$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/430105d8-3ede-312c-b8d4-e080ead8f7d4.roa File: 430105d8-3ede-312c-b8d4-e080ead8f7d4.roa (raw, json) Hash identifier: xBS5RvTRv4sqK/8Lr2S6pido0rfTdqdiCWNvaCsmN3g= Subject key identifier: 27:DB:82:8A:11:EB:E8:9D:4A:5C:C5:8C:11:06:A5:9A:2C:8F:4B:5E Certificate issuer: /CN=84d03f70-8e0c-4ab4-aea0-4f32765a286b Certificate serial: 010D0C9F4328584F539BDE1D92F6976083696800 Authority key identifier: 71:38:C3:AC:BB:AF:6B:FF:72:14:82:A8:BD:1E:8B:E8:FD:1A:14:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/430105d8-3ede-312c-b8d4-e080ead8f7d4.roa Signing time: Mon 28 Sep 2026 16:21:36 +0000 ROA not before: Mon 28 Sep 2026 16:21:36 +0000 ROA not after: Sun 27 Dec 2026 17:21:36 +0000 asID: 394085 IP address blocks: 192.188.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/84d03f70-8e0c-4ab4-aea0-4f32765a286b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/84d03f70-8e0c-4ab4-aea0-4f32765a286b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:9b:de:1d:92:f6:97:60:83:69:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84d03f70-8e0c-4ab4-aea0-4f32765a286b Validity Not Before: Sep 28 16:21:36 2026 GMT Not After : Dec 27 17:21:36 2026 GMT Subject: CN=3bb445ba-853c-40cc-b00e-bcb2241b3cfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1e:5f:9b:a7:4a:09:06:74:0c:a3:ec:0d:82: ac:88:c3:a5:4f:18:72:c8:3f:17:f5:0f:99:cd:45: af:f9:1a:3e:67:9f:61:16:4e:b7:59:ce:10:ce:22: b9:9e:aa:ec:86:6a:28:7c:10:0a:31:01:54:7f:93: 13:2c:db:dc:b3:9f:c5:d7:3f:5f:64:4b:88:94:f8: 80:2e:85:8f:0e:d3:67:bd:02:84:b3:5f:45:b2:57: 27:52:b0:32:7b:69:3e:cc:ad:e0:c9:d5:41:83:b0: b4:ca:63:51:7d:b4:cc:4e:2c:a1:f7:3f:a3:be:80: 8b:58:ae:13:fb:8c:c2:b3:93:11:0f:c4:74:b7:4f: 9f:f2:13:f9:4b:78:50:df:42:34:22:da:25:ef:d4: 4c:14:48:1d:c8:8f:bd:90:ea:24:c2:00:1c:0c:33: 65:8c:d9:61:ca:89:f3:46:af:77:07:a8:bd:e0:96: f5:36:b4:23:d4:7c:c0:7a:ac:ba:06:9c:9a:cd:7d: 46:73:6b:02:66:2b:89:d3:4d:46:5d:29:d0:c3:d4: 5c:f0:a9:f7:b3:59:d2:5a:eb:5d:01:64:33:5c:d2: 06:67:ca:f0:9d:98:e9:dc:60:d2:e7:1b:ee:70:e4: e1:37:f8:80:84:27:a4:a3:6b:ea:3c:6e:b0:dc:3a: 18:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DB:82:8A:11:EB:E8:9D:4A:5C:C5:8C:11:06:A5:9A:2C:8F:4B:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/430105d8-3ede-312c-b8d4-e080ead8f7d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/84d03f70-8e0c-4ab4-aea0-4f32765a286b.crl X509v3 Authority Key Identifier: keyid:71:38:C3:AC:BB:AF:6B:FF:72:14:82:A8:BD:1E:8B:E8:FD:1A:14:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b.cer sbgp-ipAddrBlock: critical IPv4: 192.188.