$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/68c427e0-a575-3b64-98f5-5f2c2b108936.roa File: 68c427e0-a575-3b64-98f5-5f2c2b108936.roa (raw, json) Hash identifier: SyY/k1cjklOn41RLPBUT19HzxCyO31Z3Qb9nkvXtvA8= Subject key identifier: E6:14:6B:10:0B:64:A4:B6:4C:61:18:C6:A9:1B:25:34:3C:99:67:CA Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584F49774D2C3FBDB295D752D500 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/68c427e0-a575-3b64-98f5-5f2c2b108936.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 931 IP address blocks: 128.254.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:4d:2c:3f:bd:b2:95:d7:52:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b11e4277-eaf1-44bc-83cf-e3f3db0a8175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8c:34:dd:86:e8:ca:a9:be:a4:c8:55:b3:81: af:e9:8a:37:f0:70:e0:38:b1:b5:0a:cb:23:55:14: e1:9a:b1:8b:e2:18:a0:1f:24:45:70:f7:3f:23:07: 49:e7:40:50:0b:5b:a7:3b:db:f0:64:8a:31:a5:5a: e6:9c:15:e4:45:3c:8a:aa:fb:f6:6d:ee:61:56:84: f8:57:aa:21:1e:5e:02:60:59:a3:08:a3:6d:e0:a7: e5:95:4e:cb:de:fd:10:4f:9a:76:d7:0a:21:3d:fc: 35:01:46:23:dc:4a:5e:09:49:dd:66:ef:d0:eb:8e: d2:d9:d3:01:75:69:11:19:16:ba:29:b7:b5:ca:e7: 98:4f:d9:9a:4f:75:05:fb:43:ea:b9:00:e4:5e:f3: 1c:ff:55:28:0e:90:78:16:22:50:e5:fa:59:2b:42: a3:01:86:5a:c0:56:fa:0d:94:5b:6d:cd:ba:7a:53: 22:60:0a:4d:e9:4e:80:64:12:d5:85:fa:fd:8b:6d: 21:95:5e:d6:85:0c:33:21:65:15:34:85:d9:9d:d9: 4d:59:38:27:bd:c8:c6:d2:6f:c4:c6:1f:32:3d:ac: b7:21:47:ff:4f:09:f9:e4:38:6f:d6:a7:b6:4f:53: a0:11:9e:43:e9:18:33:42:31:36:d7:22:f6:97:18: 02:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:14:6B:10:0B:64:A4:B6:4C:61:18:C6:A9:1B:25:34:3C:99:67:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/68c427e0-a575-3b64-98f5-5f2c2b108936.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 128.254.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:6d:73:03:09:7a:15:a9:10:4c:e5:cb:48:7e:4e:72:08:1d: 57:3b:38:56:da:8a:3a:be:0e:66:36:a2:f5:19:1d:dd:95:75: 4b:14:0c:a2:e8:82:ba:dd:9c:d3:27:0e:54:7f:e4:91:1c:e6: 1a:41:d9:60:0f:a2:69:53:1c:d1:50:09:e8:6c:1d:12:6f:17: c4:16:ae:ef:d4:93:bd:da:6d:a2:75:52:6e:79:0d:fb:d5:1d: a0:76:d7:31:5a:be:b8:28:9d:6c:4c:e5:7c:fc:30:8c:ae:c6: 7b:cd:7e:a4:9a:77:08:0c:c2:7e:f1:54:7e:c0:94:e9:d9:98: 47:1b:03:9c:1e:55:00:88:d0:1a:e3:bd:18:38:65:8b:33:db: 46:5b:af:f8:e5:1b:14:5d:14:b3:60:3b:21:b8:72:8c:a2:61: cb:96:0b:16:c4:55:cb:29:b9:88:33:f7:b2:09:26:9a:da:93: 68:3e:95:c6:f5:3e:59:06:71:76:74:0b:0d:15:ce:f0:4c:2e: d0:5f:57:0c:60:ce:8e:83:5c:3b:f5:29:6d:a0:88:87:8f:38: 6b:03:57:f8:ad:70:f8:d1:03:d1:75:4e:3b:f2:36:18:8b:9f: ce:ac:96:19:78:14:fa:15:41:97:3a:70:d7:00:b5:0c:83:87: 61:06:8b:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd00sP72ylddS1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjExZTQyNzctZWFmMS00NGJjLTgzY2YtZTNmM2RiMGE4MTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYw03Yboyqm+pMhVs4Gv6Yo38HDgOLG1Cssj VRThmrGL4higHyRFcPc/IwdJ50BQC1unO9vwZIoxpVrmnBXkRTyKqvv2be5hVoT4 V6ohHl4CYFmjCKNt4KfllU7L3v0QT5p21wohPfw1AUYj3EpeCUndZu/Q647S2dMB dWkRGRa6Kbe1yueYT9maT3UF+0PquQDkXvMc/1UoDpB4FiJQ5fpZK0KjAYZawFb6 DZRbbc26elMiYApN6U6AZBLVhfr9i20hlV7WhQwzIWUVNIXZndlNWTgnvcjG0m/E xh8yPay3IUf/Twn55Dhv1qe2T1OgEZ5D6RgzQjE21yL2lxgCZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOYUaxALZKS2TGEYxqkbJTQ8mWfKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNjhjNDI3ZTAtYTU3NS0z YjY0LTk4ZjUtNWYyYzJiMTA4OTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExtcwMJehWpEEzly0h+TnIIHVc7OFbaijq+DmY2ovUZHd2VdUsUDKLo grrdnNMnDlR/5JEc5hpB2WAPomlTHNFQCehsHRJvF8QWru/Uk73abaJ1Um55DfvV HaB21zFavrgonWxM5Xz8MIyuxnvNfqSadwgMwn7xVH7AlOnZmEcbA5weVQCI0Brj vRg4ZYsz20Zbr/jlGxRdFLNgOyG4coyiYcuWCxbEVcspuYgz97IJJprak2g+lcb1 PlkGcXZ0Cw0VzvBMLtBfVwxgzo6DXDv1KW2giIePOGsDV/itcPjRA9F1TjvyNhiL n86slhl4FPoVQZc6cNcAtQyDh2EGi6Q= -----END CERTIFICATE-----Generated at Thu Oct 1 13:32:58 2026 by rpki-client