$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/389cc261-cf0d-329f-ad46-5a405e8a611e.roa File: 389cc261-cf0d-329f-ad46-5a405e8a611e.roa (raw, json) Hash identifier: z5o4aIoFOqJRpxrFvwd3MYBH95ssqG+seNavC0OnJTE= Subject key identifier: 1D:8C:1B:26:B5:16:92:51:19:19:5F:56:E3:68:55:19:2A:FB:92:8F Certificate issuer: /CN=3c8a971f-d7dc-4e95-bc6e-a0db15f80a84 Certificate serial: 010D0C9F4328584F4C3DE8BC85A726D352FFF7C0 Authority key identifier: B9:FA:57:DE:DB:64:ED:20:6A:5E:8D:41:2D:2E:86:34:D7:63:4B:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/389cc261-cf0d-329f-ad46-5a405e8a611e.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 23102 IP address blocks: 192.203.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:e8:bc:85:a7:26:d3:52:ff:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c8a971f-d7dc-4e95-bc6e-a0db15f80a84 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=92b6b75f-d277-4841-a3af-f10d715fa7bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c3:df:33:d4:5e:4c:86:2c:09:a7:b3:de:aa: 80:a1:d8:ec:d7:20:32:c7:fa:b4:9c:ec:1e:21:88: a8:6e:14:bb:51:8c:30:b3:8c:30:29:55:87:13:6f: 86:6a:1e:60:e8:98:9b:0a:70:c5:2e:91:4b:99:7a: df:8b:eb:c0:22:f1:ee:69:cc:25:af:ff:94:85:ea: 5e:79:07:70:85:3c:74:9e:6a:5e:84:47:0d:0f:d7: 97:39:d6:b3:b4:aa:e5:d5:fb:d6:49:7c:c4:bf:ff: 57:3a:52:71:e3:d0:1c:de:12:af:df:07:73:30:d2: 8e:34:14:b3:db:7d:c8:fb:b7:57:2c:40:ed:e5:b8: 06:ab:6b:aa:c3:b5:ce:76:2d:55:2a:ed:40:45:12: c9:9b:a3:70:f1:8c:84:22:57:ff:44:fc:94:58:98: 3c:8e:25:bc:fd:53:2c:0c:e0:0d:bd:a2:dd:8e:0c: 87:0e:80:7c:41:c1:0b:2c:17:a4:19:52:8c:a1:df: 0b:36:e0:d2:3a:de:0e:70:72:6f:57:66:c7:a7:09: a2:bf:7f:8c:af:5b:16:90:20:be:55:5e:68:c9:c6: 76:2e:4e:fa:2d:61:66:3f:69:17:11:95:54:ac:a6: 43:b9:65:af:d3:d9:66:20:b9:6a:d0:c2:b9:e1:78: 3e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:8C:1B:26:B5:16:92:51:19:19:5F:56:E3:68:55:19:2A:FB:92:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/389cc261-cf0d-329f-ad46-5a405e8a611e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl X509v3 Authority Key Identifier: keyid:B9:FA:57:DE:DB:64:ED:20:6A:5E:8D:41:2D:2E:86:34:D7:63:4B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer sbgp-ipAddrBlock: critical IPv4: 192.203.