$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f/09db9410-487a-3ff2-82a5-40162a38c491.roa File: 09db9410-487a-3ff2-82a5-40162a38c491.roa (raw, json) Hash identifier: xE/9DQnbKadLDeYgHf9Ihz9Jule6pPZF7Y0wFDRlWOU= Subject key identifier: B9:A9:66:4A:92:1B:A7:31:FC:D3:05:2E:86:DE:CA:1F:B6:E8:FE:1B Certificate issuer: /CN=c3ad4f2f-87c3-436e-b0e5-3532e2109f9f Certificate serial: 010D0C9F4328584F35E7C1F4D3C0AEEECDF68E30 Authority key identifier: 72:BF:7F:A2:49:19:D0:1A:D3:D7:C6:27:B5:D1:B9:FD:CF:DA:D3:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f/09db9410-487a-3ff2-82a5-40162a38c491.roa Signing time: Fri 18 Sep 2026 01:00:12 +0000 ROA not before: Fri 18 Sep 2026 01:00:12 +0000 ROA not after: Thu 17 Dec 2026 02:00:12 +0000 asID: 36224 IP address blocks: 192.8.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:35:e7:c1:f4:d3:c0:ae:ee:cd:f6:8e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3ad4f2f-87c3-436e-b0e5-3532e2109f9f Validity Not Before: Sep 18 01:00:12 2026 GMT Not After : Dec 17 02:00:12 2026 GMT Subject: CN=29941cb6-320f-4fb9-b547-b100bef205d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5e:c5:df:e5:a5:f5:fc:24:3c:aa:dc:5b:c1: 02:25:a5:a2:96:3f:90:4e:a9:15:37:fd:f8:ad:34: b6:4a:63:bf:9f:d2:d2:bd:22:23:38:64:e2:1a:33: c7:0b:99:ee:03:c4:74:cc:85:55:c0:f7:5b:ef:6e: ca:98:ff:12:39:c6:b9:6b:c4:09:b9:db:1b:a9:e9: 7c:1d:cd:10:16:92:15:e3:8e:cd:2a:e7:df:0f:a5: aa:d7:05:95:4e:76:5f:b9:74:ce:3c:ff:d2:00:33: 83:f5:9a:22:71:d1:48:6a:b5:cf:c8:73:fe:2c:bc: bb:54:5a:a3:b8:90:ef:d9:b5:96:a9:cd:63:2e:01: 6e:b1:86:34:4a:a5:c3:82:e3:8c:d3:b8:0e:7f:e8: 5a:b6:0f:ee:c1:39:ce:83:57:a7:56:28:4e:f1:04: 2b:64:80:27:f4:97:0d:cf:77:5c:1e:21:8f:e1:29: dc:48:5b:87:5c:ae:81:c2:eb:d9:2c:87:79:9d:c3: c2:83:88:e1:4a:48:80:68:17:3d:3c:20:d7:10:be: 33:53:74:e4:64:bf:f4:e9:62:e3:4f:9a:30:53:b5: 49:4c:16:df:36:7c:04:0f:23:e1:9f:4b:e8:73:3f: 35:27:b4:d0:f9:d0:49:4a:ca:c2:99:17:6c:83:2a: 66:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A9:66:4A:92:1B:A7:31:FC:D3:05:2E:86:DE:CA:1F:B6:E8:FE:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f/09db9410-487a-3ff2-82a5-40162a38c491.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f.crl X509v3 Authority Key Identifier: keyid:72:BF:7F:A2:49:19:D0:1A:D3:D7:C6:27:B5:D1:B9:FD:CF:DA:D3:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f.cer sbgp-ipAddrBlock: critical IPv4: 192.8.