$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d964238c-9fa3-3f4c-ba7b-d1aa53fc869d.roa File: d964238c-9fa3-3f4c-ba7b-d1aa53fc869d.roa (raw, json) Hash identifier: bdFtn+5qRU3dJjFd4BdcwR7mZPciLmLFDAL+5cHM9s4= Subject key identifier: 29:90:59:17:D5:BC:F0:24:25:83:47:54:38:5F:66:9E:99:26:3C:90 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973C3141795216CC0109000 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d964238c-9fa3-3f4c-ba7b-d1aa53fc869d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 852 IP address blocks: 192.197.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:c3:14:17:95:21:6c:c0:10:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bc2e255f-99fe-404d-b976-29f5b5b606fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f0:20:15:07:bc:15:3a:e4:8a:5d:df:f0:25: d0:d3:f9:dd:43:b5:ca:71:09:78:50:9a:6a:9c:2d: 38:ae:d5:be:97:fc:ff:10:98:31:b7:db:e7:7f:85: c7:df:35:32:f3:75:83:7e:d2:7d:7c:47:49:99:f0: 89:db:b7:f8:d0:df:0f:a6:2c:81:be:ee:ae:54:b0: f2:ef:1f:d7:ee:c9:4e:9a:8b:29:08:97:ba:00:d2: e1:a7:44:98:98:6a:f3:d0:e7:99:fb:80:6b:e1:6e: 41:4a:41:ea:d9:b7:c8:d2:35:91:7e:ad:f5:83:b0: 5e:22:5f:d8:91:ab:37:2a:52:3b:18:cd:66:20:ed: 14:28:5d:e4:83:bc:60:4d:26:29:ea:7d:62:b5:aa: 21:e0:4f:30:83:5b:7f:11:27:ee:c7:3f:b1:f8:9f: 4b:26:85:93:b0:21:76:93:ec:b9:b3:01:72:63:6c: 88:4a:7e:f0:9e:c8:80:1a:46:85:d4:2b:5d:9e:6d: 03:a5:f9:62:09:8b:2b:21:bb:2e:ec:6d:e1:78:f3: 4b:8a:6e:a3:d1:6c:9c:01:6a:60:0c:50:60:84:6c: ae:b8:e1:86:21:37:95:ca:ee:75:cf:1f:be:2e:11: f7:e9:27:93:04:71:4d:f8:77:ad:6f:ea:93:e7:e3: c8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:90:59:17:D5:BC:F0:24:25:83:47:54:38:5F:66:9E:99:26:3C:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d964238c-9fa3-3f4c-ba7b-d1aa53fc869d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 192.197.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:2a:4e:6c:81:87:d5:f8:46:c4:3b:42:e8:7d:ad:d2:77:37: 47:5a:36:8e:93:43:7e:3d:78:76:36:0c:40:5e:10:40:90:5d: 26:02:fb:f3:aa:8e:77:07:cc:80:a2:09:4d:af:b5:bc:63:1c: 31:c3:25:d9:e3:8c:a3:c5:40:4f:8a:07:05:8e:b4:b7:3e:cb: 4b:94:f2:ac:6e:92:61:33:51:18:89:75:53:b8:27:31:03:46: e0:3a:5b:5a:1b:ac:cd:09:2b:11:9d:7d:f8:64:9f:92:db:85: 93:9b:08:2c:7f:bf:ba:95:45:90:c6:84:91:45:09:5e:f2:02: 77:4e:7d:86:d0:53:97:e9:1f:be:a8:3c:da:3c:9e:d1:e6:56: 67:bb:b2:d7:49:0f:d7:1b:a0:42:bd:59:23:0d:cc:ce:80:fb: a3:9a:76:fe:02:ab:89:db:fb:85:72:29:1a:7e:ea:cc:51:78: a8:b9:3e:13:9b:17:8f:91:f5:ef:35:02:59:c3:a8:fa:c3:70: ed:4a:c2:11:e9:c8:d6:a8:3a:49:66:9b:dc:e0:a2:de:d1:07: 11:b2:57:9e:02:1b:95:15:a9:14:9d:cf:22:3d:8e:42:09:36: 22:16:57:a4:eb:3f:bf:07:cb:b8:e2:e7:06:1e:0c:79:cf:ad: 37:5b:86:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc8MUF5UhbMAQkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmMyZTI1NWYtOTlmZS00MDRkLWI5NzYtMjlmNWI1YjYwNmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vAgFQe8FTrkil3f8CXQ0/ndQ7XKcQl4UJpq nC04rtW+l/z/EJgxt9vnf4XH3zUy83WDftJ9fEdJmfCJ27f40N8PpiyBvu6uVLDy 7x/X7slOmospCJe6ANLhp0SYmGrz0OeZ+4Br4W5BSkHq2bfI0jWRfq31g7BeIl/Y kas3KlI7GM1mIO0UKF3kg7xgTSYp6n1itaoh4E8wg1t/ESfuxz+x+J9LJoWTsCF2 k+y5swFyY2yISn7wnsiAGkaF1Ctdnm0DpfliCYsrIbsu7G3hePNLim6j0WycAWpg DFBghGyuuOGGITeVyu51zx++LhH36SeTBHFN+Hetb+qT5+PIwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmQWRfVvPAkJYNHVDhfZp6ZJjyQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDk2NDIzOGMtOWZhMy0z ZjRjLWJhN2ItZDFhYTUzZmM4NjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMWsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEqTmyBh9X4RsQ7Quh9rdJ3N0daNo6TQ349eHY2DEBeEECQXSYC+/Oq jncHzICiCU2vtbxjHDHDJdnjjKPFQE+KBwWOtLc+y0uU8qxukmEzURiJdVO4JzED RuA6W1obrM0JKxGdffhkn5LbhZObCCx/v7qVRZDGhJFFCV7yAndOfYbQU5fpH76o PNo8ntHmVme7stdJD9cboEK9WSMNzM6A+6Oadv4Cq4nb+4VyKRp+6sxReKi5PhOb F4+R9e81AlnDqPrDcO1KwhHpyNaoOklmm9zgot7RBxGyV54CG5UVqRSdzyI9jkIJ NiIWV6TrP78Hy7ji5wYeDHnPrTdbhm4= -----END CERTIFICATE-----Generated at Fri Sep 25 09:40:29 2026 by rpki-client