$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/43425afd-e380-3275-b610-aa2206fe32e5.roa File: 43425afd-e380-3275-b610-aa2206fe32e5.roa (raw, json) Hash identifier: Hzev/1dIVJoM3OQEEjIxNX67Mn1Fbkx//rrGmZYVnRI= Subject key identifier: FD:0B:5D:20:DA:72:81:13:D9:37:23:37:FA:20:DC:6D:4B:F4:72:70 Certificate issuer: /CN=7bcbe16b-0dde-46c3-837f-a940a0e9d4cb Certificate serial: 010D0C9F4328584F4975D0B2CDB0195F73995A00 Authority key identifier: 7E:A7:29:61:89:AE:48:BE:BA:26:38:81:C2:93:FC:85:AB:0B:5C:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/43425afd-e380-3275-b610-aa2206fe32e5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 10753 IP address blocks: 192.228.20.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:d0:b2:cd:b0:19:5f:73:99:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bcbe16b-0dde-46c3-837f-a940a0e9d4cb Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=16f0e793-8a7f-4774-af35-846f3dabbb2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c2:b1:58:8e:37:9e:21:f6:79:3c:60:fb:36: bd:0a:91:a4:ac:d8:b8:35:d3:b9:71:6b:f1:a0:20: d4:39:e2:7c:bf:a9:c8:a3:ad:dd:31:85:e6:c0:22: b9:47:ad:f3:df:dc:a1:60:80:85:a2:33:f8:ed:66: c9:1e:da:b5:5a:4c:bb:62:d2:d2:8d:9f:a5:b9:c1: e6:4b:a5:b5:35:50:91:e4:4e:16:33:ee:64:e9:65: 27:b4:bf:c8:d2:51:d8:b8:9f:a8:dd:4e:ff:8d:9f: d5:b0:17:0b:56:f2:71:c2:6b:86:96:54:e5:a0:cb: f1:6d:56:c6:d1:85:82:1a:90:ab:c1:ec:71:76:60: 1b:d3:fa:1d:d5:8a:d9:3e:67:a2:c3:07:04:78:a9: f4:38:dc:af:c1:f4:7c:f2:2b:0e:6b:58:5a:86:10: 30:a7:a6:f2:38:b7:69:a1:ce:91:d7:4c:d9:e0:7f: e3:a7:a6:51:9f:8e:c6:92:b1:2f:7e:2c:5c:bf:c3: 60:15:b2:c5:58:5e:cc:3c:4f:d4:d7:a5:3f:49:2e: ee:a8:4c:f3:dc:86:77:30:d1:36:f5:2d:a5:38:8d: 9a:cc:c6:2a:8a:63:d8:c2:af:70:1c:5f:10:d8:1f: 8f:51:6f:33:f6:7e:97:a0:7f:da:8d:3e:1e:dc:a2: 73:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:0B:5D:20:DA:72:81:13:D9:37:23:37:FA:20:DC:6D:4B:F4:72:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/43425afd-e380-3275-b610-aa2206fe32e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.crl X509v3 Authority Key Identifier: keyid:7E:A7:29:61:89:AE:48:BE:BA:26:38:81:C2:93:FC:85:AB:0B:5C:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer sbgp-ipAddrBlock: critical IPv4: 192.228.