$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/068cdd65-3c15-372f-b3e3-0d301d7c37f8.roa File: 068cdd65-3c15-372f-b3e3-0d301d7c37f8.roa (raw, json) Hash identifier: Ww8DwppzaaML/7ed8J/noKB/QZwgAQ22imGm11zNE5U= Subject key identifier: A0:84:A3:F0:6D:C1:26:11:15:A9:73:16:38:08:8B:60:8C:10:D2:39 Certificate issuer: /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9 Certificate serial: 010D0C9F4328584F6C5837E25684D64705A58CC0 Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/068cdd65-3c15-372f-b3e3-0d301d7c37f8.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 55178 IP address blocks: 192.230.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:37:e2:56:84:d6:47:05:a5:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=8dee9a09-4e46-44df-82ba-27206112cd22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c6:1f:10:43:69:3c:d7:8f:bc:0f:ec:b7:89: 02:7c:d7:a6:fd:40:3b:89:a0:11:e7:8b:41:02:05: 09:a2:e4:ca:48:20:49:d1:7b:6c:6c:b3:f5:f1:c6: b6:37:e0:37:86:c2:ec:d3:7c:10:89:69:cd:71:6b: 4a:78:4e:19:ce:16:bd:db:38:0f:6e:36:00:fa:15: 90:b7:f2:b5:e0:71:97:e4:82:46:3e:c2:80:85:e3: 31:51:b1:df:a8:05:30:2d:e6:f6:e5:3b:71:4a:1d: 63:04:4f:1e:4d:51:aa:c9:5e:f2:2d:39:0b:de:6c: 5f:53:d8:f1:ef:ed:9c:ca:03:af:17:a5:ec:77:86: 4d:86:01:cd:e5:02:9d:5a:67:6f:60:05:37:0e:32: 6e:e7:06:7a:4d:9e:99:b8:64:88:2c:af:6a:76:6a: f1:6a:c4:cd:9c:51:89:83:b5:8d:15:88:fc:cd:de: e5:cb:62:1e:32:e1:b3:b8:8f:91:54:73:50:3f:52: 93:16:b7:39:93:8b:1f:4b:69:c4:97:a3:5a:a0:ad: 30:a4:56:be:5a:fe:c7:e3:e5:ba:ce:c1:f9:24:81: 9c:70:dd:ec:17:20:49:6b:e4:61:10:fa:a0:f5:08: a9:17:8f:f3:92:5b:34:d1:51:5a:bc:b1:88:e9:93: 91:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:84:A3:F0:6D:C1:26:11:15:A9:73:16:38:08:8B:60:8C:10:D2:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/068cdd65-3c15-372f-b3e3-0d301d7c37f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl X509v3 Authority Key Identifier: keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer sbgp-ipAddrBlock: critical IPv4: 192.230.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:91:07:9e:1c:ab:c4:05:4e:81:31:68:c5:40:a7:5d:19:7c: db:80:60:20:98:da:a1:d6:93:c3:f2:fc:65:ae:7d:c0:c1:9d: 6e:f4:2d:b8:98:1e:07:04:bc:e4:b8:18:87:e2:0b:44:77:25: 6f:c0:58:8f:26:8f:a0:1b:8e:eb:c4:1d:43:fa:19:9b:88:43: bb:ea:fb:7b:9a:21:fb:bc:4d:b4:2d:14:13:a0:86:ae:b1:73: df:39:bd:2d:0d:fc:1a:0d:d6:f8:5e:e8:94:36:f3:45:67:b1: 58:6c:bc:80:3f:64:22:66:1b:8c:a0:a2:38:de:87:05:cf:4a: da:38:d0:b0:e6:32:ca:a2:cc:3f:a8:b2:d3:ce:fb:70:61:42: 40:99:13:f6:b4:67:ad:3a:ee:80:38:61:5a:16:ca:03:57:e2: 68:5c:81:0c:f2:43:b3:e5:f6:3c:62:7e:e6:f7:9d:ea:5c:3a: ab:ba:4e:da:9a:87:c6:fc:ef:10:1d:a4:67:d9:18:6b:57:d6: c8:02:ec:d0:76:5f:96:1f:cc:07:fb:73:cd:46:ff:bd:06:d6: ff:da:d6:fa:89:23:2f:e5:16:2b:fd:a9:3c:ac:bf:14:d9:76: 6d:08:85:52:5e:63:57:6c:c3:12:9b:20:b8:73:b6:e6:03:ef: f5:a4:16:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWDfiVoTWRwWljMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg5MDNhMTQtZWY1Zi00MzEwLWI2OTQtNjBmNDliMWM2 MWE5MB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk OGRlZTlhMDktNGU0Ni00NGRmLTgyYmEtMjcyMDYxMTJjZDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8YfEENpPNePvA/st4kCfNem/UA7iaAR54tB AgUJouTKSCBJ0XtsbLP18ca2N+A3hsLs03wQiWnNcWtKeE4Zzha92zgPbjYA+hWQ t/K14HGX5IJGPsKAheMxUbHfqAUwLeb25TtxSh1jBE8eTVGqyV7yLTkL3mxfU9jx 7+2cygOvF6Xsd4ZNhgHN5QKdWmdvYAU3DjJu5wZ6TZ6ZuGSILK9qdmrxasTNnFGJ g7WNFYj8zd7ly2IeMuGzuI+RVHNQP1KTFrc5k4sfS2nEl6NaoK0wpFa+Wv7H4+W6 zsH5JIGccN3sFyBJa+RhEPqg9QipF4/zkls00VFavLGI6ZOREwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCEo/BtwSYRFalzFjgIi2CMENI5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkw M2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0OWIxYzYxYTkvMDY4Y2RkNjUtM2MxNS0z NzJmLWIzZTMtMGQzMDFkN2MzN2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTg5MDNhMTQtZWY1Zi00MzEwLWI2 OTQtNjBmNDliMWM2MWE5L2E4OTAzYTE0LWVmNWYtNDMxMC1iNjk0LTYwZjQ5YjFj NjFhOS5jcmwwHwYDVR0jBBgwFoAUcjvjDDCo3dCu/FhWC6SEaIgkq2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkwM2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0 OWIxYzYxYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOa/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaRB54cq8QFToExaMVAp10ZfNuAYCCY2qHWk8Py/GWufcDBnW70LbiY HgcEvOS4GIfiC0R3JW/AWI8mj6AbjuvEHUP6GZuIQ7vq+3uaIfu8TbQtFBOghq6x c985vS0N/BoN1vhe6JQ280VnsVhsvIA/ZCJmG4ygojjehwXPSto40LDmMsqizD+o stPO+3BhQkCZE/a0Z6067oA4YVoWygNX4mhcgQzyQ7Pl9jxifub3nepcOqu6Ttqa h8b87xAdpGfZGGtX1sgC7NB2X5YfzAf7c81G/70G1v/a1vqJIy/lFiv9qTysvxTZ dm0IhVJeY1dswxKbILhztuYD7/WkFo0= -----END CERTIFICATE-----Generated at Sun Oct 11 07:03:04 2026 by rpki-client