$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5a8aa138-b40a-3f8d-8630-d273b7a86699.roa File: 5a8aa138-b40a-3f8d-8630-d273b7a86699.roa (raw, json) Hash identifier: kg7enG4mpTNfGF7i9NJfCnKw7aojV/wWAOEW9/IICrk= Subject key identifier: AE:D4:69:CF:E2:BF:51:48:5D:EA:07:A2:6F:1A:94:D1:FE:86:F6:E5 Certificate issuer: /CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f Certificate serial: 010D0C9F4328584F2EED13A23AE4400FBFC6FB80 Authority key identifier: 54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5a8aa138-b40a-3f8d-8630-d273b7a86699.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 19782 IP address blocks: 192.200.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:13:a2:3a:e4:40:0f:bf:c6:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=98bd6b25-e4be-4b84-a7b3-0ab4f906b7e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:03:a8:13:41:44:1e:e8:c4:78:11:07:d1:af: 15:fa:d7:82:38:11:b8:f4:e3:2f:2b:81:02:1d:9e: 1f:2e:cb:07:7a:f5:33:d1:08:75:0b:5e:71:ed:6e: b1:5e:b5:4d:6a:a3:b9:02:a5:40:29:d7:a5:b2:92: de:93:97:00:5e:93:5d:d6:fc:33:f1:3e:bd:09:50: 34:89:7c:8e:e3:50:79:ff:f3:82:bf:4e:56:f6:0a: 9c:1b:fe:2b:c3:3f:73:84:cd:be:04:40:d1:3e:16: ff:61:5c:20:09:d4:76:49:d1:d0:48:57:88:d3:c9: 4f:a6:9b:05:da:69:bd:01:41:71:a5:73:4c:02:0c: 2c:90:25:a9:df:56:b8:4f:8f:11:74:c6:ad:bf:81: 53:a1:05:0d:75:2b:0c:f0:0c:c9:91:46:a1:f7:c1: 3c:f5:b6:dc:a2:89:88:15:20:eb:8f:3c:43:71:62: e0:4b:55:c1:6a:ec:09:db:2a:2c:1d:8d:c4:59:fd: 10:d8:c2:48:71:fb:09:8e:ce:f6:1a:be:1a:bb:17: a1:82:0c:de:b3:3a:a9:a2:d1:20:16:fd:6c:6d:21: e6:d6:6c:93:03:25:0d:5f:31:17:fa:73:8e:ea:d1: e7:77:a0:6b:19:2c:1d:ae:77:0d:64:b3:fb:95:7c: fb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D4:69:CF:E2:BF:51:48:5D:EA:07:A2:6F:1A:94:D1:FE:86:F6:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5a8aa138-b40a-3f8d-8630-d273b7a86699.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl X509v3 Authority Key Identifier: keyid:54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer sbgp-ipAddrBlock: critical IPv4: 192.200.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:b2:a2:27:40:0d:b8:3f:b1:bd:d3:c4:f0:3c:c0:91:97:d3: 2a:d3:e4:9e:80:64:c8:23:97:c9:76:d4:97:4b:31:6c:23:95: 00:6f:a1:13:8d:90:c7:31:7e:90:a9:7f:2b:e5:0b:3c:58:e5: d3:7d:46:e6:15:0d:a2:eb:79:c8:a2:ea:0f:b9:51:8f:a3:eb: b3:bb:bb:17:3f:ca:8e:26:c1:07:8d:2b:fe:17:10:e5:f4:57: cb:05:dc:f9:4f:1b:21:da:30:a9:e8:9a:05:1d:46:8a:ee:d9: e4:82:03:a0:d2:d6:f5:52:6c:66:d4:8b:2f:5a:e8:63:21:ef: 24:03:75:4c:d2:f9:cd:61:09:fa:f7:9a:d5:93:60:64:21:39: 97:21:8e:7c:e5:97:3c:58:3b:4a:be:77:9e:5c:1a:19:f4:b2: c7:cc:e0:c8:1d:a4:37:fa:6b:6e:7e:89:83:26:43:15:76:d8: 7c:22:a5:5d:f8:61:30:05:ce:8a:4d:84:9e:2b:d0:e9:0a:99: 63:e8:99:41:f3:41:0f:4b:34:3a:f5:ef:26:93:7e:23:93:a2: 18:33:cd:83:cc:83:f3:ca:d1:e6:43:b7:2f:98:42:87:f7:96: 1f:ba:b5:c2:9e:1d:88:91:90:f1:c6:bb:77:c8:76:36:61:3f: 25:32:fd:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7ROiOuRAD7/G+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQyMWZmZDgtMzZlNi00YTZiLTkwMzQtNDY3MTU5MmM1 YTRmMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk OThiZDZiMjUtZTRiZS00Yjg0LWE3YjMtMGFiNGY5MDZiN2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQOoE0FEHujEeBEH0a8V+teCOBG49OMvK4EC HZ4fLssHevUz0Qh1C15x7W6xXrVNaqO5AqVAKdelspLek5cAXpNd1vwz8T69CVA0 iXyO41B5//OCv05W9gqcG/4rwz9zhM2+BEDRPhb/YVwgCdR2SdHQSFeI08lPppsF 2mm9AUFxpXNMAgwskCWp31a4T48RdMatv4FToQUNdSsM8AzJkUah98E89bbcoomI FSDrjzxDcWLgS1XBauwJ2yosHY3EWf0Q2MJIcfsJjs72Gr4auxehggzeszqpotEg Fv1sbSHm1myTAyUNXzEX+nOO6tHnd6BrGSwdrncNZLP7lXz7YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7Uac/iv1FIXeoHom8alNH+hvblMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81NDIx ZmZkOC0zNmU2LTRhNmItOTAzNC00NjcxNTkyYzVhNGYvNWE4YWExMzgtYjQwYS0z ZjhkLTg2MzAtZDI3M2I3YTg2Njk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNTQyMWZmZDgtMzZlNi00YTZiLTkw MzQtNDY3MTU5MmM1YTRmLzU0MjFmZmQ4LTM2ZTYtNGE2Yi05MDM0LTQ2NzE1OTJj NWE0Zi5jcmwwHwYDVR0jBBgwFoAUVBKTOoHmICO96AuZwkVU3VkRZm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81NDIxZmZkOC0zNmU2LTRhNmItOTAzNC00Njcx NTkyYzVhNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwMiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2yoidADbg/sb3TxPA8wJGX0yrT5J6AZMgjl8l21JdLMWwjlQBvoRON kMcxfpCpfyvlCzxY5dN9RuYVDaLrecii6g+5UY+j67O7uxc/yo4mwQeNK/4XEOX0 V8sF3PlPGyHaMKnomgUdRoru2eSCA6DS1vVSbGbUiy9a6GMh7yQDdUzS+c1hCfr3 mtWTYGQhOZchjnzllzxYO0q+d55cGhn0ssfM4MgdpDf6a25+iYMmQxV22HwipV34 YTAFzopNhJ4r0OkKmWPomUHzQQ9LNDr17yaTfiOTohgzzYPMg/PK0eZDty+YQof3 lh+6tcKeHYiRkPHGu3fIdjZhPyUy/dI= -----END CERTIFICATE-----Generated at Sun Sep 27 06:19:52 2026 by rpki-client