$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/b451892a-5138-3693-a8ec-542e202655c0.roa File: b451892a-5138-3693-a8ec-542e202655c0.roa (raw, json) Hash identifier: /dWmgRQ6lHrNiBsPEGpXdLYQyzCnKAnTrvc+u3RfmxE= Subject key identifier: 12:DB:FB:05:7C:E0:C0:B4:29:6A:D8:72:48:A8:C4:D4:B3:4E:C1:A6 Certificate issuer: /CN=f3281a82-6c17-4658-80f7-ee1327b4779a Certificate serial: 010D0C9F4328584EC371C68002B265C6280D0E80 Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/b451892a-5138-3693-a8ec-542e202655c0.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 22418 IP address blocks: 192.157.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:71:c6:80:02:b2:65:c6:28:0d:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=3c15eefd-8041-4916-bd6b-f16aa11a1f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:12:59:e2:af:38:5c:0c:3c:57:e5:d7:64:42: 2d:e5:41:cb:0e:28:e9:40:e5:e1:5c:e7:6e:9d:ec: 9b:c9:57:08:64:e8:e6:04:6a:a8:b9:63:53:93:af: 28:3e:44:52:f3:90:7b:8d:15:03:1c:7a:ae:f7:5f: 2d:6a:ab:b4:86:a7:06:bb:4e:c2:21:72:64:4d:45: 36:96:56:b3:41:05:af:8e:cc:1d:ba:19:ab:2d:60: 67:57:5b:71:58:ce:53:a7:67:5c:d7:e1:4f:cb:36: 77:02:20:f0:49:54:dd:8b:93:89:86:d1:ab:fb:28: 67:63:43:f2:72:ef:61:ae:8d:e4:ba:91:b9:0d:0e: 2c:c0:5a:90:82:7e:20:50:ad:df:3b:8c:7d:5c:b1: 7d:d6:cb:e4:df:9e:07:f6:2a:8b:81:56:e7:b7:a8: d3:8b:9a:86:cb:aa:b2:4b:3f:a3:0a:75:9e:dc:ac: c3:8b:24:d4:1b:b7:05:a5:28:4a:4a:87:3c:57:19: 1d:5b:c6:98:15:36:e5:28:99:e9:33:e3:8e:31:54: 8d:9c:47:04:b7:d7:35:ed:7f:88:18:2c:9e:ee:2a: 4d:1d:23:35:13:d1:72:2f:fa:84:38:8d:7b:46:03: 2c:2a:9a:be:15:00:ad:47:e7:20:3b:18:a2:0e:7c: 53:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DB:FB:05:7C:E0:C0:B4:29:6A:D8:72:48:A8:C4:D4:B3:4E:C1:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/b451892a-5138-3693-a8ec-542e202655c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl X509v3 Authority Key Identifier: keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer sbgp-ipAddrBlock: critical IPv4: 192.157.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:ac:eb:00:71:ef:9c:64:77:d8:f5:92:44:90:90:12:63:20: ac:77:82:22:18:13:a7:e7:40:5d:c5:84:28:34:e5:65:25:56: 7a:40:24:2d:de:20:46:4c:a0:9b:bf:fa:1a:23:ad:e1:03:58: 02:a1:a0:fc:74:33:24:dc:64:24:52:ca:96:9f:4c:9f:c0:34: ba:ef:47:22:86:88:3b:75:4f:87:b0:48:db:29:b2:0b:2e:dc: eb:a4:eb:c1:1d:c4:97:f4:28:b0:50:95:a8:fc:1b:2c:7c:9b: 01:fc:2d:db:d5:15:c9:9c:22:21:8b:38:5d:29:5e:fa:26:ff: 98:25:0e:3e:55:7a:25:9e:88:88:29:20:0e:79:af:d7:8a:5b: de:c2:50:7e:0e:bb:4c:cb:93:87:e4:85:da:d4:54:77:05:f3: 22:34:1a:92:b9:97:64:37:b5:98:64:bb:bb:9b:df:c9:80:30: 1c:1f:ef:7d:7a:2a:08:72:0a:be:0e:82:6c:8b:c6:0d:4e:a6: 70:91:c8:96:3d:c5:3c:a7:55:e3:8e:96:86:4a:25:98:1a:22: bb:a9:87:24:ab:97:66:56:74:27:69:3a:7b:4d:4d:cc:18:c8: 4b:c6:0c:44:5e:69:d7:25:7a:48:aa:59:53:a0:2e:97:69:c0: 4e:3d:31:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DccaAArJlxigNDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjMyODFhODItNmMxNy00NjU4LTgwZjctZWUxMzI3YjQ3 NzlhMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk M2MxNWVlZmQtODA0MS00OTE2LWJkNmItZjE2YWExMWExZjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhJZ4q84XAw8V+XXZEIt5UHLDijpQOXhXOdu neybyVcIZOjmBGqouWNTk68oPkRS85B7jRUDHHqu918taqu0hqcGu07CIXJkTUU2 llazQQWvjswduhmrLWBnV1txWM5Tp2dc1+FPyzZ3AiDwSVTdi5OJhtGr+yhnY0Py cu9hro3kupG5DQ4swFqQgn4gUK3fO4x9XLF91svk354H9iqLgVbnt6jTi5qGy6qy Sz+jCnWe3KzDiyTUG7cFpShKSoc8VxkdW8aYFTblKJnpM+OOMVSNnEcEt9c17X+I GCye7ipNHSM1E9FyL/qEOI17RgMsKpq+FQCtR+cgOxiiDnxT3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLb+wV84MC0KWrYckioxNSzTsGmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4 MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEzMjdiNDc3OWEvYjQ1MTg5MmEtNTEzOC0z NjkzLWE4ZWMtNTQyZTIwMjY1NWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjMyODFhODItNmMxNy00NjU4LTgw ZjctZWUxMzI3YjQ3NzlhL2YzMjgxYTgyLTZjMTctNDY1OC04MGY3LWVlMTMyN2I0 Nzc5YS5jcmwwHwYDVR0jBBgwFoAUnADJBPwikRxD9McDuOMXvvVr1YgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEz MjdiNDc3OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ1WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGas6wBx75xkd9j1kkSQkBJjIKx3giIYE6fnQF3FhCg05WUlVnpAJC3e IEZMoJu/+hojreEDWAKhoPx0MyTcZCRSypafTJ/ANLrvRyKGiDt1T4ewSNspsgsu 3Ouk68EdxJf0KLBQlaj8Gyx8mwH8LdvVFcmcIiGLOF0pXvom/5glDj5VeiWeiIgp IA55r9eKW97CUH4Ou0zLk4fkhdrUVHcF8yI0GpK5l2Q3tZhku7ub38mAMBwf7316 KghyCr4OgmyLxg1OpnCRyJY9xTynVeOOloZKJZgaIruphySrl2ZWdCdpOntNTcwY yEvGDEReadclekiqWVOgLpdpwE49MYo= -----END CERTIFICATE-----Generated at Sat Sep 12 11:07:10 2026 by rpki-client