$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd128547-8e70-305a-bef8-408853c137b2.roa File: cd128547-8e70-305a-bef8-408853c137b2.roa (raw, json) Hash identifier: 0Gfw93MKTvuH5XYa5etaAmKrBQSKP/AOE0P755HMs2k= Subject key identifier: C5:DD:E3:5F:78:9A:61:66:99:94:53:BC:80:50:72:24:29:30:81:40 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F1E2D015968E09A43170BBB00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd128547-8e70-305a-bef8-408853c137b2.roa Signing time: Wed 09 Sep 2026 13:00:11 +0000 ROA not before: Wed 09 Sep 2026 13:00:11 +0000 ROA not after: Tue 08 Dec 2026 14:00:11 +0000 asID: 396550 IP address blocks: 192.54.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:2d:01:59:68:e0:9a:43:17:0b:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 9 13:00:11 2026 GMT Not After : Dec 8 14:00:11 2026 GMT Subject: CN=108b5d69-fc7b-404f-8a3a-2aeb2295671b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f0:89:53:bb:9c:2c:94:56:47:40:f4:c8:0a: d3:9f:7c:6c:c1:3d:13:de:6e:cd:23:c6:43:81:f8: c8:71:10:ba:36:3b:88:bb:63:eb:63:87:4c:7b:1d: 5f:1a:c7:c9:eb:36:f0:59:86:d6:7f:5b:f1:ec:ba: 71:d4:97:0d:c2:5b:a2:18:a3:80:29:c1:32:b8:ba: b6:57:3b:2f:11:95:f9:cf:3a:9a:0a:04:c3:4d:4a: 74:fd:94:4f:f8:d5:dd:65:6a:3a:3d:bb:bd:a3:48: ee:e0:b1:0d:6e:86:09:49:31:3b:c5:7a:c4:f2:1f: d3:b2:51:5b:3a:7b:eb:e3:f9:17:78:98:e8:e1:2e: 68:c8:b3:60:03:57:3e:c5:64:47:17:9b:0a:9c:2f: fb:07:97:67:9a:d4:02:97:88:aa:68:42:ff:39:f9: 3c:27:b9:c5:f1:1d:6e:b9:83:74:0d:75:99:25:b6: d2:87:4f:80:c1:82:16:c2:2a:85:e6:ac:70:8d:fd: 7b:c8:8d:ef:bc:03:ce:3e:55:2f:f4:68:b2:7a:54: fa:72:21:17:b2:f8:3e:2f:55:b8:ad:25:09:77:19: 85:8a:36:b1:05:a1:56:25:b7:2a:a8:d8:50:75:8a: fd:a8:0f:ce:4c:49:66:51:dc:60:f0:5d:c4:a4:ea: a9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:DD:E3:5F:78:9A:61:66:99:94:53:BC:80:50:72:24:29:30:81:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd128547-8e70-305a-bef8-408853c137b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.54.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:79:06:5d:a5:30:26:96:ef:ce:3e:e2:f0:29:4d:5e:11:f7: a8:79:47:e8:d8:f9:0d:b9:96:46:a8:cd:ac:03:09:3e:f9:b7: 45:be:14:40:58:99:03:fa:81:25:09:e6:57:6a:f0:00:aa:af: e6:95:a3:4e:40:be:af:b2:15:78:0d:a8:c6:31:3e:79:f9:b3: 2b:5f:ba:67:2b:83:48:99:f4:31:b1:37:03:91:d4:9d:c8:cc: b7:0c:91:aa:95:f4:7f:91:c3:f0:62:a4:08:21:00:51:25:9e: 60:04:53:ba:05:bb:1f:56:14:d2:22:92:b8:8b:ec:03:2d:77: 3c:52:2d:72:51:ff:69:4c:eb:9a:33:ec:4a:3b:c6:d4:84:a4: 4a:48:d5:f4:f2:4a:47:0e:1b:90:88:18:04:bd:ef:a3:03:79: 01:90:0a:a8:16:a7:be:8c:97:0c:bc:68:3b:92:54:8d:11:db: 5c:c7:c6:54:69:ba:71:1a:7a:ad:79:b5:ee:9f:a2:d3:a9:51: 23:8c:94:e0:35:43:f6:78:25:29:f9:5b:01:d2:44:03:66:ff: 66:30:5c:66:11:13:c2:a7:f6:f1:c0:9c:32:51:c6:cc:a7:db: bb:8f:9d:33:2c:6a:bf:c6:be:01:1c:b9:16:dc:11:76:22:9a: bf:84:ff:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8eLQFZaOCaQxcLuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwOTEzMDAxMVoXDTI2MTIwODE0MDAxMVowLzEtMCsGA1UEAxMk MTA4YjVkNjktZmM3Yi00MDRmLThhM2EtMmFlYjIyOTU2NzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fCJU7ucLJRWR0D0yArTn3xswT0T3m7NI8ZD gfjIcRC6NjuIu2PrY4dMex1fGsfJ6zbwWYbWf1vx7Lpx1JcNwluiGKOAKcEyuLq2 VzsvEZX5zzqaCgTDTUp0/ZRP+NXdZWo6Pbu9o0ju4LENboYJSTE7xXrE8h/TslFb Onvr4/kXeJjo4S5oyLNgA1c+xWRHF5sKnC/7B5dnmtQCl4iqaEL/Ofk8J7nF8R1u uYN0DXWZJbbSh0+AwYIWwiqF5qxwjf17yI3vvAPOPlUv9GiyelT6ciEXsvg+L1W4 rSUJdxmFijaxBaFWJbcqqNhQdYr9qA/OTElmUdxg8F3EpOqpdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXd4194mmFmmZRTvIBQciQpMIFAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2QxMjg1NDctOGU3MC0z MDVhLWJlZjgtNDA4ODUzYzEzN2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGB5Bl2lMCaW784+4vApTV4R96h5R+jY+Q25lkaozawDCT75t0W+FEBY mQP6gSUJ5ldq8ACqr+aVo05Avq+yFXgNqMYxPnn5sytfumcrg0iZ9DGxNwOR1J3I zLcMkaqV9H+Rw/BipAghAFElnmAEU7oFux9WFNIikriL7AMtdzxSLXJR/2lM65oz 7Eo7xtSEpEpI1fTySkcOG5CIGAS976MDeQGQCqgWp76Mlwy8aDuSVI0R21zHxlRp unEaeq15te6fotOpUSOMlOA1Q/Z4JSn5WwHSRANm/2YwXGYRE8Kn9vHAnDJRxsyn 27uPnTMsar/GvgEcuRbcEXYimr+E/20= -----END CERTIFICATE-----Generated at Sun Sep 27 04:07:59 2026 by rpki-client