$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/dd3f5672-56e3-308a-a96f-4014a9782301.roa File: dd3f5672-56e3-308a-a96f-4014a9782301.roa (raw, json) Hash identifier: /p/zFciCh4vR8Eau4OKnEl0N/yiIHLKMS5Uaed01egE= Subject key identifier: FA:9B:E8:79:6B:EF:42:20:70:31:EA:0C:ED:FA:35:1C:42:25:56:76 Certificate issuer: /CN=1f54df1e-3d93-4ac5-b209-e24261193230 Certificate serial: 010D0C9F4328584F497430047C2D4E41FA4D2100 Authority key identifier: C1:18:CE:85:A0:84:C9:29:0D:E8:36:23:F1:B1:62:A2:EA:B8:74:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/dd3f5672-56e3-308a-a96f-4014a9782301.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30211 IP address blocks: 192.161.68.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/1f54df1e-3d93-4ac5-b209-e24261193230.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/1f54df1e-3d93-4ac5-b209-e24261193230.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:30:04:7c:2d:4e:41:fa:4d:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f54df1e-3d93-4ac5-b209-e24261193230 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5222c787-6bb5-49c5-8a25-8ca2e17bdaca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fa:70:4d:ec:e3:08:0e:73:0b:ee:66:57:ba: 83:7a:7a:3c:8c:e3:34:7d:0e:e1:15:74:a1:1b:ba: 4a:ad:e1:e5:44:83:8f:8e:cf:e3:69:b3:fe:c2:98: b6:67:ef:5e:d5:52:31:85:b4:0f:7f:b7:e7:59:e3: ea:e1:40:bf:d6:4e:70:83:64:e8:7a:be:64:07:4f: 6c:80:97:34:0f:c7:61:40:d9:ce:79:2b:31:5d:8e: 7b:78:7a:6e:7e:f8:39:81:70:8f:d9:b0:2a:27:bb: 95:0e:f0:5b:e2:23:30:05:e9:8c:96:af:42:9a:ad: a6:a6:7c:be:64:41:46:32:06:e3:d4:41:c6:bc:f5: c7:2c:a4:78:92:bc:ac:81:28:61:ba:e2:05:cf:a5: 6b:9a:8d:96:2f:93:c8:f1:44:dc:30:43:5f:6e:51: 6f:2c:13:ca:51:01:8c:51:7e:60:03:48:c9:b8:78: 79:81:81:62:95:3d:62:28:fe:11:4f:51:80:5c:8d: aa:a2:2f:21:54:c9:f2:ea:65:f2:0e:98:df:7d:d6: ca:29:8d:29:62:96:08:9b:c5:ba:ab:86:2f:76:5d: 02:46:b3:11:89:97:b2:6f:41:4e:29:4f:88:41:d4: e7:08:7a:7b:42:6b:20:bf:5a:cf:0a:7c:53:56:78: 2b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9B:E8:79:6B:EF:42:20:70:31:EA:0C:ED:FA:35:1C:42:25:56:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/dd3f5672-56e3-308a-a96f-4014a9782301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/1f54df1e-3d93-4ac5-b209-e24261193230.crl X509v3 Authority Key Identifier: keyid:C1:18:CE:85:A0:84:C9:29:0D:E8:36:23:F1:B1:62:A2:EA:B8:74:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230.cer sbgp-ipAddrBlock: critical IPv4: 192.161.