$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/504fd55c-8d0f-3702-bdad-706f06762616.roa File: 504fd55c-8d0f-3702-bdad-706f06762616.roa (raw, json) Hash identifier: aDCLlVAHExkKeCw/zQlsdNYEBqRjCavy6VhOaspytCc= Subject key identifier: B0:BE:D9:40:FA:74:68:AB:51:F9:41:41:8E:4C:70:B3:CE:AD:C7:5D Certificate issuer: /CN=18f4eabf-2388-491f-922c-4973961dfd2e Certificate serial: 010D0C9F4328584F3E47D60222EFAD792921C7C0 Authority key identifier: 8B:8D:19:D1:85:FA:D9:E9:5B:06:4E:69:0A:0C:34:7B:6B:68:73:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/504fd55c-8d0f-3702-bdad-706f06762616.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 33099 IP address blocks: 192.135.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/18f4eabf-2388-491f-922c-4973961dfd2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/18f4eabf-2388-491f-922c-4973961dfd2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:d6:02:22:ef:ad:79:29:21:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18f4eabf-2388-491f-922c-4973961dfd2e Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=11f204c3-3cc2-45c5-bbf1-c4ecc6e118a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e6:ff:ee:f6:30:38:2a:c1:d1:2a:ac:5d:2f: 97:30:4b:1b:fc:4a:04:1b:60:7a:23:2d:3b:a5:58: 8b:cd:9c:66:e8:22:56:71:84:8d:67:f6:e7:8a:cf: 8b:f4:ed:51:5e:5f:00:ac:82:a5:94:d8:62:1c:a9: c6:43:26:f7:c3:77:f3:09:ef:26:3b:57:df:0e:88: 5a:74:0b:b0:ae:c2:1f:9a:16:9d:94:50:b3:69:73: 0f:35:3d:22:b2:21:a0:ca:77:2b:23:3d:c7:04:ab: e8:d8:0a:58:5c:42:09:95:39:eb:b6:1e:c3:07:48: 89:d9:66:2c:80:dc:9d:ab:8c:c6:1e:1e:1e:04:6c: b0:a7:26:74:01:0d:8c:c2:40:8e:41:fe:58:5c:ec: 47:d4:9d:da:d8:b6:08:df:c6:37:c8:9f:20:89:2f: d7:e1:c1:19:61:cb:9c:65:d7:39:99:f3:13:e4:ed: b9:7d:5f:bd:77:fb:11:d3:1d:2b:94:c2:77:88:81: 2a:a7:46:f6:c3:56:42:39:6d:51:79:de:f2:2b:1b: c5:aa:9d:c3:51:90:1f:e1:e1:4e:15:02:8e:77:11: 41:de:24:be:21:7b:a3:6f:5e:78:cf:08:92:66:c9: a8:37:b1:b6:00:b4:b8:43:a3:16:40:df:91:e7:67: 11:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BE:D9:40:FA:74:68:AB:51:F9:41:41:8E:4C:70:B3:CE:AD:C7:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/504fd55c-8d0f-3702-bdad-706f06762616.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/18f4eabf-2388-491f-922c-4973961dfd2e.crl X509v3 Authority Key Identifier: keyid:8B:8D:19:D1:85:FA:D9:E9:5B:06:4E:69:0A:0C:34:7B:6B:68:73:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer sbgp-ipAddrBlock: critical IPv4: 192.135.