$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a153a056-279f-3b73-8786-bc7da1263bea.roa File: a153a056-279f-3b73-8786-bc7da1263bea.roa (raw, json) Hash identifier: FQOvVsgKBfO9vDkyyGuXSMiNAQGx9mAteeBRA7l8ddo= Subject key identifier: F6:CF:7B:F8:52:2A:6D:49:CF:A4:B9:48:DF:DB:D2:B6:48:1F:5B:21 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4972AACF5DFFD5F0A5CDD980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a153a056-279f-3b73-8786-bc7da1263bea.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396555 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:aa:cf:5d:ff:d5:f0:a5:cd:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1d466fb2-af0c-4dea-997b-bec69cca1742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b5:1a:c0:7e:c9:0d:2f:22:3c:37:4e:ff:b6: 23:6c:d3:da:5b:e7:2d:ec:a2:42:07:b3:3a:2b:4b: 4b:d4:c9:0c:56:8d:72:21:74:2e:7d:de:3d:d9:c4: ba:ff:d9:86:e4:2e:29:cb:2b:73:a3:ca:01:e8:b9: 24:aa:cd:5b:a3:7f:7c:b3:62:28:77:eb:13:52:28: bf:ec:78:9f:1a:34:90:3e:31:89:1b:87:fb:0f:60: 0d:45:39:bc:39:0d:b4:cb:1d:2b:cc:f9:c1:f2:af: ea:f9:1e:19:29:62:0e:cc:43:24:2b:6e:54:dd:0d: 83:55:01:b9:f3:b0:12:5e:d5:fa:2c:2b:a3:59:28: 43:53:b9:37:15:a8:b4:84:9d:25:91:4e:93:ad:80: 9c:e5:f9:72:f2:13:fe:31:ba:46:28:c2:48:fa:b9: 1e:46:38:0a:c0:3a:64:42:46:6f:59:8c:e4:33:6a: 70:76:82:b9:ff:5d:e4:3c:25:66:8f:7f:e8:69:37: d1:f4:b3:e2:4a:38:44:39:18:72:86:30:92:c5:74: 9d:69:83:ec:76:28:d5:61:c4:4a:cf:ab:cf:aa:6b: db:f0:85:b8:be:d0:08:4a:14:9c:be:5c:99:26:b2: b4:09:18:04:d8:fd:93:21:e5:25:4e:02:2e:16:ec: 9d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:CF:7B:F8:52:2A:6D:49:CF:A4:B9:48:DF:DB:D2:B6:48:1F:5B:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a153a056-279f-3b73-8786-bc7da1263bea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:bc:03:3a:a1:f1:d5:7d:0a:83:86:68:41:3c:28:77:59:6a: 54:d4:78:5d:59:c4:21:81:46:44:49:a9:5a:df:65:16:27:e9: ff:73:8c:06:52:85:f6:9e:e4:7b:5d:dc:b8:88:1a:8e:f2:66: 6f:68:96:b0:35:1c:ee:b4:0b:ae:8c:70:f4:c7:81:97:89:d6: 18:c6:ee:0c:e3:80:e2:47:a0:62:b7:1d:12:75:5f:70:07:7a: 28:5b:11:24:0e:83:6e:c4:1f:a8:66:0c:1e:8f:7a:ac:15:e3: b6:77:fd:16:4f:82:7a:14:bf:10:2a:37:92:54:77:d9:61:2d: 36:15:41:22:45:5a:50:eb:5d:a6:3f:a0:a9:d0:ab:9a:fb:ab: 2e:a7:92:69:9a:63:86:1c:d6:c3:d2:7c:cf:a6:ba:29:3b:53: 3f:96:98:15:6e:d7:33:77:8b:f6:cc:0c:29:ba:2a:af:7a:3d: 93:6b:64:9c:2c:94:26:8e:e9:9c:05:84:43:50:08:e6:58:47: 65:22:d8:be:d7:03:f1:ff:24:7b:10:53:c0:9b:db:5a:79:26: 81:7d:ce:d7:ed:dd:c6:c6:4f:90:8b:1f:ce:7f:83:44:50:59: f1:5d:4e:e1:69:f1:6c:82:24:b9:5e:ac:a4:f3:de:0f:3e:38: 16:72:01:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcqrPXf/V8KXN2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWQ0NjZmYjItYWYwYy00ZGVhLTk5N2ItYmVjNjljY2ExNzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7UawH7JDS8iPDdO/7YjbNPaW+ct7KJCB7M6 K0tL1MkMVo1yIXQufd492cS6/9mG5C4pyytzo8oB6Lkkqs1bo398s2Iod+sTUii/ 7HifGjSQPjGJG4f7D2ANRTm8OQ20yx0rzPnB8q/q+R4ZKWIOzEMkK25U3Q2DVQG5 87ASXtX6LCujWShDU7k3Fai0hJ0lkU6TrYCc5fly8hP+MbpGKMJI+rkeRjgKwDpk QkZvWYzkM2pwdoK5/13kPCVmj3/oaTfR9LPiSjhEORhyhjCSxXSdaYPsdijVYcRK z6vPqmvb8IW4vtAIShScvlyZJrK0CRgE2P2TIeUlTgIuFuydvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPbPe/hSKm1Jz6S5SN/b0rZIH1shMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTE1M2EwNTYtMjc5Zi0z YjczLTg3ODYtYmM3ZGExMjYzYmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALS8Azqh8dV9CoOGaEE8KHdZalTUeF1ZxCGBRkRJqVrfZRYn6f9zjAZS hfae5Htd3LiIGo7yZm9olrA1HO60C66McPTHgZeJ1hjG7gzjgOJHoGK3HRJ1X3AH eihbESQOg27EH6hmDB6PeqwV47Z3/RZPgnoUvxAqN5JUd9lhLTYVQSJFWlDrXaY/ oKnQq5r7qy6nkmmaY4Yc1sPSfM+muik7Uz+WmBVu1zN3i/bMDCm6Kq96PZNrZJws lCaO6ZwFhENQCOZYR2Ui2L7XA/H/JHsQU8Cb21p5JoF9ztft3cbGT5CLH85/g0RQ WfFdTuFp8WyCJLlerKTz3g8+OBZyAQA= -----END CERTIFICATE-----Generated at Mon Sep 28 16:07:02 2026 by rpki-client