$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ac0ca2f-1863-3f5d-8c2d-21092569c694.roa File: 0ac0ca2f-1863-3f5d-8c2d-21092569c694.roa (raw, json) Hash identifier: MNZLzNY6gmUs5yjIeEfmYgP0jWWmuxDJkIL/OkespeQ= Subject key identifier: 2F:9C:59:44:0D:06:C2:5E:B1:A8:FB:45:4B:D9:9B:2E:43:79:73:95 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F497330BAF183D7439C75B180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ac0ca2f-1863-3f5d-8c2d-21092569c694.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36631 IP address blocks: 192.153.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:30:ba:f1:83:d7:43:9c:75:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=166e1926-40dd-4c80-8cef-771177b221a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c6:e5:ac:a3:8b:ff:7c:2a:54:6b:bd:0a:0b: c0:46:dc:82:f1:c3:9d:db:7d:37:52:2d:41:e6:16: 9d:da:5f:39:bc:2f:af:5f:a1:91:1d:a0:d2:09:89: bd:99:bf:5a:e9:ed:c5:88:69:4b:d2:5f:c7:f8:34: fd:fe:c1:92:48:a9:08:42:a3:6c:a4:77:c7:3d:70: 7a:d9:89:07:2c:5a:5c:b1:6b:96:a1:75:72:d0:32: e5:cc:70:64:0f:6f:10:83:d5:39:8c:d0:38:11:fb: 36:b8:a2:5a:62:c4:8b:ea:54:68:27:0a:e5:31:a8: ec:8d:5b:10:71:81:ab:59:43:0f:b1:49:84:50:d8: 6a:22:40:04:1c:81:5a:0b:4b:de:e8:77:09:05:6c: 06:5a:91:a1:b2:87:00:b1:d9:58:cc:23:b6:bd:d3: 6a:2f:19:fb:73:27:ec:9c:be:37:6e:70:f7:53:de: 39:69:54:2b:e2:42:f6:36:0f:40:75:28:48:29:93: 7d:06:b7:ef:11:f5:2e:66:0c:2a:b6:c0:41:a5:fe: a5:ed:a4:21:6a:22:82:eb:19:a4:ea:75:99:4e:95: 91:11:95:6e:75:2f:ee:b6:f4:e2:e4:93:06:b8:c5: f1:0e:1c:a1:56:a7:db:9c:69:4d:10:c6:dd:c9:8c: 08:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:9C:59:44:0D:06:C2:5E:B1:A8:FB:45:4B:D9:9B:2E:43:79:73:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ac0ca2f-1863-3f5d-8c2d-21092569c694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.153.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:5f:52:b0:09:bd:93:54:28:44:9b:09:81:cb:7e:9c:35:ce: 21:b0:99:be:1c:cb:07:93:2b:56:4b:ce:c2:82:02:33:09:2b: b9:be:57:5c:76:06:25:1d:22:a7:93:c9:c9:96:d3:d1:12:e0: b2:72:f7:3a:98:e1:87:66:c2:25:70:0a:2f:2a:56:98:11:ea: ba:c8:f8:d5:b9:35:d2:fc:45:75:08:37:fa:63:19:3b:23:72: 80:4b:31:b2:9c:a9:35:53:60:1a:56:e4:94:d9:b3:b2:0e:ad: d1:28:9a:2e:ab:89:7c:c4:3e:e5:f2:37:b3:6f:6a:52:28:53: db:b1:88:0c:bd:8c:fa:03:f6:6b:d5:81:ea:47:5d:1d:4f:0c: f7:24:51:26:94:ca:06:78:a3:bd:4c:33:52:27:ef:d1:c1:8d: df:2a:b1:02:57:63:0b:4d:14:e5:5d:dc:97:88:9f:71:fa:f9: 2e:f7:94:d0:6a:96:68:38:70:63:7b:83:78:b1:22:56:e9:5e: 4e:9a:b7:6f:f8:10:d8:84:ff:dc:36:53:53:8a:0f:66:e8:9d: 7b:bc:23:db:15:1f:6b:3c:a9:26:9a:4a:ee:35:4a:0b:0d:5c: 6f:81:00:bc:1d:5a:52:97:87:35:ef:37:5b:9d:93:33:0c:96: 01:fc:61:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JczC68YPXQ5x1sYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTY2ZTE5MjYtNDBkZC00YzgwLThjZWYtNzcxMTc3YjIyMWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsblrKOL/3wqVGu9CgvARtyC8cOd2303Ui1B 5had2l85vC+vX6GRHaDSCYm9mb9a6e3FiGlL0l/H+DT9/sGSSKkIQqNspHfHPXB6 2YkHLFpcsWuWoXVy0DLlzHBkD28Qg9U5jNA4Efs2uKJaYsSL6lRoJwrlMajsjVsQ cYGrWUMPsUmEUNhqIkAEHIFaC0ve6HcJBWwGWpGhsocAsdlYzCO2vdNqLxn7cyfs nL43bnD3U945aVQr4kL2Ng9AdShIKZN9BrfvEfUuZgwqtsBBpf6l7aQhaiKC6xmk 6nWZTpWREZVudS/utvTi5JMGuMXxDhyhVqfbnGlNEMbdyYwIjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+cWUQNBsJesaj7RUvZmy5DeXOVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGFjMGNhMmYtMTg2My0z ZjVkLThjMmQtMjEwOTI1NjljNjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJn3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFfUrAJvZNUKESbCYHLfpw1ziGwmb4cyweTK1ZLzsKCAjMJK7m+V1x2 BiUdIqeTycmW09ES4LJy9zqY4YdmwiVwCi8qVpgR6rrI+NW5NdL8RXUIN/pjGTsj coBLMbKcqTVTYBpW5JTZs7IOrdEomi6riXzEPuXyN7NvalIoU9uxiAy9jPoD9mvV gepHXR1PDPckUSaUygZ4o71MM1In79HBjd8qsQJXYwtNFOVd3JeIn3H6+S73lNBq lmg4cGN7g3ixIlbpXk6at2/4ENiE/9w2U1OKD2bonXu8I9sVH2s8qSaaSu41SgsN XG+BALwdWlKXhzXvN1udkzMMlgH8YbE= -----END CERTIFICATE-----Generated at Mon Sep 28 16:43:08 2026 by rpki-client