$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/787c0dea-fa35-351f-9bf6-45a7b33af696.roa File: 787c0dea-fa35-351f-9bf6-45a7b33af696.roa (raw, json) Hash identifier: 8yA241qj4UQ+PSKdHFIrNCXi+bR1mF4qS8NUY8uJD5M= Subject key identifier: 55:88:25:DF:47:BA:F7:B7:0F:5C:D5:C8:8A:6C:82:B7:16:DE:34:83 Certificate issuer: /CN=47c38599-11bd-476a-9b98-d0fb43b76d60 Certificate serial: 010D0C9F4328584F4973CD2175C8D2D153CEA680 Authority key identifier: 69:46:23:EC:B6:C3:CA:38:B8:F3:C4:E6:21:A8:0A:E9:19:05:81:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/787c0dea-fa35-351f-9bf6-45a7b33af696.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19845 IP address blocks: 192.131.151.0/24 maxlen: 24 192.131.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/47c38599-11bd-476a-9b98-d0fb43b76d60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/47c38599-11bd-476a-9b98-d0fb43b76d60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:cd:21:75:c8:d2:d1:53:ce:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47c38599-11bd-476a-9b98-d0fb43b76d60 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0941e9b0-7a58-4b72-8d52-4129b62fcb18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9a:b4:fd:cf:2f:3a:b2:94:e8:fa:3b:04:e7: 17:2a:f8:23:5f:e6:bf:bd:dd:3a:2b:5b:a8:8f:dd: 7f:e4:ed:d1:ab:a3:7f:bd:cd:96:ce:3b:b8:db:fb: 2f:5a:9b:15:c3:19:c0:48:ab:34:fd:d8:c0:44:8d: ea:0e:16:38:05:20:f9:89:fa:5e:a9:3c:4d:36:46: 44:e6:35:a5:3b:d0:6d:2b:35:8c:c4:06:de:ec:e5: fa:48:1e:1e:e3:fa:bf:13:fc:f4:30:36:85:da:8b: a8:e5:97:84:f1:7e:fe:2f:e8:21:90:86:cb:f9:2d: 8d:48:92:e9:0c:90:c8:b8:45:3f:f7:8b:a5:4d:95: 02:ec:47:75:39:e9:90:1e:8a:ba:cd:5f:20:4f:bf: 4f:5d:1d:a2:53:2a:9e:1a:f7:af:9d:12:03:25:b3: 15:89:99:ea:e2:72:f3:ae:8a:6c:3d:cf:6e:aa:37: 98:ab:a2:c8:f8:89:c8:9f:16:cf:8b:51:03:ea:b3: c3:1b:34:be:03:d1:30:e3:92:b9:f0:6a:c1:3a:46: d0:1c:17:2d:cf:ad:20:36:f9:d2:4e:66:21:a9:ed: 83:19:36:fc:57:5a:3d:31:a2:5b:0e:4a:81:9e:ec: e6:c9:10:61:5a:14:95:5c:7b:cc:9f:3b:d2:b3:09: 89:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:88:25:DF:47:BA:F7:B7:0F:5C:D5:C8:8A:6C:82:B7:16:DE:34:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/787c0dea-fa35-351f-9bf6-45a7b33af696.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/47c38599-11bd-476a-9b98-d0fb43b76d60.crl X509v3 Authority Key Identifier: keyid:69:46:23:EC:B6:C3:CA:38:B8:F3:C4:E6:21:A8:0A:E9:19:05:81:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60.cer sbgp-ipAddrBlock: critical IPv4: 192.131.151.0/24 192.131.