$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9db68cc5-a9fd-3d70-b98d-8da96e18e380.roa File: 9db68cc5-a9fd-3d70-b98d-8da96e18e380.roa (raw, json) Hash identifier: f3tvDSIKMax0mIYcaOTZUqHHWDfYJGha2OW+YeApb6w= Subject key identifier: 1D:AB:BD:0F:93:20:D9:BF:C5:1A:FE:64:6D:E0:F8:4D:4A:C8:D3:17 Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584F49733BF98352FEDF21B24280 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9db68cc5-a9fd-3d70-b98d-8da96e18e380.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397325 IP address blocks: 192.31.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:3b:f9:83:52:fe:df:21:b2:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ef9d1dcd-6e25-428c-b9f1-e1ddc1df028f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7d:03:31:25:84:0c:50:aa:bd:37:b2:87:17: e1:b8:d7:cb:53:c4:eb:4a:ea:c0:36:d5:a5:23:76: e7:76:4b:ef:72:9e:eb:26:62:2c:19:b5:5d:d7:d7: ed:73:9d:5e:ce:89:16:0d:ba:25:14:62:b5:b6:fe: 5c:56:aa:1d:fd:5d:ef:f0:31:7c:e9:5b:e5:f6:84: c9:b9:69:a1:42:81:13:b4:71:19:83:1f:5a:ff:a8: 3e:31:23:95:4a:5d:4f:63:f2:93:2a:46:8c:ac:2e: 97:04:45:06:09:c7:ce:23:48:67:d0:97:1b:e5:7c: 68:ec:e6:2c:ba:ee:03:70:c4:6b:e1:11:0a:e4:d7: 80:66:d8:a6:4d:d0:7d:0f:1e:3c:33:a8:7f:ce:db: d2:54:65:b0:72:2d:69:a4:31:6f:36:c2:ee:ca:26: 5e:90:0a:98:c0:ad:e9:84:c2:7c:8b:65:0a:49:db: 20:91:43:b6:b8:ec:54:e6:0c:e3:86:9e:01:d4:45: 7d:ca:ee:ae:d4:e7:27:53:7d:50:f1:ba:6c:db:c4: 65:1b:4d:9e:57:c6:41:d8:fb:98:42:39:df:a9:53: f1:92:10:21:2d:36:e3:c8:2f:0c:5f:8d:ff:6c:5b: d4:87:80:3a:96:62:7e:eb:71:b9:cc:dd:f1:7c:3d: 7c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:AB:BD:0F:93:20:D9:BF:C5:1A:FE:64:6D:E0:F8:4D:4A:C8:D3:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9db68cc5-a9fd-3d70-b98d-8da96e18e380.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 192.31.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:98:35:dc:e5:6e:fa:8e:89:27:56:80:1d:f3:bb:38:ee:79: fa:4b:8c:0f:87:49:6d:28:94:84:60:79:a8:87:df:8f:84:46: d6:99:08:cc:61:1c:f9:39:d0:a8:f4:59:91:8e:7b:76:42:bc: f9:04:4f:3f:5a:9a:2e:70:4a:36:b6:75:8d:14:c9:7d:aa:f3: 0e:cd:ca:4f:82:fa:03:da:66:e9:d3:13:2d:ed:73:39:09:77: 20:51:83:1c:91:dd:6a:fd:56:59:56:61:a3:9d:04:f6:f0:57: 4b:bc:ae:8f:d2:dc:46:9e:de:94:2c:c4:87:8c:82:7c:25:fe: 37:39:76:b5:91:cf:a0:17:63:b3:49:52:83:0b:e8:75:cd:71: ef:0e:c0:c5:8b:f9:19:6e:27:a3:49:82:da:7c:e6:02:5a:02: 1f:d6:2d:aa:34:9e:6b:2e:c8:ad:eb:02:b2:39:b8:34:fd:0e: b5:56:73:c1:e5:d5:87:59:de:df:47:11:f1:e7:d2:85:42:5b: 97:44:08:ca:7a:85:25:d3:ab:99:8b:38:69:dd:1a:9e:78:00: 55:05:7b:08:0d:2f:2c:30:28:3d:70:ed:3a:bf:8d:9b:9c:71: 60:dc:91:6c:00:7c:2c:e7:68:f5:a3:4a:63:f8:8e:fb:d9:24: 74:95:5a:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jczv5g1L+3yGyQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWY5ZDFkY2QtNmUyNS00MjhjLWI5ZjEtZTFkZGMxZGYwMjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX0DMSWEDFCqvTeyhxfhuNfLU8TrSurANtWl I3bndkvvcp7rJmIsGbVd19ftc51ezokWDbolFGK1tv5cVqod/V3v8DF86Vvl9oTJ uWmhQoETtHEZgx9a/6g+MSOVSl1PY/KTKkaMrC6XBEUGCcfOI0hn0Jcb5Xxo7OYs uu4DcMRr4REK5NeAZtimTdB9Dx48M6h/ztvSVGWwci1ppDFvNsLuyiZekAqYwK3p hMJ8i2UKSdsgkUO2uOxU5gzjhp4B1EV9yu6u1OcnU31Q8bps28RlG02eV8ZB2PuY QjnfqVPxkhAhLTbjyC8MX43/bFvUh4A6lmJ+63G5zN3xfD18cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2rvQ+TINm/xRr+ZG3g+E1KyNMXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvOWRiNjhjYzUtYTlmZC0z ZDcwLWI5OGQtOGRhOTZlMThlMzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB+JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyYNdzlbvqOiSdWgB3zuzjuefpLjA+HSW0olIRgeaiH34+ERtaZCMxh HPk50Kj0WZGOe3ZCvPkETz9ami5wSja2dY0UyX2q8w7Nyk+C+gPaZunTEy3tczkJ dyBRgxyR3Wr9VllWYaOdBPbwV0u8ro/S3Eae3pQsxIeMgnwl/jc5drWRz6AXY7NJ UoML6HXNce8OwMWL+RluJ6NJgtp85gJaAh/WLao0nmsuyK3rArI5uDT9DrVWc8Hl 1YdZ3t9HEfHn0oVCW5dECMp6hSXTq5mLOGndGp54AFUFewgNLywwKD1w7Tq/jZuc cWDckWwAfCznaPWjSmP4jvvZJHSVWsk= -----END CERTIFICATE-----Generated at Sat Sep 26 13:51:58 2026 by rpki-client