$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/b218fdd5-4a2a-360b-94c2-f1057168b660.roa File: b218fdd5-4a2a-360b-94c2-f1057168b660.roa (raw, json) Hash identifier: 6R1clELXJwePNwK6+09MCFxEzi5FkHkGnkNstWSiXUw= Subject key identifier: A3:59:0C:79:2A:67:6A:2D:A0:F7:9B:61:A6:27:7D:B9:AD:A9:82:8C Certificate issuer: /CN=8d499d1b-9023-4410-8b4a-909ca6a083df Certificate serial: 010D0C9F4328584F4973A86DB964509ACDA8D7E0 Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/b218fdd5-4a2a-360b-94c2-f1057168b660.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397666 IP address blocks: 192.25.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:a8:6d:b9:64:50:9a:cd:a8:d7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d7360a3d-6274-4d30-b368-4f769ae48f7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b8:bd:54:6d:f6:94:ed:dc:d1:a8:e9:09:a9: 68:98:82:48:9d:23:65:21:c4:4d:0f:00:c8:63:a8: a5:c3:fa:42:27:8e:87:4a:95:e7:ad:ba:68:cf:cb: d2:35:00:6e:04:d3:83:02:f0:0c:d1:9a:9e:4a:79: 95:a3:50:ee:6e:d6:ba:3f:76:4b:db:5e:a8:09:20: de:9c:d3:fa:3b:55:8a:8f:44:00:86:e9:1b:3d:87: de:ba:11:39:93:8c:0b:7d:e3:a8:e3:61:be:a7:56: e4:b7:5c:d7:02:01:c7:98:b0:df:0c:d8:d9:ab:35: eb:e1:79:d1:07:14:72:c9:c9:db:86:d1:46:2b:5f: 20:56:19:47:7d:53:9a:75:38:1e:d6:31:7e:99:59: a9:7c:07:17:21:94:cc:10:ef:33:d6:ec:93:2e:44: f4:5d:51:25:84:c4:0e:a7:70:22:e2:58:73:cd:cd: 5d:76:83:ea:ce:9d:4b:19:ee:76:3f:50:e5:7d:03: 61:de:4f:2a:56:7a:70:19:0e:62:5d:66:e2:8a:0a: fb:50:5c:54:e1:f9:7e:88:ed:87:3e:eb:cd:73:de: 01:a2:37:96:2b:af:57:96:aa:64:52:53:90:85:8d: d9:13:25:0e:42:e3:3d:0c:0d:15:05:ac:03:1e:93: fc:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:59:0C:79:2A:67:6A:2D:A0:F7:9B:61:A6:27:7D:B9:AD:A9:82:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/b218fdd5-4a2a-360b-94c2-f1057168b660.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl X509v3 Authority Key Identifier: keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer sbgp-ipAddrBlock: critical IPv4: 192.25.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:c6:0c:89:54:c8:49:06:68:57:0c:e7:1a:64:2c:19:33:ab: d1:02:52:a0:dd:c6:d0:a7:9a:c5:38:f3:0c:fd:00:e7:c5:e2: 0b:f1:de:44:8b:8e:5e:94:5e:1f:28:77:a8:23:23:2b:09:74: 55:96:f5:58:3e:f9:e1:b9:10:a1:06:e0:9e:93:9e:d6:3b:2f: 8b:04:df:3c:90:9f:44:3b:88:e5:59:e0:c9:ce:a8:96:c2:40: 97:9a:8a:b2:1d:22:49:75:39:b6:f3:62:82:03:d7:e5:fb:9e: 49:9b:91:81:bf:f2:6d:72:91:4d:a3:2f:75:af:34:b4:0b:fb: ac:92:4b:45:eb:f1:18:e0:9a:ba:f2:d4:30:3f:38:38:a8:37: 44:08:e5:de:d7:d4:bb:8b:f6:29:25:b6:e1:6b:8d:2c:54:11: 03:3b:07:b2:94:13:d4:e0:4c:d3:c3:67:2a:b0:25:94:9d:ec: 53:d3:36:48:fe:85:66:ee:d8:f4:d0:5d:39:78:87:3f:de:95: f8:8f:c7:e6:58:39:ff:c1:e1:75:86:b1:62:62:0e:8c:d9:50: 75:39:d3:78:04:77:a9:97:3a:b2:1d:80:79:f3:f0:9e:1e:6f: dd:96:91:2e:c5:d9:7d:4d:ef:72:57:cb:71:e3:b5:7a:96:e3: a6:57:29:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc6htuWRQms2o1+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ0OTlkMWItOTAyMy00NDEwLThiNGEtOTA5Y2E2YTA4 M2RmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDczNjBhM2QtNjI3NC00ZDMwLWIzNjgtNGY3NjlhZTQ4ZjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuri9VG32lO3c0ajpCalomIJInSNlIcRNDwDI Y6ilw/pCJ46HSpXnrbpoz8vSNQBuBNODAvAM0ZqeSnmVo1Dubta6P3ZL216oCSDe nNP6O1WKj0QAhukbPYfeuhE5k4wLfeOo42G+p1bkt1zXAgHHmLDfDNjZqzXr4XnR BxRyycnbhtFGK18gVhlHfVOadTge1jF+mVmpfAcXIZTMEO8z1uyTLkT0XVElhMQO p3Ai4lhzzc1ddoPqzp1LGe52P1DlfQNh3k8qVnpwGQ5iXWbiigr7UFxU4fl+iO2H PuvNc94BojeWK69XlqpkUlOQhY3ZEyUOQuM9DA0VBawDHpP81wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNZDHkqZ2otoPebYaYnfbmtqYKMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5 OWQxYi05MDIzLTQ0MTAtOGI0YS05MDljYTZhMDgzZGYvYjIxOGZkZDUtNGEyYS0z NjBiLTk0YzItZjEwNTcxNjhiNjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGQ0OTlkMWItOTAyMy00NDEwLThi NGEtOTA5Y2E2YTA4M2RmLzhkNDk5ZDFiLTkwMjMtNDQxMC04YjRhLTkwOWNhNmEw ODNkZi5jcmwwHwYDVR0jBBgwFoAUsY1jfe1i4KPgZDojmWSSbSG5P9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5OWQxYi05MDIzLTQ0MTAtOGI0YS05MDlj YTZhMDgzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwBkOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHGDIlUyEkGaFcM5xpkLBkzq9ECUqDdxtCnmsU48wz9AOfF4gvx3kSL jl6UXh8od6gjIysJdFWW9Vg++eG5EKEG4J6TntY7L4sE3zyQn0Q7iOVZ4MnOqJbC QJeairIdIkl1ObbzYoID1+X7nkmbkYG/8m1ykU2jL3WvNLQL+6ySS0Xr8Rjgmrry 1DA/ODioN0QI5d7X1LuL9ikltuFrjSxUEQM7B7KUE9TgTNPDZyqwJZSd7FPTNkj+ hWbu2PTQXTl4hz/elfiPx+ZYOf/B4XWGsWJiDozZUHU503gEd6mXOrIdgHnz8J4e b92WkS7F2X1N73JXy3HjtXqW46ZXKZU= -----END CERTIFICATE-----Generated at Tue Oct 13 10:17:14 2026 by rpki-client