$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f190b80-0d25-47ff-904c-8479d592f576/8897f3ee-f080-3829-99dc-2b04ccc6a373.roa File: 8897f3ee-f080-3829-99dc-2b04ccc6a373.roa (raw, json) Hash identifier: kBy7slNZwgVQ3++lwvz2lqdf5lUTo1XmJbPE8qnhJ1g= Subject key identifier: 7E:B8:B0:2F:CD:DE:E6:E8:7B:2E:E6:16:D6:20:73:06:B1:B9:FD:6E Certificate issuer: /CN=3f190b80-0d25-47ff-904c-8479d592f576 Certificate serial: 010D0C9F4328584F4974AA650896988383418D00 Authority key identifier: DC:35:ED:75:89:12:98:B7:A2:3E:F1:34:D4:67:BC:30:0E:76:BD:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f190b80-0d25-47ff-904c-8479d592f576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f190b80-0d25-47ff-904c-8479d592f576/8897f3ee-f080-3829-99dc-2b04ccc6a373.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397322 IP address blocks: 192.203.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f190b80-0d25-47ff-904c-8479d592f576/3f190b80-0d25-47ff-904c-8479d592f576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f190b80-0d25-47ff-904c-8479d592f576/3f190b80-0d25-47ff-904c-8479d592f576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f190b80-0d25-47ff-904c-8479d592f576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:aa:65:08:96:98:83:83:41:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f190b80-0d25-47ff-904c-8479d592f576 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7a3e885c-e033-46d9-ae7d-41d6efa99f1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fa:40:66:08:18:55:16:d1:21:29:85:b5:51: 2d:31:ce:ce:6d:98:a0:ea:4c:cf:bd:84:fa:ab:41: 12:6f:14:1e:1d:e8:a2:4c:94:c2:cf:21:cb:a2:08: 22:49:62:e9:db:02:00:91:fa:85:44:47:38:d4:d2: 8b:ad:5e:4b:2e:55:63:91:d4:bc:88:92:52:bc:ac: b7:6b:f1:36:ee:15:84:b8:00:3e:07:9b:07:9a:46: 54:c9:2a:4f:50:10:a6:bd:93:a6:6d:31:6f:fc:52: 8d:ba:6a:93:c1:17:8b:75:87:0a:7b:08:1a:e3:4e: a1:e1:5d:4d:40:2a:cb:0c:d0:e9:e1:31:6d:3b:1d: fc:4c:69:5f:01:4a:ca:3c:88:c3:2a:f4:b1:9d:43: 60:8c:1f:6a:b9:2e:42:eb:e2:00:ec:2d:0a:41:db: ab:44:32:7c:e9:b3:a2:50:77:49:4d:e1:74:36:7e: 14:04:83:2c:00:43:92:71:49:76:92:81:bf:75:35: aa:34:3e:4a:a5:db:d5:f9:5a:b9:b9:29:b1:a5:fd: 20:a6:7f:7f:03:60:44:03:b9:11:53:68:75:c0:bf: b4:b1:b6:3a:7d:3e:5b:13:a5:7c:6b:3d:fb:8c:42: 55:08:75:bd:f2:fd:07:67:3e:59:dd:ad:91:5d:6e: f3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B8:B0:2F:CD:DE:E6:E8:7B:2E:E6:16:D6:20:73:06:B1:B9:FD:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f190b80-0d25-47ff-904c-8479d592f576/8897f3ee-f080-3829-99dc-2b04ccc6a373.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f190b80-0d25-47ff-904c-8479d592f576/3f190b80-0d25-47ff-904c-8479d592f576.crl X509v3 Authority Key Identifier: keyid:DC:35:ED:75:89:12:98:B7:A2:3E:F1:34:D4:67:BC:30:0E:76:BD:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f190b80-0d25-47ff-904c-8479d592f576.cer sbgp-ipAddrBlock: critical IPv4: 192.203.