$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/8ba267bf-794f-36ab-9754-45a32ee2832a.roa File: 8ba267bf-794f-36ab-9754-45a32ee2832a.roa (raw, json) Hash identifier: fo6tnazT6V9NT7bTq+O9ojDwzgkAJp/MEURbNr6ocFM= Subject key identifier: 64:41:13:DA:1C:CF:E7:98:95:4C:B7:11:9C:12:8C:42:C1:EC:F0:89 Certificate issuer: /CN=3f61b400-76de-4d47-93da-b04c33b5a504 Certificate serial: 010D0C9F4328584F2957D0509C28FB3D6964BA40 Authority key identifier: 26:B9:26:5A:06:2F:12:37:EE:F0:69:D4:14:DB:9F:74:3A:6A:80:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/8ba267bf-794f-36ab-9754-45a32ee2832a.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 16509 IP address blocks: 192.67.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/3f61b400-76de-4d47-93da-b04c33b5a504.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/3f61b400-76de-4d47-93da-b04c33b5a504.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:d0:50:9c:28:fb:3d:69:64:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f61b400-76de-4d47-93da-b04c33b5a504 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=26b1b703-a333-4d63-96e4-eb7f246b1099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:42:16:20:22:6f:49:f4:ab:9a:cf:1f:6f:24: 51:58:04:34:01:56:e0:a4:50:7a:60:c2:b0:1b:09: d6:37:ac:0a:dd:73:a1:43:61:c5:3f:2d:7e:a9:43: c0:38:8d:8b:60:cb:26:21:6d:91:93:b5:58:a3:97: 0c:54:6a:79:1b:d6:85:b9:32:fb:5c:06:99:38:b5: 6b:dc:4b:e4:31:8b:e8:5c:65:92:2f:7d:99:77:43: cd:4c:6a:0f:ed:a4:b4:f6:76:d1:b7:94:50:5d:40: 14:8e:b5:36:92:6e:f8:3d:c1:af:25:9b:9d:08:21: 31:61:0a:bf:cb:f2:1a:a6:21:8c:40:11:81:a9:50: f2:b1:fb:42:dc:e9:29:58:13:31:6c:c8:f6:77:c7: 53:cb:01:7e:ca:ef:44:83:97:c8:65:c1:6d:c9:14: de:dc:55:1b:e6:0b:fb:75:48:05:7c:72:a2:84:e7: 6b:15:e0:fb:3e:f8:94:5f:aa:1f:55:04:ea:20:76: 19:80:e4:ea:86:b4:08:39:7f:60:df:97:60:05:1b: eb:66:5c:5f:b2:cd:25:00:50:28:a1:fb:a3:b9:33: 5c:b0:62:f8:53:49:cb:17:01:d8:9d:ab:a6:9a:b3: 7c:f1:eb:09:84:5c:45:c2:71:ec:83:7e:78:02:63: 73:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:41:13:DA:1C:CF:E7:98:95:4C:B7:11:9C:12:8C:42:C1:EC:F0:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/8ba267bf-794f-36ab-9754-45a32ee2832a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/3f61b400-76de-4d47-93da-b04c33b5a504.crl X509v3 Authority Key Identifier: keyid:26:B9:26:5A:06:2F:12:37:EE:F0:69:D4:14:DB:9F:74:3A:6A:80:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504.cer sbgp-ipAddrBlock: critical IPv4: 192.67.