$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/f8daf407-7390-3a49-9321-c774a1b0419c.roa File: f8daf407-7390-3a49-9321-c774a1b0419c.roa (raw, json) Hash identifier: pkKlnfn4CWONOIOJwVRHMC8lpBsfodmBVIY550c0TR8= Subject key identifier: E0:69:51:CF:AD:7D:E2:1A:89:EC:38:88:F6:3C:48:DA:D4:6D:23:0E Certificate issuer: /CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23 Certificate serial: 010D0C9F4328584ED9C74E9DA8FAF7112866D1C0 Authority key identifier: CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/f8daf407-7390-3a49-9321-c774a1b0419c.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 46450 IP address blocks: 192.159.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:4e:9d:a8:fa:f7:11:28:66:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23 Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=676ea56e-f306-44c6-9d97-d67326eb449a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:27:a1:90:cf:5b:c9:94:3c:7b:a2:b2:87:0a: 5c:48:11:59:fd:d3:c3:9e:18:5f:a5:44:13:2f:8b: ed:71:28:5f:61:be:ad:89:fa:f4:3c:3c:b0:f9:ae: 21:32:76:32:27:e5:b7:0a:56:b6:8c:54:44:ea:dd: 9c:54:74:96:8b:72:bc:b3:7b:c0:ad:c7:df:75:37: 4a:7d:bf:7c:32:d9:1e:2c:26:51:23:03:e7:37:79: ea:26:83:a1:b6:44:8a:90:88:f1:a7:af:77:4d:c6: 02:00:28:78:dc:cd:28:74:6d:1f:7a:14:a0:f7:09: bd:76:4f:95:42:21:20:07:12:7b:f7:ef:36:08:03: 4b:57:6b:e1:06:d4:2a:cf:48:d4:a0:04:77:9f:8d: 10:b5:bf:a8:be:49:68:84:04:a8:45:44:a5:be:cd: e7:b2:39:d6:fd:4e:0c:f1:10:ba:d0:1f:b2:68:76: 40:d1:1d:a0:21:5f:c6:8d:4e:c6:f2:26:f6:01:ab: 1d:8a:5e:cd:be:73:08:15:65:05:96:24:d1:13:1b: 47:fb:fc:68:aa:7c:07:6d:aa:31:97:2a:b0:9a:80: 19:27:36:46:b1:f4:66:7d:a6:66:29:1d:3b:e1:9b: 98:58:c0:46:05:3e:2e:e1:11:5d:88:d7:e9:a4:17: 20:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:69:51:CF:AD:7D:E2:1A:89:EC:38:88:F6:3C:48:DA:D4:6D:23:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/f8daf407-7390-3a49-9321-c774a1b0419c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl X509v3 Authority Key Identifier: keyid:CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer sbgp-ipAddrBlock: critical IPv4: 192.159.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:6f:6f:e0:c1:ad:1d:71:40:0b:8b:7d:20:9f:a7:4a:d1:d1: 6e:1b:f0:b0:b9:8d:9c:79:c8:33:49:56:37:5a:b8:4e:40:a2: eb:18:c6:b6:d4:72:b0:1c:9b:46:9d:b8:6e:b3:d3:a6:fe:82: 12:7c:22:12:24:9c:57:a9:84:a1:1a:0f:8a:36:ff:32:82:df: 67:b4:78:1f:53:db:cc:ac:66:4e:7a:ed:66:3d:70:6c:2b:0e: 28:47:e1:f1:0e:a9:2a:2a:84:2f:70:3f:f9:07:af:db:a5:60: 21:d2:6a:83:5f:ba:a4:57:34:6d:44:41:0f:2c:96:3e:40:f4: 3b:ab:fb:ce:d7:6e:2e:3c:0f:b6:7f:06:b5:19:c5:07:79:5c: c3:9f:d9:01:4e:ab:dd:cd:2d:87:86:2e:5f:d0:a5:8b:9b:c3: 37:09:7e:9d:38:78:b5:2d:2a:99:12:4f:cf:c2:12:90:cf:71: d6:a6:ae:62:f9:39:f1:71:54:23:43:bb:78:14:19:5d:52:a4: 5a:82:fc:c0:70:be:24:2c:23:06:ac:77:aa:bd:32:df:23:b7: 9f:fa:36:3e:7b:0f:15:c6:c3:6c:45:39:d9:40:b2:ee:ef:9f: 25:b3:b3:77:bf:f2:d7:b5:f4:e1:52:02:b6:dd:70:8a:1e:ba: de:76:3b:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zx06dqPr3EShm0cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmJiOTAzYTItNGM4My00YmZhLTk1NzItMzZmYmFmYjg0 YTIzMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk Njc2ZWE1NmUtZjMwNi00NGM2LTlkOTctZDY3MzI2ZWI0NDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCehkM9byZQ8e6KyhwpcSBFZ/dPDnhhfpUQT L4vtcShfYb6tifr0PDyw+a4hMnYyJ+W3Cla2jFRE6t2cVHSWi3K8s3vArcffdTdK fb98MtkeLCZRIwPnN3nqJoOhtkSKkIjxp693TcYCACh43M0odG0fehSg9wm9dk+V QiEgBxJ79+82CANLV2vhBtQqz0jUoAR3n40Qtb+ovklohASoRUSlvs3nsjnW/U4M 8RC60B+yaHZA0R2gIV/GjU7G8ib2Aasdil7NvnMIFWUFliTRExtH+/xoqnwHbaox lyqwmoAZJzZGsfRmfaZmKR074ZuYWMBGBT4u4RFdiNfppBcgvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBpUc+tfeIaiew4iPY8SNrUbSMOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mYmI5 MDNhMi00YzgzLTRiZmEtOTU3Mi0zNmZiYWZiODRhMjMvZjhkYWY0MDctNzM5MC0z YTQ5LTkzMjEtYzc3NGExYjA0MTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZmJiOTAzYTItNGM4My00YmZhLTk1 NzItMzZmYmFmYjg0YTIzL2ZiYjkwM2EyLTRjODMtNGJmYS05NTcyLTM2ZmJhZmI4 NGEyMy5jcmwwHwYDVR0jBBgwFoAUzusqfornrD1acybne0mkRJaEkYowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mYmI5MDNhMi00YzgzLTRiZmEtOTU3Mi0zNmZi YWZiODRhMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ8iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhvb+DBrR1xQAuLfSCfp0rR0W4b8LC5jZx5yDNJVjdauE5AousYxrbU crAcm0aduG6z06b+ghJ8IhIknFephKEaD4o2/zKC32e0eB9T28ysZk567WY9cGwr DihH4fEOqSoqhC9wP/kHr9ulYCHSaoNfuqRXNG1EQQ8slj5A9Dur+87Xbi48D7Z/ BrUZxQd5XMOf2QFOq93NLYeGLl/QpYubwzcJfp04eLUtKpkST8/CEpDPcdamrmL5 OfFxVCNDu3gUGV1SpFqC/MBwviQsIwasd6q9Mt8jt5/6Nj57DxXGw2xFOdlAsu7v nyWzs3e/8te19OFSArbdcIoeut52O/g= -----END CERTIFICATE-----Generated at Sun Sep 13 08:50:51 2026 by rpki-client