$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/3d492e08-a473-35f6-83a9-8895fc07259c.roa File: 3d492e08-a473-35f6-83a9-8895fc07259c.roa (raw, json) Hash identifier: u0JNJFuF4ihgm2yjhgtctX/fvKaY5/G9tx0lvdvOZQY= Subject key identifier: C9:E1:37:9A:35:19:CD:2D:EF:96:85:1B:67:06:E8:D7:97:4A:57:8E Certificate issuer: /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9 Certificate serial: 010D0C9F4328584F6C5837CB986E22AA4B9F2480 Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/3d492e08-a473-35f6-83a9-8895fc07259c.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 55178 IP address blocks: 192.230.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:37:cb:98:6e:22:aa:4b:9f:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=79e62036-374e-4554-bc81-0f6132b9b202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:62:f1:fa:d0:ca:66:eb:b1:7c:4b:3a:c2:4d: de:b6:36:73:8f:21:8a:0c:d2:95:f4:f5:93:94:c1: 23:fe:1f:cf:f8:c4:fa:8d:4f:82:99:99:cf:cb:e5: a9:32:32:a8:c5:1b:1c:ca:f3:03:e2:12:91:09:10: ca:1c:e7:83:48:92:8a:47:3c:1a:ef:9d:80:46:f5: 11:33:c2:45:35:dd:84:e8:8e:6f:02:9b:94:8e:99: fd:fe:12:d3:e4:a6:61:d4:2f:04:8d:f4:00:c1:26: 45:f6:f6:9a:e2:5b:c4:95:39:e4:74:36:af:14:ff: 10:1b:0f:b2:74:78:d8:f4:ce:03:58:45:fb:7b:ae: 30:af:b3:0e:23:68:ef:79:b9:ea:6b:12:dd:e9:42: 7a:2a:4f:e6:d2:d4:4b:35:a1:ff:a4:df:6c:be:5b: c5:9b:14:f1:b0:bf:b0:5a:ed:74:07:a0:ee:27:7c: f2:bf:61:2b:d1:ca:f7:c0:e8:28:f9:bd:ad:ad:2e: d1:a9:4d:1c:a4:bb:33:f1:96:1a:0e:0b:12:29:c6: 95:85:a7:f8:c8:7b:5e:d8:e5:6b:54:57:7f:aa:4c: bf:bb:4f:e6:96:b7:9a:de:3f:30:30:ac:4b:bd:04: d1:a6:08:28:39:ba:5f:f6:6a:d8:0c:49:25:ff:55: 7c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E1:37:9A:35:19:CD:2D:EF:96:85:1B:67:06:E8:D7:97:4A:57:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/3d492e08-a473-35f6-83a9-8895fc07259c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl X509v3 Authority Key Identifier: keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer sbgp-ipAddrBlock: critical IPv4: 192.230.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:48:57:91:19:57:bc:81:24:fb:42:e9:6a:c9:a4:7c:de:2c: 2d:a7:00:2b:97:4c:76:63:1e:36:4d:4a:5f:fc:e2:a4:50:f8: ed:a8:7b:3e:94:df:f0:23:1d:03:4e:53:ac:49:73:30:d8:2c: c3:6f:d4:48:19:d8:c6:97:ba:ad:cf:8e:bd:1e:a5:07:ec:de: 51:e2:26:e3:5b:9e:a1:3b:70:82:b2:9c:2c:7a:58:44:d8:ee: f4:c1:4b:6f:51:99:0a:b0:ab:7b:7a:2e:84:51:e4:74:76:87: 3c:3b:4b:b6:f3:3d:41:7b:99:8c:65:66:fe:07:6c:00:69:6a: 8c:99:ea:ee:79:fe:f8:cc:b4:9a:81:47:38:07:f0:25:40:70: 5b:97:e3:5e:5c:82:62:42:86:8c:29:0d:1a:c4:be:0b:e0:07: 10:34:0d:45:1d:b2:56:95:6c:fc:46:d9:1a:92:a4:0f:c8:54: 08:0a:90:ed:73:a0:a6:a5:1f:15:e4:c0:47:89:15:2e:b0:76: 3a:fa:a4:58:97:b4:ff:4b:76:25:81:f8:a0:c3:75:62:9b:34: 96:41:d5:57:d5:be:2d:86:af:aa:e4:e4:67:50:73:78:bd:fd: 41:66:6e:e9:3c:06:49:6a:3e:fe:cf:5f:fe:da:44:9a:c3:6b: 51:6b:6d:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWDfLmG4iqkufJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg5MDNhMTQtZWY1Zi00MzEwLWI2OTQtNjBmNDliMWM2 MWE5MB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk NzllNjIwMzYtMzc0ZS00NTU0LWJjODEtMGY2MTMyYjliMjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2Lx+tDKZuuxfEs6wk3etjZzjyGKDNKV9PWT lMEj/h/P+MT6jU+CmZnPy+WpMjKoxRscyvMD4hKRCRDKHOeDSJKKRzwa752ARvUR M8JFNd2E6I5vApuUjpn9/hLT5KZh1C8EjfQAwSZF9vaa4lvElTnkdDavFP8QGw+y dHjY9M4DWEX7e64wr7MOI2jvebnqaxLd6UJ6Kk/m0tRLNaH/pN9svlvFmxTxsL+w Wu10B6DuJ3zyv2Er0cr3wOgo+b2trS7RqU0cpLsz8ZYaDgsSKcaVhaf4yHte2OVr VFd/qky/u0/mlrea3j8wMKxLvQTRpggoObpf9mrYDEkl/1V8iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnhN5o1Gc0t75aFG2cG6NeXSleOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkw M2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0OWIxYzYxYTkvM2Q0OTJlMDgtYTQ3My0z NWY2LTgzYTktODg5NWZjMDcyNTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTg5MDNhMTQtZWY1Zi00MzEwLWI2 OTQtNjBmNDliMWM2MWE5L2E4OTAzYTE0LWVmNWYtNDMxMC1iNjk0LTYwZjQ5YjFj NjFhOS5jcmwwHwYDVR0jBBgwFoAUcjvjDDCo3dCu/FhWC6SEaIgkq2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkwM2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0 OWIxYzYxYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOa9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFIV5EZV7yBJPtC6WrJpHzeLC2nACuXTHZjHjZNSl/84qRQ+O2oez6U 3/AjHQNOU6xJczDYLMNv1EgZ2MaXuq3Pjr0epQfs3lHiJuNbnqE7cIKynCx6WETY 7vTBS29RmQqwq3t6LoRR5HR2hzw7S7bzPUF7mYxlZv4HbABpaoyZ6u55/vjMtJqB RzgH8CVAcFuX415cgmJChowpDRrEvgvgBxA0DUUdslaVbPxG2RqSpA/IVAgKkO1z oKalHxXkwEeJFS6wdjr6pFiXtP9LdiWB+KDDdWKbNJZB1VfVvi2Gr6rk5GdQc3i9 /UFmbuk8BklqPv7PX/7aRJrDa1FrbVw= -----END CERTIFICATE-----Generated at Sun Oct 11 17:30:09 2026 by rpki-client