$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/2ddb1419-5806-328e-baef-d46939f17218.roa File: 2ddb1419-5806-328e-baef-d46939f17218.roa (raw, json) Hash identifier: Cmvw6FWgYfq3pdKrRgGLMdc65NHK8cnT5ugxFku+Heo= Subject key identifier: 5E:ED:97:DD:A9:3C:42:BC:2B:A4:54:69:3D:8D:04:9F:4E:5E:6B:56 Certificate issuer: /CN=748884b0-2456-4700-984f-d893a56dbcdd Certificate serial: 010D0C9F4328584F66C2C28068394C5409775900 Authority key identifier: E2:B1:73:CA:CC:4D:2F:9D:D2:C5:6A:A9:F8:AE:2A:E3:9F:12:60:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/2ddb1419-5806-328e-baef-d46939f17218.roa Signing time: Mon 05 Oct 2026 13:00:13 +0000 ROA not before: Mon 05 Oct 2026 13:00:13 +0000 ROA not after: Sun 03 Jan 2027 14:00:13 +0000 asID: 393844 IP address blocks: 192.24.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:c2:c2:80:68:39:4c:54:09:77:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=748884b0-2456-4700-984f-d893a56dbcdd Validity Not Before: Oct 5 13:00:13 2026 GMT Not After : Jan 3 14:00:13 2027 GMT Subject: CN=7b1cf08f-8fb1-4723-a5c3-d25c6d3fa06e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ad:a6:34:c0:85:72:09:11:d7:ca:e5:a9:41: b6:9b:c4:fa:14:3e:16:7f:cf:2e:1b:71:0e:00:be: 5d:5e:2c:68:2a:3f:1f:95:5b:e3:b7:ee:e7:8b:6d: a8:ec:eb:3a:b5:98:67:f3:74:c8:ad:f3:e0:6d:12: 47:5b:c5:0a:98:df:d5:70:88:f6:64:1d:0e:36:68: 7d:1e:06:96:49:06:dc:2a:0f:11:64:4b:7f:1f:04: a5:bd:3e:16:f9:98:bb:6d:da:ff:78:c3:27:87:6d: a0:60:a0:b0:82:98:8b:ff:a0:0f:b5:14:1b:e1:07: 3b:ae:61:d8:4b:6b:05:8d:c6:a9:5b:b4:05:88:a0: 82:a0:55:db:bb:7e:73:84:f0:59:d7:78:86:7c:60: d4:ae:a3:6b:51:83:c8:b2:e2:88:5a:d5:c9:3e:0a: 63:bd:48:74:7e:fb:e9:ab:b3:28:cd:f4:81:15:78: 89:5f:5e:b4:0d:e5:86:61:51:d1:c6:b6:29:24:4a: 05:c4:cc:6a:53:7b:f5:f9:01:0c:2d:b0:c7:6d:d7: 60:55:b6:d9:07:f4:c9:9e:1a:41:4c:a4:7b:94:e2: 46:b7:16:3d:9c:e5:4f:1c:ce:76:e6:c6:57:2c:2a: 6a:1e:1f:59:e8:0a:b4:a1:aa:e4:f0:9a:ed:80:38: 57:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:ED:97:DD:A9:3C:42:BC:2B:A4:54:69:3D:8D:04:9F:4E:5E:6B:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/2ddb1419-5806-328e-baef-d46939f17218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.crl X509v3 Authority Key Identifier: keyid:E2:B1:73:CA:CC:4D:2F:9D:D2:C5:6A:A9:F8:AE:2A:E3:9F:12:60:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer sbgp-ipAddrBlock: critical IPv4: 192.24.