$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f0c31c28-17a3-32cc-8048-4b3bb200b8f0.roa File: f0c31c28-17a3-32cc-8048-4b3bb200b8f0.roa (raw, json) Hash identifier: 1cFdYq+F+SK6+WbNRFjVLqTECiN7bhN5b/HTi8kdVn0= Subject key identifier: 17:B4:A2:85:DB:7B:4D:E6:92:EE:E2:79:18:EC:CF:14:E8:3E:B9:FB Certificate issuer: /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Certificate serial: 010D0C9F4328584F497511D596EE9AB1F51D1000 Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f0c31c28-17a3-32cc-8048-4b3bb200b8f0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 21559 IP address blocks: 192.254.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:11:d5:96:ee:9a:b1:f5:1d:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d277e11b-a43e-409d-ac1e-1030722672a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e9:8f:13:8e:95:dd:96:e8:b7:59:86:a1:01: 30:71:ee:16:3a:0a:f6:c8:1d:5a:d8:b8:97:c1:2d: 29:93:a0:96:46:0b:06:46:65:bf:ab:b7:34:d6:f3: 1a:03:14:71:e5:7a:3b:dc:e9:eb:7c:88:77:e6:53: 63:94:e8:5a:cd:e9:82:54:74:d1:a7:7e:ab:c8:1d: 01:66:ef:d2:0d:b7:8c:af:06:28:f3:a1:52:1c:60: 3f:44:66:4b:90:49:4d:0e:14:8f:2d:c1:f8:db:ea: fb:b6:72:d4:2a:9f:fc:e5:de:fb:9b:ca:88:7c:3b: 19:56:ed:e0:46:16:3c:c9:38:4a:b8:1b:b7:6d:79: c9:1b:32:05:ce:6d:5f:9e:2d:c0:9d:74:c3:d6:dd: b3:b8:68:9f:05:bf:ad:24:af:56:fb:53:45:3d:73: 1d:95:7e:9d:1c:36:4f:fc:36:3e:ca:48:da:47:50: 02:b1:70:c8:4e:bd:46:7c:4d:44:15:63:c6:fd:56: da:58:e2:ae:75:f2:90:50:8f:64:c1:2c:1d:b4:a2: a5:15:73:69:4c:73:6e:12:48:c1:ef:94:75:8a:71: 2d:4d:2e:89:10:b9:2f:12:c9:4f:22:e5:42:63:31: 49:61:64:2c:ea:03:2b:b2:6f:01:3e:54:10:c8:e4: 13:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B4:A2:85:DB:7B:4D:E6:92:EE:E2:79:18:EC:CF:14:E8:3E:B9:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f0c31c28-17a3-32cc-8048-4b3bb200b8f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl X509v3 Authority Key Identifier: keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer sbgp-ipAddrBlock: critical IPv4: 192.254.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:a1:f1:67:05:40:80:0a:b9:dc:1c:3f:64:ef:09:48:99:68: be:5a:f1:0b:89:07:59:c5:d5:fe:ac:3e:3f:f1:ac:0a:a0:e6: 7a:d6:20:ba:15:fa:21:d5:85:09:23:01:ed:19:2b:6f:c7:f1: b2:81:d7:ee:6f:40:53:8d:61:89:f5:8c:64:a2:0e:2e:7a:e0: 7e:da:64:28:10:79:58:8f:29:b2:4f:02:c5:fd:8c:70:f8:07: 67:08:aa:4b:b6:2a:5a:49:8b:78:50:10:84:1c:45:b4:26:76: 3b:d0:99:ac:f9:45:80:4c:06:16:82:67:73:94:d5:36:1a:2a: 11:31:6e:35:88:4f:63:aa:27:5a:2c:a1:db:5d:c9:ec:7a:8a: c8:7a:8a:21:8f:9a:d8:51:16:98:ad:d8:7d:9f:c2:a4:0b:83: 9f:b8:11:4d:18:bd:cf:72:cc:39:65:ce:1d:5e:a9:b0:03:e3: 85:ef:04:64:46:21:d3:49:a7:e4:6e:a3:06:e9:8b:19:46:9f: 20:93:4c:22:34:52:8c:f3:a4:6a:ae:9f:2f:85:91:28:85:08: c0:fd:2c:b6:34:9f:ce:fe:58:9b:08:c0:74:55:84:5c:87:2f: c3:1a:ad:d3:e0:49:61:01:2c:25:4f:85:2a:c3:23:25:71:3b: d9:8a:45:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdRHVlu6asfUdEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg4Y2JiMGItOWUxOS00ZWYwLTljMWMtMDYyZGYwNzI5 ZDVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDI3N2UxMWItYTQzZS00MDlkLWFjMWUtMTAzMDcyMjY3MmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OmPE46V3Zbot1mGoQEwce4WOgr2yB1a2LiX wS0pk6CWRgsGRmW/q7c01vMaAxRx5Xo73OnrfIh35lNjlOhazemCVHTRp36ryB0B Zu/SDbeMrwYo86FSHGA/RGZLkElNDhSPLcH42+r7tnLUKp/85d77m8qIfDsZVu3g RhY8yThKuBu3bXnJGzIFzm1fni3AnXTD1t2zuGifBb+tJK9W+1NFPXMdlX6dHDZP /DY+ykjaR1ACsXDITr1GfE1EFWPG/VbaWOKudfKQUI9kwSwdtKKlFXNpTHNuEkjB 75R1inEtTS6JELkvEslPIuVCYzFJYWQs6gMrsm8BPlQQyOQT1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBe0ooXbe03mku7ieRjszxToPrn7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODhj YmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJkZjA3MjlkNWEvZjBjMzFjMjgtMTdhMy0z MmNjLTgwNDgtNGIzYmIyMDBiOGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg4Y2JiMGItOWUxOS00ZWYwLTlj MWMtMDYyZGYwNzI5ZDVhL2Y4OGNiYjBiLTllMTktNGVmMC05YzFjLTA2MmRmMDcy OWQ1YS5jcmwwHwYDVR0jBBgwFoAUumtvErjf7FdMpuDrBh2cPZWqzL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mODhjYmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJk ZjA3MjlkNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwP5gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyh8WcFQIAKudwcP2TvCUiZaL5a8QuJB1nF1f6sPj/xrAqg5nrWILoV +iHVhQkjAe0ZK2/H8bKB1+5vQFONYYn1jGSiDi564H7aZCgQeViPKbJPAsX9jHD4 B2cIqku2KlpJi3hQEIQcRbQmdjvQmaz5RYBMBhaCZ3OU1TYaKhExbjWIT2OqJ1os odtdyex6ish6iiGPmthRFpit2H2fwqQLg5+4EU0Yvc9yzDllzh1eqbAD44XvBGRG IdNJp+RuowbpixlGnyCTTCI0UozzpGquny+FkSiFCMD9LLY0n87+WJsIwHRVhFyH L8MardPgSWEBLCVPhSrDIyVxO9mKRSU= -----END CERTIFICATE-----Generated at Sun Oct 4 20:04:42 2026 by rpki-client