$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/04da0af8-7c12-3869-a040-797710feccc2.roa File: 04da0af8-7c12-3869-a040-797710feccc2.roa (raw, json) Hash identifier: IGG4/7UjXsS5XKjzV/VDmsPDy3YHD8Jwv7a+Z5qeMXw= Subject key identifier: E3:17:94:B2:95:44:E2:87:1E:2C:BD:83:C7:49:38:72:B0:A5:FC:B1 Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F4328584ECBD1D8BEE2DDED9F916578C0 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/04da0af8-7c12-3869-a040-797710feccc2.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 1206 IP address blocks: 192.101.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:d8:be:e2:dd:ed:9f:91:65:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=c531ce85-fc4e-4feb-bd44-69de56b18e01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:52:fc:45:a6:43:47:4d:8c:72:bb:c4:02:8e: dc:55:b6:96:d3:3a:74:14:53:0c:37:d7:2a:b3:4e: 8b:bb:1a:47:c8:81:cd:a5:ed:55:0a:b7:a5:16:cd: 45:34:19:8f:d1:a4:32:d1:21:70:8f:fa:b0:1e:64: ad:bd:40:49:9a:36:4a:b9:e7:44:de:2c:b5:f7:d0: a9:d7:5a:1a:88:30:c8:47:ac:d7:44:0c:d5:ea:e5: 47:05:df:7e:3c:b9:41:75:dc:05:e8:1f:fc:b8:e5: 0e:11:cc:b4:7e:44:ac:7b:c1:f8:97:70:c1:7c:50: 56:8e:f3:f4:4f:fe:03:23:c5:53:5b:9c:ce:13:70: 9a:e0:0d:2c:80:a0:24:6e:0d:3d:9d:8b:10:6f:f4: ef:40:8e:97:5c:4f:61:a1:b4:50:27:41:34:c3:95: 0d:30:69:f4:66:51:be:7a:39:63:d2:53:40:21:59: b9:26:32:3f:4b:b8:f9:e0:9b:13:95:5f:7e:30:70: ae:e4:8e:c3:e5:d2:ed:0c:58:06:8c:1d:d3:7a:b4: f7:a7:ec:4d:13:9c:5d:6e:f7:d4:a8:9b:d8:eb:0b: 0b:e3:7c:96:f7:07:d8:21:48:2a:2f:b7:0f:fe:5d: 33:b6:29:f9:f2:d7:a4:69:16:3d:2d:ed:ff:07:82: 03:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:17:94:B2:95:44:E2:87:1E:2C:BD:83:C7:49:38:72:B0:A5:FC:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/04da0af8-7c12-3869-a040-797710feccc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 192.101.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:82:92:24:1e:fe:45:a0:31:9d:f1:bd:35:55:f7:1f:58:ff: 59:f1:ac:d7:32:94:65:d5:9d:8b:6f:15:1c:9c:50:41:58:6f: f3:e6:74:71:e4:13:e0:43:b7:78:1c:07:a1:f7:04:bc:72:c0: e9:ab:83:b2:84:00:8f:3c:94:1d:02:ee:b8:17:1d:9f:ae:e0: da:74:b6:11:23:01:47:7d:e3:db:12:e7:ec:54:e0:ad:8c:25: aa:32:d2:18:a3:f9:be:ee:e1:aa:91:0e:46:4a:fe:87:8b:3c: 3e:81:28:89:65:4c:f6:ba:46:0c:23:a1:eb:65:ec:79:2c:06: e1:1b:9c:f3:27:66:de:97:8d:17:91:db:a3:fd:47:9f:80:b8: 01:c0:19:ca:d7:c5:1f:73:f2:14:53:ad:e6:5c:4e:9b:bd:a3: 10:f9:da:c1:19:2f:0f:34:db:d2:ad:58:db:73:4c:7d:64:42: 50:3b:a6:7d:f2:ed:86:16:8f:a8:29:a7:27:95:ba:5b:7c:8e: 54:02:6b:74:9f:42:ce:a6:af:2e:2e:16:eb:15:da:5a:4a:a3: a3:d0:af:8b:0a:19:d4:80:48:8f:2f:5e:45:ff:b4:53:b3:e4: 61:30:36:f2:60:7f:12:39:27:87:50:e2:5d:0d:c7:7e:9e:65: c7:05:8c:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0di+4t3tn5FleMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk YzUzMWNlODUtZmM0ZS00ZmViLWJkNDQtNjlkZTU2YjE4ZTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlL8RaZDR02McrvEAo7cVbaW0zp0FFMMN9cq s06LuxpHyIHNpe1VCrelFs1FNBmP0aQy0SFwj/qwHmStvUBJmjZKuedE3iy199Cp 11oaiDDIR6zXRAzV6uVHBd9+PLlBddwF6B/8uOUOEcy0fkSse8H4l3DBfFBWjvP0 T/4DI8VTW5zOE3Ca4A0sgKAkbg09nYsQb/TvQI6XXE9hobRQJ0E0w5UNMGn0ZlG+ ejlj0lNAIVm5JjI/S7j54JsTlV9+MHCu5I7D5dLtDFgGjB3TerT3p+xNE5xdbvfU qJvY6wsL43yW9wfYIUgqL7cP/l0ztin58tekaRY9Le3/B4IDzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMXlLKVROKHHiy9g8dJOHKwpfyxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvMDRkYTBhZjgtN2MxMi0z ODY5LWEwNDAtNzk3NzEwZmVjY2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGWLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGCkiQe/kWgMZ3xvTVV9x9Y/1nxrNcylGXVnYtvFRycUEFYb/PmdHHk E+BDt3gcB6H3BLxywOmrg7KEAI88lB0C7rgXHZ+u4Np0thEjAUd949sS5+xU4K2M Jaoy0hij+b7u4aqRDkZK/oeLPD6BKIllTPa6Rgwjoetl7HksBuEbnPMnZt6XjReR 26P9R5+AuAHAGcrXxR9z8hRTreZcTpu9oxD52sEZLw8029KtWNtzTH1kQlA7pn3y 7YYWj6gppyeVult8jlQCa3SfQs6mry4uFusV2lpKo6PQr4sKGdSASI8vXkX/tFOz 5GEwNvJgfxI5J4dQ4l0Nx36eZccFjIg= -----END CERTIFICATE-----Generated at Thu Sep 17 23:57:27 2026 by rpki-client