$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/c7c6d815-8c68-3c86-8f79-70d55acf7d99.roa File: c7c6d815-8c68-3c86-8f79-70d55acf7d99.roa (raw, json) Hash identifier: kNvVLfaw0gqDsYhAuzP7STK+Naf9sR3ppT/pdJoK174= Subject key identifier: F4:F3:17:87:B1:03:AA:46:87:58:B8:C0:29:DB:9F:2E:28:20:F4:85 Certificate issuer: /CN=02df9026-5ea2-4718-a55c-d46da7505348 Certificate serial: 010D0C9F4328584F49747D70CDA70832E556F900 Authority key identifier: C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/c7c6d815-8c68-3c86-8f79-70d55acf7d99.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14291 IP address blocks: 192.16.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:7d:70:cd:a7:08:32:e5:56:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02df9026-5ea2-4718-a55c-d46da7505348 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=89ba0bd2-3a45-4a53-9e77-8ff4dc58f0ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ae:95:0e:f0:dc:3a:c0:d0:ff:35:0a:16:7a: 16:03:6f:04:db:84:37:71:19:72:9a:0a:c9:eb:72: ad:3f:7e:08:42:e3:42:8b:43:6e:d7:cb:60:5f:ed: 72:a3:84:32:80:d7:7b:6e:01:45:9d:79:07:2e:f1: 9e:d0:9a:1f:ce:7d:34:3c:ea:bb:6d:cf:f8:f3:aa: ed:5b:c2:45:ab:0d:c4:d6:c9:06:fb:9a:4b:34:07: 74:58:ad:cc:a5:62:9e:4d:19:f1:8f:47:49:be:18: 49:df:9b:7a:fb:08:01:da:63:6e:0c:66:9d:5a:8e: eb:d2:bf:e8:ec:45:58:17:21:79:1c:a6:11:59:21: 09:c8:1d:ba:eb:e5:f5:a2:e8:69:e5:df:43:b5:08: c8:3a:5b:93:d9:84:7d:f6:62:e4:ac:f7:ea:b9:9d: 0a:3e:40:9e:a2:c1:4d:d4:ab:46:2f:d3:98:8c:92: ee:d2:f2:22:d9:e2:52:52:05:9b:18:eb:ff:f5:89: 85:bf:83:ed:07:58:9f:e6:50:69:bb:38:9c:27:7b: 1d:ff:ce:f2:04:82:94:35:ca:b0:40:74:13:58:79: 90:be:51:c7:66:85:ec:1c:4b:fb:8d:d0:c0:9b:a4: e5:7d:f1:1c:fb:cd:17:bd:62:64:e1:2f:a5:b7:00: 41:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F3:17:87:B1:03:AA:46:87:58:B8:C0:29:DB:9F:2E:28:20:F4:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/c7c6d815-8c68-3c86-8f79-70d55acf7d99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl X509v3 Authority Key Identifier: keyid:C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer sbgp-ipAddrBlock: critical IPv4: 192.16.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:91:97:fe:4f:ca:30:22:53:97:5c:2d:6d:a4:ba:57:80:8b: 28:88:60:9d:6e:ce:68:c5:25:e2:b4:91:28:5a:66:c3:4d:ba: bf:22:58:36:f4:dd:62:5e:e2:47:2f:64:d2:56:e6:e1:f4:6d: 07:26:5b:be:fd:4a:95:4d:29:f7:37:ce:e6:88:57:d6:3a:b5: 9c:8b:3a:a2:ce:27:c8:25:95:a9:d1:c8:31:ae:70:d5:36:55: d4:f7:45:ba:97:61:81:b3:92:ee:66:4b:97:99:a3:82:62:d3: 18:ff:2b:71:11:5e:bc:f2:27:3e:76:68:53:cf:f9:b4:12:f4: 4d:22:16:28:7b:64:43:7b:5b:b3:2c:94:42:18:d2:d7:8d:cc: 34:d7:f4:58:ed:6b:b2:80:aa:b2:9b:27:35:d6:1c:96:d1:45: 29:99:bf:0f:97:c4:4b:5b:e3:1a:bf:e5:c7:89:16:93:71:80: d9:eb:00:9b:b7:45:ba:21:6d:53:21:92:52:2f:93:68:68:57: eb:a6:1c:28:75:f5:34:e7:82:5b:34:bb:47:d9:82:17:62:59: 18:65:f5:ca:d1:a1:78:8d:c3:30:08:9a:89:ad:76:6e:5e:01: ca:54:45:b0:de:dd:ea:0d:12:25:34:63:6d:99:00:14:52:32: e3:ab:f4:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdH1wzacIMuVW+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDJkZjkwMjYtNWVhMi00NzE4LWE1NWMtZDQ2ZGE3NTA1 MzQ4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODliYTBiZDItM2E0NS00YTUzLTllNzctOGZmNGRjNThmMGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhq6VDvDcOsDQ/zUKFnoWA28E24Q3cRlymgrJ 63KtP34IQuNCi0Nu18tgX+1yo4QygNd7bgFFnXkHLvGe0Jofzn00POq7bc/486rt W8JFqw3E1skG+5pLNAd0WK3MpWKeTRnxj0dJvhhJ35t6+wgB2mNuDGadWo7r0r/o 7EVYFyF5HKYRWSEJyB266+X1ouhp5d9DtQjIOluT2YR99mLkrPfquZ0KPkCeosFN 1KtGL9OYjJLu0vIi2eJSUgWbGOv/9YmFv4PtB1if5lBpuzicJ3sd/87yBIKUNcqw QHQTWHmQvlHHZoXsHEv7jdDAm6TlffEc+80XvWJk4S+ltwBBsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTzF4exA6pGh1i4wCnbny4oIPSFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMmRm OTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZkYTc1MDUzNDgvYzdjNmQ4MTUtOGM2OC0z Yzg2LThmNzktNzBkNTVhY2Y3ZDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDJkZjkwMjYtNWVhMi00NzE4LWE1 NWMtZDQ2ZGE3NTA1MzQ4LzAyZGY5MDI2LTVlYTItNDcxOC1hNTVjLWQ0NmRhNzUw NTM0OC5jcmwwHwYDVR0jBBgwFoAUyBt2Ol6lM34AGtjZ+ZDa9s1kXqUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMmRmOTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZk YTc1MDUzNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiRl/5PyjAiU5dcLW2kuleAiyiIYJ1uzmjFJeK0kShaZsNNur8iWDb0 3WJe4kcvZNJW5uH0bQcmW779SpVNKfc3zuaIV9Y6tZyLOqLOJ8gllanRyDGucNU2 VdT3RbqXYYGzku5mS5eZo4Ji0xj/K3ERXrzyJz52aFPP+bQS9E0iFih7ZEN7W7Ms lEIY0teNzDTX9Fjta7KAqrKbJzXWHJbRRSmZvw+XxEtb4xq/5ceJFpNxgNnrAJu3 RbohbVMhklIvk2hoV+umHCh19TTngls0u0fZghdiWRhl9crRoXiNwzAImomtdm5e AcpURbDe3eoNEiU0Y22ZABRSMuOr9I4= -----END CERTIFICATE-----Generated at Sun Sep 27 10:26:19 2026 by rpki-client