5OC0yNDYwLTQ3ZDAtYTkxMi0yNDE0 MzRhMTUzM2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwFAcAwQC 0ETgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKooQ0hMKdz1aLxERkI90Gakodzkd+iCl8dyQfxXfp3yhUo2 o322glh5sIT02QUVyAQVYoOnHcdAcRhtMfR1TilYEFSaFMuEAnNzyB08ja7wVEEi RTYBaIQKliAOLzfVvf4P2rCTsiqA6pzh7dHMcp/gk7Hu3+TI0F2hRAnCJMZA+WDC OShriX77g/ZzYHfx2mOom+lK+tskYN0wBJ2vRcyVY+pZBlB6u54ZSs7MFjb10fvd mbGPccGsx/m5YqbUgVknZvPWrTdcLRaMwk4DwsgoE161hxW6y0IkGdPRPuCla2am OMgv4Q3+17F3xPmQrgAWGDT2cYuQUrjg7dc//bw= -----END CERTIFICATE-----Generated at Sun Oct 11 09:33:50 2026 by rpki-client