$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/321d74cf-cbe4-3233-b790-c21d1a17ed55.roa File: 321d74cf-cbe4-3233-b790-c21d1a17ed55.roa (raw, json) Hash identifier: xV+6Agqq2wfPf2TYt2l0PqKdQV22AU6rlnvhmZfqQaI= Subject key identifier: 32:46:B5:0B:FF:44:65:70:9D:A6:24:B4:FE:EC:54:BD:22:9D:B2:07 Certificate issuer: /CN=a68ef886-c437-4b77-8d56-b917b6150d9a Certificate serial: 010D0C9F4328584F49740826DBF0E7ED0DF70BE0 Authority key identifier: 7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/321d74cf-cbe4-3233-b790-c21d1a17ed55.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 91 IP address blocks: 192.12.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:08:26:db:f0:e7:ed:0d:f7:0b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a68ef886-c437-4b77-8d56-b917b6150d9a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1b74ef52-fc05-456e-aec0-d9770bd14f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f5:78:7b:d6:86:40:7f:e2:62:03:c5:c8:74: a1:6a:2e:4f:a5:2e:f3:07:67:55:5a:5b:bd:c8:06: ef:e3:32:04:7f:4d:18:ac:6d:6e:9d:ea:b6:8b:ab: 26:02:5c:a1:c9:de:37:ff:c2:0e:c0:7d:38:4b:8e: a9:61:02:52:13:e3:d1:9f:5a:55:6e:4e:67:9f:5f: 66:18:c8:9e:fc:c7:1f:f3:34:1f:01:f8:4d:23:e3: 16:af:61:a8:31:50:52:8b:4d:2e:10:77:e0:e8:b8: df:b3:d4:5d:49:16:46:9b:29:65:bb:71:3a:35:dd: e8:4c:9a:02:cc:ee:6a:a1:70:24:f9:0b:19:10:e9: 4f:97:54:d6:36:a8:d7:93:5f:bd:cf:d5:50:aa:0c: 6b:d5:bd:9d:4e:29:ee:ba:06:a0:b5:16:64:85:ec: b4:03:24:57:4f:08:81:4e:9a:39:9f:d4:7d:0a:8e: ec:a2:72:92:9b:58:e6:8d:70:3c:b3:c1:5e:9e:8a: 1b:cb:52:d2:d1:fa:22:ce:31:74:a4:99:fb:fa:01: 00:3e:ea:e1:45:5b:8d:80:26:f9:f6:ed:05:a9:f7: b5:62:d4:55:48:92:98:0f:4f:87:32:49:8a:ce:ae: d9:16:78:fe:69:35:b5:b6:28:e2:8f:b7:98:2e:fc: 94:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:46:B5:0B:FF:44:65:70:9D:A6:24:B4:FE:EC:54:BD:22:9D:B2:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/321d74cf-cbe4-3233-b790-c21d1a17ed55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl X509v3 Authority Key Identifier: keyid:7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer sbgp-ipAddrBlock: critical IPv4: 192.12.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:f4:64:29:be:81:5e:c4:10:ab:7e:fc:55:9d:e1:37:79:c5: 4f:b3:f6:57:36:47:5f:1e:d7:81:57:e3:95:12:90:d9:88:d7: 76:f7:59:d3:7a:45:bc:31:21:4e:e3:57:eb:fc:b7:6e:e5:b5: 2b:b1:36:e4:e1:dd:ee:70:b1:55:1b:f4:9d:d1:6c:85:73:a3: 3c:f2:86:d8:85:c4:07:15:2b:33:a9:1e:4e:c9:3d:d3:e9:e8: c7:a7:1b:69:82:3e:66:0f:22:7e:03:f5:31:2c:b2:e6:fb:43: 5e:7b:e2:bf:71:1c:ba:42:e2:ea:0e:be:35:64:53:5a:09:90: 77:6f:b3:0d:2b:87:dc:4b:a3:5a:b8:d9:48:0d:19:74:e2:c7: ca:20:8f:5b:43:90:38:7a:f1:c5:f4:76:45:7a:23:0c:70:89: 62:99:60:86:4b:a4:b8:d5:81:ed:53:03:05:88:69:90:34:25: 78:0d:93:d2:5f:5c:69:29:22:ba:24:5c:e2:36:77:85:03:72: d6:d8:20:c5:fa:a7:58:19:79:33:07:48:c3:42:d2:27:bd:58: 93:b3:a3:a7:3b:bb:1e:05:4d:b8:2c:b6:9f:2a:d8:f4:42:ff: 50:e5:c8:fe:c4:98:a5:7a:cf:c3:5a:60:da:1c:f7:73:f9:11: 5d:52:9d:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdAgm2/Dn7Q33C+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY4ZWY4ODYtYzQzNy00Yjc3LThkNTYtYjkxN2I2MTUw ZDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWI3NGVmNTItZmMwNS00NTZlLWFlYzAtZDk3NzBiZDE0ZjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPV4e9aGQH/iYgPFyHShai5PpS7zB2dVWlu9 yAbv4zIEf00YrG1uneq2i6smAlyhyd43/8IOwH04S46pYQJSE+PRn1pVbk5nn19m GMie/Mcf8zQfAfhNI+MWr2GoMVBSi00uEHfg6Ljfs9RdSRZGmyllu3E6Nd3oTJoC zO5qoXAk+QsZEOlPl1TWNqjXk1+9z9VQqgxr1b2dTinuugagtRZkhey0AyRXTwiB Tpo5n9R9Co7sonKSm1jmjXA8s8Fenooby1LS0foizjF0pJn7+gEAPurhRVuNgCb5 9u0Fqfe1YtRVSJKYD0+HMkmKzq7ZFnj+aTW1tijij7eYLvyUTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJGtQv/RGVwnaYktP7sVL0inbIHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjhl Zjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3YjYxNTBkOWEvMzIxZDc0Y2YtY2JlNC0z MjMzLWI3OTAtYzIxZDFhMTdlZDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTY4ZWY4ODYtYzQzNy00Yjc3LThk NTYtYjkxN2I2MTUwZDlhL2E2OGVmODg2LWM0MzctNGI3Ny04ZDU2LWI5MTdiNjE1 MGQ5YS5jcmwwHwYDVR0jBBgwFoAUfAnor+6RefUILLfICjw4Y9TiHA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNjhlZjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3 YjYxNTBkOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHP0ZCm+gV7EEKt+/FWd4Td5xU+z9lc2R18e14FX45USkNmI13b3WdN6 RbwxIU7jV+v8t27ltSuxNuTh3e5wsVUb9J3RbIVzozzyhtiFxAcVKzOpHk7JPdPp 6MenG2mCPmYPIn4D9TEssub7Q1574r9xHLpC4uoOvjVkU1oJkHdvsw0rh9xLo1q4 2UgNGXTix8ogj1tDkDh68cX0dkV6IwxwiWKZYIZLpLjVge1TAwWIaZA0JXgNk9Jf XGkpIrokXOI2d4UDctbYIMX6p1gZeTMHSMNC0ie9WJOzo6c7ux4FTbgstp8q2PRC /1DlyP7EmKV6z8NaYNoc93P5EV1SnT0= -----END CERTIFICATE-----Generated at Mon Sep 28 00:55:51 2026 by rpki-client