$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/a038e2ce-821a-310e-8a75-565105e24c30.roa File: a038e2ce-821a-310e-8a75-565105e24c30.roa (raw, json) Hash identifier: nFKfJkE6EFgIaDWTXvwkktLCBLgbuVv6h3x3qrrMth0= Subject key identifier: D2:17:33:E6:E9:40:3D:59:6B:B7:08:84:F8:DC:49:18:50:B7:CF:E4 Certificate issuer: /CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043 Certificate serial: 010D0C9F4328584F2418D87BC96AD1C1FB5AC330 Authority key identifier: 5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/a038e2ce-821a-310e-8a75-565105e24c30.roa Signing time: Fri 11 Sep 2026 15:54:37 +0000 ROA not before: Fri 11 Sep 2026 15:54:37 +0000 ROA not after: Thu 10 Dec 2026 16:54:37 +0000 asID: 197959 IP address blocks: 192.25.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:24:18:d8:7b:c9:6a:d1:c1:fb:5a:c3:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043 Validity Not Before: Sep 11 15:54:37 2026 GMT Not After : Dec 10 16:54:37 2026 GMT Subject: CN=c1f47012-5573-4f9f-a21b-318210f45c54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:20:e8:e6:8a:24:6f:60:3a:0d:e8:cd:0e:bf: 20:4c:00:d8:5f:ae:18:4c:6e:26:b8:47:e7:df:24: c0:54:64:fe:cf:ae:68:44:88:b6:93:33:d3:2f:dc: d7:5a:c9:f2:26:00:bb:1b:43:ba:0c:3b:ed:ed:e9: 8d:da:8c:86:06:82:6e:16:44:75:ae:7e:cb:7d:fd: 37:9e:d4:a4:97:a2:ed:be:28:dc:02:6b:61:a3:16: 4c:31:04:63:34:90:18:3f:07:3e:70:3a:ef:a0:5c: 48:c1:aa:fd:f9:b3:b7:a4:d2:9f:ab:d1:f5:ee:3f: 85:ce:78:fc:e4:03:d5:b1:9f:e9:96:a9:0f:94:4d: e9:6e:dd:10:d3:76:f1:df:89:58:b4:c8:ad:bc:34: 75:f4:4a:48:91:ca:92:0e:23:43:a2:86:2a:b5:42: e6:d9:48:94:e9:81:b3:95:75:a0:c9:f7:a0:75:45: bf:d4:b4:4e:77:c0:68:aa:6a:0f:45:f3:d7:0e:e3: da:2a:42:f7:b1:29:32:d0:7c:d2:04:05:82:2d:f2: 29:4a:0e:9e:8c:a5:36:9b:83:a6:2b:ff:a1:ab:4d: 70:e6:65:8b:50:74:61:5a:c7:53:cc:4f:81:2f:da: 10:b4:19:33:43:49:70:f0:b4:9e:20:ba:8c:bb:fe: 1a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:17:33:E6:E9:40:3D:59:6B:B7:08:84:F8:DC:49:18:50:B7:CF:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/a038e2ce-821a-310e-8a75-565105e24c30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl X509v3 Authority Key Identifier: keyid:5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer sbgp-ipAddrBlock: critical IPv4: 192.25.