$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/2ddbbf32-de8c-3aeb-93d8-80ebfd156030.roa File: 2ddbbf32-de8c-3aeb-93d8-80ebfd156030.roa (raw, json) Hash identifier: v0ohwDKGfCq+vyXeaNSS4WezpINLltvhY1ZJSTbWoWY= Subject key identifier: E4:F0:F1:A3:3C:33:31:BE:43:AE:C7:D1:CC:CA:F7:6E:F7:F1:84:B4 Certificate issuer: /CN=8e5312d0-770c-4d40-8042-53d0eadc436b Certificate serial: 010D0C9F4328584F4C3D5288C203436C21A08C80 Authority key identifier: 3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/2ddbbf32-de8c-3aeb-93d8-80ebfd156030.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 21976 IP address blocks: 192.135.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:52:88:c2:03:43:6c:21:a0:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5312d0-770c-4d40-8042-53d0eadc436b Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=4e23469f-2d93-4980-84f0-a2c801626990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b9:e0:31:61:b1:cd:1b:d9:5e:f9:7f:10:d6: 04:33:77:cb:17:c8:e0:a9:07:ca:f9:2c:18:08:65: d3:ab:d2:34:a6:2c:a2:01:40:b5:3a:dd:d5:11:51: 75:0a:c7:51:c2:c1:81:2b:6d:57:65:d6:38:86:e4: a2:e3:aa:11:b6:24:93:48:20:50:95:55:91:26:f1: 0f:da:0e:21:b6:2f:17:71:b9:40:56:00:f2:d8:a7: 7a:b9:3c:09:8f:95:71:8d:f0:c5:a3:10:ec:e5:dd: 30:7c:85:96:50:2a:b0:98:29:0f:16:5c:ff:5c:d6: 56:be:2c:54:03:ae:31:9a:78:81:e2:13:4f:11:c4: c5:43:4b:a2:24:48:6e:ab:a9:49:7a:f1:b7:69:68: e0:60:1a:f7:4b:5a:89:ea:b5:c7:2f:f4:a0:79:59: 2a:a8:96:64:00:98:d0:63:c7:97:56:83:ab:c6:e9: 28:bd:f3:3e:ba:c4:35:91:fe:68:0e:2b:b1:34:6e: c8:6c:b9:e2:9f:28:8a:a0:1f:e3:50:0f:d7:44:6b: db:ae:3d:ae:c8:0d:d9:de:a7:cb:a1:22:6b:68:6d: 53:94:df:a7:e1:b1:6e:db:53:f6:7b:50:e0:5b:f8: eb:4f:52:f9:c6:53:23:6f:e7:03:20:41:08:8f:49: 06:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F0:F1:A3:3C:33:31:BE:43:AE:C7:D1:CC:CA:F7:6E:F7:F1:84:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/2ddbbf32-de8c-3aeb-93d8-80ebfd156030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.crl X509v3 Authority Key Identifier: keyid:3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer sbgp-ipAddrBlock: critical IPv4: 192.135.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:32:0d:6a:bb:61:fc:e5:34:c5:b4:63:67:cd:60:ab:27:bf: e1:0b:72:87:0f:ec:95:7c:40:85:e7:5a:15:9c:c2:60:54:8c: 25:a4:d2:34:76:46:4a:36:e6:32:92:ad:24:02:fb:b7:6d:23: 61:ff:a4:3a:9c:b7:b1:c4:6b:82:99:10:e6:50:a7:2e:a4:f5: 9f:df:a3:4a:0d:3b:fb:47:3c:81:31:4c:a2:47:cf:09:dd:6f: f4:34:ac:c2:d4:f9:f0:9d:63:0b:8e:c8:59:ec:24:c1:be:bd: 1e:17:62:1e:1b:d7:93:80:da:63:58:92:79:5f:e3:2e:48:4e: 62:bc:72:a3:2b:d7:9f:c9:53:d2:b7:e4:6e:62:f0:70:91:99: 40:69:b5:eb:b3:e5:e0:06:86:9d:26:72:62:78:80:ff:e1:80: b9:6c:20:f1:2d:b7:1a:1b:b2:c3:ea:3c:80:a8:3f:d8:21:ff: bb:0e:93:21:ab:17:2d:36:43:49:9d:a7:b8:39:71:94:fb:1b: 05:af:dc:bf:f4:be:32:6b:17:60:be:42:99:f9:6e:fa:a4:c1: 07:94:54:62:f6:ab:5b:10:82:09:66:6f:9e:39:da:50:8c:46: 5b:ee:5c:e7:12:b5:3a:06:9b:b9:8a:24:05:66:e9:bf:70:af: 57:cb:17:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPVKIwgNDbCGgjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MzEyZDAtNzcwYy00ZDQwLTgwNDItNTNkMGVhZGM0 MzZiMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NGUyMzQ2OWYtMmQ5My00OTgwLTg0ZjAtYTJjODAxNjI2OTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bngMWGxzRvZXvl/ENYEM3fLF8jgqQfK+SwY CGXTq9I0piyiAUC1Ot3VEVF1CsdRwsGBK21XZdY4huSi46oRtiSTSCBQlVWRJvEP 2g4hti8XcblAVgDy2Kd6uTwJj5VxjfDFoxDs5d0wfIWWUCqwmCkPFlz/XNZWvixU A64xmniB4hNPEcTFQ0uiJEhuq6lJevG3aWjgYBr3S1qJ6rXHL/SgeVkqqJZkAJjQ Y8eXVoOrxukovfM+usQ1kf5oDiuxNG7IbLninyiKoB/jUA/XRGvbrj2uyA3Z3qfL oSJraG1TlN+n4bFu21P2e1DgW/jrT1L5xlMjb+cDIEEIj0kGjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTw8aM8MzG+Q67H0czK92738YS0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTUz MTJkMC03NzBjLTRkNDAtODA0Mi01M2QwZWFkYzQzNmIvMmRkYmJmMzItZGU4Yy0z YWViLTkzZDgtODBlYmZkMTU2MDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGU1MzEyZDAtNzcwYy00ZDQwLTgw NDItNTNkMGVhZGM0MzZiLzhlNTMxMmQwLTc3MGMtNGQ0MC04MDQyLTUzZDBlYWRj NDM2Yi5jcmwwHwYDVR0jBBgwFoAUP3aJvQwX92PDUxjSibUKRzfWiQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTUzMTJkMC03NzBjLTRkNDAtODA0Mi01M2Qw ZWFkYzQzNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIfRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4yDWq7YfzlNMW0Y2fNYKsnv+ELcocP7JV8QIXnWhWcwmBUjCWk0jR2 Rko25jKSrSQC+7dtI2H/pDqct7HEa4KZEOZQpy6k9Z/fo0oNO/tHPIExTKJHzwnd b/Q0rMLU+fCdYwuOyFnsJMG+vR4XYh4b15OA2mNYknlf4y5ITmK8cqMr15/JU9K3 5G5i8HCRmUBpteuz5eAGhp0mcmJ4gP/hgLlsIPEttxobssPqPICoP9gh/7sOkyGr Fy02Q0mdp7g5cZT7GwWv3L/0vjJrF2C+Qpn5bvqkwQeUVGL2q1sQgglmb5452lCM RlvuXOcStToGm7mKJAVm6b9wr1fLFy4= -----END CERTIFICATE-----Generated at Sat Sep 26 15:55:26 2026 by rpki-client