$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/8bc22993-6bac-381b-b9a2-eb39df41ffc0.roa File: 8bc22993-6bac-381b-b9a2-eb39df41ffc0.roa (raw, json) Hash identifier: GdEEt3PJtrJPGCKeB8m2fqdmKHd4qsaJA6oTD9zK2is= Subject key identifier: B7:31:FC:63:83:A6:DD:38:3C:AB:21:54:DB:F4:DB:C0:DD:1C:FB:03 Certificate issuer: /CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23 Certificate serial: 010D0C9F4328584F7BB2DD24F578DE4E5CD38E00 Authority key identifier: CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/8bc22993-6bac-381b-b9a2-eb39df41ffc0.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 6079 IP address blocks: 192.159.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 18 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b2:dd:24:f5:78:de:4e:5c:d3:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23 Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=7b848cc4-7227-45eb-b333-93abcb18c0e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8c:7a:81:9f:a5:aa:14:bf:ab:79:25:f8:cc: 42:df:b2:75:89:84:b4:9c:56:c3:b8:e6:80:41:7c: 22:c8:9c:a4:f4:d8:2b:23:cc:5e:65:a1:cf:18:40: 76:0b:c2:e1:cf:ba:c1:76:7a:b0:69:25:58:1f:d0: ee:f3:53:e8:c0:ff:53:9e:59:26:e0:97:8c:75:fe: d1:ae:c3:56:16:61:75:8c:14:4d:ec:31:a4:22:c4: 58:cf:30:d9:b5:27:68:d5:0d:22:b8:14:de:32:83: 74:70:2f:f5:0d:a8:f6:af:81:09:73:f2:1d:b0:8e: 61:cc:c1:98:07:c9:e4:ee:17:10:07:af:c7:06:9e: 21:a4:56:d0:ce:b3:b8:6f:e7:3d:a8:ac:5c:86:8d: 68:10:41:b8:7f:bc:2e:ee:32:b2:48:03:06:45:49: 67:cf:fc:b1:6f:7e:82:ec:73:67:31:56:4f:c9:91: 69:22:1c:d9:32:95:c5:ff:93:5b:c7:24:65:fa:be: 6e:3c:06:23:82:00:24:2c:2a:97:ce:ad:d8:8a:19: a0:99:1b:4c:20:11:5f:dd:0e:11:df:0b:7d:04:bf: b3:7c:e6:2b:d5:d1:e3:be:24:a1:23:1c:34:ac:5e: 7d:6e:c8:5a:2b:17:c0:8d:86:4e:03:28:f9:fc:66: 8b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:31:FC:63:83:A6:DD:38:3C:AB:21:54:DB:F4:DB:C0:DD:1C:FB:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/8bc22993-6bac-381b-b9a2-eb39df41ffc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl X509v3 Authority Key Identifier: keyid:CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer sbgp-ipAddrBlock: critical IPv4: 192.159.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:34:0a:b9:7c:1b:22:c9:9f:e9:19:49:4b:34:2a:f8:1a:83: 17:40:18:55:5c:54:d6:ac:5a:ff:62:ed:70:c4:e5:c4:8d:89: 96:a7:9e:be:83:0d:bc:85:b2:9c:da:fb:9a:a6:1f:26:79:9e: 10:ed:00:10:99:fa:47:ee:ae:cd:34:9a:6e:7b:05:08:7d:7a: 62:f8:e4:1b:9d:24:dc:e5:2d:1b:9f:cb:58:86:09:bf:11:32: 07:d4:8a:98:af:7f:ba:6f:be:ae:a3:1f:be:9d:6d:e7:65:52: 96:aa:e5:4c:3c:6d:63:42:12:5f:65:dd:df:3c:b8:44:9d:b1: f2:d8:d0:8a:2a:73:5d:21:40:72:02:30:4b:db:29:d1:ce:3d: 4a:1a:e0:19:55:79:ad:aa:fc:73:b2:2b:e7:8a:b5:15:37:ae: 91:3e:45:da:39:1b:d5:32:36:0d:33:5c:03:75:c2:4d:fc:f6: 72:e8:d5:9f:1a:ab:55:17:d0:32:38:c8:43:c1:b2:57:79:46: bb:49:74:5f:8e:8e:52:7e:78:21:d0:1c:1a:4d:b7:ae:ec:3a: 5e:2b:23:4a:fe:f6:2a:b4:9f:69:d6:2c:e8:d7:35:85:1d:99: 21:90:9c:23:d6:f5:39:68:94:db:a4:b4:73:09:45:29:c8:92: 6a:81:99:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97st0k9XjeTlzTjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmJiOTAzYTItNGM4My00YmZhLTk1NzItMzZmYmFmYjg0 YTIzMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk N2I4NDhjYzQtNzIyNy00NWViLWIzMzMtOTNhYmNiMThjMGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4x6gZ+lqhS/q3kl+MxC37J1iYS0nFbDuOaA QXwiyJyk9NgrI8xeZaHPGEB2C8Lhz7rBdnqwaSVYH9Du81PowP9Tnlkm4JeMdf7R rsNWFmF1jBRN7DGkIsRYzzDZtSdo1Q0iuBTeMoN0cC/1Daj2r4EJc/IdsI5hzMGY B8nk7hcQB6/HBp4hpFbQzrO4b+c9qKxcho1oEEG4f7wu7jKySAMGRUlnz/yxb36C 7HNnMVZPyZFpIhzZMpXF/5NbxyRl+r5uPAYjggAkLCqXzq3YihmgmRtMIBFf3Q4R 3wt9BL+zfOYr1dHjviShIxw0rF59bshaKxfAjYZOAyj5/GaLoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcx/GODpt04PKshVNv028DdHPsDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mYmI5 MDNhMi00YzgzLTRiZmEtOTU3Mi0zNmZiYWZiODRhMjMvOGJjMjI5OTMtNmJhYy0z ODFiLWI5YTItZWIzOWRmNDFmZmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZmJiOTAzYTItNGM4My00YmZhLTk1 NzItMzZmYmFmYjg0YTIzL2ZiYjkwM2EyLTRjODMtNGJmYS05NTcyLTM2ZmJhZmI4 NGEyMy5jcmwwHwYDVR0jBBgwFoAUzusqfornrD1acybne0mkRJaEkYowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mYmI5MDNhMi00YzgzLTRiZmEtOTU3Mi0zNmZi YWZiODRhMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ8hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGA0Crl8GyLJn+kZSUs0KvgagxdAGFVcVNasWv9i7XDE5cSNiZannr6D DbyFspza+5qmHyZ5nhDtABCZ+kfurs00mm57BQh9emL45BudJNzlLRufy1iGCb8R MgfUipivf7pvvq6jH76dbedlUpaq5Uw8bWNCEl9l3d88uESdsfLY0Ioqc10hQHIC MEvbKdHOPUoa4BlVea2q/HOyK+eKtRU3rpE+Rdo5G9UyNg0zXAN1wk389nLo1Z8a q1UX0DI4yEPBsld5RrtJdF+OjlJ+eCHQHBpNt67sOl4rI0r+9iq0n2nWLOjXNYUd mSGQnCPW9TlolNuktHMJRSnIkmqBmbw= -----END CERTIFICATE-----Generated at Sat Oct 17 15:25:45 2026 by rpki-client