$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e0052649-4e2f-4a6c-8cfa-f0d0d8386887/c9186fa8-d365-30e6-9e77-2b2cd0cdec14.roa File: c9186fa8-d365-30e6-9e77-2b2cd0cdec14.roa (raw, json) Hash identifier: mjVn4VwP/mZN2V7ljJRjQ/DjwRAFOp2uz/YfBUc4rEg= Subject key identifier: 0C:ED:D3:97:7B:88:66:EA:28:DB:AF:A0:FE:0E:85:18:C6:46:F2:80 Certificate issuer: /CN=e0052649-4e2f-4a6c-8cfa-f0d0d8386887 Certificate serial: 010D0C9F4328584F5B8B313A8248BE0251102320 Authority key identifier: BD:BC:B0:CE:8B:36:1D:8B:91:A2:A0:15:95:A8:B2:B3:E5:C0:D7:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e0052649-4e2f-4a6c-8cfa-f0d0d8386887.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e0052649-4e2f-4a6c-8cfa-f0d0d8386887/c9186fa8-d365-30e6-9e77-2b2cd0cdec14.roa Signing time: Thu 01 Oct 2026 12:34:28 +0000 ROA not before: Thu 01 Oct 2026 12:34:28 +0000 ROA not after: Wed 30 Dec 2026 13:34:28 +0000 asID: 4983 IP address blocks: 192.198.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e0052649-4e2f-4a6c-8cfa-f0d0d8386887/e0052649-4e2f-4a6c-8cfa-f0d0d8386887.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e0052649-4e2f-4a6c-8cfa-f0d0d8386887/e0052649-4e2f-4a6c-8cfa-f0d0d8386887.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e0052649-4e2f-4a6c-8cfa-f0d0d8386887.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:8b:31:3a:82:48:be:02:51:10:23:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0052649-4e2f-4a6c-8cfa-f0d0d8386887 Validity Not Before: Oct 1 12:34:28 2026 GMT Not After : Dec 30 13:34:28 2026 GMT Subject: CN=1d76af3f-e522-4a99-8fdb-febe7b3c3f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d6:fa:31:3c:5b:d3:bd:5d:1b:4d:20:03:ea: 06:44:37:6e:0f:3c:44:ce:01:f5:87:87:e9:da:28: 57:2f:35:e6:f5:70:60:22:ba:15:45:fb:69:1d:31: b6:de:68:8d:69:82:a0:45:c0:c5:8b:81:4d:ad:4f: 3e:ff:4d:0c:6d:17:5b:64:82:b0:11:98:2d:3b:08: e0:cd:c3:e4:45:76:43:32:8f:56:4a:ff:fa:e7:00: 64:a8:b4:1d:50:f2:e8:d0:1a:97:d2:f4:78:dd:05: 58:49:0c:b9:65:35:e5:0b:ba:0c:d4:7d:d4:e0:b8: 07:67:75:85:5c:cf:bc:bf:6c:b7:4c:74:c6:02:61: b3:53:95:d0:6b:c1:03:19:49:00:0c:91:25:dd:f8: 12:c3:5c:07:0a:9a:c2:83:1a:2a:45:75:12:b3:45: 0b:68:d0:7a:0f:2a:82:91:c0:e2:4a:ae:e4:90:34: db:98:07:f2:80:60:e6:b2:b3:b1:40:a3:29:e2:08: 8a:13:32:4f:89:b5:3c:ce:4c:a6:27:e8:8d:42:db: 9f:e8:8c:00:0f:3d:ea:9f:29:95:12:04:20:46:1c: 1a:fe:fd:3d:39:86:76:4e:30:c8:86:a0:d8:6d:19: 73:b1:52:01:89:3e:e2:93:13:fe:e3:f8:23:3a:85: 5a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:ED:D3:97:7B:88:66:EA:28:DB:AF:A0:FE:0E:85:18:C6:46:F2:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e0052649-4e2f-4a6c-8cfa-f0d0d8386887/c9186fa8-d365-30e6-9e77-2b2cd0cdec14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e0052649-4e2f-4a6c-8cfa-f0d0d8386887/e0052649-4e2f-4a6c-8cfa-f0d0d8386887.crl X509v3 Authority Key Identifier: keyid:BD:BC:B0:CE:8B:36:1D:8B:91:A2:A0:15:95:A8:B2:B3:E5:C0:D7:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e0052649-4e2f-4a6c-8cfa-f0d0d8386887.cer sbgp-ipAddrBlock: critical IPv4: 192.198.