$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/d228eba1-a09b-3f04-af7f-0f5037e0bf2a.roa File: d228eba1-a09b-3f04-af7f-0f5037e0bf2a.roa (raw, json) Hash identifier: cHFHN/x4R1iwgQ+wEJPv2sk45MVlpDnYFaisDXj0a8c= Subject key identifier: 8C:C7:33:3D:99:C1:B6:73:9E:8B:FA:EE:A4:57:9D:37:2A:8E:33:CB Certificate issuer: /CN=9e1491d6-2ab7-4c14-bee6-122ee4531127 Certificate serial: 010D0C9F4328584F498C19E6CBDD0BA27BC8FE00 Authority key identifier: C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/d228eba1-a09b-3f04-af7f-0f5037e0bf2a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 192.195.4.0/24 maxlen: 24 192.195.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8c:19:e6:cb:dd:0b:a2:7b:c8:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e1491d6-2ab7-4c14-bee6-122ee4531127 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d925c08b-8a6f-4a2b-815f-045dfd17fe30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e8:14:f6:60:e2:d1:d4:65:80:c8:ac:37:47: 82:93:e4:67:a3:6e:e8:fd:bd:f2:d6:cc:6b:1f:b9: d9:c7:6e:2f:d5:26:c6:76:39:22:69:a8:5d:aa:4d: 9f:52:40:91:31:af:d3:0e:b9:f2:f6:58:22:37:51: f6:32:a2:46:0b:d4:6f:9d:d7:16:5c:00:57:16:59: 63:37:c7:19:f4:92:2b:96:b2:66:c7:09:db:04:71: 4e:70:5c:2a:0b:f7:1e:53:7a:b9:47:8f:96:c6:35: d2:a4:9b:8c:fc:7b:9c:98:31:51:ac:15:2e:ec:66: 4a:f5:8d:30:6e:ca:a6:ca:7b:cb:03:bb:ac:11:df: f0:4a:7f:44:0c:19:93:35:a2:8a:5f:55:cf:61:64: 6a:21:f7:48:45:ff:e8:bb:f0:44:cc:c6:42:82:f1: 51:4e:f9:a5:d3:c3:04:46:09:8c:57:13:05:04:07: 92:8e:e8:be:82:75:fe:67:47:13:43:c4:0a:24:3d: 45:3b:db:cb:6e:48:de:54:cf:e4:b9:10:eb:04:bd: 79:da:cd:6e:29:14:3b:62:ab:44:67:a7:6d:49:1c: ea:ab:8a:7f:e5:8a:e4:a4:51:2a:dc:84:7c:ec:95: 10:de:a2:48:84:17:d6:14:19:de:24:17:95:e0:9c: 62:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C7:33:3D:99:C1:B6:73:9E:8B:FA:EE:A4:57:9D:37:2A:8E:33:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/d228eba1-a09b-3f04-af7f-0f5037e0bf2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl X509v3 Authority Key Identifier: keyid:C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer sbgp-ipAddrBlock: critical IPv4: 192.195.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:58:b2:2f:00:ef:3b:66:22:e6:a9:4d:e2:53:0b:3b:80:cf: f1:dc:8e:ec:5c:1b:d3:07:be:cc:7b:63:1b:d1:34:01:80:db: 13:0e:d3:53:c7:14:ec:d8:25:69:78:66:63:1e:f5:c3:f3:f2: 18:34:b8:73:87:8b:5c:8f:6b:cb:b0:56:4f:69:d6:b8:43:f3: dd:93:15:8a:1b:7b:cf:79:c0:ab:59:0e:94:80:a2:f5:f9:c2: 88:db:6b:32:7d:67:d2:04:36:0e:6e:93:95:a2:09:d0:b9:a4: 25:15:d2:0b:72:e9:22:ff:47:bb:58:0b:93:35:97:45:6d:9e: 4c:b0:dc:68:95:86:f3:36:a1:0c:f6:21:6f:2c:8d:34:57:e0: 73:1c:cb:7a:9b:60:0c:bf:a4:6a:6a:79:f0:5a:86:62:18:bc: d0:e4:8e:aa:34:d6:f7:0a:22:eb:07:45:46:08:16:9e:cc:82: cb:26:e5:d5:34:42:ef:89:8a:b7:2f:41:de:ab:ca:3b:20:5e: ab:76:0b:85:14:1a:1d:5e:4e:61:da:4d:5b:1c:89:c0:38:ae: 68:1a:c6:83:33:78:1f:d5:fb:4e:4a:cf:60:93:7a:5b:bf:7e: 89:25:26:a4:e2:f7:55:d5:5f:f5:af:77:73:87:8f:b6:fd:b4: c9:6a:87:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JjBnmy90LonvI/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWUxNDkxZDYtMmFiNy00YzE0LWJlZTYtMTIyZWU0NTMx MTI3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDkyNWMwOGItOGE2Zi00YTJiLTgxNWYtMDQ1ZGZkMTdmZTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOgU9mDi0dRlgMisN0eCk+Rno27o/b3y1sxr H7nZx24v1SbGdjkiaahdqk2fUkCRMa/TDrny9lgiN1H2MqJGC9RvndcWXABXFllj N8cZ9JIrlrJmxwnbBHFOcFwqC/ceU3q5R4+WxjXSpJuM/HucmDFRrBUu7GZK9Y0w bsqmynvLA7usEd/wSn9EDBmTNaKKX1XPYWRqIfdIRf/ou/BEzMZCgvFRTvml08ME RgmMVxMFBAeSjui+gnX+Z0cTQ8QKJD1FO9vLbkjeVM/kuRDrBL152s1uKRQ7YqtE Z6dtSRzqq4p/5YrkpFEq3IR87JUQ3qJIhBfWFBneJBeV4JxiBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzHMz2ZwbZznov67qRXnTcqjjPLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ZTE0 OTFkNi0yYWI3LTRjMTQtYmVlNi0xMjJlZTQ1MzExMjcvZDIyOGViYTEtYTA5Yi0z ZjA0LWFmN2YtMGY1MDM3ZTBiZjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWUxNDkxZDYtMmFiNy00YzE0LWJl ZTYtMTIyZWU0NTMxMTI3LzllMTQ5MWQ2LTJhYjctNGMxNC1iZWU2LTEyMmVlNDUz MTEyNy5jcmwwHwYDVR0jBBgwFoAUwrX75YVX4vAqQcTI2tTXBsMOm2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ZTE0OTFkNi0yYWI3LTRjMTQtYmVlNi0xMjJl ZTQ1MzExMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwMMEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1Ysi8A7ztmIuapTeJTCzuAz/HcjuxcG9MHvsx7YxvRNAGA2xMO01PH FOzYJWl4ZmMe9cPz8hg0uHOHi1yPa8uwVk9p1rhD892TFYobe895wKtZDpSAovX5 wojbazJ9Z9IENg5uk5WiCdC5pCUV0gty6SL/R7tYC5M1l0Vtnkyw3GiVhvM2oQz2 IW8sjTRX4HMcy3qbYAy/pGpqefBahmIYvNDkjqo01vcKIusHRUYIFp7Mgssm5dU0 Qu+JircvQd6ryjsgXqt2C4UUGh1eTmHaTVscicA4rmgaxoMzeB/V+05Kz2CTelu/ foklJqTi91XVX/Wvd3OHj7b9tMlqh2A= -----END CERTIFICATE-----Generated at Wed Sep 30 03:47:50 2026 by rpki-client