$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/4a7b7c95-7a0d-3fd4-9fe6-16fc32170a96.roa File: 4a7b7c95-7a0d-3fd4-9fe6-16fc32170a96.roa (raw, json) Hash identifier: 2TIa7Pcc0naQpwZq52zV08Qo2HPyJACF+W7PLI54g4I= Subject key identifier: 93:D9:59:86:E9:75:F8:80:67:C2:63:6D:62:6D:C1:6A:09:85:F3:CA Certificate issuer: /CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043 Certificate serial: 010D0C9F4328584EEC3FC5DDCC373443CF9D1E10 Authority key identifier: 5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/4a7b7c95-7a0d-3fd4-9fe6-16fc32170a96.roa Signing time: Sat 22 Aug 2026 15:47:47 +0000 ROA not before: Sat 22 Aug 2026 15:47:47 +0000 ROA not after: Fri 06 Nov 2026 17:29:46 +0000 asID: 25198 IP address blocks: 192.25.212.0/24 maxlen: 24 192.170.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 25 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ec:3f:c5:dd:cc:37:34:43:cf:9d:1e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043 Validity Not Before: Aug 22 15:47:47 2026 GMT Not After : Nov 6 17:29:46 2026 GMT Subject: CN=c7466814-ffda-4e96-b84c-517686a59870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:dd:bd:29:15:5b:39:a3:b7:27:50:df:44:a7: f5:65:11:09:11:d3:dd:4e:cc:eb:29:c5:c1:5d:1c: 79:bf:87:09:41:db:ec:91:75:98:bb:88:19:eb:6c: 3e:c2:e3:91:34:cd:56:56:70:8e:5d:68:e2:35:86: b4:05:8e:49:53:fe:30:a6:46:ea:c7:95:5b:66:c8: 9c:38:d9:f8:18:84:12:cd:9a:97:22:9b:c7:0f:72: 33:3b:9a:25:69:b0:ce:4a:49:40:af:3d:87:31:95: a7:84:d0:0f:42:aa:48:78:f1:47:7d:a6:58:0b:89: 63:c6:99:d7:64:b2:36:91:e2:86:35:b8:e0:8e:8c: c1:3e:14:a7:26:dd:8d:a1:c2:00:72:32:2a:97:0b: cb:79:4e:5b:ee:ca:cd:8d:1a:8d:4c:c0:e3:aa:a3: 76:d7:59:8c:b7:90:84:5e:be:88:e3:12:3a:e7:a3: d9:2f:6e:41:b6:96:60:35:6e:67:97:6c:7e:cd:0a: 53:04:e4:62:20:67:83:4f:b4:18:65:3b:ce:dd:da: 32:6d:a5:61:c5:71:18:42:0f:61:92:25:c2:32:5a: 42:93:aa:78:2e:fd:65:ac:11:1f:45:1c:7d:64:ea: 2f:8d:44:f8:db:23:91:20:60:10:80:77:ae:a9:41: 0e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D9:59:86:E9:75:F8:80:67:C2:63:6D:62:6D:C1:6A:09:85:F3:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/4a7b7c95-7a0d-3fd4-9fe6-16fc32170a96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl X509v3 Authority Key Identifier: keyid:5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer sbgp-ipAddrBlock: critical IPv4: 192.25.212.0/24 192.170.