$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/967eaad3-c11f-369f-9120-3854ace1ae5d.roa File: 967eaad3-c11f-369f-9120-3854ace1ae5d.roa (raw, json) Hash identifier: 9YrSdIXgcCy0oZFDBljHFVDxniV6cudCmeVppXEGkK0= Subject key identifier: A3:CD:86:BB:98:65:F4:2F:48:CA:08:75:BE:D0:97:E3:A7:22:04:41 Certificate issuer: /CN=145bac4b-d098-4846-b4b1-ac1761209cd4 Certificate serial: 010D0C9F4328584ED001DFDC718FFB3E735B3B00 Authority key identifier: AB:FC:69:04:AA:F5:94:85:0E:C8:FB:C7:A1:22:07:1D:20:CE:ED:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/967eaad3-c11f-369f-9120-3854ace1ae5d.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 21681 IP address blocks: 192.86.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/145bac4b-d098-4846-b4b1-ac1761209cd4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/145bac4b-d098-4846-b4b1-ac1761209cd4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:df:dc:71:8f:fb:3e:73:5b:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=145bac4b-d098-4846-b4b1-ac1761209cd4 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=7ae774f9-3108-4701-a35b-f5ef309f8d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d8:a9:f5:ce:44:08:5f:3a:49:35:3c:86:35: f1:ec:3a:8d:72:29:37:bc:81:05:ec:04:26:ba:72: 47:95:1e:06:a9:bc:dc:ef:ff:56:61:fd:73:a1:11: 7b:89:32:12:50:54:45:51:e9:eb:fa:2c:12:ae:ba: ea:89:6a:5d:dd:6b:5d:d8:25:e3:fd:d8:21:c6:11: 8a:b8:39:1a:11:74:12:ca:4e:59:ef:8c:d3:94:5d: ce:3a:b8:4b:70:d4:cb:67:f1:44:4e:53:fe:1d:51: 1f:e6:4c:dd:33:6f:a2:d0:c2:52:73:7b:a6:26:45: bd:e6:06:80:7f:75:b5:2a:a2:e2:bb:ec:3c:6c:5c: 3c:03:68:49:7d:bc:93:67:74:56:e4:8c:c6:db:91: 74:01:f1:30:2e:a8:e1:44:1c:93:dc:51:61:fe:3c: 05:f5:84:20:d8:7b:8b:82:06:51:67:6c:65:97:9b: 77:86:59:d2:15:80:ec:d2:19:d4:89:02:0a:da:6d: 87:03:54:87:4f:e1:04:4f:82:e6:0e:9c:15:f9:84: b6:5f:5b:28:8a:12:b1:de:dd:29:91:0a:46:9c:cb: 27:95:52:5c:6e:5d:8d:3c:f3:f6:cf:5e:ab:38:fc: e0:9c:10:91:2a:59:8f:24:d0:51:ba:4c:69:7b:10: 63:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CD:86:BB:98:65:F4:2F:48:CA:08:75:BE:D0:97:E3:A7:22:04:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/967eaad3-c11f-369f-9120-3854ace1ae5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/145bac4b-d098-4846-b4b1-ac1761209cd4.crl X509v3 Authority Key Identifier: keyid:AB:FC:69:04:AA:F5:94:85:0E:C8:FB:C7:A1:22:07:1D:20:CE:ED:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4.cer sbgp-ipAddrBlock: critical IPv4: 192.86.