$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/9d8b4a39-d907-3704-bc98-36248d887277.roa File: 9d8b4a39-d907-3704-bc98-36248d887277.roa (raw, json) Hash identifier: h4RcGjfAqNEOBUvhbv1STSNvQJPt7PKp0EiXLWpyxnk= Subject key identifier: E3:B0:89:48:21:44:99:EA:2B:24:CF:80:CA:BC:9C:25:BA:2D:5A:9B Certificate issuer: /CN=868a77c4-49cd-4821-b1f2-58d35028b0ed Certificate serial: 010D0C9F4328584F4972EE378AE765E193999FC0 Authority key identifier: A2:19:F0:EB:7A:5F:24:BB:20:59:03:C8:AB:8E:28:00:C8:56:AC:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/9d8b4a39-d907-3704-bc98-36248d887277.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 46970 IP address blocks: 192.189.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:ee:37:8a:e7:65:e1:93:99:9f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=868a77c4-49cd-4821-b1f2-58d35028b0ed Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8beb0b0a-bb42-4e8d-bfc0-1eb2cf0da2a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:47:f2:0e:88:84:12:72:91:cd:2f:b4:fa:ed: bd:ed:e1:54:53:75:73:26:76:e4:70:68:cf:9f:00: 3c:03:4a:3b:e7:8b:2c:90:f3:30:c7:07:2f:3b:b8: 88:a6:a9:58:84:45:2a:89:2c:43:93:75:3e:38:ca: d0:14:6e:ce:5c:57:eb:a2:76:2e:cb:46:06:a7:66: 06:20:8e:e2:95:5a:61:c1:79:95:5a:c2:be:94:f8: 58:07:7a:c4:7e:2f:9e:a7:8f:0d:5e:d0:d3:2f:0b: f7:23:8f:3d:9e:25:11:52:90:f4:02:62:6a:ae:76: 92:a3:32:d1:ab:63:ae:48:f3:6d:07:19:2e:19:ef: cf:bf:f6:7a:95:95:12:83:2b:41:a6:00:ea:1c:86: d1:83:29:55:8a:63:fe:92:d2:1d:73:a0:0c:7c:78: 65:8d:58:4d:0a:44:b5:c9:92:bf:08:95:0b:f9:97: 3f:92:54:78:50:ae:98:4d:5d:eb:e7:61:11:19:e1: 7e:cd:51:5a:73:b6:0e:0b:f8:af:99:fa:8d:78:76: 75:8d:50:e6:7c:4a:56:f6:f3:e0:0d:42:e6:ee:98: 07:2a:e2:9a:f2:a4:5a:a1:bd:47:78:32:d5:5d:19: 29:31:d7:61:da:19:f4:9a:6b:05:13:bd:f1:7a:da: 59:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B0:89:48:21:44:99:EA:2B:24:CF:80:CA:BC:9C:25:BA:2D:5A:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/9d8b4a39-d907-3704-bc98-36248d887277.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.crl X509v3 Authority Key Identifier: keyid:A2:19:F0:EB:7A:5F:24:BB:20:59:03:C8:AB:8E:28:00:C8:56:AC:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed.cer sbgp-ipAddrBlock: critical IPv4: 192.189.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:a4:38:4d:8a:f4:b5:03:fd:9c:95:f5:04:46:db:80:0b:45: 66:20:e6:08:a3:91:43:87:c8:97:19:c8:1d:05:5f:36:43:1d: fc:36:c2:3b:84:5d:8a:fd:ad:d3:fd:8c:e4:23:fd:65:d9:2b: bc:a3:c7:f9:ad:92:d8:45:13:71:e9:cb:3b:fe:4f:10:3e:6e: 57:90:19:33:13:b2:ed:3e:65:40:e3:0e:95:c4:e6:a8:aa:2e: 9b:db:ea:15:a0:1b:b0:27:d8:bd:5d:82:c8:d0:45:95:b3:75: 2b:52:cf:af:31:a8:79:dc:1e:2a:9d:e5:13:66:60:d6:82:20: cb:69:07:6f:65:a0:e5:23:f0:d9:c3:c7:de:1c:89:b4:24:af: e7:51:e6:c8:95:ba:b7:8c:2a:13:09:06:f0:10:9b:e3:df:97: 2d:bf:33:a6:d1:61:5e:d1:ed:8b:d9:98:e2:9d:a5:ce:bb:80: 68:5d:ff:d9:a1:77:f5:f6:4b:ec:42:9a:5c:af:62:49:af:e8: b0:85:e6:ee:4a:68:ab:b2:c2:d8:72:5a:95:04:9e:97:e6:97: 81:fc:32:40:c6:84:df:32:a0:dd:76:1b:f4:e5:9b:49:15:1e: b6:4e:01:d4:c3:73:fb:3c:6a:7b:23:9f:c9:95:91:03:f0:47: 78:7d:61:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcu43iudl4ZOZn8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODY4YTc3YzQtNDljZC00ODIxLWIxZjItNThkMzUwMjhi MGVkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGJlYjBiMGEtYmI0Mi00ZThkLWJmYzAtMWViMmNmMGRhMmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUfyDoiEEnKRzS+0+u297eFUU3VzJnbkcGjP nwA8A0o754sskPMwxwcvO7iIpqlYhEUqiSxDk3U+OMrQFG7OXFfronYuy0YGp2YG II7ilVphwXmVWsK+lPhYB3rEfi+ep48NXtDTLwv3I489niURUpD0AmJqrnaSozLR q2OuSPNtBxkuGe/Pv/Z6lZUSgytBpgDqHIbRgylVimP+ktIdc6AMfHhljVhNCkS1 yZK/CJUL+Zc/klR4UK6YTV3r52ERGeF+zVFac7YOC/ivmfqNeHZ1jVDmfEpW9vPg DULm7pgHKuKa8qRaob1HeDLVXRkpMddh2hn0mmsFE73xetpZEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOwiUghRJnqKyTPgMq8nCW6LVqbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84Njhh NzdjNC00OWNkLTQ4MjEtYjFmMi01OGQzNTAyOGIwZWQvOWQ4YjRhMzktZDkwNy0z NzA0LWJjOTgtMzYyNDhkODg3Mjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODY4YTc3YzQtNDljZC00ODIxLWIx ZjItNThkMzUwMjhiMGVkLzg2OGE3N2M0LTQ5Y2QtNDgyMS1iMWYyLTU4ZDM1MDI4 YjBlZC5jcmwwHwYDVR0jBBgwFoAUohnw63pfJLsgWQPIq44oAMhWrAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NjhhNzdjNC00OWNkLTQ4MjEtYjFmMi01OGQz NTAyOGIwZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADikOE2K9LUD/ZyV9QRG24ALRWYg5gijkUOHyJcZyB0FXzZDHfw2wjuE XYr9rdP9jOQj/WXZK7yjx/mtkthFE3Hpyzv+TxA+bleQGTMTsu0+ZUDjDpXE5qiq Lpvb6hWgG7An2L1dgsjQRZWzdStSz68xqHncHiqd5RNmYNaCIMtpB29loOUj8NnD x94cibQkr+dR5siVureMKhMJBvAQm+Pfly2/M6bRYV7R7YvZmOKdpc67gGhd/9mh d/X2S+xCmlyvYkmv6LCF5u5KaKuywthyWpUEnpfml4H8MkDGhN8yoN12G/Tlm0kV HrZOAdTDc/s8ansjn8mVkQPwR3h9YQ4= -----END CERTIFICATE-----Generated at Mon Sep 28 10:04:50 2026 by rpki-client