$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/c1539d45-e25a-3367-9754-f7eba01827f3.roa File: c1539d45-e25a-3367-9754-f7eba01827f3.roa (raw, json) Hash identifier: UQ/73v7gslfnK5qhPrdIWqOEbiU9Sx8H+nl+F6HZsys= Subject key identifier: 10:A6:40:E6:B7:80:3C:14:64:7A:71:F5:5B:D1:2F:22:FE:FE:D2:99 Certificate issuer: /CN=968bda65-4161-4dee-a348-29486c17acb2 Certificate serial: 010D0C9F4328584ECBD1EAAF9582A74E3AED0480 Authority key identifier: C1:27:54:97:DA:CC:09:8C:4C:78:60:01:D1:F3:4E:01:B1:F1:3A:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/c1539d45-e25a-3367-9754-f7eba01827f3.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 31898 IP address blocks: 192.30.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:ea:af:95:82:a7:4e:3a:ed:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968bda65-4161-4dee-a348-29486c17acb2 Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=1a7d9d20-254d-4fea-b7fb-35998200bcc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:6a:15:20:73:ec:84:21:88:e0:d2:12:5d:53: 81:65:70:fc:a8:72:0c:75:70:76:a6:b6:1b:f5:60: 36:ab:57:bb:32:a4:b7:b2:bd:4e:34:65:67:99:02: c5:df:30:5f:d0:b9:f8:69:cf:97:9e:c7:1b:df:fa: 66:fc:80:bc:ca:64:e1:d9:9c:be:d2:3e:48:a3:ce: 6b:4d:89:b1:78:74:6d:44:5a:11:8b:30:f1:e0:a4: 82:49:f5:ab:fa:12:41:c2:d5:9f:46:22:c5:53:f2: df:a5:65:65:95:5a:45:0c:b9:34:94:b4:96:4b:6a: d3:db:33:07:17:64:3b:d8:93:37:c5:8e:4f:32:7d: 2a:15:4f:36:92:38:3f:d9:46:e4:b7:f9:de:e4:d6: a4:2e:9a:aa:24:a4:ed:5b:80:21:db:f1:84:53:28: 66:91:45:10:f4:40:69:f9:90:63:06:fd:8a:39:7b: bb:d9:a5:71:db:84:91:1b:4c:c4:fe:8b:6a:3a:10: 0d:ea:77:94:ef:88:22:c6:1b:33:b1:4e:0c:62:e7: 0f:2a:f3:c4:a9:62:1f:e6:db:0b:17:2c:92:d1:7c: d5:a5:cf:98:25:21:a8:0f:cb:06:17:20:7e:00:f3: ea:5a:41:bd:32:a9:ef:37:53:de:55:22:6f:0e:53: 48:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A6:40:E6:B7:80:3C:14:64:7A:71:F5:5B:D1:2F:22:FE:FE:D2:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/c1539d45-e25a-3367-9754-f7eba01827f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.crl X509v3 Authority Key Identifier: keyid:C1:27:54:97:DA:CC:09:8C:4C:78:60:01:D1:F3:4E:01:B1:F1:3A:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2.cer sbgp-ipAddrBlock: critical IPv4: 192.30.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:b2:fb:c8:b3:37:44:c0:a3:de:42:01:86:ea:8e:84:91:90: 4e:b3:25:29:b5:ca:e0:61:0c:05:29:97:fa:d3:6c:28:8f:72: e6:4b:cb:a3:31:c5:f2:f7:42:cc:56:55:77:c0:d8:30:9d:55: 4e:17:d9:89:4b:c9:9b:26:ff:df:27:82:06:07:84:0c:7a:cf: e2:20:a0:7d:22:51:27:82:d3:34:e3:09:d2:a3:21:b0:f6:89: 09:53:e0:12:5f:41:ff:c3:6e:40:01:ef:34:53:1a:d9:b2:23: bf:2f:ac:cc:65:43:85:56:eb:61:b1:3e:c2:58:78:1f:3f:03: a9:44:74:ae:82:9b:78:24:ed:49:a2:13:e7:ec:3e:71:37:06: 8b:1e:e0:8d:aa:f4:2b:a9:29:0c:4c:19:2c:e6:d9:e9:3b:d4: 6c:1b:18:09:a8:cb:22:32:33:43:11:6c:a2:33:ba:48:42:7d: 0d:76:02:69:92:59:85:33:ed:64:62:f8:94:f0:a2:da:44:e1: 7f:57:ca:e1:3d:c4:71:af:b5:8c:2f:c5:be:c1:29:16:1d:59: 5b:e3:8f:16:10:64:7d:07:aa:d7:19:7f:79:1a:90:13:9a:9b: 6c:ca:2c:2e:67:f9:89:74:ab:c9:31:7c:39:84:7b:53:31:50: af:90:97:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0eqvlYKnTjrtBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY4YmRhNjUtNDE2MS00ZGVlLWEzNDgtMjk0ODZjMTdh Y2IyMB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk MWE3ZDlkMjAtMjU0ZC00ZmVhLWI3ZmItMzU5OTgyMDBiY2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9GoVIHPshCGI4NISXVOBZXD8qHIMdXB2prYb 9WA2q1e7MqS3sr1ONGVnmQLF3zBf0Ln4ac+Xnscb3/pm/IC8ymTh2Zy+0j5Io85r TYmxeHRtRFoRizDx4KSCSfWr+hJBwtWfRiLFU/LfpWVllVpFDLk0lLSWS2rT2zMH F2Q72JM3xY5PMn0qFU82kjg/2Ubkt/ne5NakLpqqJKTtW4Ah2/GEUyhmkUUQ9EBp +ZBjBv2KOXu72aVx24SRG0zE/otqOhAN6neU74gixhszsU4MYucPKvPEqWIf5tsL FyyS0XzVpc+YJSGoD8sGFyB+APPqWkG9MqnvN1PeVSJvDlNIvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCmQOa3gDwUZHpx9VvRLyL+/tKZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85Njhi ZGE2NS00MTYxLTRkZWUtYTM0OC0yOTQ4NmMxN2FjYjIvYzE1MzlkNDUtZTI1YS0z MzY3LTk3NTQtZjdlYmEwMTgyN2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTY4YmRhNjUtNDE2MS00ZGVlLWEz NDgtMjk0ODZjMTdhY2IyLzk2OGJkYTY1LTQxNjEtNGRlZS1hMzQ4LTI5NDg2YzE3 YWNiMi5jcmwwHwYDVR0jBBgwFoAUwSdUl9rMCYxMeGAB0fNOAbHxOkQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85NjhiZGE2NS00MTYxLTRkZWUtYTM0OC0yOTQ4 NmMxN2FjYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB7fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2y+8izN0TAo95CAYbqjoSRkE6zJSm1yuBhDAUpl/rTbCiPcuZLy6Mx xfL3QsxWVXfA2DCdVU4X2YlLyZsm/98nggYHhAx6z+IgoH0iUSeC0zTjCdKjIbD2 iQlT4BJfQf/DbkAB7zRTGtmyI78vrMxlQ4VW62GxPsJYeB8/A6lEdK6Cm3gk7Umi E+fsPnE3Bose4I2q9CupKQxMGSzm2ek71GwbGAmoyyIyM0MRbKIzukhCfQ12AmmS WYUz7WRi+JTwotpE4X9XyuE9xHGvtYwvxb7BKRYdWVvjjxYQZH0HqtcZf3kakBOa m2zKLC5n+Yl0q8kxfDmEe1MxUK+QlzE= -----END CERTIFICATE-----Generated at Fri Aug 21 01:14:37 2026 by rpki-client