$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/48aa2ac1-aac8-3382-92a2-8a030207b08b.roa File: 48aa2ac1-aac8-3382-92a2-8a030207b08b.roa (raw, json) Hash identifier: HSX/ZQgn1G2Op6HJO7JrBIXrBRyjrYD5aZbzmzgB1MY= Subject key identifier: 92:98:19:F0:35:CE:E8:15:C5:1E:DD:E0:8B:D3:9D:38:55:56:38:D1 Certificate issuer: /CN=20c4af79-cdcf-4640-ab4e-f0f33648cc55 Certificate serial: 010D0C9F4328584EED520168582DE3791A0B5B70 Authority key identifier: 54:9B:21:17:72:B9:2D:EC:3D:5D:62:81:0A:6C:CF:F7:A7:62:43:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/48aa2ac1-aac8-3382-92a2-8a030207b08b.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 12186 IP address blocks: 199.168.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:01:68:58:2d:e3:79:1a:0b:5b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20c4af79-cdcf-4640-ab4e-f0f33648cc55 Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=d98a515c-43c3-48c5-9c4e-ef5212ae390b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d7:28:e0:ef:68:49:15:2b:48:a2:08:66:43: cc:56:a3:3c:2f:d8:be:e5:58:27:64:88:33:af:e6: ef:2a:b3:cb:84:d2:76:cb:b6:f7:38:03:a3:12:e8: 93:3b:91:5f:0b:13:aa:96:8c:1b:04:a0:f9:ef:28: 7d:2e:ef:4c:fc:c7:4c:e6:27:20:84:55:db:6c:7a: fe:d7:8c:14:d4:4d:f4:c0:5e:5f:72:b8:b8:a3:05: 31:89:1e:31:12:37:bf:4b:b4:3c:c2:c0:ff:c0:24: 70:21:92:78:ff:b6:bd:57:47:d9:8a:34:18:df:70: 95:4b:c5:59:8c:33:5c:fe:c2:26:0c:53:64:a1:3b: 32:03:3f:a8:3c:3c:01:ae:fb:ff:e9:c3:c9:b5:9e: e3:8d:4a:ad:88:88:a5:5c:f7:81:86:67:95:24:1f: 6b:14:e8:10:b3:d6:98:66:c6:e8:17:3e:16:9f:9e: 40:7e:0b:8b:70:87:9d:73:1f:b6:0c:8d:ed:ca:76: 36:6c:47:84:24:18:ac:35:a4:12:bf:9a:3a:46:93: 6b:d6:f8:f8:a8:04:51:4f:7e:58:16:20:b1:f8:c1: 26:d4:d0:ab:66:d5:fe:44:9e:6f:32:2b:ef:5d:67: a4:9f:90:c4:41:20:99:18:93:b4:05:b1:71:67:ef: 89:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:98:19:F0:35:CE:E8:15:C5:1E:DD:E0:8B:D3:9D:38:55:56:38:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/48aa2ac1-aac8-3382-92a2-8a030207b08b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.crl X509v3 Authority Key Identifier: keyid:54:9B:21:17:72:B9:2D:EC:3D:5D:62:81:0A:6C:CF:F7:A7:62:43:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer sbgp-ipAddrBlock: critical IPv4: 199.168.