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:b8:d8:6e:bc:ca:2b:f3:fb:b4:4a:b0:78:5b:5a:a6:db:10: b9:ab:52:ad:ec:4e:39:9c:bb:57:6c:ab:73:e3:31:e3:df:cb: 90:66:77:be:8a:f9:d4:bc:a5:f4:71:23:1e:d5:80:af:d6:2f: 9f:41:29:1d:ce:16:b4:c4:98:7b:84:23:78:c4:e0:8e:af:1e: d4:1d:db:5f:05:5f:b1:f8:ca:7b:ce:d6:9f:c3:2f:cd:1b:43: 90:0a:37:a2:20:ed:8f:f7:72:9a:6c:24:fb:27:2d:13:f8:36: 09:02:51:01:cc:9d:66:ae:e3:a9:4a:56:7f:3d:32:7f:78:5f: d9:31:48:82:f1:05:61:8e:22:ac:40:73:c4:5e:f2:69:58:8f: 3b:8d:93:f8:55:9d:47:09:c1:04:65:81:4a:ef:90:6c:da:69: dc:65:3e:e9:66:1a:14:83:72:6d:ad:f2:9f:4f:cf:d5:e8:53: 2b:20:d7:1a:dc:ab:16:25:a8:f8:13:ba:af:4a:8d:44:c8:87: 55:8a:72:64:77:77:18:9c:67:8a:74:c7:f9:78:a2:3d:a1:e6: 55:a4:fc:c2:67:3e:f4:23:5f:c8:ad:c1:47:dd:73:d9:f4:b3: 64:eb:97:0a:5b:7a:3c:d7:73:b9:08:72:00:bd:ad:1c:ef:91: 45:20:cb:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPei8hacm01L/98AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M4YTk3MWYtZDdkYy00ZTk1LWJjNmUtYTBkYjE1Zjgw YTg0MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk OTJiNmI3NWYtZDI3Ny00ODQxLWEzYWYtZjEwZDcxNWZhN2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8PfM9ReTIYsCaez3qqAodjs1yAyx/q0nOwe IYiobhS7UYwws4wwKVWHE2+Gah5g6JibCnDFLpFLmXrfi+vAIvHuacwlr/+Uhepe eQdwhTx0nmpehEcND9eXOdaztKrl1fvWSXzEv/9XOlJx49Ac3hKv3wdzMNKONBSz 233I+7dXLEDt5bgGq2uqw7XOdi1VKu1ARRLJm6Nw8YyEIlf/RPyUWJg8jiW8/VMs DOANvaLdjgyHDoB8QcELLBekGVKMod8LNuDSOt4OcHJvV2bHpwmiv3+Mr1sWkCC+ VV5oycZ2Lk76LWFmP2kXEZVUrKZDuWWv09lmILlq0MK54Xg+1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2MGya1FpJRGRlfVuNoVRkq+5KPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYzhh OTcxZi1kN2RjLTRlOTUtYmM2ZS1hMGRiMTVmODBhODQvMzg5Y2MyNjEtY2YwZC0z MjlmLWFkNDYtNWE0MDVlOGE2MTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2M4YTk3MWYtZDdkYy00ZTk1LWJj NmUtYTBkYjE1ZjgwYTg0LzNjOGE5NzFmLWQ3ZGMtNGU5NS1iYzZlLWEwZGIxNWY4 MGE4NC5jcmwwHwYDVR0jBBgwFoAUufpX3ttk7SBqXo1BLS6GNNdjSxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYzhhOTcxZi1kN2RjLTRlOTUtYmM2ZS1hMGRi MTVmODBhODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMvpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGi42G68yivz+7RKsHhbWqbbELmrUq3sTjmcu1dsq3PjMePfy5Bmd76K +dS8pfRxIx7VgK/WL59BKR3OFrTEmHuEI3jE4I6vHtQd218FX7H4ynvO1p/DL80b Q5AKN6Ig7Y/3cppsJPsnLRP4NgkCUQHMnWau46lKVn89Mn94X9kxSILxBWGOIqxA c8Re8mlYjzuNk/hVnUcJwQRlgUrvkGzaadxlPulmGhSDcm2t8p9Pz9XoUysg1xrc qxYlqPgTuq9KjUTIh1WKcmR3dxicZ4p0x/l4oj2h5lWk/MJnPvQjX8itwUfdc9n0 s2TrlwpbejzXc7kIcgC9rRzvkUUgy7M= -----END CERTIFICATE-----Generated at Tue Oct 6 14:43:01 2026 by rpki-client