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:cc:da:09:16:69:77:7a:c8:a4:56:cd:7a:95:8f:2d:57:c5: a5:a2:0f:47:67:f1:bc:f6:cd:cf:60:4f:81:d1:3c:2d:ea:09: ea:7f:a8:17:74:d9:f5:22:59:3d:54:35:e6:d1:9d:48:50:fe: 8c:a2:b0:ac:9d:e1:b9:d8:de:94:32:6c:3c:cc:46:fb:df:a0: 85:67:ae:12:bf:db:6d:9c:71:e0:39:e3:a6:59:74:b8:7d:9c: ef:43:4b:07:d9:f9:70:16:5a:00:26:23:93:bf:43:66:56:4f: 68:1a:e1:af:f3:2e:b2:8f:a8:91:13:11:4f:6b:e8:f6:67:e3: 9f:38:37:bf:94:29:62:0a:e4:68:68:e8:45:d8:8f:28:21:8f: 6a:bd:f3:20:15:79:87:d7:e2:af:f2:52:1f:9e:08:75:1b:58: 11:7e:bb:b4:6d:65:87:87:52:c4:b8:4b:44:6d:83:fc:02:2e: ce:35:b2:3b:62:bd:fe:33:2c:d6:c4:10:87:c8:ef:b3:68:4b: 6d:68:92:23:c1:39:ec:88:07:e1:03:49:a0:41:5f:8c:b9:a8: f6:b4:a7:47:3f:70:dd:96:09:25:b1:dc:23:8a:e1:83:08:5a: 98:09:c8:71:22:24:34:dd:72:96:03:d5:76:8c:59:a6:30:9a: 1c:91:2e:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdKplCJaYg4NBjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YxOTBiODAtMGQyNS00N2ZmLTkwNGMtODQ3OWQ1OTJm NTc2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2EzZTg4NWMtZTAzMy00NmQ5LWFlN2QtNDFkNmVmYTk5ZjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/pAZggYVRbRISmFtVEtMc7ObZig6kzPvYT6 q0ESbxQeHeiiTJTCzyHLoggiSWLp2wIAkfqFREc41NKLrV5LLlVjkdS8iJJSvKy3 a/E27hWEuAA+B5sHmkZUySpPUBCmvZOmbTFv/FKNumqTwReLdYcKewga406h4V1N QCrLDNDp4TFtOx38TGlfAUrKPIjDKvSxnUNgjB9quS5C6+IA7C0KQdurRDJ86bOi UHdJTeF0Nn4UBIMsAEOScUl2koG/dTWqND5KpdvV+Vq5uSmxpf0gpn9/A2BEA7kR U2h1wL+0sbY6fT5bE6V8az37jEJVCHW98v0HZz5Z3a2RXW7zUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH64sC/N3uboey7mFtYgcwaxuf1uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjE5 MGI4MC0wZDI1LTQ3ZmYtOTA0Yy04NDc5ZDU5MmY1NzYvODg5N2YzZWUtZjA4MC0z ODI5LTk5ZGMtMmIwNGNjYzZhMzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2YxOTBiODAtMGQyNS00N2ZmLTkw NGMtODQ3OWQ1OTJmNTc2LzNmMTkwYjgwLTBkMjUtNDdmZi05MDRjLTg0NzlkNTky ZjU3Ni5jcmwwHwYDVR0jBBgwFoAU3DXtdYkSmLeiPvE01Ge8MA52vRkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjE5MGI4MC0wZDI1LTQ3ZmYtOTA0Yy04NDc5 ZDU5MmY1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMvxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvM2gkWaXd6yKRWzXqVjy1XxaWiD0dn8bz2zc9gT4HRPC3qCep/qBd0 2fUiWT1UNebRnUhQ/oyisKyd4bnY3pQybDzMRvvfoIVnrhK/222cceA546ZZdLh9 nO9DSwfZ+XAWWgAmI5O/Q2ZWT2ga4a/zLrKPqJETEU9r6PZn4584N7+UKWIK5Gho 6EXYjyghj2q98yAVeYfX4q/yUh+eCHUbWBF+u7RtZYeHUsS4S0Rtg/wCLs41sjti vf4zLNbEEIfI77NoS21okiPBOeyIB+EDSaBBX4y5qPa0p0c/cN2WCSWx3COK4YMI WpgJyHEiJDTdcpYD1XaMWaYwmhyRLjs= -----END CERTIFICATE-----Generated at Wed Oct 14 20:32:57 2026 by rpki-client