$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/192c83b2-10da-325d-a633-dbc5abcad6b9.roa File: 192c83b2-10da-325d-a633-dbc5abcad6b9.roa (raw, json) Hash identifier: uNHS2VxV/WoxVa7eVKsWNdYyQYDmIvXt8U3vEPBjsWI= Subject key identifier: 46:B6:B0:6D:22:EF:AF:DC:6F:BF:E3:8D:7D:BF:65:99:C9:F3:4B:63 Certificate issuer: /CN=8fc21c27-e8e6-433a-86da-315992f3e55a Certificate serial: 010D0C9F4328584F49893A7B65354CE9BF3FB23C Authority key identifier: 95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/192c83b2-10da-325d-a633-dbc5abcad6b9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397688 IP address blocks: 67.211.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:3a:7b:65:35:4c:e9:bf:3f:b2:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc21c27-e8e6-433a-86da-315992f3e55a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cbeaa0d7-ce71-4fc3-b58f-f00fac69d60c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:cd:b0:57:5f:84:02:19:9e:af:5c:27:bf:59: 70:74:22:ff:4c:3d:3e:f8:02:44:d8:08:ec:95:6e: 74:2c:14:77:eb:95:4c:ce:2f:39:fd:97:3d:e0:6c: f1:2a:ef:d4:c6:2a:e5:4e:af:90:8f:37:eb:dc:24: 17:d3:c1:4f:b8:24:df:40:b8:62:5c:ff:f5:89:5f: 62:f6:69:3f:f4:ee:03:c5:4a:dc:14:94:04:80:ea: 6e:bb:43:92:15:ad:36:ce:e7:08:f4:9f:db:78:76: 8c:b9:40:af:c5:74:20:99:a5:13:64:58:3f:88:00: 06:dc:be:5b:f3:78:86:28:cd:b0:b4:a5:3f:bf:03: ee:50:8f:ee:ea:fc:7d:e8:ac:c9:05:71:88:4d:fd: cd:4a:c5:b1:c8:c4:47:cf:f8:59:d3:9e:5e:31:f4: 5d:09:49:68:77:81:06:e1:67:ab:d3:20:27:77:78: 48:a0:e2:96:34:8a:24:37:b8:18:44:b6:cf:5d:08: 09:26:a8:79:6f:e4:9e:ba:04:b2:b6:e4:52:01:99: 70:65:81:73:a7:64:14:a7:e8:fd:33:f0:f5:3b:9d: a2:4c:28:88:dd:d1:ae:c8:2c:5d:4d:fd:6e:0c:44: e2:c4:19:05:25:16:6d:11:73:21:3c:a8:52:69:02: a0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B6:B0:6D:22:EF:AF:DC:6F:BF:E3:8D:7D:BF:65:99:C9:F3:4B:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/192c83b2-10da-325d-a633-dbc5abcad6b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl X509v3 Authority Key Identifier: keyid:95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer sbgp-ipAddrBlock: critical IPv4: 67.211.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:fc:bd:91:3e:37:f5:e8:64:21:89:7a:87:77:ba:b7:0c:fb: 53:ca:2b:4d:18:90:d1:fa:e5:d3:ae:d0:f9:f0:24:ab:e3:c0: 56:05:cc:05:9b:8d:d8:d0:52:a1:94:87:1a:99:67:40:6b:e7: 0f:5e:51:e1:ca:3a:ec:fd:6f:54:82:84:ab:77:34:b9:e1:f9: a4:81:89:aa:b2:2b:a7:7e:cf:ac:12:12:85:ff:bb:6d:ea:62: a8:e6:39:8c:26:c4:5b:70:35:4b:db:de:03:fe:b3:ac:8d:2c: 71:c0:cb:49:26:f3:bf:3e:e3:9b:81:07:76:10:68:99:10:9f: 8d:6d:e3:61:39:88:09:e1:67:d3:cd:86:71:cc:5a:f2:a3:21: 03:1a:ce:30:69:45:b2:dd:61:97:6e:c6:ff:01:52:ce:f6:b9: 30:fe:34:c1:75:4f:0b:4b:2a:50:42:2a:b9:25:84:dc:77:92: 5b:ee:b6:d2:b7:95:f5:14:13:62:d4:08:b1:4f:54:8d:ed:60: 25:13:eb:f3:82:07:a2:ad:01:31:69:fb:2c:56:35:be:73:3d: 61:22:bc:09:30:20:49:c5:74:c9:61:8f:ab:52:ed:22:1b:e0: 62:a3:e1:01:28:be:a0:5c:c7:53:b4:f8:fe:f4:6c:03:a7:71: 26:79:69:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiTp7ZTVM6b8/sjwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGZjMjFjMjctZThlNi00MzNhLTg2ZGEtMzE1OTkyZjNl NTVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2JlYWEwZDctY2U3MS00ZmMzLWI1OGYtZjAwZmFjNjlkNjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiM2wV1+EAhmer1wnv1lwdCL/TD0++AJE2Ajs lW50LBR365VMzi85/Zc94GzxKu/UxirlTq+Qjzfr3CQX08FPuCTfQLhiXP/1iV9i 9mk/9O4DxUrcFJQEgOpuu0OSFa02zucI9J/beHaMuUCvxXQgmaUTZFg/iAAG3L5b 83iGKM2wtKU/vwPuUI/u6vx96KzJBXGITf3NSsWxyMRHz/hZ055eMfRdCUlod4EG 4Wer0yAnd3hIoOKWNIokN7gYRLbPXQgJJqh5b+SeugSytuRSAZlwZYFzp2QUp+j9 M/D1O52iTCiI3dGuyCxdTf1uDETixBkFJRZtEXMhPKhSaQKgPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEa2sG0i76/cb7/jjX2/ZZnJ80tjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZmMy MWMyNy1lOGU2LTQzM2EtODZkYS0zMTU5OTJmM2U1NWEvMTkyYzgzYjItMTBkYS0z MjVkLWE2MzMtZGJjNWFiY2FkNmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGZjMjFjMjctZThlNi00MzNhLTg2 ZGEtMzE1OTkyZjNlNTVhLzhmYzIxYzI3LWU4ZTYtNDMzYS04NmRhLTMxNTk5MmYz ZTU1YS5jcmwwHwYDVR0jBBgwFoAUlUhx7ra/NDrkjpxLXkLjOlgb9bUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZmMyMWMyNy1lOGU2LTQzM2EtODZkYS0zMTU5 OTJmM2U1NWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9NiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAv8vZE+N/XoZCGJeod3urcM+1PKK00YkNH65dOu0PnwJKvjwFYFzAWb jdjQUqGUhxqZZ0Br5w9eUeHKOuz9b1SChKt3NLnh+aSBiaqyK6d+z6wSEoX/u23q YqjmOYwmxFtwNUvb3gP+s6yNLHHAy0km878+45uBB3YQaJkQn41t42E5iAnhZ9PN hnHMWvKjIQMazjBpRbLdYZduxv8BUs72uTD+NMF1TwtLKlBCKrklhNx3klvuttK3 lfUUE2LUCLFPVI3tYCUT6/OCB6KtATFp+yxWNb5zPWEivAkwIEnFdMlhj6tS7SIb 4GKj4QEovqBcx1O0+P70bAOncSZ5af4= -----END CERTIFICATE-----Generated at Sun Sep 27 17:18:20 2026 by rpki-client