$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c428045e-3c7e-30bc-83d0-5a35ccc235cd.roa File: c428045e-3c7e-30bc-83d0-5a35ccc235cd.roa (raw, json) Hash identifier: 4wT1cZoDXvb/+g6EA+3UpwnD18q2oYAU0RHF6enWvYE= Subject key identifier: 29:82:D7:8D:07:AE:18:DB:BD:2B:4B:D6:0C:7C:46:32:3E:31:9F:7F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F454288FC4E3029B719236D30 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c428045e-3c7e-30bc-83d0-5a35ccc235cd.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 31898 IP address blocks: 192.153.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:88:fc:4e:30:29:b7:19:23:6d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=ea7e4809-c2d2-4164-ad40-8b8b7a7f9043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:eb:b7:4a:6c:5e:42:90:5a:1c:06:83:53:09: b4:4f:56:33:7d:27:d5:fc:3d:a7:04:b0:78:70:07: e5:f9:56:fd:6d:a7:f1:37:39:0d:16:f0:b4:2b:97: 6c:5a:a2:7a:a6:cf:28:1c:b2:e1:da:52:6a:6d:8f: 81:b8:ee:7a:17:f8:8b:82:4e:1b:5e:ef:7a:a6:23: b4:04:5d:04:c6:7a:08:a8:42:c5:b7:d6:9f:93:bf: a3:97:d9:08:dc:ba:e8:b4:4a:1c:3f:3f:12:01:d0: 24:1a:bf:aa:3b:ce:41:7f:a0:a7:fc:15:a9:07:af: 41:45:cc:e7:ec:d1:5c:b5:f9:a0:17:e8:a3:5c:d4: 3a:28:65:bf:fc:c2:86:86:9d:7f:d9:c0:b8:41:42: f4:09:e3:c6:d7:ec:02:1d:ac:49:17:f3:6e:b3:aa: 25:58:66:84:22:9b:a2:56:1d:40:87:79:cb:03:0f: 64:ea:49:27:00:9d:43:5d:f5:f0:39:81:52:14:c9: 22:bd:2f:1f:6b:ec:a3:8c:ac:b8:64:a0:d0:f0:9e: 95:4e:4b:de:3a:92:6b:d5:d1:ba:30:e5:e0:cc:46: 00:17:9f:ef:d5:00:a5:0f:e2:00:4e:d7:92:44:a0: 84:85:55:12:63:c2:e6:ed:3f:a7:94:36:d7:ad:f9: f1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:82:D7:8D:07:AE:18:DB:BD:2B:4B:D6:0C:7C:46:32:3E:31:9F:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c428045e-3c7e-30bc-83d0-5a35ccc235cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.153.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:11:fb:db:75:3f:79:6c:1b:e9:5b:ba:dd:e1:56:93:f6:63: 66:3f:d0:f3:50:bd:51:4e:a1:ad:56:35:99:5b:1f:4d:f5:21: e6:31:b5:2d:04:38:4f:4f:a7:09:54:f5:a5:9b:ac:48:54:b3: b2:b6:e9:62:ce:b8:0a:15:b7:12:6b:1c:e6:26:c9:33:cf:01: f9:a4:1b:c9:f2:ab:dc:39:bf:86:e9:ec:ed:dc:49:97:7d:92: 98:e3:0e:79:7f:ed:fe:72:e9:54:0f:2c:40:b2:12:ba:ea:a6: 43:81:e5:bc:73:f5:93:c0:28:66:ab:29:26:d7:d6:e7:32:93: c4:91:51:aa:e5:27:2f:3b:71:15:0c:63:06:36:87:a6:7b:36: 9a:d7:61:c2:d8:c6:08:ab:5f:0c:ed:81:54:3c:02:05:06:19: 2b:a3:ac:bd:fb:9c:a1:7f:c4:0a:a1:db:cd:82:90:89:31:03: 35:11:10:da:88:19:60:f4:86:02:18:ed:15:9e:1d:51:67:84: 88:f0:fa:1a:60:9c:84:df:83:39:15:a4:fe:df:01:c6:cb:c8: 42:7d:b8:4a:3a:e2:72:3b:a5:41:47:ed:7e:c1:07:b5:ac:a2: 2a:ce:e3:d9:d5:d7:43:79:14:bd:f3:2c:23:2e:27:62:7b:3c: ad:55:95:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9FQoj8TjAptxkjbTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk ZWE3ZTQ4MDktYzJkMi00MTY0LWFkNDAtOGI4YjdhN2Y5MDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOu3SmxeQpBaHAaDUwm0T1YzfSfV/D2nBLB4 cAfl+Vb9bafxNzkNFvC0K5dsWqJ6ps8oHLLh2lJqbY+BuO56F/iLgk4bXu96piO0 BF0ExnoIqELFt9afk7+jl9kI3LrotEocPz8SAdAkGr+qO85Bf6Cn/BWpB69BRczn 7NFctfmgF+ijXNQ6KGW//MKGhp1/2cC4QUL0CePG1+wCHaxJF/Nus6olWGaEIpui Vh1Ah3nLAw9k6kknAJ1DXfXwOYFSFMkivS8fa+yjjKy4ZKDQ8J6VTkveOpJr1dG6 MOXgzEYAF5/v1QClD+IATteSRKCEhVUSY8Lm7T+nlDbXrfnxfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmC140HrhjbvStL1gx8RjI+MZ9/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzQyODA0NWUtM2M3ZS0z MGJjLTgzZDAtNWEzNWNjYzIzNWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJl8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoR+9t1P3lsG+lbut3hVpP2Y2Y/0PNQvVFOoa1WNZlbH031IeYxtS0E OE9PpwlU9aWbrEhUs7K26WLOuAoVtxJrHOYmyTPPAfmkG8nyq9w5v4bp7O3cSZd9 kpjjDnl/7f5y6VQPLECyErrqpkOB5bxz9ZPAKGarKSbX1ucyk8SRUarlJy87cRUM YwY2h6Z7NprXYcLYxgirXwztgVQ8AgUGGSujrL37nKF/xAqh282CkIkxAzURENqI GWD0hgIY7RWeHVFnhIjw+hpgnITfgzkVpP7fAcbLyEJ9uEo64nI7pUFH7X7BB7Ws oirO49nV10N5FL3zLCMuJ2J7PK1VlTk= -----END CERTIFICATE-----Generated at Thu Sep 24 06:41:16 2026 by rpki-client