$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/d0ba8e4a-1e28-3248-bc86-097345421556.roa File: d0ba8e4a-1e28-3248-bc86-097345421556.roa (raw, json) Hash identifier: K0d4e+lRDP4fNOPTALGoms2P6dCh/+Bo1anRVocPI/4= Subject key identifier: D8:B7:07:3C:FA:FE:80:A7:B5:76:C2:0C:6E:29:08:AD:62:D7:BE:E6 Certificate issuer: /CN=0e43d693-397f-4f90-96eb-2da9e8465ff5 Certificate serial: 010D0C9F4328584F4F082B0A003F2BC55EEC0300 Authority key identifier: 37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/d0ba8e4a-1e28-3248-bc86-097345421556.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 683 IP address blocks: 192.5.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:2b:0a:00:3f:2b:c5:5e:ec:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e43d693-397f-4f90-96eb-2da9e8465ff5 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=14d63ac1-33d6-40ac-a863-2e4a1ac860d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:51:70:2f:33:4f:7b:37:d7:be:a8:0f:45:1b: d1:c4:ae:2e:5f:78:f5:a2:6a:4a:c6:bd:ce:3d:a5: 2a:59:d4:51:d2:36:96:d3:03:af:bb:10:04:71:8b: 0c:f6:7c:8a:98:2c:44:68:75:b6:01:0c:6a:aa:d2: 37:5a:d8:c3:8d:a1:a7:1d:87:a0:3c:45:b2:34:7a: 3a:d8:83:8f:1a:06:02:5a:44:d6:21:72:2a:bc:b4: 4d:c5:d3:29:66:00:95:0e:0d:a3:b4:e2:fe:cd:90: 21:eb:e8:1c:d1:95:ea:09:c5:8b:3c:d2:68:a3:33: 2f:52:4f:83:28:45:4f:e4:4f:fe:49:30:69:9a:a1: 26:1d:6a:6d:93:87:24:6b:34:8c:59:f0:e8:ae:f7: 78:e6:18:4a:26:69:66:fa:f6:4e:70:22:25:91:a8: 3f:df:03:04:ce:46:47:8f:53:f6:1d:18:e4:50:25: 9a:62:82:58:b7:89:52:f7:2c:f0:85:d0:1b:d9:ac: 30:fd:68:0d:c7:c7:7b:e6:36:fa:fd:b3:f0:64:a7: 0c:3f:34:72:63:7c:71:ee:a6:f9:37:7c:2f:44:ca: 48:73:39:59:35:8d:19:f6:d0:14:b8:e0:c5:99:15: 3e:36:65:e4:2a:94:d4:fe:de:6f:f6:c6:e8:1e:c4: 05:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B7:07:3C:FA:FE:80:A7:B5:76:C2:0C:6E:29:08:AD:62:D7:BE:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/d0ba8e4a-1e28-3248-bc86-097345421556.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl X509v3 Authority Key Identifier: keyid:37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer sbgp-ipAddrBlock: critical IPv4: 192.5.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:38:05:be:7a:43:bb:7d:49:66:f6:79:66:86:0a:59:b2:0c: 99:24:19:24:db:ca:24:7e:29:d3:f6:e3:40:5d:b0:23:27:d1: 7f:0e:da:f0:2e:b1:70:9f:30:06:a3:a6:ec:a4:9b:b9:a5:6a: e7:b0:f3:ef:61:3e:53:bb:22:10:86:c7:e7:be:96:01:25:fd: fa:a1:b4:dd:91:88:04:b9:86:d1:c6:d5:05:87:67:18:33:5d: 5c:5c:ec:49:94:dd:f0:94:f5:c4:09:e3:6b:18:54:c6:39:85: af:72:d1:40:33:60:fb:91:20:5f:e8:9b:ab:36:24:33:6e:ac: fb:0b:ad:13:35:d3:d3:48:ee:85:34:76:07:ff:04:f2:d6:20: fd:f9:4a:66:88:90:37:e3:af:bf:82:b2:f2:12:98:5a:a8:d7: 20:c0:6f:5b:ab:47:9b:8f:ee:b2:d2:58:f4:a1:dc:4e:5c:c2: c9:80:46:27:f6:d0:30:a8:a6:ce:30:d7:0d:09:db:36:c9:44: 1f:af:28:fa:0a:35:86:40:2b:fd:23:25:7c:30:27:2c:97:e8: cd:6d:34:65:7c:db:eb:29:ea:3a:9a:0e:31:c0:8f:f1:ef:d7: 5c:91:5f:6e:a6:06:df:2f:78:ed:5b:90:04:4d:11:9c:12:22: 2f:d6:14:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCCsKAD8rxV7sAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGU0M2Q2OTMtMzk3Zi00ZjkwLTk2ZWItMmRhOWU4NDY1 ZmY1MB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk MTRkNjNhYzEtMzNkNi00MGFjLWE4NjMtMmU0YTFhYzg2MGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylFwLzNPezfXvqgPRRvRxK4uX3j1ompKxr3O PaUqWdRR0jaW0wOvuxAEcYsM9nyKmCxEaHW2AQxqqtI3WtjDjaGnHYegPEWyNHo6 2IOPGgYCWkTWIXIqvLRNxdMpZgCVDg2jtOL+zZAh6+gc0ZXqCcWLPNJoozMvUk+D KEVP5E/+STBpmqEmHWptk4ckazSMWfDorvd45hhKJmlm+vZOcCIlkag/3wMEzkZH j1P2HRjkUCWaYoJYt4lS9yzwhdAb2aww/WgNx8d75jb6/bPwZKcMPzRyY3xx7qb5 N3wvRMpIczlZNY0Z9tAUuODFmRU+NmXkKpTU/t5v9sboHsQF/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNi3Bzz6/oCntXbCDG4pCK1i177mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTQz ZDY5My0zOTdmLTRmOTAtOTZlYi0yZGE5ZTg0NjVmZjUvZDBiYThlNGEtMWUyOC0z MjQ4LWJjODYtMDk3MzQ1NDIxNTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGU0M2Q2OTMtMzk3Zi00ZjkwLTk2 ZWItMmRhOWU4NDY1ZmY1LzBlNDNkNjkzLTM5N2YtNGY5MC05NmViLTJkYTllODQ2 NWZmNS5jcmwwHwYDVR0jBBgwFoAUN04o9CXpjNBwif9JO2tz/WIVviYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTQzZDY5My0zOTdmLTRmOTAtOTZlYi0yZGE5 ZTg0NjVmZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwAXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA84Bb56Q7t9SWb2eWaGClmyDJkkGSTbyiR+KdP240BdsCMn0X8O2vAu sXCfMAajpuykm7mlauew8+9hPlO7IhCGx+e+lgEl/fqhtN2RiAS5htHG1QWHZxgz XVxc7EmU3fCU9cQJ42sYVMY5ha9y0UAzYPuRIF/om6s2JDNurPsLrRM109NI7oU0 dgf/BPLWIP35SmaIkDfjr7+CsvISmFqo1yDAb1urR5uP7rLSWPSh3E5cwsmARif2 0DCops4w1w0J2zbJRB+vKPoKNYZAK/0jJXwwJyyX6M1tNGV82+sp6jqaDjHAj/Hv 11yRX26mBt8veO1bkARNEZwSIi/WFKw= -----END CERTIFICATE-----Generated at Mon Sep 28 23:26:59 2026 by rpki-client