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:cb:a8:d9:87:c1:4c:69:c4:77:0c:2e:58:00:ad:a0:c2:ab: 61:da:41:5e:9a:5d:c1:06:c9:e5:1c:87:fe:6c:f9:12:1d:c6: 6d:db:a5:6f:ce:27:12:f4:00:fd:58:9b:8a:97:d6:1a:d9:18: da:e6:34:0b:aa:59:60:9e:cc:03:f9:a6:32:11:7e:83:0e:9e: 8f:a8:a2:05:45:c2:1c:50:bf:0d:be:d4:19:e4:fa:a1:ce:4a: f1:f5:c5:35:91:32:84:43:b9:7d:bb:ed:78:46:7c:39:98:4f: e1:3b:2a:14:8d:18:b0:a7:df:39:81:4c:4c:2f:fb:28:3b:32: ba:d1:0c:db:94:40:39:91:12:ca:3d:c2:16:30:5e:1b:a0:1c: 7d:c0:c3:a5:75:92:fa:a2:41:cb:7c:bc:a2:ec:e5:e2:93:ba: 5f:aa:4b:19:7b:ff:04:e0:2c:5c:8e:73:3e:4a:24:81:ae:e4: e4:a0:a5:2f:56:01:bf:13:85:52:2c:d3:99:40:07:aa:06:35: 31:c4:b5:db:81:11:6e:b1:94:12:5f:76:73:f7:64:43:2a:9d: 40:1d:0d:06:a6:d3:88:4d:e1:22:cb:d3:e4:d9:ef:11:bb:f1: 63:29:20:71:a3:84:e6:7f:0c:6c:a3:65:0a:3a:a7:ac:eb:48: a5:33:2a:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAd/ccY/7PnNbOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQ1YmFjNGItZDA5OC00ODQ2LWI0YjEtYWMxNzYxMjA5 Y2Q0MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk N2FlNzc0ZjktMzEwOC00NzAxLWEzNWItZjVlZjMwOWY4ZDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtip9c5ECF86STU8hjXx7DqNcik3vIEF7AQm unJHlR4Gqbzc7/9WYf1zoRF7iTISUFRFUenr+iwSrrrqiWpd3Wtd2CXj/dghxhGK uDkaEXQSyk5Z74zTlF3OOrhLcNTLZ/FETlP+HVEf5kzdM2+i0MJSc3umJkW95gaA f3W1KqLiu+w8bFw8A2hJfbyTZ3RW5IzG25F0AfEwLqjhRByT3FFh/jwF9YQg2HuL ggZRZ2xll5t3hlnSFYDs0hnUiQIK2m2HA1SHT+EET4LmDpwV+YS2X1soihKx3t0p kQpGnMsnlVJcbl2NPPP2z16rOPzgnBCRKlmPJNBRukxpexBjvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPNhruYZfQvSMoIdb7Ql+OnIgRBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xNDVi YWM0Yi1kMDk4LTQ4NDYtYjRiMS1hYzE3NjEyMDljZDQvOTY3ZWFhZDMtYzExZi0z NjlmLTkxMjAtMzg1NGFjZTFhZTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTQ1YmFjNGItZDA5OC00ODQ2LWI0 YjEtYWMxNzYxMjA5Y2Q0LzE0NWJhYzRiLWQwOTgtNDg0Ni1iNGIxLWFjMTc2MTIw OWNkNC5jcmwwHwYDVR0jBBgwFoAUq/xpBKr1lIUOyPvHoSIHHSDO7bEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xNDViYWM0Yi1kMDk4LTQ4NDYtYjRiMS1hYzE3 NjEyMDljZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFYVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTLqNmHwUxpxHcMLlgAraDCq2HaQV6aXcEGyeUch/5s+RIdxm3bpW/O JxL0AP1Ym4qX1hrZGNrmNAuqWWCezAP5pjIRfoMOno+oogVFwhxQvw2+1Bnk+qHO SvH1xTWRMoRDuX277XhGfDmYT+E7KhSNGLCn3zmBTEwv+yg7MrrRDNuUQDmREso9 whYwXhugHH3Aw6V1kvqiQct8vKLs5eKTul+qSxl7/wTgLFyOcz5KJIGu5OSgpS9W Ab8ThVIs05lAB6oGNTHEtduBEW6xlBJfdnP3ZEMqnUAdDQam04hN4SLL0+TZ7xG7 8WMpIHGjhOZ/DGyjZQo6p6zrSKUzKsQ= -----END CERTIFICATE-----Generated at Mon Sep 21 18:39:59 2026 by rpki-client