$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/dba443b5-757a-3a38-a356-d4d1cf86758b.roa File: dba443b5-757a-3a38-a356-d4d1cf86758b.roa (raw, json) Hash identifier: 5w04yGbx+VKTKg93xDGcaTPX67hYQWf7w9g7YQ9LNL0= Subject key identifier: 16:5A:1B:AB:DA:B4:06:0D:72:0D:02:C6:BA:E9:D5:7D:CF:ED:BA:6E Certificate issuer: /CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23 Certificate serial: 010D0C9F4328584ED9C76A202127A55AF9D94E80 Authority key identifier: CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/dba443b5-757a-3a38-a356-d4d1cf86758b.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 6079 IP address blocks: 192.159.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:6a:20:21:27:a5:5a:f9:d9:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23 Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=84a6f416-18c6-45ac-acce-2606038e368b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0f:24:3f:13:61:67:11:f4:cd:d5:d8:b3:97: e7:02:4e:f4:c0:51:f4:8f:6c:31:d3:f7:d6:a0:37: 20:9d:43:bc:6b:cc:0d:34:ea:88:f0:9d:54:34:ff: cb:09:06:b1:14:0d:e7:96:97:0d:20:ad:26:66:22: 87:da:23:66:61:61:8b:39:2a:41:03:b7:45:39:42: e0:1e:da:7c:50:a0:c8:37:ba:a3:f4:cb:27:d1:10: 59:3d:50:92:e6:e5:c2:f5:ea:2b:4f:c3:ba:75:b0: 1a:39:a7:73:a6:81:4d:f1:d7:c7:44:86:4c:b1:80: 22:9a:15:4d:ad:49:ce:56:36:64:a8:78:ea:47:48: 1e:61:cd:0b:17:5c:12:f3:73:30:d5:75:2e:e9:50: 1a:69:20:47:8d:33:97:f8:b3:ae:97:b5:dc:e7:3c: fc:6d:dc:6f:96:09:34:a3:c4:bc:68:c3:1d:3a:3a: 0f:80:5e:20:37:8a:e2:9f:bd:e7:99:89:d7:f0:48: 29:45:a7:d0:06:1c:a5:4f:ac:f5:f0:f8:71:08:66: a1:6b:eb:6c:5e:42:c3:89:9a:4c:09:c4:69:8a:9e: 0a:e3:a2:51:3e:c4:1f:a4:eb:1d:ab:3d:68:a7:cb: db:d9:e4:99:3d:d5:af:3c:de:91:25:4c:03:a1:85: 34:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:5A:1B:AB:DA:B4:06:0D:72:0D:02:C6:BA:E9:D5:7D:CF:ED:BA:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/dba443b5-757a-3a38-a356-d4d1cf86758b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl X509v3 Authority Key Identifier: keyid:CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer sbgp-ipAddrBlock: critical IPv4: 192.159.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:b9:28:1a:ef:ac:0f:af:51:bb:aa:d6:c1:86:53:70:2b:bb: 07:37:df:46:e5:98:38:a1:fd:68:03:94:2a:83:f1:fc:98:e0: 28:74:71:37:eb:90:c0:da:cd:47:50:a7:46:9a:08:42:7c:f5: 4e:2d:59:c5:96:c8:eb:16:b8:d2:9f:58:9c:8c:7f:92:b0:3e: 84:14:1c:ea:37:bc:f8:00:0c:f2:6e:aa:3d:c3:39:d6:35:6c: 91:d7:9a:70:c1:d5:ba:aa:4c:cd:cf:b8:f6:87:26:19:e5:63: f7:be:bc:3c:e3:bd:14:a2:ff:b8:09:5e:25:ef:d9:78:b7:9c: 19:c7:3d:d7:8e:6c:2e:c6:e3:0f:f8:1c:b3:23:22:28:0b:5a: a5:4f:49:a2:8e:26:f1:d7:87:56:5a:55:28:f5:8b:0c:dd:ec: b4:39:5e:c3:9b:f6:bd:89:ec:43:3d:3f:9e:52:28:38:18:2c: cb:f0:9c:6a:e7:b6:fc:db:8d:b6:47:e3:b1:3c:35:72:c1:9a: 4f:33:55:25:d7:50:08:ce:57:5b:2e:84:bc:e1:0d:d5:de:ea: f0:47:52:74:dc:20:fb:bd:57:c4:8b:d3:dd:fe:d9:1a:d9:dd: 13:74:e6:01:75:03:d1:04:d9:f8:7b:5f:d7:a1:a4:15:a0:f8: 5d:1a:51:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zx2ogISelWvnZToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmJiOTAzYTItNGM4My00YmZhLTk1NzItMzZmYmFmYjg0 YTIzMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk ODRhNmY0MTYtMThjNi00NWFjLWFjY2UtMjYwNjAzOGUzNjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlg8kPxNhZxH0zdXYs5fnAk70wFH0j2wx0/fW oDcgnUO8a8wNNOqI8J1UNP/LCQaxFA3nlpcNIK0mZiKH2iNmYWGLOSpBA7dFOULg Htp8UKDIN7qj9Msn0RBZPVCS5uXC9eorT8O6dbAaOadzpoFN8dfHRIZMsYAimhVN rUnOVjZkqHjqR0geYc0LF1wS83Mw1XUu6VAaaSBHjTOX+LOul7Xc5zz8bdxvlgk0 o8S8aMMdOjoPgF4gN4rin73nmYnX8EgpRafQBhylT6z18PhxCGaha+tsXkLDiZpM CcRpip4K46JRPsQfpOsdqz1op8vb2eSZPdWvPN6RJUwDoYU0hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZaG6vatAYNcg0Cxrrp1X3P7bpuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mYmI5 MDNhMi00YzgzLTRiZmEtOTU3Mi0zNmZiYWZiODRhMjMvZGJhNDQzYjUtNzU3YS0z YTM4LWEzNTYtZDRkMWNmODY3NThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZmJiOTAzYTItNGM4My00YmZhLTk1 NzItMzZmYmFmYjg0YTIzL2ZiYjkwM2EyLTRjODMtNGJmYS05NTcyLTM2ZmJhZmI4 NGEyMy5jcmwwHwYDVR0jBBgwFoAUzusqfornrD1acybne0mkRJaEkYowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mYmI5MDNhMi00YzgzLTRiZmEtOTU3Mi0zNmZi YWZiODRhMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIK5KBrvrA+vUbuq1sGGU3Aruwc330blmDih/WgDlCqD8fyY4Ch0cTfr kMDazUdQp0aaCEJ89U4tWcWWyOsWuNKfWJyMf5KwPoQUHOo3vPgADPJuqj3DOdY1 bJHXmnDB1bqqTM3PuPaHJhnlY/e+vDzjvRSi/7gJXiXv2Xi3nBnHPdeObC7G4w/4 HLMjIigLWqVPSaKOJvHXh1ZaVSj1iwzd7LQ5XsOb9r2J7EM9P55SKDgYLMvwnGrn tvzbjbZH47E8NXLBmk8zVSXXUAjOV1suhLzhDdXe6vBHUnTcIPu9V8SL093+2RrZ 3RN05gF1A9EE2fh7X9ehpBWg+F0aUeg= -----END CERTIFICATE-----Generated at Fri Aug 28 18:35:09 2026 by rpki-client