$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/8a40744a-ecf1-3610-b9d6-9da7da8707a0.roa File: 8a40744a-ecf1-3610-b9d6-9da7da8707a0.roa (raw, json) Hash identifier: LomcqpOZ13lBJKf41f8C4VUL5jdhTmZFFKx0cja7t2k= Subject key identifier: 7D:41:CC:DC:DD:03:A2:1F:C8:39:5E:9D:2D:89:CE:84:F1:33:91:1B Certificate issuer: /CN=c501b1e0-0018-475e-9d4b-5090237060ae Certificate serial: 010D0C9F4328584F497755EA966825E737DF1600 Authority key identifier: CB:88:97:9D:A7:79:1F:C4:E2:01:65:FC:6C:5D:DC:10:BB:BA:AC:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/8a40744a-ecf1-3610-b9d6-9da7da8707a0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54840 IP address blocks: 192.30.212.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:55:ea:96:68:25:e7:37:df:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c501b1e0-0018-475e-9d4b-5090237060ae Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b94054f8-7e44-42eb-a654-8cfce98af7c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fe:45:9a:0e:ea:22:5d:ee:aa:f2:b8:64:27: a8:2a:52:a3:45:b4:42:7f:8c:e2:72:87:fb:16:ef: c9:e4:69:f1:f6:ca:35:47:a9:1d:25:1a:96:40:0c: a9:49:85:71:82:58:0b:f8:a1:e9:51:75:cf:50:cd: 92:09:7b:9a:1d:20:f1:5f:9b:a2:0a:5e:70:e5:f4: a3:e5:4d:fb:4c:11:45:fe:ce:38:7d:bf:f9:55:c8: a8:87:2d:b9:c7:81:f3:5e:f4:35:af:98:58:3f:52: 8b:03:b7:c5:c1:61:37:ec:93:63:38:e2:a5:4a:69: 64:42:1b:0a:b5:3e:ea:96:10:34:0c:c0:f4:a4:b5: b9:4b:71:f3:d5:90:b2:ab:92:36:4a:fc:80:96:d0: e2:4c:44:76:76:62:73:b1:2f:83:f5:74:d4:15:fa: 7f:6e:98:4c:6d:b4:be:5b:cd:6a:6f:a6:ee:88:5c: d4:5b:80:e2:2e:a8:98:66:9e:13:e7:46:12:f5:98: 98:38:b8:7b:28:7d:37:00:1d:a5:ad:22:79:de:14: e3:4f:26:68:fc:e0:e3:49:dd:7e:08:7f:c6:49:49: 0a:a1:ee:17:16:53:09:dd:5d:89:e3:d2:b0:15:01: 03:87:50:73:dc:77:36:95:13:c2:15:9f:9f:2c:4a: 78:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:41:CC:DC:DD:03:A2:1F:C8:39:5E:9D:2D:89:CE:84:F1:33:91:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/8a40744a-ecf1-3610-b9d6-9da7da8707a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.crl X509v3 Authority Key Identifier: keyid:CB:88:97:9D:A7:79:1F:C4:E2:01:65:FC:6C:5D:DC:10:BB:BA:AC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer sbgp-ipAddrBlock: critical IPv4: 192.30.