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:00:3c:05:ce:6e:29:d3:38:46:64:45:4c:97:2d:56:1d:0d: 58:39:03:ea:26:b7:b3:0f:75:85:06:fe:d6:4d:fa:ad:86:3f: 5e:d7:ab:b8:0b:29:3d:1c:38:05:f3:b3:1f:e7:93:c1:d1:ec: 8f:59:6a:7a:eb:56:ae:82:7d:9a:a8:15:f1:d6:74:47:8b:a0: 79:87:da:95:7c:37:fc:81:d4:4c:e9:94:12:f3:75:73:66:a5: dc:61:fa:2f:fd:70:43:ae:d8:7b:e3:6c:8a:00:58:02:ad:66: ef:a5:dd:4f:f5:5b:53:bc:29:70:68:3d:b1:95:72:9a:90:99: a4:05:08:14:14:9f:16:74:52:4a:62:83:1b:a9:1b:b7:33:e2: e1:df:89:55:83:76:82:20:e2:2c:14:15:92:4f:d8:b2:e9:ae: b4:7f:2d:1b:c9:49:21:b2:4f:09:93:d8:87:cb:a9:7b:69:dc: fc:6a:28:93:b0:fd:c1:fa:f0:39:b3:57:cd:6f:df:7a:42:53: 6b:91:07:73:a4:c3:44:99:d7:5f:42:1d:9d:ee:63:1a:65:78: fc:a2:e9:84:f9:e2:3c:60:9b:73:73:e6:d8:de:d0:7c:f3:06: f4:62:82:c1:e4:ee:28:25:6a:cc:b6:40:ee:48:56:3d:29:22: 3f:13:68:63 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9Jc80hdcjS0VPOpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdjMzg1OTktMTFiZC00NzZhLTliOTgtZDBmYjQzYjc2 ZDYwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDk0MWU5YjAtN2E1OC00YjcyLThkNTItNDEyOWI2MmZjYjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5q0/c8vOrKU6Po7BOcXKvgjX+a/vd06K1uo j91/5O3Rq6N/vc2Wzju42/svWpsVwxnASKs0/djARI3qDhY4BSD5ifpeqTxNNkZE 5jWlO9BtKzWMxAbe7OX6SB4e4/q/E/z0MDaF2ouo5ZeE8X7+L+ghkIbL+S2NSJLp DJDIuEU/94ulTZUC7Ed1OemQHoq6zV8gT79PXR2iUyqeGvevnRIDJbMViZnq4nLz ropsPc9uqjeYq6LI+InInxbPi1ED6rPDGzS+A9Ew45K58GrBOkbQHBctz60gNvnS TmYhqe2DGTb8V1o9MaJbDkqBnuzmyRBhWhSVXHvMnzvSswmJxwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFWIJd9Huve3D1zVyIpsgrcW3jSDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80N2Mz ODU5OS0xMWJkLTQ3NmEtOWI5OC1kMGZiNDNiNzZkNjAvNzg3YzBkZWEtZmEzNS0z NTFmLTliZjYtNDVhN2IzM2FmNjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDdjMzg1OTktMTFiZC00NzZhLTli OTgtZDBmYjQzYjc2ZDYwLzQ3YzM4NTk5LTExYmQtNDc2YS05Yjk4LWQwZmI0M2I3 NmQ2MC5jcmwwHwYDVR0jBBgwFoAUaUYj7LbDyji488TmIagK6RkFgVIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80N2MzODU5OS0xMWJkLTQ3NmEtOWI5OC1kMGZi NDNiNzZkNjAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwIOXAwQA wIOZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGwAPAXObinTOEZkRUyXLVYdDVg5A+omt7MPdYUG/tZN+q2G P17Xq7gLKT0cOAXzsx/nk8HR7I9ZanrrVq6CfZqoFfHWdEeLoHmH2pV8N/yB1Ezp lBLzdXNmpdxh+i/9cEOu2HvjbIoAWAKtZu+l3U/1W1O8KXBoPbGVcpqQmaQFCBQU nxZ0UkpigxupG7cz4uHfiVWDdoIg4iwUFZJP2LLprrR/LRvJSSGyTwmT2IfLqXtp 3PxqKJOw/cH68DmzV81v33pCU2uRB3Okw0SZ119CHZ3uYxplePyi6YT54jxgm3Nz 5tje0HzzBvRigsHk7iglasy2QO5IVj0pIj8TaGM= -----END CERTIFICATE-----Generated at Tue Sep 29 17:40:20 2026 by rpki-client