$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/6bff204f-baf3-3c15-a992-3135c46aad0b.roa File: 6bff204f-baf3-3c15-a992-3135c46aad0b.roa (raw, json) Hash identifier: tF3sl8castCn9YyShWNZoRDya2hvCBkHJUcQ3KXawxY= Subject key identifier: D9:21:B1:04:C1:0D:E4:D1:3B:A0:F3:33:F2:0B:6C:0C:01:76:22:63 Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Certificate serial: 010D0C9F4328584EA7943A7F9629F222171DDD00 Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/6bff204f-baf3-3c15-a992-3135c46aad0b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 40244 IP address blocks: 192.154.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:3a:7f:96:29:f2:22:17:1d:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=fdc6e22c-6c50-46b0-b69d-29ff92dee0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:aa:fe:76:45:3f:87:69:8e:db:8a:33:74:6d: 02:77:4e:76:03:a0:3c:b6:f3:da:50:19:a9:ca:4f: 4f:d4:8f:4c:56:95:53:cf:70:c8:8f:1f:7b:71:ca: c1:49:dd:62:62:9f:d0:48:00:b4:13:e4:6a:bb:1c: bf:34:27:94:5e:fe:6f:73:9d:0d:a2:2f:fe:a8:d8: 7b:ab:0d:ab:87:81:e5:c9:56:75:ab:98:5e:3c:f8: ca:7b:d1:a0:a3:2b:af:8e:e1:08:5e:ee:c8:f9:1e: d1:a5:6d:94:53:d9:59:c0:7b:05:30:52:37:df:cb: 61:82:79:94:28:f5:c3:59:bf:bd:ee:3a:7d:e7:7f: df:f5:68:4b:aa:16:d3:61:3d:28:6e:5a:0f:36:e6: 2c:e5:2a:37:c4:9f:43:c6:10:c7:20:ac:e5:98:3f: 15:15:9b:a8:f4:8d:a5:e1:b0:db:06:52:93:d2:05: 07:14:f8:ee:a5:3a:90:96:c1:62:f5:c5:c2:ac:1e: c8:f0:ba:3a:21:f5:30:84:a1:20:6b:4b:d5:93:db: f6:91:52:51:50:1c:61:04:6c:45:af:3f:f0:f2:8e: 6e:d8:7c:29:80:54:42:b5:ce:34:9e:54:22:54:1b: 51:34:c8:78:72:a2:10:4a:49:72:43:04:b0:50:66: 4c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:21:B1:04:C1:0D:E4:D1:3B:A0:F3:33:F2:0B:6C:0C:01:76:22:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/6bff204f-baf3-3c15-a992-3135c46aad0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl X509v3 Authority Key Identifier: keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer sbgp-ipAddrBlock: critical IPv4: 192.154.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:38:93:3c:64:61:a3:c0:e2:64:e3:aa:77:11:44:67:81:5a: 82:ff:d4:3b:6d:18:92:62:90:c8:02:cd:47:64:75:7d:e1:81: 10:d3:9c:72:43:34:d5:90:70:e0:63:2e:4b:6c:fc:9d:e3:a5: b3:f1:68:94:83:ea:fb:97:d4:c7:4d:26:f8:99:d9:e9:b9:5e: 9b:16:88:07:b6:6b:86:89:4c:44:cb:9d:60:0c:d4:fd:99:db: d2:8e:a1:31:a8:89:01:c5:ab:35:f0:0a:27:40:e2:85:25:2c: 69:2e:07:f8:34:3b:04:11:02:73:e2:ae:a3:fa:6d:6f:56:c2: 59:23:4b:87:b9:0d:ad:18:6b:14:6e:71:fd:aa:d7:9a:02:94: c2:2d:89:c3:41:34:8a:2a:99:cd:cd:cf:90:81:48:4d:7d:8a: 01:c7:dc:bd:78:03:74:fd:c0:4c:84:5d:cc:24:3f:af:05:09: f5:8f:b1:99:11:b1:a2:78:88:cb:68:ed:6d:b3:61:3b:f2:86: 53:9e:2f:46:a4:65:b8:a7:5a:a1:8d:4a:13:1f:e1:8d:f3:c2: 67:b8:5e:41:00:e6:d8:5a:ab:e9:fc:7a:71:83:0c:e4:0c:ef: b1:4f:f0:36:ca:63:1d:2a:8c:ad:2d:e7:a2:98:46:f4:9a:bf: a6:1d:46:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlDp/linyIhcd3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky Yjg2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZmRjNmUyMmMtNmM1MC00NmIwLWI2OWQtMjlmZjkyZGVlMGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKr+dkU/h2mO24ozdG0Cd052A6A8tvPaUBmp yk9P1I9MVpVTz3DIjx97ccrBSd1iYp/QSAC0E+Rquxy/NCeUXv5vc50Noi/+qNh7 qw2rh4HlyVZ1q5hePPjKe9GgoyuvjuEIXu7I+R7RpW2UU9lZwHsFMFI338thgnmU KPXDWb+97jp953/f9WhLqhbTYT0obloPNuYs5So3xJ9DxhDHIKzlmD8VFZuo9I2l 4bDbBlKT0gUHFPjupTqQlsFi9cXCrB7I8Lo6IfUwhKEga0vVk9v2kVJRUBxhBGxF rz/w8o5u2HwpgFRCtc40nlQiVBtRNMh4cqIQSklyQwSwUGZM2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkhsQTBDeTRO6DzM/ILbAwBdiJjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvNmJmZjIwNGYtYmFmMy0z YzE1LWE5OTItMzEzNWM0NmFhZDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5 YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5 MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy Y2IyOTJiODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJr4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEA4kzxkYaPA4mTjqncRRGeBWoL/1DttGJJikMgCzUdkdX3hgRDTnHJD NNWQcOBjLkts/J3jpbPxaJSD6vuX1MdNJviZ2em5XpsWiAe2a4aJTETLnWAM1P2Z 29KOoTGoiQHFqzXwCidA4oUlLGkuB/g0OwQRAnPirqP6bW9WwlkjS4e5Da0YaxRu cf2q15oClMIticNBNIoqmc3Nz5CBSE19igHH3L14A3T9wEyEXcwkP68FCfWPsZkR saJ4iMto7W2zYTvyhlOeL0akZbinWqGNShMf4Y3zwme4XkEA5thaq+n8enGDDOQM 77FP8DbKYx0qjK0t56KYRvSav6YdRpg= -----END CERTIFICATE-----Generated at Fri Sep 11 01:16:07 2026 by rpki-client