$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/6f2cfc87-d93c-3f6f-85d2-293762f6916d.roa File: 6f2cfc87-d93c-3f6f-85d2-293762f6916d.roa (raw, json) Hash identifier: a91KH+VN1+JurWHU+i9ELIAqgLE3watQnajvphc10mU= Subject key identifier: 3E:87:69:85:F3:39:AC:F2:03:5A:95:2A:6B:2F:A1:72:72:71:18:D6 Certificate issuer: /CN=968bda65-4161-4dee-a348-29486c17acb2 Certificate serial: 010D0C9F4328584F698D98C978A1A1E58093BBE0 Authority key identifier: C1:27:54:97:DA:CC:09:8C:4C:78:60:01:D1:F3:4E:01:B1:F1:3A:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/6f2cfc87-d93c-3f6f-85d2-293762f6916d.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 16509 IP address blocks: 192.30.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:98:c9:78:a1:a1:e5:80:93:bb:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968bda65-4161-4dee-a348-29486c17acb2 Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=2168ca08-a684-4129-ba0c-7411f78c0e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:70:5f:b9:b0:5c:65:a0:5f:30:1b:78:ee:ba: fd:28:0c:9b:54:c8:5e:96:1d:56:82:61:02:13:c7: 4b:57:17:27:3a:c1:a4:71:02:7c:26:f7:89:c1:b1: cc:59:0f:22:62:8d:1e:e6:e2:7e:8f:0f:3b:07:df: 82:bb:68:5f:df:b0:10:f9:c0:61:78:9c:0d:aa:31: 99:fa:13:f5:4d:e2:ed:a1:dd:ce:30:33:bb:5d:84: 64:89:42:fb:ea:ab:18:84:7c:34:c5:3b:4b:4c:15: 2c:20:81:32:0e:ec:74:11:ad:46:1d:39:28:98:cb: e4:8b:81:9b:d0:91:b8:b9:da:ed:a8:33:c2:5e:1b: 8a:e6:26:0e:51:00:6d:90:bb:fd:86:48:5d:40:d3: a0:31:52:30:0a:81:6d:4c:c6:84:1c:ef:5a:22:cf: 9a:1c:40:fa:0a:74:28:2a:a2:1a:92:b8:a2:e3:da: a0:b7:0f:a9:20:83:c5:88:01:f5:5a:f3:ed:b0:30: 33:1a:a0:76:5e:bd:e5:65:c1:22:4f:10:a7:cf:21: f8:69:d3:7b:31:90:bc:61:ba:17:fb:32:65:bc:1d: aa:bd:67:b0:1f:59:ac:cf:f4:75:26:6e:39:c0:b1: 7f:62:f0:8f:f0:36:5a:ea:ae:80:93:cd:6e:cd:4c: 9f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:87:69:85:F3:39:AC:F2:03:5A:95:2A:6B:2F:A1:72:72:71:18:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/6f2cfc87-d93c-3f6f-85d2-293762f6916d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.crl X509v3 Authority Key Identifier: keyid:C1:27:54:97:DA:CC:09:8C:4C:78:60:01:D1:F3:4E:01:B1:F1:3A:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2.cer sbgp-ipAddrBlock: critical IPv4: 192.30.