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:d3:4b:fa:fd:11:25:d9:73:bd:4f:b4:7b:76:45:f4:3e:76: f8:fc:7a:a7:9a:34:ce:4b:a4:77:ce:e8:d9:98:10:96:9e:8e: aa:0c:6f:ea:67:9e:35:b2:05:b5:5a:d9:fd:6c:9a:ae:b2:e7: 2e:f4:ad:b8:ff:34:31:4e:d0:45:a1:e5:5e:8f:1d:c3:c4:da: 80:33:d5:cc:c0:3c:0a:f5:ec:12:87:73:b6:78:40:13:e8:c1: 12:85:5a:03:20:f8:25:4d:79:b7:4e:7d:3b:e9:e3:b8:98:19: 94:3a:40:38:4b:e0:7f:e6:be:d5:b7:c6:21:51:90:be:71:f5: 0f:9a:3f:70:01:e9:5c:b8:18:03:78:9c:ee:97:f5:e0:e1:8a: 72:71:f7:61:78:01:c3:97:8e:50:52:bb:e4:37:53:22:b1:d4: 4b:4d:84:82:ab:17:1d:11:ae:a3:5c:67:6d:cf:06:ee:15:b1: 2d:39:92:fe:89:16:8a:b8:26:f3:01:53:09:ef:83:25:70:07: 1f:bd:10:0f:50:ae:43:ad:40:35:5c:0b:81:1c:cc:1c:bc:eb: c5:18:1f:ae:be:27:da:01:68:9c:76:fd:d5:cd:57:73:aa:12: 67:92:2b:89:bd:06:98:7b:71:9e:61:28:5c:ff:7f:c2:99:39: 07:20:7b:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV9BQnCj7PWlkukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2MWI0MDAtNzZkZS00ZDQ3LTkzZGEtYjA0YzMzYjVh NTA0MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk MjZiMWI3MDMtYTMzMy00ZDYzLTk2ZTQtZWI3ZjI0NmIxMDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUIWICJvSfSrms8fbyRRWAQ0AVbgpFB6YMKw GwnWN6wK3XOhQ2HFPy1+qUPAOI2LYMsmIW2Rk7VYo5cMVGp5G9aFuTL7XAaZOLVr 3EvkMYvoXGWSL32Zd0PNTGoP7aS09nbRt5RQXUAUjrU2km74PcGvJZudCCExYQq/ y/IapiGMQBGBqVDysftC3OkpWBMxbMj2d8dTywF+yu9Eg5fIZcFtyRTe3FUb5gv7 dUgFfHKihOdrFeD7PviUX6ofVQTqIHYZgOTqhrQIOX9g35dgBRvrZlxfss0lAFAo ofujuTNcsGL4U0nLFwHYnaummrN88esJhFxFwnHsg354AmNzGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRBE9ocz+eYlUy3EZwSjELB7PCJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjYx YjQwMC03NmRlLTRkNDctOTNkYS1iMDRjMzNiNWE1MDQvOGJhMjY3YmYtNzk0Zi0z NmFiLTk3NTQtNDVhMzJlZTI4MzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y2MWI0MDAtNzZkZS00ZDQ3LTkz ZGEtYjA0YzMzYjVhNTA0LzNmNjFiNDAwLTc2ZGUtNGQ0Ny05M2RhLWIwNGMzM2I1 YTUwNC5jcmwwHwYDVR0jBBgwFoAUJrkmWgYvEjfu8GnUFNufdDpqgD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjYxYjQwMC03NmRlLTRkNDctOTNkYS1iMDRj MzNiNWE1MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEMHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTTS/r9ESXZc71PtHt2RfQ+dvj8eqeaNM5LpHfO6NmYEJaejqoMb+pn njWyBbVa2f1smq6y5y70rbj/NDFO0EWh5V6PHcPE2oAz1czAPAr17BKHc7Z4QBPo wRKFWgMg+CVNebdOfTvp47iYGZQ6QDhL4H/mvtW3xiFRkL5x9Q+aP3AB6Vy4GAN4 nO6X9eDhinJx92F4AcOXjlBSu+Q3UyKx1EtNhIKrFx0RrqNcZ23PBu4VsS05kv6J Foq4JvMBUwnvgyVwBx+9EA9QrkOtQDVcC4EczBy868UYH66+J9oBaJx2/dXNV3Oq EmeSK4m9Bph7cZ5hKFz/f8KZOQcge3E= -----END CERTIFICATE-----Generated at Tue Sep 29 02:45:40 2026 by rpki-client