$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/f8e67cb7-1890-36a8-b180-7d4a5930fc84.roa File: f8e67cb7-1890-36a8-b180-7d4a5930fc84.roa (raw, json) Hash identifier: IDPEFhrSBFxtbKnFSrj6fEkGvcSWnzm8bKr1cRVMzjk= Subject key identifier: 29:D8:CC:D7:D4:D1:66:99:9D:04:81:78:CC:F5:04:68:E0:29:1E:B2 Certificate issuer: /CN=835152c2-2ed8-4151-8f82-ac9407335b2c Certificate serial: 010D0C9F4328584F5E62E48373C571064B2CE280 Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/f8e67cb7-1890-36a8-b180-7d4a5930fc84.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 31898 IP address blocks: 192.254.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:e4:83:73:c5:71:06:4b:2c:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=18b13938-eddb-4612-acaa-3912a2fe378e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a0:8e:7b:82:20:6a:f2:08:ab:21:d0:a8:53: c5:e1:72:8a:6e:37:8a:8f:d8:b6:55:1f:d3:19:61: dc:63:19:9a:be:a6:7a:dd:6d:7f:05:9d:8f:3e:c9: 7f:09:d9:d3:7f:f9:2b:eb:b9:fd:35:72:36:9d:2f: 24:14:c6:6d:d2:1a:98:be:81:53:1d:70:ba:3a:58: 35:77:e2:14:d8:c2:22:16:91:7a:ca:c1:d9:c1:bb: 4c:35:6a:4a:b6:0f:9f:27:51:de:e2:4e:31:94:de: 59:7f:4b:ea:2f:28:b8:46:53:26:7e:21:8c:00:29: 3b:41:12:9b:c6:63:54:cf:b9:4b:8a:9c:70:20:24: 29:15:e7:c0:1d:e5:1a:6a:f2:d3:1e:30:e7:56:76: 15:01:ad:3f:51:9d:7d:40:32:6f:8a:83:12:ca:78: 11:29:1b:4e:96:e3:92:1a:ff:fe:64:e0:6b:27:b9: 42:98:c5:93:31:01:98:fb:4b:38:03:fc:56:7c:fb: 21:15:72:b1:c8:06:e4:ee:9e:40:fd:3e:57:03:6e: f7:5f:35:f7:24:79:35:52:78:3e:bb:5b:c6:23:83: 98:0b:f9:6c:e5:6a:bc:5a:35:a4:c5:7d:6e:28:2e: 0e:de:a4:cd:00:11:90:df:a1:73:9c:85:0c:10:0c: e1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D8:CC:D7:D4:D1:66:99:9D:04:81:78:CC:F5:04:68:E0:29:1E:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/f8e67cb7-1890-36a8-b180-7d4a5930fc84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl X509v3 Authority Key Identifier: keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer sbgp-ipAddrBlock: critical IPv4: 192.254.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:6c:c1:4c:22:7d:15:d7:a1:03:20:d1:73:21:a6:7a:e1:1d: 18:89:98:c0:3a:d5:5e:ab:14:74:a1:71:cc:6a:6c:88:d1:3c: f8:f7:cf:d5:dd:85:99:ce:f9:1e:cb:9d:f8:14:3b:72:ee:54: 3a:8f:0b:0d:c1:32:d8:7d:3d:38:2e:1e:e8:17:74:67:ce:bc: b7:9d:c8:9b:1d:e4:62:0d:38:fa:de:db:0e:2b:1d:b6:87:b1: ac:25:5c:00:59:5c:37:b4:d4:31:ef:b1:59:6d:be:18:2b:dc: 5e:51:d1:da:09:7d:c4:6f:5f:3b:7a:98:d9:81:0e:cc:7e:2b: 01:80:ed:f2:f2:4b:ab:50:61:37:03:3e:4d:de:cd:4d:eb:0f: 14:43:e0:0b:b3:69:52:f3:e4:2f:80:45:78:95:7e:ac:46:7b: 3b:64:d2:97:51:d4:f4:42:85:f8:38:c2:ff:55:50:10:54:42: 8c:f6:d4:b4:4d:83:62:06:47:16:cb:b5:ce:a5:b5:f2:29:54: 0f:66:a1:4a:cd:06:3c:2a:54:b4:7a:28:cc:1d:a3:c5:4c:dd: 99:74:ac:95:57:7e:60:4e:91:98:bf:e8:22:9f:6a:7d:d6:90: 59:53:dc:07:24:6a:ad:f3:7a:73:35:5b:78:24:1f:8d:f9:b3: ec:75:bc:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYuSDc8VxBkss4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODM1MTUyYzItMmVkOC00MTUxLThmODItYWM5NDA3MzM1 YjJjMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk MThiMTM5MzgtZWRkYi00NjEyLWFjYWEtMzkxMmEyZmUzNzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqCOe4IgavIIqyHQqFPF4XKKbjeKj9i2VR/T GWHcYxmavqZ63W1/BZ2PPsl/CdnTf/kr67n9NXI2nS8kFMZt0hqYvoFTHXC6Olg1 d+IU2MIiFpF6ysHZwbtMNWpKtg+fJ1He4k4xlN5Zf0vqLyi4RlMmfiGMACk7QRKb xmNUz7lLipxwICQpFefAHeUaavLTHjDnVnYVAa0/UZ19QDJvioMSyngRKRtOluOS Gv/+ZOBrJ7lCmMWTMQGY+0s4A/xWfPshFXKxyAbk7p5A/T5XA273XzX3JHk1Ung+ u1vGI4OYC/ls5Wq8WjWkxX1uKC4O3qTNABGQ36FznIUMEAzh9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnYzNfU0WaZnQSBeMz1BGjgKR6yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84MzUx NTJjMi0yZWQ4LTQxNTEtOGY4Mi1hYzk0MDczMzViMmMvZjhlNjdjYjctMTg5MC0z NmE4LWIxODAtN2Q0YTU5MzBmYzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODM1MTUyYzItMmVkOC00MTUxLThm ODItYWM5NDA3MzM1YjJjLzgzNTE1MmMyLTJlZDgtNDE1MS04ZjgyLWFjOTQwNzMz NWIyYy5jcmwwHwYDVR0jBBgwFoAUip902Uy3YwUwNo8P7EWat+Zpdd4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84MzUxNTJjMi0yZWQ4LTQxNTEtOGY4Mi1hYzk0 MDczMzViMmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHwP6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpswUwifRXXoQMg0XMhpnrhHRiJmMA61V6rFHShccxqbIjRPPj3z9Xd hZnO+R7LnfgUO3LuVDqPCw3BMth9PTguHugXdGfOvLedyJsd5GINOPre2w4rHbaH sawlXABZXDe01DHvsVltvhgr3F5R0doJfcRvXzt6mNmBDsx+KwGA7fLyS6tQYTcD Pk3ezU3rDxRD4AuzaVLz5C+ARXiVfqxGeztk0pdR1PRChfg4wv9VUBBUQoz21LRN g2IGRxbLtc6ltfIpVA9moUrNBjwqVLR6KMwdo8VM3Zl0rJVXfmBOkZi/6CKfan3W kFlT3Ackaq3zenM1W3gkH435s+x1vIg= -----END CERTIFICATE-----Generated at Sat Oct 10 17:56:52 2026 by rpki-client