$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/db977bdb-7775-35b2-83b4-688332a81542.roa File: db977bdb-7775-35b2-83b4-688332a81542.roa (raw, json) Hash identifier: oNklSxZ/99ILKaK9cJ9siPOw8GWZzK1tKwiZAXwG6lY= Subject key identifier: 8F:B0:19:3C:D2:9C:CA:52:19:F2:71:1F:45:43:7A:3E:A9:5D:95:B5 Certificate issuer: /CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Certificate serial: 010D0C9F4328584F7FE2DFA7F36CF64129236480 Authority key identifier: 95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/db977bdb-7775-35b2-83b4-688332a81542.roa Signing time: Wed 14 Oct 2026 13:00:12 +0000 ROA not before: Wed 14 Oct 2026 13:00:12 +0000 ROA not after: Tue 12 Jan 2027 14:00:12 +0000 asID: 29 IP address blocks: 192.31.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:e2:df:a7:f3:6c:f6:41:29:23:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Validity Not Before: Oct 14 13:00:12 2026 GMT Not After : Jan 12 14:00:12 2027 GMT Subject: CN=af8c1a3e-01ce-4951-9b73-dc8fcfa126e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f4:aa:76:73:2e:e4:29:ff:b2:ef:53:df:4c: 4d:b8:35:7f:df:46:ac:41:71:81:4b:ee:b9:ee:05: c2:29:16:97:9c:68:e0:5a:4b:02:45:29:21:71:62: b8:4c:4e:76:10:bb:b5:9c:04:6a:06:2d:1d:c1:3a: fa:de:5c:89:fd:81:d7:9f:70:62:ea:fd:9d:31:f0: e8:93:c4:45:61:d3:10:cb:98:ec:2c:5c:d3:4f:bb: fe:3e:6e:dd:2b:3d:a9:fc:6c:98:5f:f6:c1:26:e2: 1c:b6:e5:b1:70:0d:6e:9d:5c:ce:63:7d:46:ed:c5: 04:64:a1:e2:7f:f2:64:74:94:ae:7d:9d:15:7f:00: 87:ca:ea:cc:2f:9c:e1:71:bc:e4:a3:29:e1:4f:b6: e3:eb:73:ff:1f:eb:40:4c:db:d8:af:54:29:8b:92: 27:c5:bb:fa:db:b5:71:30:db:26:9e:32:0b:4d:05: d9:63:8a:e5:1e:4c:90:ea:10:6b:a5:12:64:99:81: 8a:4c:53:da:2d:08:1c:b4:f8:55:98:cc:52:d2:51: 90:1e:70:ca:97:29:4e:b2:a2:c4:fa:70:66:13:bc: dc:e4:00:39:3b:a0:92:b2:c5:00:da:5d:92:a0:30: e6:f6:29:05:f3:15:fa:95:2c:58:dc:63:d3:d7:03: d3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B0:19:3C:D2:9C:CA:52:19:F2:71:1F:45:43:7A:3E:A9:5D:95:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/db977bdb-7775-35b2-83b4-688332a81542.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl X509v3 Authority Key Identifier: keyid:95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer sbgp-ipAddrBlock: critical IPv4: 192.31.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:76:9a:3d:7b:a6:64:d1:f5:68:44:d8:70:a7:9d:89:a5:7a: d8:38:03:6c:a6:e5:c2:24:6a:fe:0f:1e:15:86:7e:3f:45:8b: 75:eb:21:06:f5:73:1f:2b:d4:82:a0:97:35:e4:99:0b:c5:c4: ef:10:87:b6:be:b1:de:2a:9e:cd:9a:07:de:15:09:c0:dd:5f: 80:e9:8c:43:ea:32:a1:82:ed:43:fa:77:ba:69:2b:12:46:33: 9f:12:69:fa:3a:96:64:e1:8f:f0:b1:2a:e3:cd:0b:91:bb:2d: 3a:57:ca:ac:82:89:f7:95:4d:a4:f9:4e:d6:41:3d:f3:0c:87: ee:15:c5:d6:c3:9c:6b:8a:95:fd:94:b9:62:99:40:03:3e:ad: dc:86:f3:c3:55:7f:47:23:1f:ea:3f:13:a2:9c:84:b5:30:09: 2f:1f:d8:f9:eb:8c:38:b8:5e:76:71:5e:3c:a6:00:23:b0:0e: df:ad:a0:06:20:8b:23:4a:7d:e1:46:c9:06:db:a6:0e:57:e8: 61:85:d6:13:f9:f6:d7:74:21:67:a4:ea:75:7e:00:eb:d7:5c: e9:da:4f:b5:1a:d0:f1:02:4b:1a:e9:93:3e:04:2a:57:f8:e8: 00:5d:67:40:1c:56:91:00:74:a2:6d:9f:43:d8:05:d8:1f:f0: 7f:de:5c:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/4t+n82z2QSkjZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZmMjZkNzUtMGQzYS00YmVmLThkNmEtMzZkMTY2NjQz MDdlMB4XDTI2MTAxNDEzMDAxMloXDTI3MDExMjE0MDAxMlowLzEtMCsGA1UEAxMk YWY4YzFhM2UtMDFjZS00OTUxLTliNzMtZGM4ZmNmYTEyNmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfSqdnMu5Cn/su9T30xNuDV/30asQXGBS+65 7gXCKRaXnGjgWksCRSkhcWK4TE52ELu1nARqBi0dwTr63lyJ/YHXn3Bi6v2dMfDo k8RFYdMQy5jsLFzTT7v+Pm7dKz2p/GyYX/bBJuIctuWxcA1unVzOY31G7cUEZKHi f/JkdJSufZ0VfwCHyurML5zhcbzkoynhT7bj63P/H+tATNvYr1Qpi5Inxbv627Vx MNsmnjILTQXZY4rlHkyQ6hBrpRJkmYGKTFPaLQgctPhVmMxS0lGQHnDKlylOsqLE +nBmE7zc5AA5O6CSssUA2l2SoDDm9ikF8xX6lSxY3GPT1wPTtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+wGTzSnMpSGfJxH0VDej6pXZW1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYy NmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQxNjY2NDMwN2UvZGI5NzdiZGItNzc3NS0z NWIyLTgzYjQtNjg4MzMyYTgxNTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTZmMjZkNzUtMGQzYS00YmVmLThk NmEtMzZkMTY2NjQzMDdlL2E2ZjI2ZDc1LTBkM2EtNGJlZi04ZDZhLTM2ZDE2NjY0 MzA3ZS5jcmwwHwYDVR0jBBgwFoAUlWM1M0cFXVlxOtpn6eu7WvXcfSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYyNmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQx NjY2NDMwN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB/sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALZ2mj17pmTR9WhE2HCnnYmletg4A2ym5cIkav4PHhWGfj9Fi3XrIQb1 cx8r1IKglzXkmQvFxO8Qh7a+sd4qns2aB94VCcDdX4DpjEPqMqGC7UP6d7ppKxJG M58Safo6lmThj/CxKuPNC5G7LTpXyqyCifeVTaT5TtZBPfMMh+4VxdbDnGuKlf2U uWKZQAM+rdyG88NVf0cjH+o/E6KchLUwCS8f2PnrjDi4XnZxXjymACOwDt+toAYg iyNKfeFGyQbbpg5X6GGF1hP59td0IWek6nV+AOvXXOnaT7Ua0PECSxrpkz4EKlf4 6ABdZ0AcVpEAdKJtn0PYBdgf8H/eXCI= -----END CERTIFICATE-----Generated at Wed Oct 21 05:36:53 2026 by rpki-client