$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/abe939e6-015c-3bda-92fa-f8264ac59be6.roa File: abe939e6-015c-3bda-92fa-f8264ac59be6.roa (raw, json) Hash identifier: O00YOakFiQxgdW1ZQoiKhuthdpc3Eh/WlRWcAX8yaSI= Subject key identifier: 66:0A:32:1F:7A:35:9F:F6:7A:25:BA:6A:ED:B6:F0:CC:F0:77:5B:B0 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584F497750CF9898FDBAE1E51A80 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/abe939e6-015c-3bda-92fa-f8264ac59be6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 213122 IP address blocks: 128.254.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:50:cf:98:98:fd:ba:e1:e5:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=19b4e655-bb1f-4aef-a7e4-af790c768e61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a6:24:4c:b6:04:d2:5d:d9:ab:82:1a:4b:aa: e8:ac:04:41:0d:77:32:4a:ee:21:87:53:d7:1a:22: e2:03:7a:03:ee:76:62:91:b9:3e:54:3f:78:6d:c1: 36:b8:41:f9:a9:fa:e1:9d:85:fb:f0:92:14:08:0c: 3d:bd:c5:6e:61:48:ce:f9:3a:7d:b7:2f:80:4d:64: 36:bb:13:9a:10:56:72:2b:b0:f0:93:6a:e3:0d:8f: aa:5c:c6:11:94:b1:cb:de:89:75:40:d9:ba:08:8e: b0:81:57:1c:51:98:45:d4:d8:88:f9:b0:3c:20:e4: e0:58:f4:94:f8:4e:3b:0d:96:aa:c9:74:37:be:4f: 12:24:91:5b:7b:11:e7:7e:ba:43:cb:03:99:0f:61: 3b:32:40:53:67:7c:5c:d8:11:cd:b1:f4:56:f1:50: 3f:f3:45:70:77:06:2d:cc:c8:6a:a3:50:be:5c:09: d8:45:17:37:ef:01:8a:3a:4c:31:80:e9:4d:08:52: fb:c6:d5:fe:a2:c7:f3:4f:f9:3a:5b:b5:93:64:8c: af:10:bb:bb:2b:06:a5:cb:30:0d:d8:7f:cb:b8:ad: 11:d2:78:1f:fe:f7:91:57:3c:b1:91:5d:e6:e1:06: da:f3:d9:74:06:e7:53:53:50:18:3d:f1:90:88:17: aa:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:0A:32:1F:7A:35:9F:F6:7A:25:BA:6A:ED:B6:F0:CC:F0:77:5B:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/abe939e6-015c-3bda-92fa-f8264ac59be6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 128.254.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:55:f9:7c:eb:7e:24:ec:bf:d7:bb:66:96:c2:9d:f1:3b:3e: 3f:b2:fd:b3:c9:73:bd:90:b4:0d:7c:68:22:70:50:35:52:0a: 65:80:27:e3:c1:82:a6:6e:0e:d7:db:5a:06:19:12:48:cd:da: 49:da:b1:89:47:e9:7b:c0:0c:d9:da:c7:89:b6:5f:2e:26:8f: 8f:86:73:48:28:bc:53:fb:b8:6d:ac:8d:6a:56:c5:c6:46:d3: 7d:8f:2f:33:a0:c1:cb:51:92:76:26:1b:15:c4:48:cd:53:e3: 35:fe:1a:fe:ed:10:64:df:71:cf:e4:ce:8c:9f:5e:f4:b1:7c: 0d:50:7c:58:03:91:94:9e:c7:93:8f:ca:a2:93:d6:bb:68:ea: 18:ab:b3:9d:5c:64:ac:20:7b:4e:95:3b:dd:72:7e:02:f2:76: 58:a3:ec:2e:5f:71:b6:27:c3:88:44:05:07:c1:e1:ff:65:ed: 76:93:bb:c7:18:4d:23:68:c3:48:46:5b:19:30:5c:67:fc:c2: 7c:9e:2c:6c:b9:d1:a0:15:0d:0a:2e:f8:20:b1:40:87:45:1f: 32:09:91:6f:40:cd:2c:ea:18:10:63:a6:32:5a:ee:92:16:19: df:d2:f9:78:0a:af:b5:3a:de:fd:c1:7d:1b:e3:46:48:6d:43: bf:09:28:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd1DPmJj9uuHlGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTliNGU2NTUtYmIxZi00YWVmLWE3ZTQtYWY3OTBjNzY4ZTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqYkTLYE0l3Zq4IaS6rorARBDXcySu4hh1PX GiLiA3oD7nZikbk+VD94bcE2uEH5qfrhnYX78JIUCAw9vcVuYUjO+Tp9ty+ATWQ2 uxOaEFZyK7Dwk2rjDY+qXMYRlLHL3ol1QNm6CI6wgVccUZhF1NiI+bA8IOTgWPSU +E47DZaqyXQ3vk8SJJFbexHnfrpDywOZD2E7MkBTZ3xc2BHNsfRW8VA/80VwdwYt zMhqo1C+XAnYRRc37wGKOkwxgOlNCFL7xtX+osfzT/k6W7WTZIyvELu7KwalyzAN 2H/LuK0R0ngf/veRVzyxkV3m4Qba89l0BudTU1AYPfGQiBeqjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYKMh96NZ/2eiW6au228Mzwd1uwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvYWJlOTM5ZTYtMDE1Yy0z YmRhLTkyZmEtZjgyNjRhYzU5YmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtV+XzrfiTsv9e7ZpbCnfE7Pj+y/bPJc72QtA18aCJwUDVSCmWAJ+PB gqZuDtfbWgYZEkjN2knasYlH6XvADNnax4m2Xy4mj4+Gc0govFP7uG2sjWpWxcZG 032PLzOgwctRknYmGxXESM1T4zX+Gv7tEGTfcc/kzoyfXvSxfA1QfFgDkZSex5OP yqKT1rto6hirs51cZKwge06VO91yfgLydlij7C5fcbYnw4hEBQfB4f9l7XaTu8cY TSNow0hGWxkwXGf8wnyeLGy50aAVDQou+CCxQIdFHzIJkW9AzSzqGBBjpjJa7pIW Gd/S+XgKr7U63v3BfRvjRkhtQ78JKJI= -----END CERTIFICATE-----Generated at Sun Oct 11 09:33:39 2026 by rpki-client