$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/a1861383-a682-39b2-ada2-cc112009abf5.roa File: a1861383-a682-39b2-ada2-cc112009abf5.roa (raw, json) Hash identifier: ddyN4/YlKtLiFQA6KavrjJOdZ4Rv/++VLL8CySTQTxM= Subject key identifier: 44:D4:F2:FA:69:9A:B6:97:65:1D:FC:19:08:56:6F:B0:50:98:E7:C6 Certificate issuer: /CN=9e1491d6-2ab7-4c14-bee6-122ee4531127 Certificate serial: 010D0C9F4328584F8DD88D446F4622324DE99AE0 Authority key identifier: C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/a1861383-a682-39b2-ada2-cc112009abf5.roa Signing time: Mon 19 Oct 2026 13:00:12 +0000 ROA not before: Mon 19 Oct 2026 13:00:12 +0000 ROA not after: Sun 17 Jan 2027 14:00:12 +0000 asID: 396417 IP address blocks: 192.195.4.0/24 maxlen: 24 192.195.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:d8:8d:44:6f:46:22:32:4d:e9:9a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e1491d6-2ab7-4c14-bee6-122ee4531127 Validity Not Before: Oct 19 13:00:12 2026 GMT Not After : Jan 17 14:00:12 2027 GMT Subject: CN=1cc91730-991b-44b9-9476-744d7f5cac81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8d:3b:35:95:a8:b5:06:9a:ce:6e:5c:bf:05: 78:fe:cd:63:9e:8e:42:4a:fc:e5:57:a5:f2:f7:1a: 88:3a:fa:48:da:e4:cf:05:4e:ce:31:d1:5d:8e:66: 90:bb:dd:12:36:2f:98:b6:20:7d:b9:6b:29:71:6a: 00:56:f4:dc:6f:d0:00:11:31:a0:b2:7a:bc:56:43: cb:a8:ce:df:c9:8b:bf:0e:25:fb:bb:88:5a:29:93: 48:4a:c3:e5:8a:ce:7b:45:dd:d7:27:a1:9b:b4:b2: 66:08:2e:91:fc:03:a2:63:c9:8e:59:75:69:eb:88: 68:52:88:7c:0a:3d:e5:a5:4d:2a:e6:4a:95:13:da: f3:e2:81:9c:91:e2:ae:7d:41:29:67:67:b0:29:10: 78:d8:2a:7a:ba:5c:3a:84:81:49:eb:b7:70:d9:08: c9:5b:78:a1:fc:47:6a:f5:13:a7:dd:e3:c5:dd:e1: 5c:60:53:c8:24:8b:a4:4d:7c:fe:aa:5d:3f:01:94: 22:16:3c:ee:6a:3a:2b:f0:7d:59:41:84:59:cd:21: 78:cb:f8:d1:76:ad:79:d2:a4:2d:39:6d:a9:e0:67: a6:3c:f7:c3:10:86:03:e3:b0:1f:1a:b8:19:c7:12: 14:24:1c:0a:10:0c:49:51:7d:b7:f0:36:2b:1b:7d: 7a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D4:F2:FA:69:9A:B6:97:65:1D:FC:19:08:56:6F:B0:50:98:E7:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/a1861383-a682-39b2-ada2-cc112009abf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl X509v3 Authority Key Identifier: keyid:C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer sbgp-ipAddrBlock: critical IPv4: 192.195.