$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/376c0303-935e-39a5-b2d1-709f592f1626.roa File: 376c0303-935e-39a5-b2d1-709f592f1626.roa (raw, json) Hash identifier: 46GBwDXRr7nAqLE6St+X9dgXGC20pCq3t8P1az3H9Ok= Subject key identifier: 0C:39:D7:18:25:A2:F7:15:E9:E4:D0:F9:58:69:EF:44:EC:67:66:23 Certificate issuer: /CN=c3440eeb-3d7a-43e3-a0a4-fa9a993798be Certificate serial: 010D0C9F4328584F49749D014FD2AB5BEA822FF0 Authority key identifier: 88:37:1F:6A:8B:BF:03:AC:B8:22:6A:5C:29:99:F1:0C:DF:88:BD:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/376c0303-935e-39a5-b2d1-709f592f1626.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 192.200.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:9d:01:4f:d2:ab:5b:ea:82:2f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3440eeb-3d7a-43e3-a0a4-fa9a993798be Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1627ad92-5845-4518-8206-5b3cd32d4f1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:6e:f5:69:e6:24:77:67:50:cd:a6:85:2e:87: 6f:87:8d:de:ef:2c:c9:c0:d4:2a:ad:57:49:7b:14: f4:da:e8:d6:64:f0:f6:30:13:bc:9a:be:7f:2d:be: d2:fd:df:23:d8:4b:0e:35:14:10:bf:1b:fb:57:e5: da:28:7d:0f:2a:6a:f9:aa:5e:9f:26:52:21:34:54: 28:ad:e6:c4:13:79:e4:aa:ae:c2:87:0b:3f:56:2e: bc:c2:88:5a:4d:34:a1:d5:ee:4d:6f:79:2f:6e:d5: 59:be:ba:06:4c:92:00:88:78:b8:af:54:3b:c3:d7: cd:49:ba:7f:0e:09:c6:19:4d:80:e2:ff:a3:af:b4: ce:95:e0:d3:cd:3f:60:eb:ce:a2:7c:53:d0:9f:26: 8d:00:1a:d7:86:4d:93:d7:51:5f:0d:e7:e0:df:ca: 5d:a7:96:86:fb:30:f7:61:fd:b9:76:aa:09:0b:5e: 21:ee:00:93:85:33:da:c5:ca:2e:b6:96:48:bf:c7: 9c:b5:c6:7d:a8:6f:9f:77:4e:84:b9:1c:da:8e:c1: 94:fe:5e:3a:9d:cd:fc:93:b9:e8:4e:71:5e:30:f2: cc:56:0f:d9:5f:22:05:13:d0:17:62:e0:c9:2b:35: 9c:09:22:1d:a6:c3:a4:5a:11:d1:8c:79:a2:ba:68: 61:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:39:D7:18:25:A2:F7:15:E9:E4:D0:F9:58:69:EF:44:EC:67:66:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/376c0303-935e-39a5-b2d1-709f592f1626.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.crl X509v3 Authority Key Identifier: keyid:88:37:1F:6A:8B:BF:03:AC:B8:22:6A:5C:29:99:F1:0C:DF:88:BD:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer sbgp-ipAddrBlock: critical IPv4: 192.200.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:0c:69:ca:c5:36:2e:ca:78:d6:1c:4a:66:45:74:94:9b:e2: e4:7d:b8:e7:8b:92:c1:33:f0:a2:c1:bf:94:59:f9:ec:9c:b6: 59:a4:b0:39:a6:10:88:e5:bb:b2:bd:28:df:69:9a:5b:cc:94: 77:bd:e5:39:4e:d5:40:f8:9c:28:75:b5:15:3f:9d:9f:8d:63: bf:9f:71:e7:86:4a:6c:97:d0:3a:da:78:97:76:32:35:3b:b3: 42:e2:c1:45:8d:cf:87:93:e6:eb:bf:ba:fb:fb:1f:d6:b5:5a: 49:31:cf:9e:73:ab:cc:bc:15:ed:68:ec:fb:10:c8:a8:9d:36: 27:c3:4e:2c:64:55:98:0e:e8:3c:11:a3:90:7f:1c:82:87:f5: ef:3d:f4:57:f1:82:e4:d2:93:87:ad:19:42:9a:61:a5:08:c1: e8:a8:51:a0:6a:ae:5c:99:21:dc:ae:37:9f:14:29:28:6e:8b: 13:8d:3c:b3:17:4d:66:ba:de:1a:c6:a5:75:62:9d:bb:d4:f8: 3d:f9:0c:ec:b8:de:67:02:86:5d:f1:fe:ba:5b:96:f1:dc:f7: 0b:2d:84:dd:1a:8d:12:df:a6:50:25:c8:90:60:6a:e4:ce:2d: b1:be:de:22:1d:9d:71:a7:fe:ad:1b:87:ed:06:16:83:e7:1a: 91:87:f8:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdJ0BT9KrW+qCL/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM0NDBlZWItM2Q3YS00M2UzLWEwYTQtZmE5YTk5Mzc5 OGJlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTYyN2FkOTItNTg0NS00NTE4LTgyMDYtNWIzY2QzMmQ0ZjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG71aeYkd2dQzaaFLodvh43e7yzJwNQqrVdJ exT02ujWZPD2MBO8mr5/Lb7S/d8j2EsONRQQvxv7V+XaKH0PKmr5ql6fJlIhNFQo rebEE3nkqq7Chws/Vi68wohaTTSh1e5Nb3kvbtVZvroGTJIAiHi4r1Q7w9fNSbp/ DgnGGU2A4v+jr7TOleDTzT9g686ifFPQnyaNABrXhk2T11FfDefg38pdp5aG+zD3 Yf25dqoJC14h7gCThTPaxcoutpZIv8ectcZ9qG+fd06EuRzajsGU/l46nc38k7no TnFeMPLMVg/ZXyIFE9AXYuDJKzWcCSIdpsOkWhHRjHmiumhhawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAw51xglovcV6eTQ+Vhp70TsZ2YjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jMzQ0 MGVlYi0zZDdhLTQzZTMtYTBhNC1mYTlhOTkzNzk4YmUvMzc2YzAzMDMtOTM1ZS0z OWE1LWIyZDEtNzA5ZjU5MmYxNjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzM0NDBlZWItM2Q3YS00M2UzLWEw YTQtZmE5YTk5Mzc5OGJlL2MzNDQwZWViLTNkN2EtNDNlMy1hMGE0LWZhOWE5OTM3 OThiZS5jcmwwHwYDVR0jBBgwFoAUiDcfaou/A6y4ImpcKZnxDN+IvRgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jMzQ0MGVlYi0zZDdhLTQzZTMtYTBhNC1mYTlh OTkzNzk4YmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYMacrFNi7KeNYcSmZFdJSb4uR9uOeLksEz8KLBv5RZ+eyctlmksDmm EIjlu7K9KN9pmlvMlHe95TlO1UD4nCh1tRU/nZ+NY7+fceeGSmyX0DraeJd2MjU7 s0LiwUWNz4eT5uu/uvv7H9a1Wkkxz55zq8y8Fe1o7PsQyKidNifDTixkVZgO6DwR o5B/HIKH9e899FfxguTSk4etGUKaYaUIweioUaBqrlyZIdyuN58UKShuixONPLMX TWa63hrGpXVinbvU+D35DOy43mcChl3x/rpblvHc9wsthN0ajRLfplAlyJBgauTO LbG+3iIdnXGn/q0bh+0GFoPnGpGH+LY= -----END CERTIFICATE-----Generated at Sun Sep 27 10:51:30 2026 by rpki-client