$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/d70902c7-9960-3f77-8eb5-6f69fcff1f6b.roa File: d70902c7-9960-3f77-8eb5-6f69fcff1f6b.roa (raw, json) Hash identifier: nv4RHIJxKnuNGzER64reVlvZZBFw5ZihLVEDPyXXDTU= Subject key identifier: A8:E4:96:A4:F1:F8:07:E3:C4:FB:80:D9:31:6C:83:0E:8F:6B:7D:64 Certificate issuer: /CN=791fee1c-1b1f-448c-8937-9a315eb8e9de Certificate serial: 010D0C9F4328584F30527D225A843AF1B7A74580 Authority key identifier: BA:4F:2B:6E:2B:E8:E9:DE:12:1A:E4:BF:63:30:7F:63:C3:A0:3B:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/d70902c7-9960-3f77-8eb5-6f69fcff1f6b.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 271 IP address blocks: 192.197.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/791fee1c-1b1f-448c-8937-9a315eb8e9de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/791fee1c-1b1f-448c-8937-9a315eb8e9de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:7d:22:5a:84:3a:f1:b7:a7:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=791fee1c-1b1f-448c-8937-9a315eb8e9de Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=b8f9c273-3776-477f-ae3d-285b21101463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:71:4c:97:0c:a0:0b:d4:6f:f9:05:bd:23:b1: 7d:26:cb:a7:e3:17:ee:cf:62:f8:bf:b9:90:a0:cd: e7:c6:20:c4:df:8c:fc:34:a6:f3:87:fc:15:5c:80: 37:87:5e:80:67:e5:5e:9d:1b:68:1a:e5:33:ac:7f: 36:e5:c5:ee:89:e3:4c:8e:d4:3e:2b:55:9c:b2:8c: 99:27:99:b5:55:32:e7:1a:f0:84:69:6e:82:fa:24: b0:b3:5a:15:b3:9f:30:1a:7d:44:4f:e5:d6:c9:5f: 05:e9:4a:b4:94:32:21:17:80:01:00:35:11:bb:1e: d6:97:f4:21:20:6f:a2:4c:8a:3d:5c:30:63:57:99: 4d:c3:6a:e5:57:a0:e2:2a:6c:40:4f:b6:11:7b:dd: 12:4a:2b:8f:d8:3d:8a:fa:5d:80:43:b8:84:af:5b: 5f:11:23:01:9c:8a:17:a4:12:c2:a9:0e:97:91:b6: f5:11:6e:cf:8b:7c:4c:57:eb:59:02:24:c7:19:7e: e7:a2:f9:05:d1:dd:a2:50:92:3b:bf:ac:f9:8d:be: 6b:75:04:30:18:ea:7f:fb:88:9b:bf:c9:bb:f1:23: a5:38:5a:5d:20:38:11:1f:87:58:0c:fa:7c:56:2b: 21:d6:bd:6f:db:52:a9:7c:44:6e:7b:ab:48:16:7d: 24:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E4:96:A4:F1:F8:07:E3:C4:FB:80:D9:31:6C:83:0E:8F:6B:7D:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/d70902c7-9960-3f77-8eb5-6f69fcff1f6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/791fee1c-1b1f-448c-8937-9a315eb8e9de.crl X509v3 Authority Key Identifier: keyid:BA:4F:2B:6E:2B:E8:E9:DE:12:1A:E4:BF:63:30:7F:63:C3:A0:3B:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de.cer sbgp-ipAddrBlock: critical IPv4: 192.197.