$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/db6195fd-1939-3b6e-ad36-d0a8359d831e.roa File: db6195fd-1939-3b6e-ad36-d0a8359d831e.roa (raw, json) Hash identifier: ZUMfi9pA1Nk+QvvQ8KdUqWPiGLz38p6Mcrq9xsw4Hpg= Subject key identifier: 4D:11:48:15:14:1B:28:C7:A6:EE:29:CC:56:75:AD:33:CC:01:6B:59 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F4975CBC91AF9F2CEFAB9B360 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/db6195fd-1939-3b6e-ad36-d0a8359d831e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 203 IP address blocks: 192.25.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:cb:c9:1a:f9:f2:ce:fa:b9:b3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=49aa633c-2b89-444b-9e27-51ff44fc1bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:71:00:9f:8d:ed:2e:71:9f:d1:ca:aa:f2:56: 21:40:43:89:79:f3:d1:bd:30:d9:00:41:98:5a:54: cf:27:33:58:ec:46:36:ed:d5:b2:df:4e:2b:36:ac: de:06:7d:c3:07:45:78:34:e0:4a:79:4a:9e:2e:d5: f6:7f:37:20:4d:7c:a3:86:94:1d:0b:29:e1:2c:be: 19:d8:b5:64:99:9c:0c:ac:53:9d:0d:ee:dc:dc:db: 84:c2:d3:bc:b1:8c:8b:40:02:a4:9e:c1:56:96:f1: 42:ba:ba:fb:02:de:c9:52:51:84:43:34:f8:23:b8: 01:6d:77:75:72:94:83:e7:aa:31:f0:53:31:bb:14: b3:a8:74:19:32:ea:b4:d8:e5:cc:56:c0:ea:68:df: 3d:9c:5a:11:e1:fc:6d:8f:eb:95:17:dc:5c:61:03: 7b:c6:80:93:67:ec:11:be:52:de:b3:b2:e1:3e:32: 7c:cd:07:be:80:55:2d:e6:c0:0d:7b:e4:00:e3:44: 83:70:90:33:6b:4a:34:ec:bc:fd:bf:ac:39:fe:86: 48:8e:d7:b9:ec:38:af:32:e1:73:94:a7:40:40:c4: a5:a4:9e:39:f0:42:7b:82:88:bc:f2:f5:80:da:0f: aa:1d:30:4c:11:14:de:bd:af:d8:75:89:df:8b:27: db:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:11:48:15:14:1B:28:C7:A6:EE:29:CC:56:75:AD:33:CC:01:6B:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/db6195fd-1939-3b6e-ad36-d0a8359d831e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 192.25.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:4c:8b:9e:57:5c:17:d2:34:1f:7e:68:e9:46:20:57:3d:17: 11:12:2f:67:e2:fb:9e:ba:25:9b:bc:87:0c:00:a0:06:61:85: f1:6a:3b:42:00:42:f8:fe:d3:2c:e3:c1:85:0b:0f:4e:bf:3a: 1d:a2:82:0c:c5:a8:66:1d:ea:55:1e:67:5e:70:89:2e:d4:49: 1a:ef:23:40:df:74:de:1b:b2:c5:76:57:5c:45:38:96:ce:68: 03:e9:11:b6:54:5d:7a:8b:72:94:fe:ac:c0:3e:b5:f8:ea:5e: aa:9d:54:3b:62:86:08:df:cf:0a:de:e1:7b:11:77:8a:e1:d2: 10:ea:7c:30:36:68:1d:43:a3:b6:47:93:ed:04:01:8d:9e:7f: d5:92:9e:9f:8c:96:d3:39:0f:1c:53:65:b0:49:0a:54:82:3d: ab:58:e3:95:65:4d:df:d6:a6:b5:78:20:8e:d9:f2:33:1c:62: b8:89:73:e0:b2:e1:71:ac:87:d9:07:51:6e:aa:33:06:42:7e: a2:54:0e:9b:80:84:41:fa:9c:df:8a:3f:7d:be:a6:81:5a:19: 37:3f:ee:d3:ee:33:11:e9:39:26:e8:86:d4:1b:70:22:ac:5f: aa:c3:51:95:ba:2d:7f:05:e0:e1:ad:5d:0e:a6:3e:af:af:7e: 32:7d:18:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdcvJGvnyzvq5s2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDlhYTYzM2MtMmI4OS00NDRiLTllMjctNTFmZjQ0ZmMxYmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknEAn43tLnGf0cqq8lYhQEOJefPRvTDZAEGY WlTPJzNY7EY27dWy304rNqzeBn3DB0V4NOBKeUqeLtX2fzcgTXyjhpQdCynhLL4Z 2LVkmZwMrFOdDe7c3NuEwtO8sYyLQAKknsFWlvFCurr7At7JUlGEQzT4I7gBbXd1 cpSD56ox8FMxuxSzqHQZMuq02OXMVsDqaN89nFoR4fxtj+uVF9xcYQN7xoCTZ+wR vlLes7LhPjJ8zQe+gFUt5sANe+QA40SDcJAza0o07Lz9v6w5/oZIjte57DivMuFz lKdAQMSlpJ458EJ7goi88vWA2g+qHTBMERTeva/YdYnfiyfbZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0RSBUUGyjHpu4pzFZ1rTPMAWtZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZGI2MTk1ZmQtMTkzOS0z YjZlLWFkMzYtZDBhODM1OWQ4MzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwBmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVMi55XXBfSNB9+aOlGIFc9FxESL2fi+566JZu8hwwAoAZhhfFqO0IA Qvj+0yzjwYULD06/Oh2iggzFqGYd6lUeZ15wiS7USRrvI0DfdN4bssV2V1xFOJbO aAPpEbZUXXqLcpT+rMA+tfjqXqqdVDtihgjfzwre4XsRd4rh0hDqfDA2aB1Do7ZH k+0EAY2ef9WSnp+MltM5DxxTZbBJClSCPatY45VlTd/WprV4II7Z8jMcYriJc+Cy 4XGsh9kHUW6qMwZCfqJUDpuAhEH6nN+KP32+poFaGTc/7tPuMxHpOSbohtQbcCKs X6rDUZW6LX8F4OGtXQ6mPq+vfjJ9GAE= -----END CERTIFICATE-----Generated at Sun Oct 11 16:49:12 2026 by rpki-client