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:b9:c8:2e:fd:27:ad:e1:5b:9f:4b:e2:a4:14:da:2f:0f:1a: 25:eb:be:16:3a:04:81:a5:40:72:da:81:12:48:9c:3d:cb:d6: b3:eb:fb:3b:b3:a9:4c:9e:e2:2b:b5:0c:fb:af:e4:ac:0b:f3: 56:45:5d:09:2a:2d:69:1a:f1:c6:76:1a:1d:02:ed:c0:c7:a6: 81:51:d3:10:de:2d:1c:44:65:a9:f0:ac:7c:70:32:0f:4e:80: 20:2e:89:2a:58:62:54:18:12:4b:6b:fa:43:9b:33:69:33:b2: 3a:b9:0d:9a:c8:10:76:66:2b:12:a8:fa:d9:1b:b3:d0:bd:2e: 8e:51:27:34:91:a2:e7:83:e1:f3:c7:40:80:33:06:22:5a:99: 70:0f:1f:60:09:87:d8:28:1e:4c:d1:5b:7f:ca:12:ac:4e:0f: 48:48:ff:ae:b4:1a:e1:46:18:ed:6e:12:79:e1:64:92:d2:7e: e1:96:26:f1:e4:78:27:2c:ff:78:fc:4b:c4:05:17:af:1e:67: d1:ca:a7:be:70:ad:0f:7d:be:d6:2d:2d:75:d1:91:e2:0b:c3: 12:85:19:6f:31:9b:09:d8:31:53:23:07:e3:c6:e1:a9:ae:8f: aa:e6:cb:27:1c:f7:92:ae:ce:51:e7:08:d4:fd:1d:7f:2c:24: 33:c8:25:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Tm94dkvaXYINpaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRkMDNmNzAtOGUwYy00YWI0LWFlYTAtNGYzMjc2NWEy ODZiMB4XDTI2MDkyODE2MjEzNloXDTI2MTIyNzE3MjEzNlowLzEtMCsGA1UEAxMk M2JiNDQ1YmEtODUzYy00MGNjLWIwMGUtYmNiMjI0MWIzY2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR5fm6dKCQZ0DKPsDYKsiMOlTxhyyD8X9Q+Z zUWv+Ro+Z59hFk63Wc4QziK5nqrshmoofBAKMQFUf5MTLNvcs5/F1z9fZEuIlPiA LoWPDtNnvQKEs19FslcnUrAye2k+zK3gydVBg7C0ymNRfbTMTiyh9z+jvoCLWK4T +4zCs5MRD8R0t0+f8hP5S3hQ30I0Itol79RMFEgdyI+9kOokwgAcDDNljNlhyonz Rq93B6i94Jb1NrQj1HzAeqy6BpyazX1Gc2sCZiuJ001GXSnQw9Rc8Kn3s1nSWutd AWQzXNIGZ8rwnZjp3GDS5xvucOThN/iAhCeko2vqPG6w3DoY4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfbgooR6+idSlzFjBEGpZosj0teMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NGQw M2Y3MC04ZTBjLTRhYjQtYWVhMC00ZjMyNzY1YTI4NmIvNDMwMTA1ZDgtM2VkZS0z MTJjLWI4ZDQtZTA4MGVhZDhmN2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODRkMDNmNzAtOGUwYy00YWI0LWFl YTAtNGYzMjc2NWEyODZiLzg0ZDAzZjcwLThlMGMtNGFiNC1hZWEwLTRmMzI3NjVh Mjg2Yi5jcmwwHwYDVR0jBBgwFoAUcTjDrLuva/9yFIKovR6L6P0aFOowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NGQwM2Y3MC04ZTBjLTRhYjQtYWVhMC00ZjMy NzY1YTI4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLwCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+5yC79J63hW59L4qQU2i8PGiXrvhY6BIGlQHLagRJInD3L1rPr+zuz qUye4iu1DPuv5KwL81ZFXQkqLWka8cZ2Gh0C7cDHpoFR0xDeLRxEZanwrHxwMg9O gCAuiSpYYlQYEktr+kObM2kzsjq5DZrIEHZmKxKo+tkbs9C9Lo5RJzSRoueD4fPH QIAzBiJamXAPH2AJh9goHkzRW3/KEqxOD0hI/660GuFGGO1uEnnhZJLSfuGWJvHk eCcs/3j8S8QFF68eZ9HKp75wrQ99vtYtLXXRkeILwxKFGW8xmwnYMVMjB+PG4amu j6rmyycc95KuzlHnCNT9HX8sJDPIJbE= -----END CERTIFICATE-----Generated at Wed Oct 28 03:12:44 2026 by rpki-client