$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/76f66401-c4fb-3b48-82d7-7873180a2d1b.roa File: 76f66401-c4fb-3b48-82d7-7873180a2d1b.roa (raw, json) Hash identifier: HiIbbxpQtedK7Dw6vAAuXs0YwdBAsj+tIwI/R1+mMoE= Subject key identifier: 26:6F:3C:C8:B9:C9:F0:94:96:29:34:59:6D:9F:4E:D8:86:5D:D3:D4 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584F20F7A8E99161919F28A8B2F0 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/76f66401-c4fb-3b48-82d7-7873180a2d1b.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 14500 IP address blocks: 192.151.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a8:e9:91:61:91:9f:28:a8:b2:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=97b7dd79-9cf8-4350-8185-fa5cc3404f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:42:c8:7b:09:89:9b:62:eb:25:4d:d7:8a:0d: 99:b3:2c:63:36:27:8e:14:13:e8:3f:ef:d7:76:9e: db:55:0e:2b:d3:a9:33:da:b3:e7:67:34:03:17:a9: ca:07:4a:a2:68:aa:85:cc:c7:56:7e:78:fd:7f:06: e8:58:23:44:b0:ad:e0:08:a6:02:76:c6:02:e8:89: d9:30:06:13:ad:27:35:b5:ef:5c:aa:b5:0a:89:a8: 53:62:68:4c:54:ff:a3:5f:68:4b:0f:7e:e9:26:53: 85:7d:0c:ee:e3:c2:ce:06:8f:b8:53:33:9f:e7:58: 5f:be:36:bf:b9:4a:a2:94:0b:7f:1e:a2:8b:4d:65: 07:e2:94:60:51:98:00:59:cc:55:54:18:2d:55:b2: 9b:85:e9:dc:91:22:a7:5c:2c:e6:46:c8:0d:9c:51: 8e:0b:0a:16:2b:e8:63:94:46:f8:21:74:a3:5d:c5: fd:39:9f:89:68:15:2c:a4:d7:41:ee:45:61:0d:70: 1e:47:70:f2:54:da:e3:80:d3:6c:6b:de:4a:57:d3: 36:4f:c1:02:d4:90:cf:b1:ad:d6:78:66:ab:7b:f6: 5d:c2:3c:ee:3b:2d:f5:22:06:57:eb:b2:29:0d:24: 87:71:b9:04:5c:c3:9b:88:0d:8b:e4:fe:ea:90:48: 2f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:6F:3C:C8:B9:C9:F0:94:96:29:34:59:6D:9F:4E:D8:86:5D:D3:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/76f66401-c4fb-3b48-82d7-7873180a2d1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 192.151.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:4a:15:40:63:11:21:7d:79:2f:16:96:e3:90:1b:6d:b5:80: ed:d0:1f:f7:16:a1:74:2f:14:3d:c9:9e:be:1e:73:3a:78:05: 7a:69:70:6c:6a:2e:f3:fa:00:fa:a0:93:20:5b:92:75:aa:0c: 03:dd:2c:bc:69:d0:18:af:a9:5c:b5:a8:ea:5c:62:fb:47:9c: 4d:92:11:2f:e5:4d:71:79:d6:a8:80:92:85:54:97:ba:c9:bf: 85:32:16:7a:ea:fb:85:2e:c1:e8:d5:fa:57:53:51:af:8a:15: 0c:5a:40:86:f8:15:fd:49:f9:3b:b2:9d:2b:5a:6d:24:95:26: f7:1e:fd:fa:bc:99:6e:09:6d:b1:26:82:d9:be:55:db:95:a2: 36:d8:d6:ad:aa:94:2b:75:20:a9:62:ea:8c:60:41:90:8e:b4: f6:60:cd:0b:bb:f7:d6:7d:0c:4b:02:89:5f:b8:5a:6f:ec:b9: 25:3d:51:6c:db:09:78:81:eb:df:70:f0:41:b1:27:9b:09:94: e2:51:c6:c4:d6:d1:55:24:5b:f3:74:88:14:64:3c:1e:94:32: 56:01:56:20:90:ed:46:c5:06:53:d8:af:0f:2b:ca:07:1c:0e: 08:47:88:77:2b:53:1e:8c:c2:4a:06:47:2c:2f:78:09:7f:16: 97:88:2f:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96jpkWGRnyiosvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk OTdiN2RkNzktOWNmOC00MzUwLTgxODUtZmE1Y2MzNDA0ZjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokLIewmJm2LrJU3Xig2ZsyxjNieOFBPoP+/X dp7bVQ4r06kz2rPnZzQDF6nKB0qiaKqFzMdWfnj9fwboWCNEsK3gCKYCdsYC6InZ MAYTrSc1te9cqrUKiahTYmhMVP+jX2hLD37pJlOFfQzu48LOBo+4UzOf51hfvja/ uUqilAt/HqKLTWUH4pRgUZgAWcxVVBgtVbKbhenckSKnXCzmRsgNnFGOCwoWK+hj lEb4IXSjXcX9OZ+JaBUspNdB7kVhDXAeR3DyVNrjgNNsa95KV9M2T8EC1JDPsa3W eGare/ZdwjzuOy31IgZX67IpDSSHcbkEXMObiA2L5P7qkEgveQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZvPMi5yfCUlik0WW2fTtiGXdPUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvNzZmNjY0MDEtYzRmYi0z YjQ4LTgyZDctNzg3MzE4MGEyZDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJeGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1KFUBjESF9eS8WluOQG221gO3QH/cWoXQvFD3Jnr4eczp4BXppcGxq LvP6APqgkyBbknWqDAPdLLxp0BivqVy1qOpcYvtHnE2SES/lTXF51qiAkoVUl7rJ v4UyFnrq+4UuwejV+ldTUa+KFQxaQIb4Ff1J+TuynStabSSVJvce/fq8mW4JbbEm gtm+VduVojbY1q2qlCt1IKli6oxgQZCOtPZgzQu799Z9DEsCiV+4Wm/suSU9UWzb CXiB699w8EGxJ5sJlOJRxsTW0VUkW/N0iBRkPB6UMlYBViCQ7UbFBlPYrw8rygcc DghHiHcrUx6MwkoGRywveAl/FpeILy8= -----END CERTIFICATE-----Generated at Sat Oct 10 19:57:18 2026 by rpki-client