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:e4:0c:0b:07:8f:c8:e1:f7:78:06:43:e0:7e:3d:e7:68:5b: 5e:31:7d:09:bb:e6:3e:b9:eb:e1:3e:47:a8:ec:7f:0f:57:38: 31:4a:ae:d3:68:9e:92:57:66:ef:cb:a5:40:b3:72:06:f0:3b: 4c:be:b4:a0:cf:d4:40:60:b1:f4:0e:ec:e5:83:f0:b3:40:22: cc:7e:2c:60:e3:10:6d:9a:c9:05:18:a6:89:70:e8:3a:3d:17: 59:21:34:44:97:e8:d9:80:f8:2a:09:37:c9:1b:59:79:d9:52: 05:39:21:4a:b8:be:78:85:bc:8c:0c:67:24:25:4d:02:db:42: 64:8d:60:54:49:0f:ee:e0:39:2a:24:f8:3b:73:52:a5:01:b7: f0:76:c9:7d:68:7f:65:51:90:65:67:ff:4e:0b:a8:82:2a:c3: 31:03:a3:bb:fc:10:57:f4:08:2a:f1:b4:46:0a:ed:61:a4:08: e5:1c:97:67:96:a3:1d:28:f7:0f:3c:2e:b1:15:f0:18:9f:d2: 4a:21:ab:b4:36:6b:f4:1d:31:94:ea:81:07:da:67:17:1b:30: d7:66:fc:d3:a9:59:e1:00:6c:1c:8c:62:5a:56:ad:dc:a8:f5: 3b:65:10:ae:62:49:37:d8:46:f7:43:d6:40:3c:42:c1:9d:a8: 7f:f0:54:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bizE6gki+AlEQIyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTAwNTI2NDktNGUyZi00YTZjLThjZmEtZjBkMGQ4Mzg2 ODg3MB4XDTI2MTAwMTEyMzQyOFoXDTI2MTIzMDEzMzQyOFowLzEtMCsGA1UEAxMk MWQ3NmFmM2YtZTUyMi00YTk5LThmZGItZmViZTdiM2MzZjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9b6MTxb071dG00gA+oGRDduDzxEzgH1h4fp 2ihXLzXm9XBgIroVRftpHTG23miNaYKgRcDFi4FNrU8+/00MbRdbZIKwEZgtOwjg zcPkRXZDMo9WSv/65wBkqLQdUPLo0BqX0vR43QVYSQy5ZTXlC7oM1H3U4LgHZ3WF XM+8v2y3THTGAmGzU5XQa8EDGUkADJEl3fgSw1wHCprCgxoqRXUSs0ULaNB6DyqC kcDiSq7kkDTbmAfygGDmsrOxQKMp4giKEzJPibU8zkymJ+iNQtuf6IwADz3qnymV EgQgRhwa/v09OYZ2TjDIhqDYbRlzsVIBiT7ikxP+4/gjOoVaawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzt05d7iGbqKNuvoP4OhRjGRvKAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lMDA1 MjY0OS00ZTJmLTRhNmMtOGNmYS1mMGQwZDgzODY4ODcvYzkxODZmYTgtZDM2NS0z MGU2LTllNzctMmIyY2QwY2RlYzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZTAwNTI2NDktNGUyZi00YTZjLThj ZmEtZjBkMGQ4Mzg2ODg3L2UwMDUyNjQ5LTRlMmYtNGE2Yy04Y2ZhLWYwZDBkODM4 Njg4Ny5jcmwwHwYDVR0jBBgwFoAUvbywzos2HYuRoqAVlaiys+XA14YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lMDA1MjY0OS00ZTJmLTRhNmMtOGNmYS1mMGQw ZDgzODY4ODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMaoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKvkDAsHj8jh93gGQ+B+PedoW14xfQm75j656+E+R6jsfw9XODFKrtNo npJXZu/LpUCzcgbwO0y+tKDP1EBgsfQO7OWD8LNAIsx+LGDjEG2ayQUYpolw6Do9 F1khNESX6NmA+CoJN8kbWXnZUgU5IUq4vniFvIwMZyQlTQLbQmSNYFRJD+7gOSok +DtzUqUBt/B2yX1of2VRkGVn/04LqIIqwzEDo7v8EFf0CCrxtEYK7WGkCOUcl2eW ox0o9w88LrEV8Bif0kohq7Q2a/QdMZTqgQfaZxcbMNdm/NOpWeEAbByMYlpWrdyo 9TtlEK5iSTfYRvdD1kA8QsGdqH/wVOk= -----END CERTIFICATE-----Generated at Sat Oct 31 08:39:22 2026 by rpki-client