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:8c:fa:f7:07:89:34:26:ce:5d:1a:66:80:44:bc:dd:d0:a7: ef:71:0c:ec:b0:07:1b:6c:af:a1:e5:28:4f:68:da:8e:a6:4e: b5:03:a6:bf:b6:16:55:6b:d5:50:d6:3b:0b:fa:bf:df:b9:d5: 4c:12:b9:28:1c:32:c6:7d:1b:f2:53:d3:0f:b9:5b:d9:64:48: 71:d7:b6:dc:3c:e6:ab:cd:21:e1:9a:fb:15:2e:1b:b9:b7:2b: 66:0d:be:69:7e:07:95:10:23:6a:52:a6:9a:64:60:63:05:12: 52:52:11:48:c6:4e:3b:ae:ae:ad:84:c1:32:76:40:ea:92:91: 13:c3:e1:e2:fb:86:e5:b6:04:b4:3e:e1:d8:4c:b2:88:b4:02: a2:9b:33:b4:ad:02:43:e2:94:d4:51:94:fb:44:91:b3:0c:e1: 5d:5a:2c:87:24:64:27:35:07:d5:84:7a:c5:11:0f:71:44:71: 33:1a:96:4a:d8:15:bf:a0:4d:1b:58:53:6e:94:f4:30:64:df: e8:52:00:20:ef:16:6c:33:24:b7:5d:3f:31:86:75:2d:12:e7: 45:03:70:f7:ad:4b:a4:ea:2d:5e:65:2f:2e:19:e7:a0:d7:a2: f7:81:1c:17:8e:a7:5d:01:06:1c:ec:36:ac:79:31:ef:b3:6f: 37:a6:12:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9mwsKAaDlMVAl3WQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ4ODg0YjAtMjQ1Ni00NzAwLTk4NGYtZDg5M2E1NmRi Y2RkMB4XDTI2MTAwNTEzMDAxM1oXDTI3MDEwMzE0MDAxM1owLzEtMCsGA1UEAxMk N2IxY2YwOGYtOGZiMS00NzIzLWE1YzMtZDI1YzZkM2ZhMDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkK2mNMCFcgkR18rlqUG2m8T6FD4Wf88uG3EO AL5dXixoKj8flVvjt+7ni22o7Os6tZhn83TIrfPgbRJHW8UKmN/VcIj2ZB0ONmh9 HgaWSQbcKg8RZEt/HwSlvT4W+Zi7bdr/eMMnh22gYKCwgpiL/6APtRQb4Qc7rmHY S2sFjcapW7QFiKCCoFXbu35zhPBZ13iGfGDUrqNrUYPIsuKIWtXJPgpjvUh0fvvp q7MozfSBFXiJX160DeWGYVHRxrYpJEoFxMxqU3v1+QEMLbDHbddgVbbZB/TJnhpB TKR7lOJGtxY9nOVPHM525sZXLCpqHh9Z6Aq0oark8JrtgDhX4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7tl92pPEK8K6RUaT2NBJ9OXmtWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83NDg4 ODRiMC0yNDU2LTQ3MDAtOTg0Zi1kODkzYTU2ZGJjZGQvMmRkYjE0MTktNTgwNi0z MjhlLWJhZWYtZDQ2OTM5ZjE3MjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzQ4ODg0YjAtMjQ1Ni00NzAwLTk4 NGYtZDg5M2E1NmRiY2RkLzc0ODg4NGIwLTI0NTYtNDcwMC05ODRmLWQ4OTNhNTZk YmNkZC5jcmwwHwYDVR0jBBgwFoAU4rFzysxNL53SxWqp+K4q458SYKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83NDg4ODRiMC0yNDU2LTQ3MDAtOTg0Zi1kODkz YTU2ZGJjZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwBgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeM+vcHiTQmzl0aZoBEvN3Qp+9xDOywBxtsr6HlKE9o2o6mTrUDpr+2 FlVr1VDWOwv6v9+51UwSuSgcMsZ9G/JT0w+5W9lkSHHXttw85qvNIeGa+xUuG7m3 K2YNvml+B5UQI2pSpppkYGMFElJSEUjGTjuurq2EwTJ2QOqSkRPD4eL7huW2BLQ+ 4dhMsoi0AqKbM7StAkPilNRRlPtEkbMM4V1aLIckZCc1B9WEesURD3FEcTMalkrY Fb+gTRtYU26U9DBk3+hSACDvFmwzJLddPzGGdS0S50UDcPetS6TqLV5lLy4Z56DX oveBHBeOp10BBhzsNqx5Me+zbzemEjw= -----END CERTIFICATE-----Generated at Mon Nov 2 13:06:44 2026 by rpki-client