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:f9:40:95:0d:3c:b2:61:ff:2f:66:0d:9d:8e:5e:69:ea:0e: 8c:77:ad:6a:3c:35:9a:62:37:9c:3d:ad:dc:ef:dd:2b:f8:9a: d5:fb:21:7b:a6:0c:61:32:ee:06:1b:b8:32:4d:92:30:90:75: 26:05:dd:0e:b5:f8:37:f7:e1:dd:cc:13:9f:28:53:22:11:2f: f0:0d:00:e6:28:03:f8:83:bc:e2:e6:4c:7d:09:c3:7f:6e:bf: a4:15:54:d8:14:ac:54:c2:6c:7b:df:a6:48:a0:ff:a6:4d:88: 8e:63:8d:e9:4b:17:9d:08:6b:37:e6:18:ec:b7:a8:7a:1b:8f: ff:c6:16:b1:31:58:df:3c:19:72:8f:31:ba:17:e6:7e:aa:ae: 3a:38:04:0d:95:f1:05:89:7d:ad:38:08:a4:3f:52:f7:e2:37: 41:eb:b9:45:ab:36:69:4a:b2:6c:04:50:2d:2d:6d:f8:7c:3f: 06:5e:1d:ce:fa:91:34:18:cb:5e:23:be:ba:31:db:e6:1d:72: d2:16:eb:22:56:94:d7:b1:93:77:67:b0:23:bc:d2:a5:39:6a: 7a:f6:55:a6:f3:44:e4:0f:69:42:bf:72:ce:05:a2:e6:fd:a8: 5a:43:72:ad:e3:15:45:11:68:1a:0f:a5:27:42:a5:3d:a7:23: b5:73:3b:e5 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7sP8XdzDc0Q8+dHhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFlMDg3M2ItODU0MS00ZDZlLWI5MWMtMzZkYmJiZTUx MDQzMB4XDTI2MDgyMjE1NDc0N1oXDTI2MTEwNjE3Mjk0NlowLzEtMCsGA1UEAxMk Yzc0NjY4MTQtZmZkYS00ZTk2LWI4NGMtNTE3Njg2YTU5ODcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkN29KRVbOaO3J1DfRKf1ZREJEdPdTszrKcXB XRx5v4cJQdvskXWYu4gZ62w+wuORNM1WVnCOXWjiNYa0BY5JU/4wpkbqx5VbZsic ONn4GIQSzZqXIpvHD3IzO5olabDOSklArz2HMZWnhNAPQqpIePFHfaZYC4ljxpnX ZLI2keKGNbjgjozBPhSnJt2NocIAcjIqlwvLeU5b7srNjRqNTMDjqqN211mMt5CE Xr6I4xI656PZL25BtpZgNW5nl2x+zQpTBORiIGeDT7QYZTvO3doybaVhxXEYQg9h kiXCMlpCk6p4Lv1lrBEfRRx9ZOovjUT42yORIGAQgHeuqUEOnQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJPZWYbpdfiAZ8JjbWJtwWoJhfPKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YWUw ODczYi04NTQxLTRkNmUtYjkxYy0zNmRiYmJlNTEwNDMvNGE3YjdjOTUtN2EwZC0z ZmQ0LTlmZTYtMTZmYzMyMTcwYTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWFlMDg3M2ItODU0MS00ZDZlLWI5 MWMtMzZkYmJiZTUxMDQzLzlhZTA4NzNiLTg1NDEtNGQ2ZS1iOTFjLTM2ZGJiYmU1 MTA0My5jcmwwHwYDVR0jBBgwFoAUWwqyXF4s4cEXnbXgEwh62rvNi20wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YWUwODczYi04NTQxLTRkNmUtYjkxYy0zNmRi YmJlNTEwNDMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwBnUAwQA wKppMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABz5QJUNPLJh/y9mDZ2OXmnqDox3rWo8NZpiN5w9rdzv3Sv4 mtX7IXumDGEy7gYbuDJNkjCQdSYF3Q61+Df34d3ME58oUyIRL/ANAOYoA/iDvOLm TH0Jw39uv6QVVNgUrFTCbHvfpkig/6ZNiI5jjelLF50IazfmGOy3qHobj//GFrEx WN88GXKPMboX5n6qrjo4BA2V8QWJfa04CKQ/UvfiN0HruUWrNmlKsmwEUC0tbfh8 PwZeHc76kTQYy14jvrox2+YdctIW6yJWlNexk3dnsCO80qU5anr2VabzROQPaUK/ cs4Foub9qFpDcq3jFUURaBoPpSdCpT2nI7VzO+U= -----END CERTIFICATE-----Generated at Mon Aug 24 04:33:05 2026 by rpki-client