$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/c1539d45-e25a-3367-9754-f7eba01827f3.roa File: c1539d45-e25a-3367-9754-f7eba01827f3.roa (raw, json) Hash identifier: YfyOgu5DousStEbhoP7Sq69vatt8hylFF2RxlBfd6tU= Subject key identifier: 80:B2:F9:8B:E8:4B:BD:FF:6E:10:9A:BB:B2:A3:D3:D0:D1:7A:84:B7 Certificate issuer: /CN=968bda65-4161-4dee-a348-29486c17acb2 Certificate serial: 010D0C9F4328584F6F22F4587D30681208DD3CD0 Authority key identifier: C1:27:54:97:DA:CC:09:8C:4C:78:60:01:D1:F3:4E:01:B1:F1:3A:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/c1539d45-e25a-3367-9754-f7eba01827f3.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 31898 IP address blocks: 192.30.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:f4:58:7d:30:68:12:08:dd:3c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968bda65-4161-4dee-a348-29486c17acb2 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=b7b99415-6468-466d-ace8-348ada699832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:04:a1:0b:ab:b6:8e:a1:e1:00:d3:f0:2b:83: 0a:7a:e4:22:45:64:58:6c:35:1d:62:1d:9e:93:e1: 6c:77:a0:c6:6f:0d:79:ec:fa:44:d6:22:bc:bb:68: 13:0e:77:26:3d:30:3d:c5:bc:b3:84:42:e0:f6:0a: 37:dd:10:8c:19:ab:3e:36:69:f7:69:9c:5b:08:97: 33:de:2f:a2:1a:4a:64:40:d3:88:53:92:12:d4:07: be:29:8c:31:c7:ee:9e:bc:9d:13:d3:54:64:f1:62: 2a:89:96:11:bd:a3:59:ac:c8:53:3b:79:0c:e7:89: 3e:41:26:42:0f:b5:c2:fe:9a:4d:92:5e:bd:bf:e4: 1b:f4:b8:dd:41:e8:13:a7:fa:95:91:7d:fa:e9:02: 69:0d:4d:ba:c2:fb:2a:fe:a9:67:32:e9:2b:e7:7f: 9e:0c:1b:55:70:ee:78:6f:4e:84:4c:7e:5b:51:89: fc:3e:73:9a:5c:34:25:fb:45:a7:1e:9f:4f:f3:7c: 65:c0:3e:e2:1e:07:8d:d8:47:c1:af:2f:62:bd:f7: 67:e9:52:3f:9c:e7:17:f0:9d:09:5c:b2:30:a6:4d: da:d2:54:3a:0e:2c:e5:65:d3:d7:33:a8:41:e4:cd: 0e:c7:6e:f4:ad:2b:9a:16:b0:eb:8a:c6:9b:8c:fa: 7f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B2:F9:8B:E8:4B:BD:FF:6E:10:9A:BB:B2:A3:D3:D0:D1:7A:84:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/c1539d45-e25a-3367-9754-f7eba01827f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.crl X509v3 Authority Key Identifier: keyid:C1:27:54:97:DA:CC:09:8C:4C:78:60:01:D1:F3:4E:01:B1:F1:3A:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2.cer sbgp-ipAddrBlock: critical IPv4: 192.30.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:91:00:02:67:e8:81:9b:84:67:4f:c0:74:93:4e:81:1c:35: 03:29:d9:a2:32:26:60:22:24:28:d5:f3:b2:37:17:e7:d1:7b: ae:22:e3:1b:60:8b:fa:37:8e:02:e4:5c:13:7a:15:9e:21:45: 7a:57:9f:85:8a:88:08:3c:d6:08:a7:7d:1d:ba:e6:04:7c:3f: 79:35:e4:72:37:e3:76:f7:4f:5c:e0:8b:8b:39:18:a1:04:d2: ea:d6:ed:18:5e:18:d5:c0:85:60:16:68:cb:1b:32:12:29:c5: d4:85:aa:10:f1:6b:d7:e0:e8:1e:f7:ae:0b:c7:37:d9:2d:33: 32:40:ff:0d:53:c9:54:9c:08:49:c4:6c:81:07:00:f6:be:60: 8d:1a:f9:ec:19:b0:f9:1c:15:54:75:79:be:4d:4a:43:30:97: 84:cd:74:43:f9:80:a5:4d:23:11:7d:23:9e:77:2a:fb:e9:79: 03:1e:bc:a4:ac:1a:53:a9:84:0a:f9:df:2a:bf:a2:46:62:02: ad:ea:a9:92:73:d2:f4:14:cd:18:ad:7f:9c:c0:c4:d6:e9:e7: b4:13:32:07:98:61:54:08:0e:c7:a4:29:75:49:50:88:f0:e0: 96:5c:98:b8:07:14:88:c7:bf:be:f4:a8:39:db:b4:2a:c3:1e: 7e:ac:b9:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIvRYfTBoEgjdPNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY4YmRhNjUtNDE2MS00ZGVlLWEzNDgtMjk0ODZjMTdh Y2IyMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk YjdiOTk0MTUtNjQ2OC00NjZkLWFjZTgtMzQ4YWRhNjk5ODMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgShC6u2jqHhANPwK4MKeuQiRWRYbDUdYh2e k+Fsd6DGbw157PpE1iK8u2gTDncmPTA9xbyzhELg9go33RCMGas+Nmn3aZxbCJcz 3i+iGkpkQNOIU5IS1Ae+KYwxx+6evJ0T01Rk8WIqiZYRvaNZrMhTO3kM54k+QSZC D7XC/ppNkl69v+Qb9LjdQegTp/qVkX366QJpDU26wvsq/qlnMukr53+eDBtVcO54 b06ETH5bUYn8PnOaXDQl+0WnHp9P83xlwD7iHgeN2EfBry9ivfdn6VI/nOcX8J0J XLIwpk3a0lQ6DizlZdPXM6hB5M0Ox270rSuaFrDrisabjPp/pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFICy+YvoS73/bhCau7Kj09DReoS3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85Njhi ZGE2NS00MTYxLTRkZWUtYTM0OC0yOTQ4NmMxN2FjYjIvYzE1MzlkNDUtZTI1YS0z MzY3LTk3NTQtZjdlYmEwMTgyN2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTY4YmRhNjUtNDE2MS00ZGVlLWEz NDgtMjk0ODZjMTdhY2IyLzk2OGJkYTY1LTQxNjEtNGRlZS1hMzQ4LTI5NDg2YzE3 YWNiMi5jcmwwHwYDVR0jBBgwFoAUwSdUl9rMCYxMeGAB0fNOAbHxOkQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85NjhiZGE2NS00MTYxLTRkZWUtYTM0OC0yOTQ4 NmMxN2FjYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB7fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCRAAJn6IGbhGdPwHSTToEcNQMp2aIyJmAiJCjV87I3F+fRe64i4xtg i/o3jgLkXBN6FZ4hRXpXn4WKiAg81ginfR265gR8P3k15HI343b3T1zgi4s5GKEE 0urW7RheGNXAhWAWaMsbMhIpxdSFqhDxa9fg6B73rgvHN9ktMzJA/w1TyVScCEnE bIEHAPa+YI0a+ewZsPkcFVR1eb5NSkMwl4TNdEP5gKVNIxF9I553KvvpeQMevKSs GlOphAr53yq/okZiAq3qqZJz0vQUzRitf5zAxNbp57QTMgeYYVQIDsekKXVJUIjw 4JZcmLgHFIjHv770qDnbtCrDHn6suRA= -----END CERTIFICATE-----Generated at Sun Oct 11 09:58:26 2026 by rpki-client