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:09:5c:93:8c:b2:16:45:bc:24:f0:a2:40:9d:61:d1:d7:88: 44:30:2d:ac:e4:e9:30:f9:2c:f8:66:b4:b4:23:66:51:18:75: 5d:35:1d:f2:cc:14:0e:32:df:50:6b:75:d1:7e:ec:2f:bf:98: 66:ea:a8:1c:e3:b4:a6:49:d7:da:a1:67:79:31:f6:3a:86:41: f4:1a:f3:3b:13:c2:70:fa:c6:8d:ee:8c:c4:71:e9:9f:52:73: d1:50:d9:33:64:ce:6b:43:7f:2a:61:64:41:f5:c7:47:da:8d: 96:91:58:d5:4e:70:bd:d1:2d:d5:36:19:42:00:34:25:b5:d9: 41:50:47:8b:48:46:d2:2d:4d:c6:28:d1:28:9c:f6:eb:b8:c9: 23:93:c7:81:af:96:88:6f:24:c4:c2:d3:58:fa:5a:0f:16:c0: da:45:89:3b:be:6b:99:93:a6:dc:80:73:bb:8a:ce:85:78:03: 22:9e:03:47:c1:ea:e1:06:71:70:cc:f6:78:51:4e:65:b3:fa: e7:fd:88:b7:a5:d6:e5:84:26:e3:3c:96:cf:7a:2c:82:0e:2c: 9b:ba:43:78:08:9e:a9:75:05:23:b4:bb:82:38:f6:a9:67:a9: e7:9b:24:7e:53:05:0c:ba:13:ce:72:17:4d:77:06:34:eb:28: b3:9b:70:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdDAEfC1OQfpNIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1NGRmMWUtM2Q5My00YWM1LWIyMDktZTI0MjYxMTkz MjMwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTIyMmM3ODctNmJiNS00OWM1LThhMjUtOGNhMmUxN2JkYWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfpwTezjCA5zC+5mV7qDeno8jOM0fQ7hFXSh G7pKreHlRIOPjs/jabP+wpi2Z+9e1VIxhbQPf7fnWePq4UC/1k5wg2Toer5kB09s gJc0D8dhQNnOeSsxXY57eHpufvg5gXCP2bAqJ7uVDvBb4iMwBemMlq9Cmq2mpny+ ZEFGMgbj1EHGvPXHLKR4krysgShhuuIFz6Vrmo2WL5PI8UTcMENfblFvLBPKUQGM UX5gA0jJuHh5gYFilT1iKP4RT1GAXI2qoi8hVMny6mXyDpjffdbKKY0pYpYIm8W6 q4Yvdl0CRrMRiZeyb0FOKU+IQdTnCHp7Qmsgv1rPCnxTVngr+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqb6Hlr70IgcDHqDO36NRxCJVZ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZjU0 ZGYxZS0zZDkzLTRhYzUtYjIwOS1lMjQyNjExOTMyMzAvZGQzZjU2NzItNTZlMy0z MDhhLWE5NmYtNDAxNGE5NzgyMzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWY1NGRmMWUtM2Q5My00YWM1LWIy MDktZTI0MjYxMTkzMjMwLzFmNTRkZjFlLTNkOTMtNGFjNS1iMjA5LWUyNDI2MTE5 MzIzMC5jcmwwHwYDVR0jBBgwFoAUwRjOhaCEySkN6DYj8bFiouq4dPIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZjU0ZGYxZS0zZDkzLTRhYzUtYjIwOS1lMjQy NjExOTMyMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwKFEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEJXJOMshZFvCTwokCdYdHXiEQwLazk6TD5LPhmtLQjZlEYdV01HfLM FA4y31BrddF+7C+/mGbqqBzjtKZJ19qhZ3kx9jqGQfQa8zsTwnD6xo3ujMRx6Z9S c9FQ2TNkzmtDfyphZEH1x0fajZaRWNVOcL3RLdU2GUIANCW12UFQR4tIRtItTcYo 0Sic9uu4ySOTx4GvlohvJMTC01j6Wg8WwNpFiTu+a5mTptyAc7uKzoV4AyKeA0fB 6uEGcXDM9nhRTmWz+uf9iLel1uWEJuM8ls96LIIOLJu6Q3gInql1BSO0u4I49qln qeebJH5TBQy6E85yF013BjTrKLObcBY= -----END CERTIFICATE-----Generated at Sun Oct 4 21:15:15 2026 by rpki-client