$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/422fecca-e0c7-3b3a-ba72-c9ab09496e13.roa File: 422fecca-e0c7-3b3a-ba72-c9ab09496e13.roa (raw, json) Hash identifier: lbSyrhGgMW6kbZZbe0xcSBm69pbEMWzTmcz0uVFP+xQ= Subject key identifier: 78:56:55:19:29:6B:D8:DF:BE:5E:21:16:75:F7:8B:62:A3:5A:DB:D3 Certificate issuer: /CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1 Certificate serial: 010D0C9F4328584F90A309589894822090024880 Authority key identifier: 5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/422fecca-e0c7-3b3a-ba72-c9ab09496e13.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 198949 IP address blocks: 192.5.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:09:58:98:94:82:20:90:02:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=c31611ad-0cd1-45fc-9616-ace981f359b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:70:02:66:c7:70:b0:43:5e:60:cc:e0:f9:e6: a7:52:00:bd:1d:1a:cd:ad:62:e9:92:43:f1:77:17: af:e3:90:5e:1c:1a:2f:ad:3b:1e:10:4f:42:06:bd: 51:b9:ad:fd:c5:d6:e4:3f:3b:94:0f:5b:29:54:b5: 27:8e:29:ea:94:86:7d:01:06:09:f9:9b:3b:0b:12: b6:d0:12:64:15:89:45:7a:16:69:55:7b:54:88:a0: 9a:57:28:52:dd:56:33:06:99:eb:28:d1:52:58:d1: f6:16:63:19:42:02:c7:cb:81:d5:83:82:4d:a6:98: e4:c2:09:38:0b:59:33:e7:89:3c:21:0f:5b:bd:11: ea:8a:43:9e:97:13:15:d5:7f:ae:69:7a:68:ee:fa: 37:20:f7:e0:80:ff:86:96:eb:16:07:63:b5:92:2d: e1:53:11:48:d2:9f:07:30:e7:21:d1:37:3c:a8:40: 11:b2:0a:79:d6:85:a5:f7:19:43:4d:01:99:bf:4f: 45:9c:5b:1b:4d:3a:7a:f3:11:0c:43:a6:c4:96:a6: 0a:3e:b1:26:7c:20:f3:1d:a1:8b:af:87:94:03:f7: bd:64:c8:2d:c4:af:a2:be:e1:b5:7d:dc:38:b2:f0: c2:b8:2f:1f:80:13:ba:17:fc:a5:b3:96:73:55:36: 75:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:56:55:19:29:6B:D8:DF:BE:5E:21:16:75:F7:8B:62:A3:5A:DB:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/422fecca-e0c7-3b3a-ba72-c9ab09496e13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl X509v3 Authority Key Identifier: keyid:5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer sbgp-ipAddrBlock: critical IPv4: 192.5.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:bc:24:d8:02:be:a1:bb:75:2f:10:64:30:63:53:18:df:f3: c6:79:61:2b:2f:d9:cc:18:5a:42:ee:03:0c:28:e2:7f:61:45: 1e:6c:53:df:b5:b1:19:8d:09:76:5b:15:c7:bb:5e:d3:16:47: 9b:2d:93:17:dd:16:0c:e8:9c:6c:f3:eb:ab:dd:1b:25:65:dc: 4f:99:db:53:4b:6f:af:4c:82:4c:fa:fb:b5:21:6b:e9:60:ed: e5:78:40:37:7e:55:96:c7:69:18:bb:5f:ef:41:90:89:52:eb: b0:d4:10:f7:b8:bb:58:9d:8c:7b:c8:01:8c:ea:e9:84:e5:0a: d9:0d:c1:4d:cd:db:f3:de:a9:f2:35:57:aa:84:62:93:2a:36: 31:f8:db:6d:a3:5a:90:1b:fd:50:4f:82:8c:24:64:1e:00:d4: 4d:d8:f7:39:76:98:92:bb:d1:4d:70:ab:91:8b:b3:ef:a9:74: 16:23:4d:63:1c:80:fa:7c:55:12:69:b6:20:0b:01:19:77:9a: 6d:41:bb:93:56:35:93:b6:51:1b:78:cd:28:ac:e2:fe:c2:68: 41:b9:35:8c:be:ae:cd:6b:55:3f:71:a6:24:7d:b4:16:ce:e8: e7:26:ac:f0:17:fc:b1:7e:33:1d:56:c7:b0:63:dd:71:5a:ef: a5:3c:0a:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QowlYmJSCIJACSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDRiMzI2M2EtNGNjYy00YzBmLWEyMGMtMmY1OWJiYzdm YWMxMB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk YzMxNjExYWQtMGNkMS00NWZjLTk2MTYtYWNlOTgxZjM1OWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXACZsdwsENeYMzg+eanUgC9HRrNrWLpkkPx dxev45BeHBovrTseEE9CBr1Rua39xdbkPzuUD1spVLUnjinqlIZ9AQYJ+Zs7CxK2 0BJkFYlFehZpVXtUiKCaVyhS3VYzBpnrKNFSWNH2FmMZQgLHy4HVg4JNppjkwgk4 C1kz54k8IQ9bvRHqikOelxMV1X+uaXpo7vo3IPfggP+GlusWB2O1ki3hUxFI0p8H MOch0Tc8qEARsgp51oWl9xlDTQGZv09FnFsbTTp68xEMQ6bElqYKPrEmfCDzHaGL r4eUA/e9ZMgtxK+ivuG1fdw4svDCuC8fgBO6F/yls5ZzVTZ1XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhWVRkpa9jfvl4hFnX3i2KjWtvTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kNGIz MjYzYS00Y2NjLTRjMGYtYTIwYy0yZjU5YmJjN2ZhYzEvNDIyZmVjY2EtZTBjNy0z YjNhLWJhNzItYzlhYjA5NDk2ZTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDRiMzI2M2EtNGNjYy00YzBmLWEy MGMtMmY1OWJiYzdmYWMxL2Q0YjMyNjNhLTRjY2MtNGMwZi1hMjBjLTJmNTliYmM3 ZmFjMS5jcmwwHwYDVR0jBBgwFoAUWhVLReOxAsXOslYtuQ/OO+XFdRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kNGIzMjYzYS00Y2NjLTRjMGYtYTIwYy0yZjU5 YmJjN2ZhYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAVVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF68JNgCvqG7dS8QZDBjUxjf88Z5YSsv2cwYWkLuAwwo4n9hRR5sU9+1 sRmNCXZbFce7XtMWR5stkxfdFgzonGzz66vdGyVl3E+Z21NLb69Mgkz6+7Uha+lg 7eV4QDd+VZbHaRi7X+9BkIlS67DUEPe4u1idjHvIAYzq6YTlCtkNwU3N2/PeqfI1 V6qEYpMqNjH4222jWpAb/VBPgowkZB4A1E3Y9zl2mJK70U1wq5GLs++pdBYjTWMc gPp8VRJptiALARl3mm1Bu5NWNZO2URt4zSis4v7CaEG5NYy+rs1rVT9xpiR9tBbO 6OcmrPAX/LF+Mx1Wx7Bj3XFa76U8Clw= -----END CERTIFICATE-----Generated at Sun Nov 15 17:27:25 2026 by rpki-client