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:ba:19:cb:a7:c3:93:2d:ee:76:93:50:16:a0:79:b9:5a:7b: 42:21:43:f7:8c:cb:3c:a3:e7:53:22:a0:dd:43:5c:ac:c9:11: 83:64:a6:b7:f6:37:fb:b4:85:6e:b1:5b:52:5b:21:2a:d9:0a: d2:78:21:5d:8c:6d:84:27:d7:3a:e4:11:78:fa:a5:2e:04:ee: a5:4b:06:79:26:05:90:b6:20:58:aa:d1:3f:b3:a2:8d:4a:28: b4:92:60:49:98:48:e8:e5:6d:cc:ee:94:5b:e1:cc:20:0c:f1: 5d:d3:c6:5d:77:d5:e8:16:94:90:c9:cd:0a:5a:44:46:13:6d: d1:26:cd:a4:81:fc:8a:8d:15:02:5b:80:a4:5e:fd:79:42:6a: e5:3f:d9:9f:52:3a:54:e4:80:03:b2:b1:d1:01:13:81:d0:14: 93:f9:3f:c9:7c:65:e7:b0:1d:96:9c:f5:89:fe:57:4a:06:2f: 7d:dd:59:dc:b0:3d:a8:f5:27:6a:64:f1:1b:cc:0d:47:c5:fc: 2d:6a:d9:d7:a1:67:92:1d:dc:4d:02:3a:64:6d:1f:69:67:a5: 31:ca:ac:3d:23:ed:f6:b9:85:73:af:3c:b3:0f:9e:52:4f:f1: 85:3b:e2:cb:91:3c:26:60:11:69:af:fc:f5:27:44:34:24:e1: 42:58:0c:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JddCyzbAZX3OZWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JjYmUxNmItMGRkZS00NmMzLTgzN2YtYTk0MGEwZTlk NGNiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTZmMGU3OTMtOGE3Zi00Nzc0LWFmMzUtODQ2ZjNkYWJiYjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8KxWI43niH2eTxg+za9CpGkrNi4NdO5cWvx oCDUOeJ8v6nIo63dMYXmwCK5R63z39yhYICFojP47WbJHtq1Wky7YtLSjZ+lucHm S6W1NVCR5E4WM+5k6WUntL/I0lHYuJ+o3U7/jZ/VsBcLVvJxwmuGllTloMvxbVbG 0YWCGpCrwexxdmAb0/od1YrZPmeiwwcEeKn0ONyvwfR88isOa1hahhAwp6byOLdp oc6R10zZ4H/jp6ZRn47GkrEvfixcv8NgFbLFWF7MPE/U16U/SS7uqEzz3IZ3MNE2 9S2lOI2azMYqimPYwq9wHF8Q2B+PUW8z9n6XoH/ajT4e3KJz6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0LXSDacoET2TcjN/og3G1L9HJwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83YmNi ZTE2Yi0wZGRlLTQ2YzMtODM3Zi1hOTQwYTBlOWQ0Y2IvNDM0MjVhZmQtZTM4MC0z Mjc1LWI2MTAtYWEyMjA2ZmUzMmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvN2JjYmUxNmItMGRkZS00NmMzLTgz N2YtYTk0MGEwZTlkNGNiLzdiY2JlMTZiLTBkZGUtNDZjMy04MzdmLWE5NDBhMGU5 ZDRjYi5jcmwwHwYDVR0jBBgwFoAUfqcpYYmuSL66JjiBwpP8hasLXKYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83YmNiZTE2Yi0wZGRlLTQ2YzMtODM3Zi1hOTQw YTBlOWQ0Y2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGi6Gcunw5Mt7naTUBageblae0IhQ/eMyzyj51MioN1DXKzJEYNkprf2 N/u0hW6xW1JbISrZCtJ4IV2MbYQn1zrkEXj6pS4E7qVLBnkmBZC2IFiq0T+zoo1K KLSSYEmYSOjlbczulFvhzCAM8V3Txl131egWlJDJzQpaREYTbdEmzaSB/IqNFQJb gKRe/XlCauU/2Z9SOlTkgAOysdEBE4HQFJP5P8l8ZeewHZac9Yn+V0oGL33dWdyw Paj1J2pk8RvMDUfF/C1q2dehZ5Id3E0COmRtH2lnpTHKrD0j7fa5hXOvPLMPnlJP 8YU74suRPCZgEWmv/PUnRDQk4UJYDCE= -----END CERTIFICATE-----Generated at Sat Sep 26 03:14:18 2026 by rpki-client