$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/c46ea3f5-3830-3ebc-9f66-c4557d46e7b4.roa File: c46ea3f5-3830-3ebc-9f66-c4557d46e7b4.roa (raw, json) Hash identifier: 69EDxw+MqCl9vN4TrrZGRJ8Iq2gC5LGSy0F2P6tYurw= Subject key identifier: 23:38:6F:8A:D3:AE:CE:EB:D6:17:63:CF:C1:D6:07:D5:5C:4B:07:C5 Certificate issuer: /CN=d23bf149-3e89-4ca4-b96d-918c2eab87d8 Certificate serial: 010D0C9F4328584FD3C14B37971790F225F6DD80 Authority key identifier: 59:DA:25:1D:FF:DB:09:20:84:C1:22:8B:2F:20:BE:28:0D:90:A2:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/c46ea3f5-3830-3ebc-9f66-c4557d46e7b4.roa Signing time: Fri 13 Nov 2026 14:00:14 +0000 ROA not before: Fri 13 Nov 2026 14:00:14 +0000 ROA not after: Thu 11 Feb 2027 14:00:14 +0000 asID: 22223 IP address blocks: 192.190.206.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d3:c1:4b:37:97:17:90:f2:25:f6:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d23bf149-3e89-4ca4-b96d-918c2eab87d8 Validity Not Before: Nov 13 14:00:14 2026 GMT Not After : Feb 11 14:00:14 2027 GMT Subject: CN=194a7476-7b63-4b8c-8bc3-90f108c3564d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:50:eb:23:62:4a:33:d2:02:55:ed:8f:cb:96: 74:4a:f7:1c:35:d0:e6:ae:10:62:60:ff:21:65:71: 75:3e:cb:d6:5c:b1:ce:1c:11:93:e0:2f:7c:78:95: 04:65:7b:8d:1a:b5:24:b9:67:74:46:15:10:5e:45: ad:80:01:39:3d:71:a9:06:e6:ce:75:a9:91:db:27: 4f:6c:6e:04:a9:93:c5:27:44:70:b4:71:cf:ce:a9: 2d:0e:86:f9:d6:dd:42:20:77:b1:d0:58:74:a8:c0: 68:73:4c:37:81:9e:f1:5f:45:56:d7:9e:2e:fa:65: 12:35:5c:eb:7c:b6:39:70:75:67:14:8c:fb:ac:66: a1:dc:b2:e7:85:3a:01:76:4b:5e:c9:d6:4d:f3:ac: 5e:2d:c9:63:a4:ec:2c:b0:7b:87:f2:69:a9:40:e7: a3:2e:44:a6:99:75:11:ae:8d:6c:f8:86:fd:b2:64: a6:7d:34:f5:ad:b4:fb:92:8b:be:84:23:af:40:0f: ee:43:2d:31:d5:51:dd:f6:e9:72:c6:80:2e:13:9d: f8:b7:e6:4b:88:e6:c5:05:8d:9e:e3:b5:f2:51:54: 3c:72:29:3a:af:f6:1c:2e:a5:63:8e:ef:22:7b:cb: b1:e8:60:c8:dc:25:50:df:21:5c:b9:b4:66:4d:e8: f5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:38:6F:8A:D3:AE:CE:EB:D6:17:63:CF:C1:D6:07:D5:5C:4B:07:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/c46ea3f5-3830-3ebc-9f66-c4557d46e7b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.crl X509v3 Authority Key Identifier: keyid:59:DA:25:1D:FF:DB:09:20:84:C1:22:8B:2F:20:BE:28:0D:90:A2:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer sbgp-ipAddrBlock: critical IPv4: 192.190.