$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/50638985-01ed-37b5-8f1a-7c3230a86a9d.roa File: 50638985-01ed-37b5-8f1a-7c3230a86a9d.roa (raw, json) Hash identifier: HdM2xVLW1gEGHkchoZBCPOfYHEtD0bP2DClrJQ0ZwA0= Subject key identifier: E8:92:A2:1F:64:5C:DF:74:29:90:2A:70:89:A9:C0:D7:0F:76:96:ED Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584F497750B95DDF6A18FC190600 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/50638985-01ed-37b5-8f1a-7c3230a86a9d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 213122 IP address blocks: 128.254.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:50:b9:5d:df:6a:18:fc:19:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c1a6ac9c-182e-4af6-85a6-32af4d10e290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:36:9b:8b:63:ca:ba:8f:83:a4:f1:52:2f:28: f6:59:29:ab:db:26:dd:06:78:b8:47:88:51:16:71: 4b:74:ae:76:33:b3:b3:97:a6:d7:94:f5:02:61:12: 61:9f:ab:cd:00:f9:8f:b2:b6:46:5c:2e:a7:fa:a0: 8a:6f:f5:b8:39:51:10:b0:63:fd:0e:d8:58:ad:73: 1f:a0:1c:a0:32:fd:3f:aa:5f:9a:5f:22:aa:b3:00: 31:96:b2:89:97:40:44:da:03:92:2a:c5:4f:5c:dd: 4b:fd:6f:60:a1:0a:07:f4:65:2a:8e:b4:32:54:96: d5:50:b1:8a:bd:07:07:51:85:6f:c1:26:c3:16:0a: b5:b5:33:3f:00:b7:ab:47:8d:21:ab:b7:e1:78:b4: 24:27:b5:a1:6a:38:cd:5d:03:51:e1:4f:4e:8a:a0: d4:cd:63:35:98:d2:70:e8:31:aa:99:e7:b4:a1:83: 5f:f7:96:d4:94:2b:ba:13:06:4a:df:57:cb:1d:57: fe:30:e3:be:bd:6e:0f:75:b2:c4:5d:c6:35:d2:89: ff:61:7c:c9:d6:92:e4:cf:ef:71:27:10:7d:7d:01: 5e:7f:ca:98:ed:69:c0:f0:2e:ab:f1:93:60:0c:cf: 7e:6f:ca:fd:ae:35:90:25:71:58:71:51:1e:2d:d0: 77:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:92:A2:1F:64:5C:DF:74:29:90:2A:70:89:A9:C0:D7:0F:76:96:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/50638985-01ed-37b5-8f1a-7c3230a86a9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 128.254.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:bd:4d:1a:2d:32:8f:32:93:ce:0c:6a:f8:9f:df:89:96:61: 6d:08:30:bd:11:6b:3f:00:3a:47:a4:f1:a6:04:a8:97:a4:85: 28:eb:b9:da:ee:87:e0:b2:0d:47:63:b4:37:c9:d8:8e:15:5a: 16:2c:c6:9e:3c:ea:e2:ad:24:63:96:3d:06:a9:b8:4b:2e:12: ec:7a:77:20:27:bc:c8:8c:6f:49:2e:5b:4b:cb:9e:e4:38:e1: c0:44:34:31:36:a0:4f:f8:e9:3e:1c:a9:5e:96:02:cb:95:ac: de:be:ed:ed:24:74:72:5d:42:36:cd:d2:a1:2e:1a:13:10:ce: cb:34:4f:08:01:1f:fc:be:83:6e:23:2b:cb:57:b3:b7:a6:e5: bc:58:5e:ba:1b:cd:88:a3:fe:09:6f:1d:2a:df:c3:4a:a5:c5: 1a:15:3d:ea:9f:b4:46:a3:95:75:d7:b0:b1:f7:77:3c:06:bc: 23:ff:83:85:0f:8b:44:d6:41:47:92:f1:2c:d8:a9:0e:7f:31: 8d:c7:03:64:98:dd:19:ea:a1:8d:d4:ca:5d:05:c3:c1:11:41: 4d:10:c4:2b:eb:c5:7c:5a:c3:83:eb:e5:a3:a6:41:72:7e:65: b6:e7:02:80:b5:35:6c:4b:f4:7e:ae:42:1c:c0:60:25:48:51: 9a:93:e2:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd1C5Xd9qGPwZBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzFhNmFjOWMtMTgyZS00YWY2LTg1YTYtMzJhZjRkMTBlMjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljabi2PKuo+DpPFSLyj2WSmr2ybdBni4R4hR FnFLdK52M7Ozl6bXlPUCYRJhn6vNAPmPsrZGXC6n+qCKb/W4OVEQsGP9DthYrXMf oBygMv0/ql+aXyKqswAxlrKJl0BE2gOSKsVPXN1L/W9goQoH9GUqjrQyVJbVULGK vQcHUYVvwSbDFgq1tTM/ALerR40hq7fheLQkJ7WhajjNXQNR4U9OiqDUzWM1mNJw 6DGqmee0oYNf95bUlCu6EwZK31fLHVf+MOO+vW4PdbLEXcY10on/YXzJ1pLkz+9x JxB9fQFef8qY7WnA8C6r8ZNgDM9+b8r9rjWQJXFYcVEeLdB3nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiSoh9kXN90KZAqcImpwNcPdpbtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNTA2Mzg5ODUtMDFlZC0z N2I1LThmMWEtN2MzMjMwYTg2YTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFq9TRotMo8yk84Mavif34mWYW0IML0Raz8AOkek8aYEqJekhSjrudru h+CyDUdjtDfJ2I4VWhYsxp486uKtJGOWPQapuEsuEux6dyAnvMiMb0kuW0vLnuQ4 4cBENDE2oE/46T4cqV6WAsuVrN6+7e0kdHJdQjbN0qEuGhMQzss0TwgBH/y+g24j K8tXs7em5bxYXrobzYij/glvHSrfw0qlxRoVPeqftEajlXXXsLH3dzwGvCP/g4UP i0TWQUeS8SzYqQ5/MY3HA2SY3RnqoY3Uyl0Fw8ERQU0QxCvrxXxaw4Pr5aOmQXJ+ ZbbnAoC1NWxL9H6uQhzAYCVIUZqT4kg= -----END CERTIFICATE-----Generated at Sun Sep 27 12:42:32 2026 by rpki-client