$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f/cb34099b-2f3c-396f-b21d-f77e0fa596f3.roa File: cb34099b-2f3c-396f-b21d-f77e0fa596f3.roa (raw, json) Hash identifier: MPG+sAMIhfoPryfzYWbgBV/kwIa4yEKOO/KskkBH+gs= Subject key identifier: 4B:33:A4:4B:CF:92:59:68:B9:50:A4:A4:36:37:4B:33:D1:67:94:AE Certificate issuer: /CN=fb545837-dc13-4101-916f-b5207537624f Certificate serial: 010D0C9F4328584EF5B20FE0B792FBCFCF631380 Authority key identifier: 1A:E2:36:89:1C:B7:F1:C7:A1:B6:DF:13:19:62:84:E3:C8:86:B1:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f/cb34099b-2f3c-396f-b21d-f77e0fa596f3.roa Signing time: Wed 26 Aug 2026 01:00:12 +0000 ROA not before: Wed 26 Aug 2026 01:00:12 +0000 ROA not after: Tue 24 Nov 2026 02:00:12 +0000 asID: 53586 IP address blocks: 199.168.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f/fb545837-dc13-4101-916f-b5207537624f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f/fb545837-dc13-4101-916f-b5207537624f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f5:b2:0f:e0:b7:92:fb:cf:cf:63:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb545837-dc13-4101-916f-b5207537624f Validity Not Before: Aug 26 01:00:12 2026 GMT Not After : Nov 24 02:00:12 2026 GMT Subject: CN=bb3d4a99-89a9-44eb-9b9d-bd0c9e1da6d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ee:df:da:2d:91:68:75:d4:0d:e5:f8:87:97: 88:e1:c8:40:c1:d6:0b:63:68:2d:9b:1e:40:6a:52: 08:90:db:17:b4:a6:49:08:84:bd:a4:27:6e:c0:48: b3:bf:0e:6d:75:5c:72:fe:b6:5e:50:58:32:2b:40: 9d:e3:56:04:e0:47:31:d5:97:11:7b:5c:c9:b8:e2: 9a:73:0c:bb:bd:2b:16:03:59:44:43:fa:f9:35:9e: 25:07:3e:f4:7a:4b:d2:71:00:dd:64:3c:58:b2:0c: c8:4e:d6:63:27:fe:74:fb:f1:4d:22:9d:6a:b9:2a: 63:8b:18:f0:c0:34:50:6d:ab:af:d5:70:9f:23:2e: 2c:db:24:bb:ef:a4:48:7c:e9:b3:21:26:07:17:16: 36:21:c8:81:b9:d0:29:e2:70:f9:26:a0:12:41:12: 4a:36:5d:b8:a8:9c:9e:38:81:33:cb:9f:af:53:8d: 01:95:33:8a:f3:b5:4e:69:39:78:57:bf:40:57:d0: 49:94:69:64:96:0a:00:11:ca:ee:28:4f:88:66:42: e4:6e:e5:2f:e5:6f:b2:18:16:12:cc:e5:8f:81:18: 6e:80:20:4b:12:c5:66:fa:c0:03:6d:e8:94:b0:db: 80:e1:c5:c4:96:f4:8c:e9:a7:ff:23:11:65:5b:5d: ac:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:33:A4:4B:CF:92:59:68:B9:50:A4:A4:36:37:4B:33:D1:67:94:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f/cb34099b-2f3c-396f-b21d-f77e0fa596f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f/fb545837-dc13-4101-916f-b5207537624f.crl X509v3 Authority Key Identifier: keyid:1A:E2:36:89:1C:B7:F1:C7:A1:B6:DF:13:19:62:84:E3:C8:86:B1:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f.cer sbgp-ipAddrBlock: critical IPv4: 199.168.