$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2fa6aafa-a6ac-32a6-91c9-11181b539b02.roa File: 2fa6aafa-a6ac-32a6-91c9-11181b539b02.roa (raw, json) Hash identifier: syiRSRfvpUcuNKbezB/Jyaewh7jlF/dO89xp8wcHZOs= Subject key identifier: C4:51:BA:0D:66:B5:B9:69:36:68:1F:AE:81:3C:6A:85:B5:38:C5:08 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F2ABD1B69CE7556547EACAF00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2fa6aafa-a6ac-32a6-91c9-11181b539b02.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 202 IP address blocks: 192.25.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:1b:69:ce:75:56:54:7e:ac:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=415ab42f-dbe6-4cc8-b46e-d98e13906b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3e:6f:8b:2a:db:0c:5d:15:03:74:66:58:7e: 54:53:79:74:e4:fe:7f:7b:3f:b9:fb:8d:4e:db:a8: 4d:6d:42:0f:7b:b3:7e:05:2a:82:f4:a9:97:42:fa: 7d:89:4e:38:f9:db:a8:26:f7:b2:28:4d:c8:bb:51: 44:00:a0:d8:9b:3f:db:43:06:6f:46:d4:31:81:b3: 06:5a:93:89:f0:e9:0e:6e:49:da:4c:e5:f1:2f:20: fa:db:d5:54:c6:78:3e:92:33:72:06:de:ae:da:d3: bb:41:f5:9b:d1:10:51:f6:02:67:39:38:6e:09:76: db:1b:d3:c5:e7:25:7b:29:f2:16:b9:99:4c:a0:2c: c0:a8:21:32:32:b5:fd:66:84:82:15:72:b9:ec:6a: c2:f7:94:88:26:a6:0c:e2:e1:74:af:37:8b:d4:77: 41:14:84:7b:34:18:97:85:c8:20:df:1b:3e:ba:a6: 22:4d:8f:94:cf:b3:e1:b4:a3:a3:b9:6a:c7:c4:a3: 91:03:25:e1:83:0e:13:cf:f6:84:aa:0e:b5:a6:9c: 89:33:37:ef:07:58:7e:f3:4c:45:cb:74:a0:fa:29: 5e:e0:a7:fa:b0:8f:95:8b:71:5d:6a:13:70:26:6b: 9b:01:00:53:35:8c:08:cf:12:94:16:da:6c:e3:18: 92:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:51:BA:0D:66:B5:B9:69:36:68:1F:AE:81:3C:6A:85:B5:38:C5:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2fa6aafa-a6ac-32a6-91c9-11181b539b02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 192.25.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:d1:e1:24:d9:40:81:45:89:02:d7:1f:4f:fd:dd:67:55:9c: cd:8c:5b:b5:94:d4:31:83:25:12:9b:8b:c0:72:c1:b9:84:d6: 33:d6:a2:6c:a6:b4:34:c1:0f:c9:27:04:ff:1c:02:64:84:13: 44:51:13:c7:c2:6e:d2:8b:43:48:0d:18:81:53:22:95:55:69: ea:d8:5f:ed:13:48:47:4b:bc:fe:57:56:bd:9b:c6:dd:02:b1: d9:99:89:22:5d:16:ac:b3:17:9e:df:a6:b2:12:91:36:7c:e1: a7:f5:28:ac:bb:eb:9f:a6:b9:d8:ac:77:67:62:6d:76:3d:ef: 96:cd:35:8e:12:0d:8b:8c:a1:8a:31:9c:34:8d:bf:29:e2:ac: 51:ce:ed:a1:ff:7e:b3:f5:ca:b5:a3:26:52:34:fe:f4:d9:aa: 28:a4:85:59:05:48:49:64:a2:42:cc:4f:00:02:f5:0f:d9:cb: f2:3a:6b:9e:aa:59:be:76:ba:20:af:34:3d:22:0b:1c:31:8a: 9e:91:06:c3:44:71:5e:82:02:f3:17:26:ef:59:c9:14:ad:d9: 2a:87:c4:70:11:dc:9f:28:3a:d7:d4:73:fe:e4:a1:82:e8:79: 98:9d:8c:83:6a:4f:99:b3:f3:d6:bf:a9:d5:21:a9:3a:57:64: 18:41:7b:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvRtpznVWVH6srwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk NDE1YWI0MmYtZGJlNi00Y2M4LWI0NmUtZDk4ZTEzOTA2YjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhj5viyrbDF0VA3RmWH5UU3l05P5/ez+5+41O 26hNbUIPe7N+BSqC9KmXQvp9iU44+duoJveyKE3Iu1FEAKDYmz/bQwZvRtQxgbMG WpOJ8OkObknaTOXxLyD629VUxng+kjNyBt6u2tO7QfWb0RBR9gJnOThuCXbbG9PF 5yV7KfIWuZlMoCzAqCEyMrX9ZoSCFXK57GrC95SIJqYM4uF0rzeL1HdBFIR7NBiX hcgg3xs+uqYiTY+Uz7PhtKOjuWrHxKORAyXhgw4Tz/aEqg61ppyJMzfvB1h+80xF y3Sg+ile4Kf6sI+Vi3FdahNwJmubAQBTNYwIzxKUFtps4xiSiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRRug1mtblpNmgfroE8aoW1OMUIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMmZhNmFhZmEtYTZhYy0z MmE2LTkxYzktMTExODFiNTM5YjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBk4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDR4STZQIFFiQLXH0/93WdVnM2MW7WU1DGDJRKbi8BywbmE1jPWomym tDTBD8knBP8cAmSEE0RRE8fCbtKLQ0gNGIFTIpVVaerYX+0TSEdLvP5XVr2bxt0C sdmZiSJdFqyzF57fprISkTZ84af1KKy765+mudisd2dibXY975bNNY4SDYuMoYox nDSNvynirFHO7aH/frP1yrWjJlI0/vTZqiikhVkFSElkokLMTwAC9Q/Zy/I6a56q Wb52uiCvND0iCxwxip6RBsNEcV6CAvMXJu9ZyRSt2SqHxHAR3J8oOtfUc/7koYLo eZidjINqT5mz89a/qdUhqTpXZBhBe8Y= -----END CERTIFICATE-----Generated at Sun Sep 20 15:17:03 2026 by rpki-client