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:bb:11:10:6c:eb:04:ef:a6:01:53:a3:56:49:3c:69:69:0d: 8c:27:c5:ce:fe:4e:33:56:db:d8:5d:bc:5a:e3:ad:ee:82:d5: b6:5d:3c:8b:a0:da:34:6e:3a:1e:cd:16:a6:1f:51:cb:7c:b8: bc:3f:68:e8:35:76:85:59:af:47:93:e7:cd:be:ef:64:ee:71: ae:d1:44:e4:de:43:59:8f:c5:6b:2d:81:54:49:e4:ec:44:af: ac:bb:2a:6f:b7:29:2b:0c:9d:1b:8c:6b:e7:03:d2:ae:95:b6: fe:8a:2b:26:e1:dd:bd:4b:37:c2:40:ea:fa:16:98:79:f1:ea: f1:c5:67:84:cf:df:81:d1:98:39:e9:8c:0a:45:49:8a:d5:72: c4:75:97:1d:59:76:c4:c6:83:10:a5:3d:22:e6:e0:e4:96:57: 53:1b:b1:0d:ea:a4:ed:54:5f:10:29:47:3d:80:f7:ae:95:e6: 4c:e6:07:75:f9:d7:8a:bc:71:e7:d2:18:d9:0f:eb:58:c3:1d: 25:1a:bb:ca:66:57:12:81:bb:8a:1c:91:4c:05:6b:9a:1f:04: 4b:22:e0:98:e4:e8:69:70:99:8c:07:c1:b4:21:9d:83:e8:d4: e4:d8:bb:8d:46:dc:2a:cd:74:04:31:e6:81:c8:77:27:4d:9a: 21:6c:1b:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd1Xqlmgl5zffFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzUwMWIxZTAtMDAxOC00NzVlLTlkNGItNTA5MDIzNzA2 MGFlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Yjk0MDU0ZjgtN2U0NC00MmViLWE2NTQtOGNmY2U5OGFmN2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3v5Fmg7qIl3uqvK4ZCeoKlKjRbRCf4zicof7 Fu/J5Gnx9so1R6kdJRqWQAypSYVxglgL+KHpUXXPUM2SCXuaHSDxX5uiCl5w5fSj 5U37TBFF/s44fb/5Vciohy25x4HzXvQ1r5hYP1KLA7fFwWE37JNjOOKlSmlkQhsK tT7qlhA0DMD0pLW5S3Hz1ZCyq5I2SvyAltDiTER2dmJzsS+D9XTUFfp/bphMbbS+ W81qb6buiFzUW4DiLqiYZp4T50YS9ZiYOLh7KH03AB2lrSJ53hTjTyZo/ODjSd1+ CH/GSUkKoe4XFlMJ3V2J49KwFQEDh1Bz3Hc2lRPCFZ+fLEp4tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1BzNzdA6IfyDlenS2JzoTxM5EbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNTAx YjFlMC0wMDE4LTQ3NWUtOWQ0Yi01MDkwMjM3MDYwYWUvOGE0MDc0NGEtZWNmMS0z NjEwLWI5ZDYtOWRhN2RhODcwN2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzUwMWIxZTAtMDAxOC00NzVlLTlk NGItNTA5MDIzNzA2MGFlL2M1MDFiMWUwLTAwMTgtNDc1ZS05ZDRiLTUwOTAyMzcw NjBhZS5jcmwwHwYDVR0jBBgwFoAUy4iXnad5H8TiAWX8bF3cELu6rMUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNTAxYjFlMC0wMDE4LTQ3NWUtOWQ0Yi01MDkw MjM3MDYwYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwB7UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHm7ERBs6wTvpgFTo1ZJPGlpDYwnxc7+TjNW29hdvFrjre6C1bZdPIug 2jRuOh7NFqYfUct8uLw/aOg1doVZr0eT582+72Tuca7RROTeQ1mPxWstgVRJ5OxE r6y7Km+3KSsMnRuMa+cD0q6Vtv6KKybh3b1LN8JA6voWmHnx6vHFZ4TP34HRmDnp jApFSYrVcsR1lx1ZdsTGgxClPSLm4OSWV1MbsQ3qpO1UXxApRz2A966V5kzmB3X5 14q8cefSGNkP61jDHSUau8pmVxKBu4ockUwFa5ofBEsi4Jjk6GlwmYwHwbQhnYPo 1OTYu41G3CrNdAQx5oHIdydNmiFsG00= -----END CERTIFICATE-----Generated at Mon Oct 12 03:54:40 2026 by rpki-client