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:0d:5f:d0:0d:10:70:0d:54:c3:8c:46:64:38:6b:45:91:3a: f7:f0:57:2e:d6:61:6a:62:b5:45:bf:7e:29:d7:ff:94:0f:18: 3b:42:b6:1d:21:9b:fe:83:18:d4:b3:e5:71:bd:6b:cd:f8:97: 04:4c:73:cf:85:d8:bb:81:d0:06:7b:a2:86:bd:d6:c1:92:46: f2:4d:c6:9a:4a:56:43:a4:39:e7:f1:9a:aa:db:dd:ff:0e:9d: f3:98:ad:ca:7b:a7:0f:35:e2:f5:76:92:4e:73:9d:65:85:1a: 30:22:54:d7:00:b0:1c:b4:32:26:29:b6:b5:56:e7:2e:79:7c: 19:b7:2f:0f:f1:24:f9:73:ab:ac:e6:01:cd:af:fe:50:4d:ce: 84:ec:25:83:35:dc:ad:61:19:29:d0:dd:2e:45:16:b3:03:ce: 90:be:6f:56:b6:5a:73:02:63:13:64:d1:27:b9:8d:9e:9b:f5: f1:37:2f:7e:e0:73:3d:14:f9:20:8f:09:63:99:97:62:69:28: 95:47:9b:57:ef:f3:95:22:e5:16:e9:59:ad:c1:4d:3d:c2:7a: b7:8d:fa:0b:d4:33:73:89:de:8e:bf:86:2d:38:f2:d5:83:b0: 8b:c2:46:0a:df:37:dd:c4:3e:ad:e6:03:d7:f3:97:19:14:e7: 29:49:56:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8kGNh7yWrRwftawzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFlMDg3M2ItODU0MS00ZDZlLWI5MWMtMzZkYmJiZTUx MDQzMB4XDTI2MDkxMTE1NTQzN1oXDTI2MTIxMDE2NTQzN1owLzEtMCsGA1UEAxMk YzFmNDcwMTItNTU3My00ZjlmLWEyMWItMzE4MjEwZjQ1YzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SDo5ookb2A6DejNDr8gTADYX64YTG4muEfn 3yTAVGT+z65oRIi2kzPTL9zXWsnyJgC7G0O6DDvt7emN2oyGBoJuFkR1rn7Lff03 ntSkl6LtvijcAmthoxZMMQRjNJAYPwc+cDrvoFxIwar9+bO3pNKfq9H17j+Fznj8 5APVsZ/plqkPlE3pbt0Q03bx34lYtMitvDR19EpIkcqSDiNDooYqtULm2UiU6YGz lXWgyfegdUW/1LROd8BoqmoPRfPXDuPaKkL3sSky0HzSBAWCLfIpSg6ejKU2m4Om K/+hq01w5mWLUHRhWsdTzE+BL9oQtBkzQ0lw8LSeILqMu/4aEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIXM+bpQD1Za7cIhPjcSRhQt8/kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YWUw ODczYi04NTQxLTRkNmUtYjkxYy0zNmRiYmJlNTEwNDMvYTAzOGUyY2UtODIxYS0z MTBlLThhNzUtNTY1MTA1ZTI0YzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWFlMDg3M2ItODU0MS00ZDZlLWI5 MWMtMzZkYmJiZTUxMDQzLzlhZTA4NzNiLTg1NDEtNGQ2ZS1iOTFjLTM2ZGJiYmU1 MTA0My5jcmwwHwYDVR0jBBgwFoAUWwqyXF4s4cEXnbXgEwh62rvNi20wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YWUwODczYi04NTQxLTRkNmUtYjkxYy0zNmRi YmJlNTEwNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwBmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMNX9ANEHANVMOMRmQ4a0WROvfwVy7WYWpitUW/finX/5QPGDtCth0h m/6DGNSz5XG9a834lwRMc8+F2LuB0AZ7ooa91sGSRvJNxppKVkOkOefxmqrb3f8O nfOYrcp7pw814vV2kk5znWWFGjAiVNcAsBy0MiYptrVW5y55fBm3Lw/xJPlzq6zm Ac2v/lBNzoTsJYM13K1hGSnQ3S5FFrMDzpC+b1a2WnMCYxNk0Se5jZ6b9fE3L37g cz0U+SCPCWOZl2JpKJVHm1fv85Ui5RbpWa3BTT3CereN+gvUM3OJ3o6/hi048tWD sIvCRgrfN93EPq3mA9fzlxkU5ylJVhA= -----END CERTIFICATE-----Generated at Sun Sep 13 14:11:35 2026 by rpki-client