$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/5f3dcef5-0406-33ce-8673-8f04413c8cba.roa File: 5f3dcef5-0406-33ce-8673-8f04413c8cba.roa (raw, json) Hash identifier: KecnEGMoOycbvPSm/ZyKi/RHTUkTo2mSQuVr2Vl9VjU= Subject key identifier: 5D:70:6A:06:30:A1:8B:6D:AC:70:9E:AE:CF:7F:37:48:2E:28:18:CF Certificate issuer: /CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Certificate serial: 010D0C9F4328584FB3AAEEE86C42A84C6799EA80 Authority key identifier: 1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/5f3dcef5-0406-33ce-8673-8f04413c8cba.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 209 IP address blocks: 192.88.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:aa:ee:e8:6c:42:a8:4c:67:99:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=2c5a81f4-d235-4329-8355-ca1dbb2c8db1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:23:70:8c:5f:58:58:d5:61:6b:08:21:d2:37: 32:7a:fa:fa:57:f3:52:e0:78:d2:41:00:91:e1:da: 97:04:b4:d6:28:2d:a8:c0:48:67:0f:98:a6:ef:bb: 18:5c:6c:81:ec:b5:3c:99:65:8c:23:35:82:19:b9: 11:7e:44:08:cc:a5:44:e5:43:b5:a8:e1:08:b8:74: 56:ad:10:ba:13:19:e0:15:35:fa:0a:93:31:34:c4: d1:ff:43:7c:6e:cf:09:0e:26:05:f0:30:52:42:a6: 11:7a:8f:f1:d8:3f:be:18:a1:03:a6:80:c0:54:7b: b6:4b:fc:fa:90:b6:fd:f9:c1:4d:8e:66:8c:ca:fd: c8:af:ae:02:cc:93:7e:db:6a:43:61:c2:c3:49:5d: 53:71:c4:ac:c0:40:60:ac:87:a2:11:1d:cb:03:45: da:30:1c:33:f8:03:a5:82:05:e0:7d:51:bf:69:11: 7f:72:ad:8e:29:c5:0c:d7:f8:d7:ef:b4:77:63:e7: 58:3a:ad:c6:3f:74:8d:32:7e:13:f4:26:b0:d9:1e: 52:af:bf:46:dc:d2:59:06:5f:e1:9e:50:a7:41:f8: be:63:4f:73:49:26:93:ad:31:58:e5:23:d3:f8:0a: 06:05:ba:3f:92:47:f9:9c:70:4c:e7:22:b7:a0:2f: 38:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:70:6A:06:30:A1:8B:6D:AC:70:9E:AE:CF:7F:37:48:2E:28:18:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/5f3dcef5-0406-33ce-8673-8f04413c8cba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl X509v3 Authority Key Identifier: keyid:1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer sbgp-ipAddrBlock: critical IPv4: 192.88.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:87:2c:f0:fd:de:2a:ea:9a:90:a1:59:d9:25:b9:9c:6b:0d: f7:e2:4b:67:09:ba:87:9a:78:76:fc:a2:99:99:e0:93:49:30: 2f:aa:52:1e:de:13:02:46:f9:e8:de:56:fb:ce:dd:7f:2d:97: 2c:e6:5c:41:68:50:32:22:6d:79:15:78:25:3b:b4:4d:5e:ef: 22:d7:25:92:1f:dc:93:a6:4e:f4:1a:54:93:c2:39:e3:fd:c1: d4:ce:27:ec:c2:5a:f8:44:e2:48:4c:f7:21:16:0c:67:55:da: f7:7b:46:95:a0:25:44:e2:a2:f1:7d:e4:68:c0:d6:4a:a4:dc: 5b:c3:44:17:83:c1:3f:5f:d5:74:5b:2e:3c:6e:a8:f0:59:6d: 68:38:3c:47:f1:a3:47:c9:f1:46:f9:33:e1:af:80:e5:3a:50: 9e:47:fd:1b:d0:55:91:63:6e:69:60:b5:e1:5c:ae:a4:99:f3: 68:b8:e2:3c:5d:04:24:29:b2:e3:86:47:e0:b6:89:9a:62:1d: 68:f1:fa:85:c0:48:bc:1f:ed:f0:06:64:80:08:2e:64:a2:74: f0:e8:df:f4:2e:97:62:3a:06:77:15:7e:73:5f:f5:57:2c:4c: 53:76:35:7e:1d:9b:b1:40:9e:3a:a6:da:89:16:45:c0:80:31: 43:5f:be:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+zqu7obEKoTGeZ6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY4OWI5Y2UtMDg5ZC00MTM3LWIxNGQtN2U0Y2QxNWU1 M2E1MB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk MmM1YTgxZjQtZDIzNS00MzI5LTgzNTUtY2ExZGJiMmM4ZGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCNwjF9YWNVhawgh0jcyevr6V/NS4HjSQQCR 4dqXBLTWKC2owEhnD5im77sYXGyB7LU8mWWMIzWCGbkRfkQIzKVE5UO1qOEIuHRW rRC6ExngFTX6CpMxNMTR/0N8bs8JDiYF8DBSQqYReo/x2D++GKEDpoDAVHu2S/z6 kLb9+cFNjmaMyv3Ir64CzJN+22pDYcLDSV1TccSswEBgrIeiER3LA0XaMBwz+AOl ggXgfVG/aRF/cq2OKcUM1/jX77R3Y+dYOq3GP3SNMn4T9Caw2R5Sr79G3NJZBl/h nlCnQfi+Y09zSSaTrTFY5SPT+AoGBbo/kkf5nHBM5yK3oC844wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1wagYwoYttrHCers9/N0guKBjPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5 YjljZS0wODlkLTQxMzctYjE0ZC03ZTRjZDE1ZTUzYTUvNWYzZGNlZjUtMDQwNi0z M2NlLTg2NzMtOGYwNDQxM2M4Y2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzY4OWI5Y2UtMDg5ZC00MTM3LWIx NGQtN2U0Y2QxNWU1M2E1LzM2ODliOWNlLTA4OWQtNDEzNy1iMTRkLTdlNGNkMTVl NTNhNS5jcmwwHwYDVR0jBBgwFoAUHR43+nkmbRN2TbkJvadLsyH6igMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5YjljZS0wODlkLTQxMzctYjE0ZC03ZTRj ZDE1ZTUzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFjNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaHLPD93irqmpChWdkluZxrDffiS2cJuoeaeHb8opmZ4JNJMC+qUh7e EwJG+ejeVvvO3X8tlyzmXEFoUDIibXkVeCU7tE1e7yLXJZIf3JOmTvQaVJPCOeP9 wdTOJ+zCWvhE4khM9yEWDGdV2vd7RpWgJUTiovF95GjA1kqk3FvDRBeDwT9f1XRb LjxuqPBZbWg4PEfxo0fJ8Ub5M+GvgOU6UJ5H/RvQVZFjbmlgteFcrqSZ82i44jxd BCQpsuOGR+C2iZpiHWjx+oXASLwf7fAGZIAILmSidPDo3/Qul2I6BncVfnNf9Vcs TFN2NX4dm7FAnjqm2okWRcCAMUNfvjQ= -----END CERTIFICATE-----Generated at Sun Nov 15 12:51:57 2026 by rpki-client