$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/672194c2-4aa1-3c84-a9d8-b8e89566f3ca.roa File: 672194c2-4aa1-3c84-a9d8-b8e89566f3ca.roa (raw, json) Hash identifier: 0Ne8tgSEjZ2MepmBverxoKAg6KGZIMO5CCE1vYEtq1Q= Subject key identifier: 75:CC:1F:3F:7E:A2:7B:6B:DE:39:96:7E:F4:58:FA:93:2B:BA:31:14 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584F49774D371C26DCC593DBBD80 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/672194c2-4aa1-3c84-a9d8-b8e89566f3ca.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 931 IP address blocks: 128.254.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:4d:37:1c:26:dc:c5:93:db:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5afafb7a-042f-4f0c-8962-42a2923f510d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:38:85:cf:29:3e:8d:17:cd:56:54:f4:7f:a4: 2c:ab:34:87:f2:0d:07:0b:5a:cb:5d:40:d8:e8:24: c6:3b:7c:1f:38:eb:fe:e1:77:b0:5b:67:e3:19:d7: 4c:58:40:4a:1b:a5:1b:3b:dd:9f:bc:11:a1:3b:89: 2a:ec:ba:fb:ef:30:13:af:ae:2b:d3:a6:c1:9d:66: 80:c4:05:46:98:e1:62:f4:01:c4:d3:01:d5:34:4f: ee:be:72:ac:ac:2b:ac:ae:82:7b:39:b0:6f:99:cb: 1b:f8:6b:4e:43:31:ee:a8:14:4f:d0:86:a9:d2:9e: 3c:5f:f2:68:6e:63:9d:88:1b:d5:44:58:3d:50:a5: cc:c2:2f:dd:41:6c:32:43:1d:5d:a9:9e:24:9b:cf: 49:8e:46:b3:85:0f:d6:aa:d5:da:81:13:3f:fd:fd: 52:eb:1c:52:09:0e:eb:f3:4d:69:8a:c4:bd:ec:98: 9e:65:f7:b4:88:29:04:62:e2:37:2a:06:8b:b5:9f: 8d:cb:68:5a:76:fa:83:e2:92:d3:fd:3f:79:c9:8b: 63:3e:51:61:58:a2:03:25:17:12:19:04:e0:19:21: 8e:69:d8:d8:fd:a7:17:7b:54:72:0a:17:37:40:6b: 19:8f:16:e1:27:b4:df:9b:67:46:ba:0f:ec:e8:5a: fb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:CC:1F:3F:7E:A2:7B:6B:DE:39:96:7E:F4:58:FA:93:2B:BA:31:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/672194c2-4aa1-3c84-a9d8-b8e89566f3ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 128.254.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:4e:d6:db:d6:15:ad:ab:99:57:b9:94:c2:8d:e5:16:fd:85: a0:54:c3:5b:d7:9a:9b:93:97:d6:06:d4:53:2d:69:9c:cf:e3: a6:55:71:08:e1:0f:d5:11:5b:d9:43:2b:76:26:60:70:8d:9f: d3:56:a5:ac:8d:fe:aa:7e:01:64:bb:ef:c6:c7:01:0c:12:64: f7:0e:dc:8f:5c:7c:c6:cf:40:86:92:8e:c2:5f:13:cc:4f:63: 83:dc:3b:7b:cf:da:21:b1:19:fc:e3:f6:54:66:e4:eb:05:f0: f3:e7:db:f4:e2:02:5c:2d:56:7c:51:d3:d3:aa:96:96:ed:a5: 6c:9c:76:74:62:61:43:b5:e4:e7:c0:46:a2:0c:bd:47:3d:cc: d0:b9:13:43:e2:9e:9c:b2:5b:5b:d8:6d:9e:e7:3c:6f:d5:fe: 2b:f5:63:4b:98:40:47:b9:65:62:ac:49:cb:fa:d1:33:b9:4f: 41:dc:83:f5:35:b6:e3:52:fb:a3:df:47:aa:fe:67:0c:40:0d: 63:9d:34:7b:48:51:1b:c6:ca:72:86:d8:0e:2d:c3:0a:09:d4: 88:b3:2b:f7:c5:1d:2a:2d:fb:14:87:77:b4:4d:23:d1:b8:2d: 86:59:48:42:3d:29:13:b9:43:72:de:80:c2:1f:55:e7:8a:74: fb:1c:9f:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd003HCbcxZPbvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWFmYWZiN2EtMDQyZi00ZjBjLTg5NjItNDJhMjkyM2Y1MTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyziFzyk+jRfNVlT0f6QsqzSH8g0HC1rLXUDY 6CTGO3wfOOv+4XewW2fjGddMWEBKG6UbO92fvBGhO4kq7Lr77zATr64r06bBnWaA xAVGmOFi9AHE0wHVNE/uvnKsrCusroJ7ObBvmcsb+GtOQzHuqBRP0Iap0p48X/Jo bmOdiBvVRFg9UKXMwi/dQWwyQx1dqZ4km89JjkazhQ/WqtXagRM//f1S6xxSCQ7r 801pisS97JieZfe0iCkEYuI3KgaLtZ+Ny2hadvqD4pLT/T95yYtjPlFhWKIDJRcS GQTgGSGOadjY/acXe1RyChc3QGsZjxbhJ7Tfm2dGug/s6Fr7LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHXMHz9+ontr3jmWfvRY+pMrujEUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNjcyMTk0YzItNGFhMS0z Yzg0LWE5ZDgtYjhlODk1NjZmM2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFO1tvWFa2rmVe5lMKN5Rb9haBUw1vXmpuTl9YG1FMtaZzP46ZVcQjh D9URW9lDK3YmYHCNn9NWpayN/qp+AWS778bHAQwSZPcO3I9cfMbPQIaSjsJfE8xP Y4PcO3vP2iGxGfzj9lRm5OsF8PPn2/TiAlwtVnxR09OqlpbtpWycdnRiYUO15OfA RqIMvUc9zNC5E0PinpyyW1vYbZ7nPG/V/iv1Y0uYQEe5ZWKsScv60TO5T0Hcg/U1 tuNS+6PfR6r+ZwxADWOdNHtIURvGynKG2A4twwoJ1IizK/fFHSot+xSHd7RNI9G4 LYZZSEI9KRO5Q3LegMIfVeeKdPscn1Y= -----END CERTIFICATE-----Generated at Wed Oct 7 02:29:57 2026 by rpki-client