$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/31421922-aedf-3672-abd4-cfa24a054705.roa File: 31421922-aedf-3672-abd4-cfa24a054705.roa (raw, json) Hash identifier: 3Ue6IwDcGCVYH5cSddXplcW9a4dOjfXzrr/qifcAFEE= Subject key identifier: A2:57:75:E8:AE:AF:1A:DE:14:0F:BD:3D:2A:59:14:3A:E6:AD:14:1E Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584F6F230FEC44F8B65ECE367948 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/31421922-aedf-3672-abd4-cfa24a054705.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 396982 IP address blocks: 192.19.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:23:0f:ec:44:f8:b6:5e:ce:36:79:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=bb38413f-8074-4b41-8cb4-a88078583452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ac:5b:85:ec:85:47:ac:72:65:30:f8:ec:8d: 07:98:4b:10:d4:11:5e:db:2a:6e:70:6e:fa:2e:0a: 03:2d:53:3e:cd:69:fb:f7:82:90:72:8c:a1:d2:0b: 57:2b:59:aa:5a:ab:c7:9c:ec:c1:f7:7d:ee:4b:a8: c4:d7:12:1d:1c:16:97:b3:7a:7a:a6:e3:de:92:b8: 03:30:f3:27:6a:05:f6:1c:be:76:f3:4d:40:3b:a8: 13:ec:74:19:31:bd:d7:3e:77:b2:04:0c:1d:65:03: bb:c6:a5:33:59:92:3c:ff:03:08:22:ea:22:8f:88: 5a:cd:8f:a2:5e:7c:97:b0:3d:d4:79:54:61:e0:97: df:6c:8b:9a:d9:1b:87:cb:50:d1:d9:dd:d0:90:f2: b1:1d:fe:e8:72:88:a0:75:62:94:a1:24:21:eb:21: 51:39:c9:aa:76:76:2a:88:78:b5:3d:33:65:ec:f2: e4:8c:4e:be:0d:4c:e7:3a:24:1d:af:c3:51:dc:8b: 49:72:08:3b:73:3d:bf:07:b4:52:ee:fc:2a:2e:2f: d9:21:83:f9:40:37:a6:95:ea:20:60:33:86:3c:04: e7:e3:5c:b5:4d:9d:f5:77:6d:c7:35:cb:39:d2:e1: 37:45:15:14:27:f0:e4:8d:86:24:b7:22:a0:77:9a: 99:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:57:75:E8:AE:AF:1A:DE:14:0F:BD:3D:2A:59:14:3A:E6:AD:14:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/31421922-aedf-3672-abd4-cfa24a054705.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv4: 192.19.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:68:47:a4:4e:69:65:d8:65:33:49:a8:84:76:5f:45:bd:e6: b9:5d:04:7b:9d:25:3b:0a:32:66:fe:36:91:f7:4a:f5:2d:11: 14:b9:52:bb:9d:bb:bf:c1:ea:0b:c3:f6:da:aa:3e:6d:f3:c5: 33:67:51:a8:1a:94:94:7b:20:43:b4:76:9e:bf:32:56:47:37: 5a:ed:48:eb:1e:92:7f:05:5d:c8:96:0a:da:22:6d:6e:d5:92: 77:89:50:65:90:06:2d:b4:95:d0:b7:8e:7d:d3:3e:84:da:3d: ec:48:81:0d:1a:84:14:35:c2:a3:1a:7f:bc:b7:f1:90:6e:2a: 27:f0:df:2c:24:5d:23:99:8e:70:55:23:0f:7f:80:d6:7f:15: ab:cb:86:f9:06:75:11:bc:c3:ad:6a:df:bf:50:fb:c4:5d:e8: a9:11:f4:10:6c:0e:5f:8a:ee:48:78:15:f6:cd:9d:37:19:03: 10:a0:09:70:dd:f2:95:2e:85:6e:eb:60:75:e0:15:18:a5:97: 53:b6:32:b4:cc:fe:7d:bc:b6:f2:03:34:52:32:16:49:5d:d0: 8b:a4:71:81:26:29:7c:53:1e:98:7c:b1:dd:46:01:4c:00:8d: 2a:93:47:d9:d2:18:23:f3:9c:d0:f0:ea:cd:1e:23:46:f2:64: ef:b5:fe:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIw/sRPi2Xs42eUgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk YmIzODQxM2YtODA3NC00YjQxLThjYjQtYTg4MDc4NTgzNDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKxbheyFR6xyZTD47I0HmEsQ1BFe2ypucG76 LgoDLVM+zWn794KQcoyh0gtXK1mqWqvHnOzB933uS6jE1xIdHBaXs3p6puPekrgD MPMnagX2HL52801AO6gT7HQZMb3XPneyBAwdZQO7xqUzWZI8/wMIIuoij4hazY+i XnyXsD3UeVRh4JffbIua2RuHy1DR2d3QkPKxHf7ocoigdWKUoSQh6yFROcmqdnYq iHi1PTNl7PLkjE6+DUznOiQdr8NR3ItJcgg7cz2/B7RS7vwqLi/ZIYP5QDemleog YDOGPATn41y1TZ31d23HNcs50uE3RRUUJ/DkjYYktyKgd5qZeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJXdeiurxreFA+9PSpZFDrmrRQeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvMzE0MjE5MjItYWVkZi0z NjcyLWFiZDQtY2ZhMjRhMDU0NzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwBP/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRoR6ROaWXYZTNJqIR2X0W95rldBHudJTsKMmb+NpH3SvUtERS5Urud u7/B6gvD9tqqPm3zxTNnUagalJR7IEO0dp6/MlZHN1rtSOsekn8FXciWCtoibW7V kneJUGWQBi20ldC3jn3TPoTaPexIgQ0ahBQ1wqMaf7y38ZBuKifw3ywkXSOZjnBV Iw9/gNZ/FavLhvkGdRG8w61q379Q+8Rd6KkR9BBsDl+K7kh4FfbNnTcZAxCgCXDd 8pUuhW7rYHXgFRill1O2MrTM/n28tvIDNFIyFkld0IukcYEmKXxTHph8sd1GAUwA jSqTR9nSGCPznNDw6s0eI0byZO+1/oU= -----END CERTIFICATE-----Generated at Thu Oct 8 17:59:48 2026 by rpki-client