$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/8e11b25c-f0c2-30ae-a62c-70d9280c3370.roa File: 8e11b25c-f0c2-30ae-a62c-70d9280c3370.roa (raw, json) Hash identifier: dfKxZloAp1awFVnl534Dj+c4UmzFJHp1AFMEyMmCukc= Subject key identifier: D9:F2:AC:41:75:7B:99:B8:86:C7:0D:61:B4:88:F8:A1:0F:51:0A:E8 Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584F5E62E83B60776133EB8E1D10 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/8e11b25c-f0c2-30ae-a62c-70d9280c3370.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 19637 IP address blocks: 192.19.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:e8:3b:60:77:61:33:eb:8e:1d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=5bc5c7b6-240f-4019-8d19-31c450b000ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:34:55:ac:5a:67:14:0d:4d:d5:60:29:00:a8: 89:72:41:91:49:d1:f2:01:6e:55:19:78:77:e0:9d: f2:a7:04:63:ff:ad:ec:52:0a:59:8d:90:c6:9c:82: 45:81:a9:e1:ce:22:9a:44:69:15:b2:c5:d3:26:8e: 8a:7c:13:af:c6:cb:54:e7:05:8c:3c:6b:0f:2f:5a: b0:78:18:9a:15:a2:88:21:75:2d:65:c7:d8:fb:2d: 2d:b8:d4:f0:a2:b7:0c:f9:7e:04:ac:bc:74:86:8b: ef:4e:c2:9d:05:24:d2:d0:b9:ee:6f:41:7b:55:b7: ae:3b:60:62:91:18:fd:9c:32:04:2d:76:4e:e1:11: ff:e9:a5:6f:fb:d7:d9:ea:41:d1:0e:ea:83:59:16: fb:a5:51:09:17:53:05:a2:e7:89:d9:80:d5:64:40: 37:5e:15:12:1c:66:d4:be:23:89:bf:e9:c1:c5:43: 3a:05:52:d8:d1:6f:bc:bd:b8:d5:ec:9b:94:22:5b: 52:44:78:76:87:d2:8f:58:2c:0f:e2:d5:c9:a6:58: de:aa:f0:0f:92:8d:e4:97:2f:32:96:47:cb:b2:a4: 44:a9:fd:00:a7:4c:72:4c:9f:37:cd:c1:07:74:a0: 3f:6d:74:d5:d8:27:d4:bf:b9:fd:bd:d8:97:1d:64: e0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F2:AC:41:75:7B:99:B8:86:C7:0D:61:B4:88:F8:A1:0F:51:0A:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/8e11b25c-f0c2-30ae-a62c-70d9280c3370.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv4: 192.19.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:69:91:7b:fa:6b:f4:49:c9:38:b9:8c:31:62:33:9d:c7:6f: a1:5f:39:65:f0:11:66:7f:0b:09:a6:b2:a1:86:99:4b:85:2d: 78:c9:d8:82:42:e8:ce:a7:94:1e:b0:05:2a:ca:1d:b7:43:81: 0e:19:ef:b2:e3:7a:97:1f:69:10:c6:a3:3f:7a:d3:6f:f1:36: 99:6d:84:44:aa:04:88:3b:73:89:53:49:d6:87:41:b6:0a:47: 0b:dd:9a:49:cf:f1:ea:1b:0d:52:2c:a3:da:72:b9:91:e8:cc: f3:be:39:a6:5a:6a:db:6c:aa:c5:32:55:d4:e2:eb:0e:90:31: d6:82:80:ae:46:4c:2d:77:05:e5:e8:f2:31:93:c0:4b:1a:72: e3:06:3f:fa:94:46:35:4d:c8:01:2e:1a:ec:32:1d:60:0a:0c: 81:fa:f9:47:e6:b4:b0:2a:3c:fe:a7:37:fe:66:20:a2:96:5e: 8a:d7:68:dc:79:48:79:13:17:0e:2d:b1:05:6d:82:33:57:29: 22:f8:3a:e9:4b:47:ed:61:fb:2f:56:23:0d:2d:2d:d3:31:ee: 69:61:e2:35:ad:a0:1c:3f:ad:57:c4:f3:82:0e:91:7c:32:ec: ab:7f:32:3a:d3:fc:7c:a6:ab:27:54:86:48:21:ba:3c:4c:cf: 99:ae:36:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYug7YHdhM+uOHRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk NWJjNWM3YjYtMjQwZi00MDE5LThkMTktMzFjNDUwYjAwMGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDRVrFpnFA1N1WApAKiJckGRSdHyAW5VGXh3 4J3ypwRj/63sUgpZjZDGnIJFganhziKaRGkVssXTJo6KfBOvxstU5wWMPGsPL1qw eBiaFaKIIXUtZcfY+y0tuNTworcM+X4ErLx0hovvTsKdBSTS0Lnub0F7VbeuO2Bi kRj9nDIELXZO4RH/6aVv+9fZ6kHRDuqDWRb7pVEJF1MFoueJ2YDVZEA3XhUSHGbU viOJv+nBxUM6BVLY0W+8vbjV7JuUIltSRHh2h9KPWCwP4tXJpljeqvAPko3kly8y lkfLsqREqf0Ap0xyTJ83zcEHdKA/bXTV2CfUv7n9vdiXHWTghwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnyrEF1e5m4hscNYbSI+KEPUQroMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvOGUxMWIyNWMtZjBjMi0z MGFlLWE2MmMtNzBkOTI4MGMzMzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwBN8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlpkXv6a/RJyTi5jDFiM53Hb6FfOWXwEWZ/CwmmsqGGmUuFLXjJ2IJC 6M6nlB6wBSrKHbdDgQ4Z77LjepcfaRDGoz9602/xNplthESqBIg7c4lTSdaHQbYK RwvdmknP8eobDVIso9pyuZHozPO+OaZaattsqsUyVdTi6w6QMdaCgK5GTC13BeXo 8jGTwEsacuMGP/qURjVNyAEuGuwyHWAKDIH6+UfmtLAqPP6nN/5mIKKWXorXaNx5 SHkTFw4tsQVtgjNXKSL4OulLR+1h+y9WIw0tLdMx7mlh4jWtoBw/rVfE84IOkXwy 7Kt/MjrT/HymqydUhkghujxMz5muNss= -----END CERTIFICATE-----Generated at Fri Oct 9 18:15:53 2026 by rpki-client