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:5e:21:3c:6b:7a:fd:8e:76:3b:2f:64:ed:ae:a2:32:02:a1: dd:83:0b:7e:ae:49:ee:63:88:0e:65:a0:7d:0d:fc:ab:9a:7d: 9e:f9:0b:1d:a0:e9:69:05:de:da:11:1f:d8:a2:7e:a0:13:94: 32:e0:72:0b:7f:2e:5d:17:f3:c4:23:af:fe:61:08:28:75:19: 15:8d:27:c3:ff:af:11:0e:e8:15:f6:13:2c:60:12:26:90:2f: b8:c1:75:b5:42:9d:1e:6c:f3:99:d5:e7:c1:5a:16:07:3b:84: 1d:1e:fa:82:5a:86:f9:0d:36:a2:f6:fc:15:59:7d:f3:21:d5: 58:a8:9d:76:80:95:96:2e:02:5b:d5:b7:2d:d0:55:cb:63:73: b9:95:43:22:e4:79:a2:b7:09:b1:07:d0:ef:83:5b:16:b4:11: bd:4d:6e:87:4c:da:17:14:ab:9a:1b:49:b3:f0:78:5e:10:7b: 24:14:ac:11:de:38:cf:bc:31:11:58:95:e6:7d:26:d8:6e:d1: 1d:d3:f8:09:cf:4f:40:85:90:e5:25:9d:bb:aa:fa:22:19:7f: 05:e6:d7:5e:29:79:87:39:8b:28:55:72:cd:42:9c:69:58:9c: d0:a8:8c:be:bd:5a:b9:84:10:dc:b1:cd:e7:d9:d0:d3:16:58: 5c:e1:4a:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+N2I1Eb0YiMk3pmuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWUxNDkxZDYtMmFiNy00YzE0LWJlZTYtMTIyZWU0NTMx MTI3MB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk MWNjOTE3MzAtOTkxYi00NGI5LTk0NzYtNzQ0ZDdmNWNhYzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgY07NZWotQaazm5cvwV4/s1jno5CSvzlV6Xy 9xqIOvpI2uTPBU7OMdFdjmaQu90SNi+YtiB9uWspcWoAVvTcb9AAETGgsnq8VkPL qM7fyYu/DiX7u4haKZNISsPlis57Rd3XJ6GbtLJmCC6R/AOiY8mOWXVp64hoUoh8 Cj3lpU0q5kqVE9rz4oGckeKufUEpZ2ewKRB42Cp6ulw6hIFJ67dw2QjJW3ih/Edq 9ROn3ePF3eFcYFPIJIukTXz+ql0/AZQiFjzuajor8H1ZQYRZzSF4y/jRdq150qQt OW2p4GemPPfDEIYD47AfGrgZxxIUJBwKEAxJUX238DYrG316mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETU8vppmraXZR38GQhWb7BQmOfGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ZTE0 OTFkNi0yYWI3LTRjMTQtYmVlNi0xMjJlZTQ1MzExMjcvYTE4NjEzODMtYTY4Mi0z OWIyLWFkYTItY2MxMTIwMDlhYmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWUxNDkxZDYtMmFiNy00YzE0LWJl ZTYtMTIyZWU0NTMxMTI3LzllMTQ5MWQ2LTJhYjctNGMxNC1iZWU2LTEyMmVlNDUz MTEyNy5jcmwwHwYDVR0jBBgwFoAUwrX75YVX4vAqQcTI2tTXBsMOm2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ZTE0OTFkNi0yYWI3LTRjMTQtYmVlNi0xMjJl ZTQ1MzExMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwMMEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBeITxrev2OdjsvZO2uojICod2DC36uSe5jiA5loH0N/KuafZ75Cx2g 6WkF3toRH9iifqATlDLgcgt/Ll0X88Qjr/5hCCh1GRWNJ8P/rxEO6BX2EyxgEiaQ L7jBdbVCnR5s85nV58FaFgc7hB0e+oJahvkNNqL2/BVZffMh1VionXaAlZYuAlvV ty3QVctjc7mVQyLkeaK3CbEH0O+DWxa0Eb1NbodM2hcUq5obSbPweF4QeyQUrBHe OM+8MRFYleZ9Jthu0R3T+AnPT0CFkOUlnbuq+iIZfwXm114peYc5iyhVcs1CnGlY nNCojL69WrmEENyxzefZ0NMWWFzhStw= -----END CERTIFICATE-----Generated at Sun Nov 1 14:51:56 2026 by rpki-client