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:15:5e:0b:02:18:a0:1c:63:8f:e4:04:17:a4:31:8f:9e:1e: ba:73:e0:dc:36:bd:c8:ba:5e:e9:46:ef:20:8b:79:64:a3:58: ac:f3:8d:f3:0f:26:99:ac:79:19:dc:69:e1:83:2e:72:c0:7b: a0:a5:49:00:b1:c7:e3:ec:86:1d:5e:ff:da:18:0e:01:8b:6b: c8:4f:11:3b:8e:eb:d7:31:e7:61:06:4e:6d:bb:16:aa:e3:5f: 06:ce:dd:00:b6:87:4f:7a:41:9d:75:e5:26:32:cc:c1:41:6e: 0e:f4:d2:a4:8e:54:5e:06:2f:3b:40:a5:20:79:9d:d7:d5:c8: 78:74:3c:d2:df:e1:a9:a8:02:6e:e9:b1:7b:ea:4a:f1:c0:fd: f7:c5:f0:c0:c0:ce:a6:22:82:74:00:d5:3d:10:17:14:9a:04: 2f:b2:fa:e0:93:eb:40:b9:b1:10:58:20:0e:63:27:db:ca:53: 1f:26:8e:a9:91:2e:26:14:70:36:26:91:08:9f:a7:f9:18:4b: 2f:f6:22:1d:94:8b:26:39:1f:b1:3f:00:14:dc:ce:a6:3e:10: 9a:e8:fc:0f:83:46:f0:55:dc:ef:8a:cb:15:88:b8:0e:58:10: 73:f2:4c:bf:47:1c:31:a7:70:c4:96:cf:63:4c:e6:ad:4a:81: 25:fe:89:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8158H008Cu7s32jjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNhZDRmMmYtODdjMy00MzZlLWIwZTUtMzUzMmUyMTA5 ZjlmMB4XDTI2MDkxODAxMDAxMloXDTI2MTIxNzAyMDAxMlowLzEtMCsGA1UEAxMk Mjk5NDFjYjYtMzIwZi00ZmI5LWI1NDctYjEwMGJlZjIwNWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi17F3+Wl9fwkPKrcW8ECJaWilj+QTqkVN/34 rTS2SmO/n9LSvSIjOGTiGjPHC5nuA8R0zIVVwPdb727KmP8SOca5a8QJudsbqel8 Hc0QFpIV447NKuffD6Wq1wWVTnZfuXTOPP/SADOD9ZoicdFIarXPyHP+LLy7VFqj uJDv2bWWqc1jLgFusYY0SqXDguOM07gOf+hatg/uwTnOg1enVihO8QQrZIAn9JcN z3dcHiGP4SncSFuHXK6BwuvZLId5ncPCg4jhSkiAaBc9PCDXEL4zU3TkZL/06WLj T5owU7VJTBbfNnwEDyPhn0vocz81J7TQ+dBJSsrCmRdsgypmnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmpZkqSG6cx/NMFLobeyh+26P4bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2Fk NGYyZi04N2MzLTQzNmUtYjBlNS0zNTMyZTIxMDlmOWYvMDlkYjk0MTAtNDg3YS0z ZmYyLTgyYTUtNDAxNjJhMzhjNDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNhZDRmMmYtODdjMy00MzZlLWIw ZTUtMzUzMmUyMTA5ZjlmL2MzYWQ0ZjJmLTg3YzMtNDM2ZS1iMGU1LTM1MzJlMjEw OWY5Zi5jcmwwHwYDVR0jBBgwFoAUcr9/okkZ0BrT18YntdG5/c/a05kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2FkNGYyZi04N2MzLTQzNmUtYjBlNS0zNTMy ZTIxMDlmOWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAh5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8VXgsCGKAcY4/kBBekMY+eHrpz4Nw2vci6XulG7yCLeWSjWKzzjfMP JpmseRncaeGDLnLAe6ClSQCxx+Pshh1e/9oYDgGLa8hPETuO69cx52EGTm27Fqrj XwbO3QC2h096QZ115SYyzMFBbg700qSOVF4GLztApSB5ndfVyHh0PNLf4amoAm7p sXvqSvHA/ffF8MDAzqYignQA1T0QFxSaBC+y+uCT60C5sRBYIA5jJ9vKUx8mjqmR LiYUcDYmkQifp/kYSy/2Ih2UiyY5H7E/ABTczqY+EJro/A+DRvBV3O+KyxWIuA5Y EHPyTL9HHDGncMSWz2NM5q1KgSX+iWg= -----END CERTIFICATE-----Generated at Sat Sep 26 06:25:23 2026 by rpki-client