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:ac:0a:d7:fb:9a:c6:19:8b:c0:da:86:10:41:f3:c3:70:9c: 31:db:d0:99:01:8f:c9:ea:66:86:95:76:f9:4c:45:e7:0e:6c: 05:bc:62:d9:fc:dd:3e:db:59:43:65:c1:f0:45:22:b6:fe:b1: 6f:3e:5f:ad:b3:19:9f:1a:f1:69:0c:d4:c7:20:24:44:48:ed: f1:bc:bb:8e:0c:24:00:24:42:da:7d:3d:60:5f:a6:44:1f:26: 35:1f:20:13:49:34:00:5c:be:84:45:ba:0f:99:30:58:b7:93: 44:8d:9d:d3:c8:e7:a3:a8:9e:08:db:dd:1f:6f:fc:0c:2e:40: 11:f2:ec:14:e1:f1:20:e1:2e:4c:92:0c:e5:57:de:6c:84:20: 78:ef:ea:18:28:f5:0c:75:56:74:e0:b2:01:cf:e0:98:a4:08: 1c:76:36:f5:66:a3:2b:2b:7e:6d:94:78:66:bc:27:2c:84:64: 64:8a:c7:10:2c:ea:c3:f5:e8:23:c8:90:8e:98:35:ac:02:1c: ac:b5:9c:29:68:8e:32:b5:01:b3:f8:48:bb:ff:7d:de:0b:19: b0:c3:4f:dc:53:87:45:00:7c:b9:e1:4b:3c:e0:29:14:13:5c: 38:38:e0:c9:1c:4a:32:8e:84:be:e0:32:55:25:e2:21:e0:8a: f4:81:83:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUn0iWoQ68benRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzkxZmVlMWMtMWIxZi00NDhjLTg5MzctOWEzMTVlYjhl OWRlMB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk YjhmOWMyNzMtMzc3Ni00NzdmLWFlM2QtMjg1YjIxMTAxNDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunFMlwygC9Rv+QW9I7F9Jsun4xfuz2L4v7mQ oM3nxiDE34z8NKbzh/wVXIA3h16AZ+VenRtoGuUzrH825cXuieNMjtQ+K1WcsoyZ J5m1VTLnGvCEaW6C+iSws1oVs58wGn1ET+XWyV8F6Uq0lDIhF4ABADURux7Wl/Qh IG+iTIo9XDBjV5lNw2rlV6DiKmxAT7YRe90SSiuP2D2K+l2AQ7iEr1tfESMBnIoX pBLCqQ6Xkbb1EW7Pi3xMV+tZAiTHGX7novkF0d2iUJI7v6z5jb5rdQQwGOp/+4ib v8m78SOlOFpdIDgRH4dYDPp8Vish1r1v21KpfERue6tIFn0kFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjklqTx+AfjxPuA2TFsgw6Pa31kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83OTFm ZWUxYy0xYjFmLTQ0OGMtODkzNy05YTMxNWViOGU5ZGUvZDcwOTAyYzctOTk2MC0z Zjc3LThlYjUtNmY2OWZjZmYxZjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzkxZmVlMWMtMWIxZi00NDhjLTg5 MzctOWEzMTVlYjhlOWRlLzc5MWZlZTFjLTFiMWYtNDQ4Yy04OTM3LTlhMzE1ZWI4 ZTlkZS5jcmwwHwYDVR0jBBgwFoAUuk8rbivo6d4SGuS/YzB/Y8OgO9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83OTFmZWUxYy0xYjFmLTQ0OGMtODkzNy05YTMx NWViOGU5ZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMXhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGisCtf7msYZi8DahhBB88NwnDHb0JkBj8nqZoaVdvlMRecObAW8Ytn8 3T7bWUNlwfBFIrb+sW8+X62zGZ8a8WkM1McgJERI7fG8u44MJAAkQtp9PWBfpkQf JjUfIBNJNABcvoRFug+ZMFi3k0SNndPI56Oongjb3R9v/AwuQBHy7BTh8SDhLkyS DOVX3myEIHjv6hgo9Qx1VnTgsgHP4JikCBx2NvVmoysrfm2UeGa8JyyEZGSKxxAs 6sP16CPIkI6YNawCHKy1nClojjK1AbP4SLv/fd4LGbDDT9xTh0UAfLnhSzzgKRQT XDg44MkcSjKOhL7gMlUl4iHgivSBg70= -----END CERTIFICATE-----Generated at Sun Oct 4 07:11:37 2026 by rpki-client