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:8b:98:98:0f:e8:7f:13:48:5e:09:37:4f:3b:b1:21:8f:de: c9:4a:f9:dc:50:c9:94:c5:e3:fb:d2:01:52:ff:61:f2:98:23: 4e:c5:d1:c8:03:10:33:11:19:af:55:65:1a:0a:dc:86:c9:f3: c7:c4:be:60:2a:26:f4:05:e8:c5:56:16:7d:58:8b:2f:0f:d6: 0c:36:9b:c8:47:da:00:ad:14:9a:e4:63:f5:f0:b7:40:f6:d7: d4:29:5a:44:f3:c2:09:a0:c7:1e:d0:d7:51:79:bf:e5:6b:a3: 16:58:9c:c7:34:2f:91:6b:8f:9e:3c:c5:c1:15:00:63:1e:09: 7e:67:f9:5c:ed:33:ae:26:6b:e9:70:46:30:ba:95:84:75:04: 67:7f:8e:db:af:a4:98:90:a9:24:a5:ce:a7:6e:67:59:71:98: a5:6f:02:e8:ad:f1:fd:36:02:b8:01:6d:3f:e3:27:3c:81:81: a0:39:2b:7a:a6:1b:ab:99:e5:25:2b:11:0a:d2:0d:0c:96:e9: 7a:b1:9f:c3:8c:16:55:3d:f0:8f:fa:b7:dd:4f:bd:d5:66:4a: a6:cd:af:70:59:b7:69:f6:16:f0:3b:37:97:b4:23:b7:dd:92: 17:42:29:e1:b6:46:d2:ce:05:1b:b2:57:5b:c1:c1:c3:28:8d: 11:cf:46:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUgFoWC3jeRoLW3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBjNGFmNzktY2RjZi00NjQwLWFiNGUtZjBmMzM2NDhj YzU1MB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk ZDk4YTUxNWMtNDNjMy00OGM1LTljNGUtZWY1MjEyYWUzOTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNco4O9oSRUrSKIIZkPMVqM8L9i+5VgnZIgz r+bvKrPLhNJ2y7b3OAOjEuiTO5FfCxOqlowbBKD57yh9Lu9M/MdM5icghFXbbHr+ 14wU1E30wF5fcri4owUxiR4xEje/S7Q8wsD/wCRwIZJ4/7a9V0fZijQY33CVS8VZ jDNc/sImDFNkoTsyAz+oPDwBrvv/6cPJtZ7jjUqtiIilXPeBhmeVJB9rFOgQs9aY ZsboFz4Wn55AfguLcIedcx+2DI3tynY2bEeEJBisNaQSv5o6RpNr1vj4qARRT35Y FiCx+MEm1NCrZtX+RJ5vMivvXWekn5DEQSCZGJO0BbFxZ++JXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKYGfA1zugVxR7d4IvTnThVVjjRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMGM0 YWY3OS1jZGNmLTQ2NDAtYWI0ZS1mMGYzMzY0OGNjNTUvNDhhYTJhYzEtYWFjOC0z MzgyLTkyYTItOGEwMzAyMDdiMDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjBjNGFmNzktY2RjZi00NjQwLWFi NGUtZjBmMzM2NDhjYzU1LzIwYzRhZjc5LWNkY2YtNDY0MC1hYjRlLWYwZjMzNjQ4 Y2M1NS5jcmwwHwYDVR0jBBgwFoAUVJshF3K5Lew9XWKBCmzP96diQ00wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMGM0YWY3OS1jZGNmLTQ2NDAtYWI0ZS1mMGYz MzY0OGNjNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6hlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2LmJgP6H8TSF4JN087sSGP3slK+dxQyZTF4/vSAVL/YfKYI07F0cgD EDMRGa9VZRoK3IbJ88fEvmAqJvQF6MVWFn1Yiy8P1gw2m8hH2gCtFJrkY/Xwt0D2 19QpWkTzwgmgxx7Q11F5v+VroxZYnMc0L5Frj548xcEVAGMeCX5n+VztM64ma+lw RjC6lYR1BGd/jtuvpJiQqSSlzqduZ1lxmKVvAuit8f02ArgBbT/jJzyBgaA5K3qm G6uZ5SUrEQrSDQyW6Xqxn8OMFlU98I/6t91PvdVmSqbNr3BZt2n2FvA7N5e0I7fd khdCKeG2RtLOBRuyV1vBwcMojRHPRpo= -----END CERTIFICATE-----Generated at Sun Oct 4 21:41:45 2026 by rpki-client