$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/1af886a6-65c1-3c18-930e-c87938c93217.roa File: 1af886a6-65c1-3c18-930e-c87938c93217.roa (raw, json) Hash identifier: w/jfEWpmQIgUMPvuA6EHTkf0kBWnuw23x106bPr+ByI= Subject key identifier: 6E:C9:AC:55:ED:9C:03:DF:D2:95:84:DA:70:E7:37:4E:70:B5:9D:C0 Certificate issuer: /CN=09e8ec9f-45c9-4103-ba8f-29090f373418 Certificate serial: 010D0C9F4328584F68282892D93B9F52D94DF8E4 Authority key identifier: E2:27:7F:0C:84:E8:96:6D:F3:2D:41:64:5F:34:C4:A8:7D:B9:BA:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/1af886a6-65c1-3c18-930e-c87938c93217.roa Signing time: Tue 06 Oct 2026 01:00:13 +0000 ROA not before: Tue 06 Oct 2026 01:00:13 +0000 ROA not after: Mon 04 Jan 2027 02:00:13 +0000 asID: 6461 IP address blocks: 192.255.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/09e8ec9f-45c9-4103-ba8f-29090f373418.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/09e8ec9f-45c9-4103-ba8f-29090f373418.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:68:28:28:92:d9:3b:9f:52:d9:4d:f8:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09e8ec9f-45c9-4103-ba8f-29090f373418 Validity Not Before: Oct 6 01:00:13 2026 GMT Not After : Jan 4 02:00:13 2027 GMT Subject: CN=aa483b7f-e642-4324-b6f9-7e744722e25c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:89:17:d3:5a:76:cb:a4:7d:c0:15:f9:b9:fa: 7a:09:36:a7:4b:40:51:d8:a3:7b:88:d6:e7:dc:37: ff:27:68:52:9d:6a:71:e5:27:c2:75:9b:0a:50:e3: 24:a7:d1:08:c9:0c:ab:d4:f1:37:7b:7d:26:ec:24: 39:ba:11:a2:31:02:c7:62:f4:cf:74:41:17:bb:a9: 34:e6:6a:c7:b5:a3:3c:1f:89:3f:36:df:96:3f:36: 6f:28:27:03:dd:b7:6f:46:2d:5b:9f:d3:b0:10:14: 38:9e:ee:40:28:8f:a9:31:6f:f8:7b:d6:6c:49:60: 37:c3:34:5d:7a:a7:56:6e:2e:25:eb:8d:83:36:00: 23:72:0b:bd:bd:bc:25:13:e3:5a:ce:4c:97:6a:cd: fe:51:4a:0d:a4:15:a3:9a:aa:de:3b:10:d3:42:6d: 2a:8f:60:b1:2d:1d:27:58:93:8d:53:65:78:b8:33: 0c:85:5e:2f:62:2e:bf:72:c9:11:23:bc:fb:0c:3e: 29:7a:24:54:ab:b1:b0:3a:be:5d:25:f4:a4:67:40: 69:ba:17:c1:db:b6:50:71:17:67:78:69:41:e1:a3: 4b:2c:bf:9b:1e:25:cd:42:fa:93:32:cb:b8:6d:10: 22:64:d2:5c:03:2d:dc:69:81:f8:2c:d9:c1:c8:9e: 6f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C9:AC:55:ED:9C:03:DF:D2:95:84:DA:70:E7:37:4E:70:B5:9D:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/1af886a6-65c1-3c18-930e-c87938c93217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/09e8ec9f-45c9-4103-ba8f-29090f373418.crl X509v3 Authority Key Identifier: keyid:E2:27:7F:0C:84:E8:96:6D:F3:2D:41:64:5F:34:C4:A8:7D:B9:BA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418.cer sbgp-ipAddrBlock: critical IPv4: 192.255.