$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/e5b6c141-496d-3b0d-8a5d-6a72dd40bd82.roa File: e5b6c141-496d-3b0d-8a5d-6a72dd40bd82.roa (raw, json) Hash identifier: O2eVoIawFXN5pcJK5SNwfL/vcC6BxFW/4n2WqKY7DEE= Subject key identifier: 3F:45:2B:66:D5:24:34:AA:3C:1A:5A:FF:73:53:22:12:54:89:40:5F Certificate issuer: /CN=f3281a82-6c17-4658-80f7-ee1327b4779a Certificate serial: 010D0C9F4328584FCE2BD4BB2FFD83C0A972DFC0 Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/e5b6c141-496d-3b0d-8a5d-6a72dd40bd82.roa Signing time: Wed 11 Nov 2026 14:00:13 +0000 ROA not before: Wed 11 Nov 2026 14:00:13 +0000 ROA not after: Tue 09 Feb 2027 14:00:13 +0000 asID: 395383 IP address blocks: 192.157.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ce:2b:d4:bb:2f:fd:83:c0:a9:72:df:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a Validity Not Before: Nov 11 14:00:13 2026 GMT Not After : Feb 9 14:00:13 2027 GMT Subject: CN=0dd1ea3a-d9f8-4ef7-aa34-7914bdec7679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:da:76:ef:ac:82:a1:67:7d:e7:db:57:27:9f: db:aa:34:a0:e0:a2:ed:00:29:63:23:2e:f4:00:5a: 25:0b:5f:46:0a:ab:e9:2d:5a:69:50:af:c7:d3:69: 19:d5:86:f5:a8:ad:74:f1:5c:44:68:20:70:b0:5d: 73:9c:6c:86:b2:76:b8:5d:f6:94:0a:af:4e:cb:29: 88:d7:42:47:5f:bb:bd:a4:01:17:52:db:4a:ee:db: 7d:c4:b7:68:0f:a6:15:5f:d4:2d:da:ea:81:4f:05: 69:ca:95:4d:24:fd:04:cf:77:ad:8e:c4:c4:92:a7: 39:83:98:4e:99:95:20:65:7e:02:06:05:08:71:5f: 98:55:02:73:60:fe:c4:95:f2:dc:e5:31:8c:5a:64: c2:d9:36:03:1f:da:62:ed:78:ea:f4:1b:7b:f6:fa: 30:a7:40:3f:c9:ed:49:d9:a1:27:8d:d3:79:be:3e: dd:35:8c:40:0b:67:6c:af:02:d3:34:7e:99:5f:a8: a2:1a:6a:ee:7e:c4:46:66:75:41:a0:af:43:a8:63: ec:45:97:14:80:27:98:60:fe:67:68:1a:5e:20:e3: 6f:f3:d6:e1:72:7f:d8:8d:d5:a2:95:3d:b3:60:e6: fc:34:e9:8b:83:b6:5c:ac:93:8a:b1:fd:0f:f7:66: 88:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:45:2B:66:D5:24:34:AA:3C:1A:5A:FF:73:53:22:12:54:89:40:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/e5b6c141-496d-3b0d-8a5d-6a72dd40bd82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl X509v3 Authority Key Identifier: keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer sbgp-ipAddrBlock: critical IPv4: 192.157.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:ca:dd:2c:10:bc:79:ce:dd:ca:9c:11:63:2e:ea:e5:9a:88: 87:9d:07:d2:0b:32:4b:81:1d:77:4c:99:0a:2a:43:49:c4:2a: 4e:e0:e6:18:ce:ac:23:32:e1:0a:9d:4b:f9:d3:9e:5b:66:01: 14:ba:9a:f4:e0:64:68:f7:17:54:95:46:ca:00:00:ff:fd:2e: 86:40:70:f4:1c:88:97:04:03:05:68:ef:20:68:56:9c:3a:61: 8f:05:9d:26:1a:cd:7f:25:78:ec:76:9f:14:1b:af:44:5c:6c: 8b:49:14:43:90:7c:70:ac:4f:29:0d:bc:3e:ea:fb:b4:6f:a7: a9:c6:6a:8c:8a:ee:22:c8:2c:d7:65:21:f9:9b:e0:91:da:9e: 42:1c:81:79:2c:54:6a:f5:b0:54:64:b6:0a:16:fb:77:aa:4a: 8b:56:f7:04:e7:8c:b1:30:15:11:34:71:d4:48:85:2f:03:22: 0f:01:0d:28:57:06:14:02:19:12:d0:da:70:68:19:16:91:5d: f0:0d:a5:c2:e6:79:37:ed:e2:77:b9:18:65:8d:64:0e:84:54: 86:38:44:05:a6:9e:ce:1f:c1:98:99:09:8e:03:f3:8a:10:ea: 33:23:6a:54:d3:26:a7:14:e5:03:d7:32:05:4a:a6:c4:2f:68: 82:e5:95:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/OK9S7L/2DwKly38AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjMyODFhODItNmMxNy00NjU4LTgwZjctZWUxMzI3YjQ3 NzlhMB4XDTI2MTExMTE0MDAxM1oXDTI3MDIwOTE0MDAxM1owLzEtMCsGA1UEAxMk MGRkMWVhM2EtZDlmOC00ZWY3LWFhMzQtNzkxNGJkZWM3Njc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptp276yCoWd959tXJ5/bqjSg4KLtACljIy70 AFolC19GCqvpLVppUK/H02kZ1Yb1qK108VxEaCBwsF1znGyGsna4XfaUCq9OyymI 10JHX7u9pAEXUttK7tt9xLdoD6YVX9Qt2uqBTwVpypVNJP0Ez3etjsTEkqc5g5hO mZUgZX4CBgUIcV+YVQJzYP7ElfLc5TGMWmTC2TYDH9pi7Xjq9Bt79vowp0A/ye1J 2aEnjdN5vj7dNYxAC2dsrwLTNH6ZX6iiGmrufsRGZnVBoK9DqGPsRZcUgCeYYP5n aBpeIONv89bhcn/YjdWilT2zYOb8NOmLg7ZcrJOKsf0P92aIqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9FK2bVJDSqPBpa/3NTIhJUiUBfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4 MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEzMjdiNDc3OWEvZTViNmMxNDEtNDk2ZC0z YjBkLThhNWQtNmE3MmRkNDBiZDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjMyODFhODItNmMxNy00NjU4LTgw ZjctZWUxMzI3YjQ3NzlhL2YzMjgxYTgyLTZjMTctNDY1OC04MGY3LWVlMTMyN2I0 Nzc5YS5jcmwwHwYDVR0jBBgwFoAUnADJBPwikRxD9McDuOMXvvVr1YgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEz MjdiNDc3OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ1WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzK3SwQvHnO3cqcEWMu6uWaiIedB9ILMkuBHXdMmQoqQ0nEKk7g5hjO rCMy4QqdS/nTnltmARS6mvTgZGj3F1SVRsoAAP/9LoZAcPQciJcEAwVo7yBoVpw6 YY8FnSYazX8leOx2nxQbr0RcbItJFEOQfHCsTykNvD7q+7Rvp6nGaoyK7iLILNdl Ifmb4JHankIcgXksVGr1sFRktgoW+3eqSotW9wTnjLEwFRE0cdRIhS8DIg8BDShX BhQCGRLQ2nBoGRaRXfANpcLmeTft4ne5GGWNZA6EVIY4RAWmns4fwZiZCY4D84oQ 6jMjalTTJqcU5QPXMgVKpsQvaILllf4= -----END CERTIFICATE-----Generated at Sun Nov 15 18:36:56 2026 by rpki-client