$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/25438931-47eb-3745-8de8-a5736ce96be0.roa File: 25438931-47eb-3745-8de8-a5736ce96be0.roa (raw, json) Hash identifier: CAx/qHXXvHZXUiOIlIetNOR1lQh86h7hDO9DZxM38zM= Subject key identifier: 14:9D:E6:27:55:24:AA:CB:44:72:4D:AF:E1:88:64:17:C5:65:70:B5 Certificate issuer: /CN=c85989e4-dae0-4a06-83a1-0ce7104427a0 Certificate serial: 010D0C9F4328584F71ED97B6CE524C4BE8D49F80 Authority key identifier: 99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/25438931-47eb-3745-8de8-a5736ce96be0.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 30148 IP address blocks: 192.88.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:97:b6:ce:52:4c:4b:e8:d4:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85989e4-dae0-4a06-83a1-0ce7104427a0 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=431dc53e-aaca-451d-a7e6-e49cfaa46f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6f:b8:31:4b:7d:29:fd:74:24:81:80:73:65: 5d:33:11:02:65:a6:e9:81:39:ee:a7:5b:9b:dd:34: a4:77:ab:6d:1e:80:71:87:68:1c:58:2f:54:41:96: ac:7e:84:4a:1e:41:d4:80:6e:fa:8d:23:3b:0d:4b: ce:8a:47:b3:be:c1:c8:d6:98:a3:af:31:70:3a:82: c0:22:f1:e0:b4:c5:c2:8b:4d:3d:89:44:56:b9:fc: b1:d3:d4:e8:79:33:0a:5b:4f:22:2c:60:d4:b8:99: 70:38:d2:77:53:e5:b6:7b:7f:2e:c6:0a:0b:8b:22: 3a:1d:22:6f:ad:5a:7d:c6:aa:77:75:6a:2c:b6:41: 19:69:46:9a:5e:4f:4e:cd:98:51:40:7d:11:82:32: 99:51:0c:09:70:19:e8:b0:8f:4b:e8:ad:67:58:c4: 8a:3b:d3:08:21:c9:e9:f9:d0:4a:17:ef:c6:ae:09: 01:1b:28:17:9f:53:52:03:06:a2:e1:4f:c0:8c:d4: 2d:b4:c5:43:7f:83:91:c0:89:03:79:f7:85:6e:28: 62:b0:af:06:0e:38:34:ad:c0:1a:a0:4d:a9:25:08: 3a:98:e4:c6:59:f8:0b:a5:73:24:1b:04:69:6f:6b: cb:2b:6c:3c:83:03:3a:a5:c4:0a:40:e3:30:10:c4: 09:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9D:E6:27:55:24:AA:CB:44:72:4D:AF:E1:88:64:17:C5:65:70:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/25438931-47eb-3745-8de8-a5736ce96be0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl X509v3 Authority Key Identifier: keyid:99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer sbgp-ipAddrBlock: critical IPv4: 192.88.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:f3:29:5d:5e:00:86:eb:d4:1f:c2:15:79:7c:21:4c:56:9e: 4f:2d:eb:53:5e:dc:8e:c6:9c:3b:c6:c3:0f:c4:95:47:5d:f5: c3:8f:9e:4a:1a:f6:d9:9b:09:38:ca:5a:ac:62:58:46:76:10: 71:68:98:3f:45:9a:48:91:4e:fa:6d:45:ad:65:b8:18:9b:aa: 62:9c:71:1c:30:ae:ba:07:61:af:70:e8:8e:f3:13:c3:f2:92: 72:18:1e:b1:62:a9:c9:05:53:dd:1b:fb:d2:ae:7c:9c:6b:1d: 7e:f3:b9:1f:e3:9d:1c:55:56:f5:d2:9f:d9:11:83:41:11:ac: a4:df:94:78:b4:e0:63:01:cc:d0:fa:59:c3:09:a4:a0:d1:68: 4c:73:bc:d1:ad:b2:f9:31:2e:d0:f1:cb:0b:2a:fb:3c:03:b1: 83:7c:0e:d9:14:6c:a5:b3:7a:b3:0f:df:dd:f9:fd:58:f3:ec: 21:aa:8d:d2:c9:42:b1:46:6f:54:b2:4b:4d:60:c6:9f:51:f5: 44:65:46:65:1d:8c:a5:48:87:e4:99:a6:2d:f7:80:06:d3:15: a8:24:75:e2:c3:4d:01:3a:a7:aa:8a:1c:84:ca:37:20:9b:7a: 30:0e:76:0a:8b:34:9f:0c:aa:92:d0:f4:55:ee:b7:77:cf:32: 06:f0:76:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7Ze2zlJMS+jUn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1OTg5ZTQtZGFlMC00YTA2LTgzYTEtMGNlNzEwNDQy N2EwMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk NDMxZGM1M2UtYWFjYS00NTFkLWE3ZTYtZTQ5Y2ZhYTQ2Zjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2+4MUt9Kf10JIGAc2VdMxECZabpgTnup1ub 3TSkd6ttHoBxh2gcWC9UQZasfoRKHkHUgG76jSM7DUvOikezvsHI1pijrzFwOoLA IvHgtMXCi009iURWufyx09ToeTMKW08iLGDUuJlwONJ3U+W2e38uxgoLiyI6HSJv rVp9xqp3dWostkEZaUaaXk9OzZhRQH0RgjKZUQwJcBnosI9L6K1nWMSKO9MIIcnp +dBKF+/GrgkBGygXn1NSAwai4U/AjNQttMVDf4ORwIkDefeFbihisK8GDjg0rcAa oE2pJQg6mOTGWfgLpXMkGwRpb2vLK2w8gwM6pcQKQOMwEMQJ7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSd5idVJKrLRHJNr+GIZBfFZXC1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jODU5 ODllNC1kYWUwLTRhMDYtODNhMS0wY2U3MTA0NDI3YTAvMjU0Mzg5MzEtNDdlYi0z NzQ1LThkZTgtYTU3MzZjZTk2YmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzg1OTg5ZTQtZGFlMC00YTA2LTgz YTEtMGNlNzEwNDQyN2EwL2M4NTk4OWU0LWRhZTAtNGEwNi04M2ExLTBjZTcxMDQ0 MjdhMC5jcmwwHwYDVR0jBBgwFoAUmTHFPg8NlLOYQPQPd1wZThW+8iEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jODU5ODllNC1kYWUwLTRhMDYtODNhMS0wY2U3 MTA0NDI3YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwFiGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHzKV1eAIbr1B/CFXl8IUxWnk8t61Ne3I7GnDvGww/ElUdd9cOPnkoa 9tmbCTjKWqxiWEZ2EHFomD9FmkiRTvptRa1luBibqmKccRwwrroHYa9w6I7zE8Py knIYHrFiqckFU90b+9KufJxrHX7zuR/jnRxVVvXSn9kRg0ERrKTflHi04GMBzND6 WcMJpKDRaExzvNGtsvkxLtDxywsq+zwDsYN8DtkUbKWzerMP3935/Vjz7CGqjdLJ QrFGb1SyS01gxp9R9URlRmUdjKVIh+SZpi33gAbTFagkdeLDTQE6p6qKHITKNyCb ejAOdgqLNJ8MqpLQ9FXut3fPMgbwdic= -----END CERTIFICATE-----Generated at Mon Oct 12 19:38:08 2026 by rpki-client