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:83:9e:52:a7:94:40:ba:37:8b:0a:32:94:4a:93:21:7d:00: c9:e7:6e:50:17:b4:48:df:d1:88:b1:85:0f:98:b6:96:8e:9c: 4b:4d:e7:c8:04:64:83:e0:69:b5:7a:c2:13:74:77:7b:a6:b1: 4d:26:50:29:4a:0d:87:c4:bf:a4:0a:1f:bf:85:a7:c7:41:a8: 27:10:7d:e2:2a:e8:0b:4e:5a:3f:0a:66:8d:6b:1b:20:40:28: 16:72:cf:85:b7:34:d3:c8:34:84:7a:53:86:76:0c:5a:dd:61: b4:2c:71:5b:82:b3:7f:7f:da:20:0d:2c:e5:c0:9a:22:63:fe: ee:20:f1:c0:6b:5d:8f:1b:41:89:28:5b:14:df:6d:65:16:ad: f4:0b:84:a3:87:bc:bd:65:84:73:28:b7:08:2c:ef:f9:1e:95: 7c:f1:6a:67:28:85:53:10:bc:23:d3:76:80:b4:75:b8:20:00: aa:26:46:9d:31:7e:70:15:8a:38:63:27:f2:d8:76:14:1c:e6: 6d:fb:63:9e:88:e8:34:50:97:59:67:ec:af:e1:73:f4:c6:1e: b3:e9:1c:2e:30:fd:e5:0a:1b:b6:93:92:32:50:87:7e:40:01: a7:04:4e:c6:22:c0:b9:51:95:24:d8:85:e2:1c:28:07:6a:30: 64:8b:43:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9oKCiS2TufUtlN+OQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDllOGVjOWYtNDVjOS00MTAzLWJhOGYtMjkwOTBmMzcz NDE4MB4XDTI2MTAwNjAxMDAxM1oXDTI3MDEwNDAyMDAxM1owLzEtMCsGA1UEAxMk YWE0ODNiN2YtZTY0Mi00MzI0LWI2ZjktN2U3NDQ3MjJlMjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4okX01p2y6R9wBX5ufp6CTanS0BR2KN7iNbn 3Df/J2hSnWpx5SfCdZsKUOMkp9EIyQyr1PE3e30m7CQ5uhGiMQLHYvTPdEEXu6k0 5mrHtaM8H4k/Nt+WPzZvKCcD3bdvRi1bn9OwEBQ4nu5AKI+pMW/4e9ZsSWA3wzRd eqdWbi4l642DNgAjcgu9vbwlE+NazkyXas3+UUoNpBWjmqreOxDTQm0qj2CxLR0n WJONU2V4uDMMhV4vYi6/cskRI7z7DD4peiRUq7GwOr5dJfSkZ0BpuhfB27ZQcRdn eGlB4aNLLL+bHiXNQvqTMsu4bRAiZNJcAy3caYH4LNnByJ5vBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7JrFXtnAPf0pWE2nDnN05wtZ3AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wOWU4 ZWM5Zi00NWM5LTQxMDMtYmE4Zi0yOTA5MGYzNzM0MTgvMWFmODg2YTYtNjVjMS0z YzE4LTkzMGUtYzg3OTM4YzkzMjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDllOGVjOWYtNDVjOS00MTAzLWJh OGYtMjkwOTBmMzczNDE4LzA5ZThlYzlmLTQ1YzktNDEwMy1iYThmLTI5MDkwZjM3 MzQxOC5jcmwwHwYDVR0jBBgwFoAU4id/DITolm3zLUFkXzTEqH25uhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wOWU4ZWM5Zi00NWM5LTQxMDMtYmE4Zi0yOTA5 MGYzNzM0MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGwP9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGDnlKnlEC6N4sKMpRKkyF9AMnnblAXtEjf0YixhQ+YtpaOnEtN58gE ZIPgabV6whN0d3umsU0mUClKDYfEv6QKH7+Fp8dBqCcQfeIq6AtOWj8KZo1rGyBA KBZyz4W3NNPINIR6U4Z2DFrdYbQscVuCs39/2iANLOXAmiJj/u4g8cBrXY8bQYko WxTfbWUWrfQLhKOHvL1lhHMotwgs7/kelXzxamcohVMQvCPTdoC0dbggAKomRp0x fnAVijhjJ/LYdhQc5m37Y56I6DRQl1ln7K/hc/TGHrPpHC4w/eUKG7aTkjJQh35A AacETsYiwLlRlSTYheIcKAdqMGSLQ4M= -----END CERTIFICATE-----Generated at Wed Oct 14 07:53:35 2026 by rpki-client