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:aa:33:18:88:c4:64:2b:61:b9:b8:fe:40:5d:b3:96:84:db: ab:08:88:95:69:1c:10:fd:0a:f9:88:aa:92:a4:2b:41:94:98: 79:d4:7d:db:95:45:fd:25:4a:7a:92:ef:7a:cb:9d:b4:e3:03: 84:d9:c1:ff:09:97:60:6a:69:25:f8:08:ad:b5:6a:34:67:d8: 85:4c:eb:79:61:54:c9:82:88:87:ab:9d:4c:ab:7e:d0:6f:69: 89:6f:4b:2c:93:b5:7f:17:06:02:fd:25:a2:ee:68:0c:6c:d8: 40:4c:4d:17:2e:90:a9:98:49:ed:ca:35:4e:ab:33:7b:9f:68: b7:6f:39:61:44:8b:94:31:4a:96:a0:bf:2f:d2:5d:af:25:df: ea:0e:c0:02:3f:c2:df:1d:7c:e3:22:d4:fa:77:1c:e5:74:c9: aa:07:bb:7a:64:5b:cf:f6:09:db:d3:a0:94:77:91:61:26:ee: a5:fa:4d:e4:9e:82:99:87:18:4b:82:c6:b9:9b:94:19:91:80: fd:26:bc:78:48:9a:d6:6d:9a:64:24:43:fd:dc:a6:bc:e9:7c: 85:2d:58:9b:f6:10:55:19:67:9e:3d:6f:b0:88:2c:70:39:e1: 71:d1:00:22:b0:70:87:57:6e:2f:25:6e:f2:b0:45:37:b9:29: 6c:38:e5:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/TwUs3lxeQ8iX23YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIzYmYxNDktM2U4OS00Y2E0LWI5NmQtOTE4YzJlYWI4 N2Q4MB4XDTI2MTExMzE0MDAxNFoXDTI3MDIxMTE0MDAxNFowLzEtMCsGA1UEAxMk MTk0YTc0NzYtN2I2My00YjhjLThiYzMtOTBmMTA4YzM1NjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1DrI2JKM9ICVe2Py5Z0SvccNdDmrhBiYP8h ZXF1PsvWXLHOHBGT4C98eJUEZXuNGrUkuWd0RhUQXkWtgAE5PXGpBubOdamR2ydP bG4EqZPFJ0RwtHHPzqktDob51t1CIHex0Fh0qMBoc0w3gZ7xX0VW154u+mUSNVzr fLY5cHVnFIz7rGah3LLnhToBdkteydZN86xeLcljpOwssHuH8mmpQOejLkSmmXUR ro1s+Ib9smSmfTT1rbT7kou+hCOvQA/uQy0x1VHd9ulyxoAuE534t+ZLiObFBY2e 47XyUVQ8cik6r/YcLqVjju8ie8ux6GDI3CVQ3yFcubRmTej1TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCM4b4rTrs7r1hdjz8HWB9VcSwfFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMjNi ZjE0OS0zZTg5LTRjYTQtYjk2ZC05MThjMmVhYjg3ZDgvYzQ2ZWEzZjUtMzgzMC0z ZWJjLTlmNjYtYzQ1NTdkNDZlN2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDIzYmYxNDktM2U4OS00Y2E0LWI5 NmQtOTE4YzJlYWI4N2Q4L2QyM2JmMTQ5LTNlODktNGNhNC1iOTZkLTkxOGMyZWFi ODdkOC5jcmwwHwYDVR0jBBgwFoAUWdolHf/bCSCEwSKLLyC+KA2QoukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMjNiZjE0OS0zZTg5LTRjYTQtYjk2ZC05MThj MmVhYjg3ZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwL7OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCqMxiIxGQrYbm4/kBds5aE26sIiJVpHBD9CvmIqpKkK0GUmHnUfduV Rf0lSnqS73rLnbTjA4TZwf8Jl2BqaSX4CK21ajRn2IVM63lhVMmCiIernUyrftBv aYlvSyyTtX8XBgL9JaLuaAxs2EBMTRcukKmYSe3KNU6rM3ufaLdvOWFEi5QxSpag vy/SXa8l3+oOwAI/wt8dfOMi1Pp3HOV0yaoHu3pkW8/2CdvToJR3kWEm7qX6TeSe gpmHGEuCxrmblBmRgP0mvHhImtZtmmQkQ/3cprzpfIUtWJv2EFUZZ549b7CILHA5 4XHRACKwcIdXbi8lbvKwRTe5KWw45f8= -----END CERTIFICATE-----Generated at Sun Nov 15 11:27:51 2026 by rpki-client