$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/3a43fc79-e84c-3622-94a8-309df3d0397d.roa File: 3a43fc79-e84c-3622-94a8-309df3d0397d.roa (raw, json) Hash identifier: UjUXBv3xsiTngL2dMvkYAJ8/W3qFNsEvdYs1q/cfKMs= Subject key identifier: 84:41:D2:4C:F3:5A:C8:C8:86:CA:84:12:C6:5D:C0:4F:A0:06:6F:95 Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584F4974B343589812CF2C1DF3E0 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/3a43fc79-e84c-3622-94a8-309df3d0397d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397325 IP address blocks: 192.31.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:b3:43:58:98:12:cf:2c:1d:f3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2008ac4e-0d10-4c6d-b0a5-bfbb8059c20a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:80:4b:88:7d:56:28:d9:7b:07:07:9e:a8:33: d7:ea:ba:e7:b7:1d:44:d2:b0:6f:7f:a7:38:ae:2d: 5a:5f:d6:f4:d3:df:4c:f3:c5:8c:eb:ec:e7:99:9a: 94:b0:a2:47:07:6b:29:52:6d:3c:54:6f:8c:c2:c2: f3:44:e5:0b:3f:b6:6a:55:e2:29:8b:62:11:f0:86: 8d:a9:6a:2e:22:65:2d:98:4a:ac:c7:ec:aa:f9:25: e7:cc:5a:52:ec:72:d0:5b:e0:85:83:8f:9f:b8:d4: 08:b7:16:cb:05:d2:64:8c:95:0f:48:c8:29:99:e3: 81:1e:37:d0:69:61:33:31:44:12:e9:5f:c4:a6:6f: fb:cc:49:bf:da:20:72:a3:33:4d:7e:f7:6f:3f:d1: 26:64:39:94:dc:09:74:e9:07:12:92:b0:c3:30:db: 00:fa:45:f0:b1:a3:91:63:5f:45:ac:da:29:a5:88: 77:0d:ca:12:9b:9f:4d:ab:95:e5:66:78:90:e2:b4: da:03:a8:81:5b:44:bd:98:af:fe:3c:12:99:10:6d: 3a:9c:46:40:6f:3a:f1:1c:6b:88:ca:4e:6e:07:a6: 4d:6e:67:98:5d:49:e8:b1:71:21:2c:45:f1:ed:df: 00:22:66:24:dd:a5:66:97:8e:dc:7d:64:ba:03:0a: 71:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:41:D2:4C:F3:5A:C8:C8:86:CA:84:12:C6:5D:C0:4F:A0:06:6F:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/3a43fc79-e84c-3622-94a8-309df3d0397d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 192.31.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:49:16:3a:22:02:4a:f9:d2:a8:5a:81:33:ca:75:36:70:73: 50:1f:c7:58:4a:cb:95:60:76:9c:c4:ef:5d:47:2f:6e:b0:b2: 24:11:db:cc:11:2d:c8:50:2e:e2:a4:f8:1f:a2:79:2e:ea:e0: 52:d5:77:65:4a:8f:af:c1:61:b9:28:e6:51:24:d8:18:ae:87: 30:b7:08:72:9b:7b:fd:dd:80:4d:5f:e7:28:d4:d2:c1:20:19: bc:5b:fc:75:5a:9b:1a:aa:f5:97:89:8c:90:8a:b8:11:8a:00: 4c:1d:6e:cb:3d:c6:df:bc:ee:53:1f:e7:93:f2:ee:fc:40:1f: 91:4d:9c:a7:70:6c:99:71:20:f0:8b:20:9c:53:35:87:15:28: 1b:b9:17:5a:c4:79:f5:a4:bd:6c:c8:da:14:49:af:be:f7:23: 14:59:70:3e:1e:2a:ea:f4:d5:eb:f2:ae:17:74:b0:0a:15:06: 5e:1f:a0:3e:39:b8:cc:cf:90:31:f1:a8:b6:33:07:ad:0e:47: c3:44:a7:46:40:0e:97:14:5a:37:4e:aa:45:e3:fe:4f:86:4b: 84:e0:00:9b:2a:31:62:59:1b:a0:2d:4b:c5:78:b2:f8:d8:30: 63:d4:e3:09:20:ff:3e:0c:ce:fb:fe:81:33:72:fc:7a:bd:fe: cf:44:c4:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdLNDWJgSzywd8+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjAwOGFjNGUtMGQxMC00YzZkLWIwYTUtYmZiYjgwNTljMjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4BLiH1WKNl7BweeqDPX6rrntx1E0rBvf6c4 ri1aX9b0099M88WM6+znmZqUsKJHB2spUm08VG+MwsLzROULP7ZqVeIpi2IR8IaN qWouImUtmEqsx+yq+SXnzFpS7HLQW+CFg4+fuNQItxbLBdJkjJUPSMgpmeOBHjfQ aWEzMUQS6V/Epm/7zEm/2iByozNNfvdvP9EmZDmU3Al06QcSkrDDMNsA+kXwsaOR Y19FrNoppYh3DcoSm59Nq5XlZniQ4rTaA6iBW0S9mK/+PBKZEG06nEZAbzrxHGuI yk5uB6ZNbmeYXUnosXEhLEXx7d8AImYk3aVml47cfWS6Awpx+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRB0kzzWsjIhsqEEsZdwE+gBm+VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvM2E0M2ZjNzktZTg0Yy0z NjIyLTk0YTgtMzA5ZGYzZDAzOTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpJFjoiAkr50qhagTPKdTZwc1Afx1hKy5VgdpzE711HL26wsiQR28wR LchQLuKk+B+ieS7q4FLVd2VKj6/BYbko5lEk2BiuhzC3CHKbe/3dgE1f5yjU0sEg Gbxb/HVamxqq9ZeJjJCKuBGKAEwdbss9xt+87lMf55Py7vxAH5FNnKdwbJlxIPCL IJxTNYcVKBu5F1rEefWkvWzI2hRJr773IxRZcD4eKur01evyrhd0sAoVBl4foD45 uMzPkDHxqLYzB60OR8NEp0ZADpcUWjdOqkXj/k+GS4TgAJsqMWJZG6AtS8V4svjY MGPU4wkg/z4Mzvv+gTNy/Hq9/s9ExM0= -----END CERTIFICATE-----Generated at Fri Sep 25 07:27:44 2026 by rpki-client