$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/966b2ef4-2f76-3472-87f5-a5d6c1fc2aa5.roa File: 966b2ef4-2f76-3472-87f5-a5d6c1fc2aa5.roa (raw, json) Hash identifier: Sgh3LMIklEScC77lv/WSyI+S3Gt0c3XRxDvnhQuUqys= Subject key identifier: 6B:49:28:AD:A3:D9:30:81:25:0B:DF:35:B6:11:7F:A8:C2:A6:5A:40 Certificate issuer: /CN=cadf002a-d081-4e51-89c4-f7121259516d Certificate serial: 010D0C9F4328584F506D536EA9BB869B5FAF4B20 Authority key identifier: BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/966b2ef4-2f76-3472-87f5-a5d6c1fc2aa5.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 398813 IP address blocks: 192.206.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:53:6e:a9:bb:86:9b:5f:af:4b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cadf002a-d081-4e51-89c4-f7121259516d Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=797c6b29-df7c-4e99-ad03-d637dbbbf328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:50:d6:d4:01:86:90:8f:55:9b:87:44:f7:7d: 46:d9:16:73:19:b4:24:9c:2d:ae:3c:02:ea:35:b3: 7d:24:b4:90:d3:d9:01:5c:dc:c7:96:7c:c5:db:9b: 51:6d:28:93:36:f9:97:56:4a:7d:52:2d:02:cc:39: 28:96:65:57:8c:dd:19:b2:eb:2e:7c:cd:d6:63:cc: 9b:e9:f1:b6:2e:b2:49:6f:b4:5d:82:0c:9e:98:eb: 63:0b:b0:7c:04:75:a9:cb:29:21:74:b2:64:d2:b2: 6f:34:9b:d4:29:3a:28:33:13:4a:bc:dc:d6:c2:52: ea:29:ff:0f:cb:f7:4a:b3:44:21:04:c3:6d:e1:53: c0:fa:98:40:80:a2:1d:41:96:19:2d:fa:65:69:5c: 0f:3e:65:5c:77:7a:4e:cb:40:87:4f:9e:6e:d3:ba: ae:1e:23:c1:2a:e8:12:85:b5:90:49:98:b4:65:e2: 29:9b:0a:0c:b6:6f:1b:dd:fa:fe:05:b6:d9:ec:e5: 93:1f:0b:60:44:12:2a:66:34:30:b0:8a:fb:e7:e9: b3:5f:a4:85:19:8a:6f:c9:8c:62:9f:27:de:32:61: cc:63:da:5a:40:64:b6:48:2a:f4:8b:56:7c:a0:9c: 8d:d6:c4:cc:31:ae:40:d4:a1:90:ff:e3:3d:7a:5d: 8f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:49:28:AD:A3:D9:30:81:25:0B:DF:35:B6:11:7F:A8:C2:A6:5A:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/966b2ef4-2f76-3472-87f5-a5d6c1fc2aa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl X509v3 Authority Key Identifier: keyid:BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer sbgp-ipAddrBlock: critical IPv4: 192.206.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:5b:47:e1:07:32:b4:c8:cc:4f:ad:8b:0f:9e:e1:9d:be:09: d6:e0:ba:5a:9e:ab:9c:e1:2f:e0:5b:ee:47:89:49:51:14:36: 3f:4d:d6:e1:7f:db:c3:de:ce:59:16:64:4b:d4:10:09:63:57: f4:f0:d3:34:28:d2:ee:be:9d:36:8f:13:e4:8e:2b:fb:d0:23: 72:9e:27:31:11:ee:d1:52:e0:25:2b:c2:8f:f5:59:40:ec:86: 0c:41:62:b6:95:cc:df:75:e2:9e:17:05:f8:96:b9:1d:b1:ca: 1f:10:9d:e6:8d:05:bc:46:ee:db:ab:40:a2:72:9f:e8:d2:89: 81:0e:34:7c:11:59:66:54:ff:db:89:44:cd:1f:d8:d7:2b:c9: d3:cb:76:a9:fa:65:77:f4:d5:91:c6:d1:6d:7e:3d:29:53:2c: 08:e2:17:7a:30:7a:6e:94:c6:8b:2e:82:17:e8:ca:57:cc:0c: 35:70:95:94:00:e4:9f:20:3f:06:10:fd:a4:9b:90:d2:e0:61: e5:f2:ed:19:8e:b1:d8:56:3e:f0:19:ca:00:b3:f9:c3:0e:0c: c9:47:23:18:1f:5d:13:cf:3e:02:37:66:03:40:aa:71:6f:d2: c9:fa:42:d6:8f:70:27:48:a7:d6:89:c1:cb:11:7f:5a:7a:ac: a5:d5:02:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbVNuqbuGm1+vSyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FkZjAwMmEtZDA4MS00ZTUxLTg5YzQtZjcxMjEyNTk1 MTZkMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk Nzk3YzZiMjktZGY3Yy00ZTk5LWFkMDMtZDYzN2RiYmJmMzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1DW1AGGkI9Vm4dE931G2RZzGbQknC2uPALq NbN9JLSQ09kBXNzHlnzF25tRbSiTNvmXVkp9Ui0CzDkolmVXjN0ZsusufM3WY8yb 6fG2LrJJb7RdggyemOtjC7B8BHWpyykhdLJk0rJvNJvUKTooMxNKvNzWwlLqKf8P y/dKs0QhBMNt4VPA+phAgKIdQZYZLfplaVwPPmVcd3pOy0CHT55u07quHiPBKugS hbWQSZi0ZeIpmwoMtm8b3fr+BbbZ7OWTHwtgRBIqZjQwsIr75+mzX6SFGYpvyYxi nyfeMmHMY9paQGS2SCr0i1Z8oJyN1sTMMa5A1KGQ/+M9el2P5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtJKK2j2TCBJQvfNbYRf6jCplpAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYWRm MDAyYS1kMDgxLTRlNTEtODljNC1mNzEyMTI1OTUxNmQvOTY2YjJlZjQtMmY3Ni0z NDcyLTg3ZjUtYTVkNmMxZmMyYWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2FkZjAwMmEtZDA4MS00ZTUxLTg5 YzQtZjcxMjEyNTk1MTZkL2NhZGYwMDJhLWQwODEtNGU1MS04OWM0LWY3MTIxMjU5 NTE2ZC5jcmwwHwYDVR0jBBgwFoAUukhTra5FpaDtmUiUa8Bn0qNDHa0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYWRmMDAyYS1kMDgxLTRlNTEtODljNC1mNzEy MTI1OTUxNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwM4dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVbR+EHMrTIzE+tiw+e4Z2+Cdbgulqeq5zhL+Bb7keJSVEUNj9N1uF/ 28PezlkWZEvUEAljV/Tw0zQo0u6+nTaPE+SOK/vQI3KeJzER7tFS4CUrwo/1WUDs hgxBYraVzN914p4XBfiWuR2xyh8QneaNBbxG7turQKJyn+jSiYEONHwRWWZU/9uJ RM0f2NcrydPLdqn6ZXf01ZHG0W1+PSlTLAjiF3owem6UxosughfoylfMDDVwlZQA 5J8gPwYQ/aSbkNLgYeXy7RmOsdhWPvAZygCz+cMODMlHIxgfXRPPPgI3ZgNAqnFv 0sn6QtaPcCdIp9aJwcsRf1p6rKXVAqY= -----END CERTIFICATE-----Generated at Tue Sep 29 04:56:51 2026 by rpki-client