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:d7:68:04:86:d3:09:e0:11:dc:a5:8c:9f:5f:94:f7:8d:54: 9a:59:bb:6d:19:36:eb:12:77:96:b1:05:a4:f1:62:e2:73:4a: ad:b6:20:01:e0:3f:4a:78:c8:77:53:7d:fd:d1:cd:7a:db:a3: 8e:1f:20:7d:0d:bc:79:7a:c4:d8:e0:45:a7:a1:36:53:c1:71: 0e:29:4d:a4:04:9a:61:9a:be:c3:68:e1:c6:22:9a:57:1a:6f: a7:16:71:5c:e4:ee:ba:bf:42:44:47:3f:d4:28:5c:b2:11:e6: b9:84:e6:7b:c7:87:b4:6e:ea:27:08:e6:5a:8b:89:ad:9f:ed: f6:9d:33:20:e6:f9:b6:93:80:62:b3:7a:93:1a:d0:1c:03:7e: 38:0c:c4:f8:f9:e6:b9:23:65:7a:fa:cf:ce:c9:91:8d:c1:76: d9:eb:63:27:f2:39:e8:a5:b9:01:4d:0b:95:36:c4:37:9a:fa: 44:05:7e:8f:07:f0:a4:07:7d:05:7e:94:a3:52:92:fc:4d:ad: 00:09:00:14:b9:52:7f:49:53:9b:9a:ad:1e:7f:45:bc:5e:94: e5:cd:a4:23:6d:6f:e0:a0:f8:7e:f3:aa:35:af:67:1f:9b:4f: d9:2b:a0:c5:e3:f6:77:8d:d3:d6:d0:f8:a8:c2:bf:32:e0:9c: 67:8f:ac:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R9YCIu+teSkhx8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMThmNGVhYmYtMjM4OC00OTFmLTkyMmMtNDk3Mzk2MWRm ZDJlMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk MTFmMjA0YzMtM2NjMi00NWM1LWJiZjEtYzRlY2M2ZTExOGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArub/7vYwOCrB0SqsXS+XMEsb/EoEG2B6Iy07 pViLzZxm6CJWcYSNZ/bnis+L9O1RXl8ArIKllNhiHKnGQyb3w3fzCe8mO1ffDoha dAuwrsIfmhadlFCzaXMPNT0isiGgyncrIz3HBKvo2ApYXEIJlTnrth7DB0iJ2WYs gNydq4zGHh4eBGywpyZ0AQ2MwkCOQf5YXOxH1J3a2LYI38Y3yJ8giS/X4cEZYcuc Zdc5mfMT5O25fV+9d/sR0x0rlMJ3iIEqp0b2w1ZCOW1Red7yKxvFqp3DUZAf4eFO FQKOdxFB3iS+IXujb154zwiSZsmoN7G2ALS4Q6MWQN+R52cRjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLC+2UD6dGirUflBQY5McLPOrcddMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xOGY0 ZWFiZi0yMzg4LTQ5MWYtOTIyYy00OTczOTYxZGZkMmUvNTA0ZmQ1NWMtOGQwZi0z NzAyLWJkYWQtNzA2ZjA2NzYyNjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMThmNGVhYmYtMjM4OC00OTFmLTky MmMtNDk3Mzk2MWRmZDJlLzE4ZjRlYWJmLTIzODgtNDkxZi05MjJjLTQ5NzM5NjFk ZmQyZS5jcmwwHwYDVR0jBBgwFoAUi40Z0YX62elbBk5pCgw0e2toc/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xOGY0ZWFiZi0yMzg4LTQ5MWYtOTIyYy00OTcz OTYxZGZkMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIf7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvXaASG0wngEdyljJ9flPeNVJpZu20ZNusSd5axBaTxYuJzSq22IAHg P0p4yHdTff3RzXrbo44fIH0NvHl6xNjgRaehNlPBcQ4pTaQEmmGavsNo4cYimlca b6cWcVzk7rq/QkRHP9QoXLIR5rmE5nvHh7Ru6icI5lqLia2f7fadMyDm+baTgGKz epMa0BwDfjgMxPj55rkjZXr6z87JkY3BdtnrYyfyOeiluQFNC5U2xDea+kQFfo8H 8KQHfQV+lKNSkvxNrQAJABS5Un9JU5uarR5/RbxelOXNpCNtb+Cg+H7zqjWvZx+b T9kroMXj9neN09bQ+KjCvzLgnGePrK0= -----END CERTIFICATE-----Generated at Tue Sep 29 15:04:23 2026 by rpki-client