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:c2:11:9f:e4:b2:32:d7:50:01:3d:61:d5:ca:b7:2f:81:a0: df:80:f5:3e:be:37:92:4e:a5:9c:1a:bd:99:3b:e3:b7:5a:22: 9a:a5:ce:d5:f9:a1:a8:07:9d:ab:d4:94:07:87:10:c6:48:8d: cc:4e:4b:fd:61:78:6b:dd:ed:0e:6a:dd:3c:e1:3a:9a:b8:33: 3d:55:12:98:78:5d:0d:c6:98:99:af:24:51:2a:7b:bb:7e:96: d4:94:dd:13:b9:f9:12:5e:d8:4b:be:a0:c4:02:92:6f:05:60: 2d:0a:59:68:ea:5a:a2:6b:40:47:39:75:e5:1a:5f:22:f1:22: b2:07:6a:54:ea:9b:8c:4f:31:2e:6b:68:17:16:29:da:b7:77: 28:1a:a0:31:45:29:ed:c4:4b:fe:c7:12:6f:9a:fb:ba:b0:49: c3:c5:99:e5:62:56:cf:cc:85:b1:4a:f8:30:69:72:99:36:7c: fa:68:63:50:a7:80:e4:eb:14:7e:e1:bd:ee:17:95:4d:95:48: 71:49:f0:94:d5:86:10:07:14:63:f5:12:d2:5d:79:3b:0e:c5: 52:df:da:1a:a0:45:dc:54:3b:83:2d:a7:46:05:78:84:48:49: c7:4f:21:19:5d:a5:a4:c9:b4:3c:a3:b9:31:39:26:8f:22:77: 7a:dc:fd:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE71sg/gt5L7z89jE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmI1NDU4MzctZGMxMy00MTAxLTkxNmYtYjUyMDc1Mzc2 MjRmMB4XDTI2MDgyNjAxMDAxMloXDTI2MTEyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmIzZDRhOTktODlhOS00NGViLTliOWQtYmQwYzllMWRhNmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte7f2i2RaHXUDeX4h5eI4chAwdYLY2gtmx5A alIIkNsXtKZJCIS9pCduwEizvw5tdVxy/rZeUFgyK0Cd41YE4Ecx1ZcRe1zJuOKa cwy7vSsWA1lEQ/r5NZ4lBz70ekvScQDdZDxYsgzITtZjJ/50+/FNIp1quSpjixjw wDRQbauv1XCfIy4s2yS776RIfOmzISYHFxY2IciBudAp4nD5JqASQRJKNl24qJye OIEzy5+vU40BlTOK87VOaTl4V79AV9BJlGlklgoAEcruKE+IZkLkbuUv5W+yGBYS zOWPgRhugCBLEsVm+sADbeiUsNuA4cXElvSM6af/IxFlW12sZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEszpEvPkllouVCkpDY3SzPRZ5SuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9mYjU0 NTgzNy1kYzEzLTQxMDEtOTE2Zi1iNTIwNzUzNzYyNGYvY2IzNDA5OWItMmYzYy0z OTZmLWIyMWQtZjc3ZTBmYTU5NmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZmI1NDU4MzctZGMxMy00MTAxLTkx NmYtYjUyMDc1Mzc2MjRmL2ZiNTQ1ODM3LWRjMTMtNDEwMS05MTZmLWI1MjA3NTM3 NjI0Zi5jcmwwHwYDVR0jBBgwFoAUGuI2iRy38cehtt8TGWKE48iGsVEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9mYjU0NTgzNy1kYzEzLTQxMDEtOTE2Zi1iNTIw NzUzNzYyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6hfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbCEZ/ksjLXUAE9YdXKty+BoN+A9T6+N5JOpZwavZk747daIpqlztX5 oagHnavUlAeHEMZIjcxOS/1heGvd7Q5q3TzhOpq4Mz1VEph4XQ3GmJmvJFEqe7t+ ltSU3RO5+RJe2Eu+oMQCkm8FYC0KWWjqWqJrQEc5deUaXyLxIrIHalTqm4xPMS5r aBcWKdq3dygaoDFFKe3ES/7HEm+a+7qwScPFmeViVs/MhbFK+DBpcpk2fPpoY1Cn gOTrFH7hve4XlU2VSHFJ8JTVhhAHFGP1EtJdeTsOxVLf2hqgRdxUO4Mtp0YFeIRI ScdPIRldpaTJtDyjuTE5Jo8id3rc/cY= -----END CERTIFICATE-----Generated at Mon Aug 31 10:24:50 2026 by rpki-client