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:f0:89:d2:be:33:3c:9d:f9:0d:b1:02:69:92:2f:c6:b9:72: e8:a2:53:6a:a2:c5:1d:ef:bf:36:e2:16:0b:96:53:d9:09:de: 86:02:8b:e8:cf:d5:10:ab:be:a7:93:ae:48:dc:25:fd:92:8b: 54:f5:5b:20:c6:87:19:46:b1:8b:26:4a:b2:d2:23:7f:5a:1f: cb:51:79:ed:ec:48:d3:a0:41:36:0c:e1:a9:2c:32:74:fe:88: 39:19:3b:29:52:c3:81:a4:95:11:bf:d0:d0:f2:90:85:b2:1f: 33:94:f0:98:0a:86:d7:c5:0b:4a:04:69:9a:5f:88:42:09:3b: 43:0f:e6:bc:c8:de:9c:ac:86:1c:f5:b8:a5:e6:38:14:9d:1a: 0d:78:f7:f0:e5:5f:58:57:66:ac:c2:c9:df:68:c2:de:43:9a: 33:40:4a:e0:50:a8:23:01:8e:a1:4d:2a:b9:7c:f9:78:6f:8c: 5b:5d:ea:4a:e4:c4:7c:ac:d1:6c:c9:08:fa:c0:65:4a:67:38: ba:7b:2b:52:75:55:94:7f:49:32:4d:c0:96:95:b5:4a:cd:89: a3:ba:db:c1:11:83:ac:9e:d2:86:65:83:61:44:2d:1a:fd:fb: 94:69:2b:2f:70:55:a7:0d:f9:db:e8:b0:8f:17:bf:66:ad:00: 44:4e:2d:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjZjJeKGh5YCTu+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY4YmRhNjUtNDE2MS00ZGVlLWEzNDgtMjk0ODZjMTdh Y2IyMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk MjE2OGNhMDgtYTY4NC00MTI5LWJhMGMtNzQxMWY3OGMwZTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nBfubBcZaBfMBt47rr9KAybVMhelh1WgmEC E8dLVxcnOsGkcQJ8JveJwbHMWQ8iYo0e5uJ+jw87B9+Cu2hf37AQ+cBheJwNqjGZ +hP1TeLtod3OMDO7XYRkiUL76qsYhHw0xTtLTBUsIIEyDux0Ea1GHTkomMvki4Gb 0JG4udrtqDPCXhuK5iYOUQBtkLv9hkhdQNOgMVIwCoFtTMaEHO9aIs+aHED6CnQo KqIakrii49qgtw+pIIPFiAH1WvPtsDAzGqB2Xr3lZcEiTxCnzyH4adN7MZC8YboX +zJlvB2qvWewH1msz/R1Jm45wLF/YvCP8DZa6q6Ak81uzUyf7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6HaYXzOazyA1qVKmsvoXJycRjWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85Njhi ZGE2NS00MTYxLTRkZWUtYTM0OC0yOTQ4NmMxN2FjYjIvNmYyY2ZjODctZDkzYy0z ZjZmLTg1ZDItMjkzNzYyZjY5MTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTY4YmRhNjUtNDE2MS00ZGVlLWEz NDgtMjk0ODZjMTdhY2IyLzk2OGJkYTY1LTQxNjEtNGRlZS1hMzQ4LTI5NDg2YzE3 YWNiMi5jcmwwHwYDVR0jBBgwFoAUwSdUl9rMCYxMeGAB0fNOAbHxOkQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85NjhiZGE2NS00MTYxLTRkZWUtYTM0OC0yOTQ4 NmMxN2FjYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB7fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPwidK+Mzyd+Q2xAmmSL8a5cuiiU2qixR3vvzbiFguWU9kJ3oYCi+jP 1RCrvqeTrkjcJf2Si1T1WyDGhxlGsYsmSrLSI39aH8tRee3sSNOgQTYM4aksMnT+ iDkZOylSw4GklRG/0NDykIWyHzOU8JgKhtfFC0oEaZpfiEIJO0MP5rzI3pyshhz1 uKXmOBSdGg149/DlX1hXZqzCyd9owt5DmjNASuBQqCMBjqFNKrl8+XhvjFtd6krk xHys0WzJCPrAZUpnOLp7K1J1VZR/STJNwJaVtUrNiaO628ERg6ye0oZlg2FELRr9 +5RpKy9wVacN+dvosI8Xv2atAEROLZw= -----END CERTIFICATE-----Generated at Sun Oct 11 06:20:33 2026 by rpki-client