$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/a48a1634-7b13-36d1-9bd6-672d01aa2ee9.roa File: a48a1634-7b13-36d1-9bd6-672d01aa2ee9.roa (raw, json) Hash identifier: kRtqXz7QK7nTXWC3P9K2+aKb8e4xiuZxpXaQbGaASeU= Subject key identifier: 5A:19:91:E1:11:FE:BB:E2:55:D0:DC:EF:77:E1:FE:F8:CB:C0:2E:10 Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584F4972DA70DD094B97F82D9000 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/a48a1634-7b13-36d1-9bd6-672d01aa2ee9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 46696 IP address blocks: 192.31.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:da:70:dd:09:4b:97:f8:2d:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=34cbba8d-a4ef-44a3-8962-b1dcbd4358c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:19:67:9b:ac:98:a1:ec:ee:c0:ea:d1:f9:c0: 7c:c9:fd:63:7f:5a:34:22:0e:79:e5:ea:99:23:7b: 3f:51:c5:17:a1:33:63:a1:0c:63:c2:47:31:90:87: 70:a0:6d:d6:e4:b6:a2:2c:3e:70:e5:10:8d:fc:13: d8:79:57:fc:72:7f:a9:09:2c:5f:8b:f7:2a:97:2a: 28:ae:87:3f:c8:cc:9e:a6:bc:92:f1:43:7b:64:c7: 9e:7a:7f:17:d7:b3:4b:19:bd:b7:98:0f:01:a3:44: c1:4a:a6:b0:1c:82:e8:2a:6a:4e:c1:ab:f9:0f:91: 9e:82:97:78:f4:88:99:da:57:a1:e3:ea:6a:94:b4: 3d:7e:09:39:0a:40:4b:bc:b8:80:c1:31:e5:6e:29: 57:a7:4b:c6:56:c6:77:a5:ff:35:6e:66:4a:6a:e8: f2:41:92:e3:ef:d5:40:73:b0:c2:7e:df:db:46:4e: 26:86:22:1f:a5:0b:e0:84:62:63:33:eb:8c:6c:ed: a6:d6:08:4f:d3:92:6f:21:b0:d6:81:49:d6:08:12: b5:e3:0b:0b:b0:4b:dd:10:21:bb:93:f8:27:97:74: e7:da:28:d5:6f:7f:54:02:a3:39:82:1f:31:65:f8: a1:f4:a3:1b:d6:54:96:00:d5:fb:2a:45:c8:a5:32: 4c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:19:91:E1:11:FE:BB:E2:55:D0:DC:EF:77:E1:FE:F8:CB:C0:2E:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/a48a1634-7b13-36d1-9bd6-672d01aa2ee9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 192.31.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:67:b8:a2:be:3a:51:8f:fd:ef:17:d5:04:cb:4d:f3:53:f1: 76:6a:b6:60:37:fe:96:a9:d9:ff:ac:90:8a:95:e3:2d:52:33: 09:25:02:5e:47:f6:7c:71:92:05:d1:03:7b:dc:4d:51:ce:12: f0:90:1f:69:d0:26:0d:c0:e4:e9:3c:4c:ee:6b:96:cc:69:a3: c8:db:49:ea:c0:34:fb:0a:a3:f8:f8:56:0b:18:4f:58:e1:a1: 92:24:af:f7:8e:30:9d:87:43:00:99:42:21:79:9d:53:37:b9: 91:dc:bc:6e:6a:0a:d0:3f:71:b9:85:00:77:c4:cb:64:17:f5: 22:de:9b:3e:3e:66:f6:73:c4:e6:5c:70:dc:d9:4a:12:7e:78: b1:88:78:f7:01:de:df:7d:51:d2:54:40:fe:d4:02:ef:4a:31: ef:9a:29:a3:50:5d:85:2c:c2:ef:8d:09:4d:0b:e5:25:07:ba: f3:87:43:cf:45:6d:9c:42:c3:24:ed:81:b8:66:55:2f:dd:41: 69:01:76:f7:ff:a6:2d:83:bc:2b:8e:21:dd:69:06:f3:6f:65: d2:a9:66:2f:64:25:08:7a:79:d1:1d:5a:ad:97:33:38:f3:8e: 43:b1:8b:4b:c5:02:9f:b5:72:58:e4:fc:98:6c:7c:4b:7a:3b: d9:ce:97:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jctpw3QlLl/gtkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzRjYmJhOGQtYTRlZi00NGEzLTg5NjItYjFkY2JkNDM1OGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRlnm6yYoezuwOrR+cB8yf1jf1o0Ig555eqZ I3s/UcUXoTNjoQxjwkcxkIdwoG3W5LaiLD5w5RCN/BPYeVf8cn+pCSxfi/cqlyoo roc/yMyepryS8UN7ZMeeen8X17NLGb23mA8Bo0TBSqawHILoKmpOwav5D5Gegpd4 9IiZ2leh4+pqlLQ9fgk5CkBLvLiAwTHlbilXp0vGVsZ3pf81bmZKaujyQZLj79VA c7DCft/bRk4mhiIfpQvghGJjM+uMbO2m1ghP05JvIbDWgUnWCBK14wsLsEvdECG7 k/gnl3Tn2ijVb39UAqM5gh8xZfih9KMb1lSWANX7KkXIpTJMgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoZkeER/rviVdDc73fh/vjLwC4QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvYTQ4YTE2MzQtN2IxMy0z NmQxLTliZDYtNjcyZDAxYWEyZWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB+OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANnuKK+OlGP/e8X1QTLTfNT8XZqtmA3/pap2f+skIqV4y1SMwklAl5H 9nxxkgXRA3vcTVHOEvCQH2nQJg3A5Ok8TO5rlsxpo8jbSerANPsKo/j4VgsYT1jh oZIkr/eOMJ2HQwCZQiF5nVM3uZHcvG5qCtA/cbmFAHfEy2QX9SLemz4+ZvZzxOZc cNzZShJ+eLGIePcB3t99UdJUQP7UAu9KMe+aKaNQXYUswu+NCU0L5SUHuvOHQ89F bZxCwyTtgbhmVS/dQWkBdvf/pi2DvCuOId1pBvNvZdKpZi9kJQh6edEdWq2XMzjz jkOxi0vFAp+1cljk/JhsfEt6O9nOl5Y= -----END CERTIFICATE-----Generated at Fri Sep 25 14:28:13 2026 by rpki-client