$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c3a47287-6a92-359f-b69b-3740b19cd6fb.roa File: c3a47287-6a92-359f-b69b-3740b19cd6fb.roa (raw, json) Hash identifier: idYjCQRvbcKtJn1oAildZhiXLDh8uvfXmWdMENEiAq4= Subject key identifier: 41:06:D8:C3:12:16:54:6A:B0:2F:99:CD:42:E5:9B:F2:8B:DA:53:0D Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE42324BBC9C523C5D4047CA0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c3a47287-6a92-359f-b69b-3740b19cd6fb.roa Signing time: Wed 19 Aug 2026 18:03:38 +0000 ROA not before: Wed 19 Aug 2026 18:03:38 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 15562 IP address blocks: 192.147.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:24:bb:c9:c5:23:c5:d4:04:7c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:38 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=91d55dcf-5980-4f99-8f38-aa1fe11d54bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b1:09:f8:14:6c:ce:11:4e:74:2e:8e:74:67: c8:ee:6d:4f:ea:e5:35:2d:cf:de:b3:d6:fa:aa:09: f7:d2:8b:9a:e1:b2:8f:12:f0:16:99:75:12:19:71: 31:9a:b1:2a:fb:5c:0d:4e:26:2d:ce:07:96:96:b2: d1:af:90:59:2b:e3:06:56:01:c4:34:04:87:d9:0b: 61:a5:37:18:e0:08:4b:f4:04:f9:23:87:bf:4e:ab: 32:84:20:d0:35:46:e9:6a:51:ca:ba:69:a9:63:9b: 89:76:97:63:44:9c:8d:04:10:ae:82:b4:34:d8:57: 62:13:f1:dc:16:7d:1a:e7:f3:7e:57:47:75:01:59: 8c:c4:8d:df:6a:46:da:1a:0a:c6:a7:c8:dd:95:87: 70:f4:de:e3:ae:72:f6:94:a7:43:98:b0:0d:4c:ee: bf:e6:8a:98:39:10:38:80:26:d9:33:9c:a9:72:77: 8e:1a:45:f0:d5:44:7c:b2:87:af:33:cd:e0:ac:61: 5d:74:f5:a1:9c:8d:26:b1:1a:90:8f:21:c6:8d:31: c6:65:d6:c9:21:48:4c:41:7e:c3:57:48:45:c0:63: 2b:77:a4:da:a1:52:7f:6f:d5:1f:3a:76:8d:43:0d: 8f:dc:d0:45:fc:a0:40:b4:15:8c:a8:26:50:52:f4: 60:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:06:D8:C3:12:16:54:6A:B0:2F:99:CD:42:E5:9B:F2:8B:DA:53:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c3a47287-6a92-359f-b69b-3740b19cd6fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 192.147.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:c4:05:bb:1a:e2:26:71:b8:be:35:43:f3:e7:6a:81:34:9d: 83:09:32:5d:86:55:3f:24:5b:2c:c1:76:63:ef:5e:28:59:63: cf:bd:38:9d:4b:b4:77:55:2e:26:a6:ec:0d:17:40:3f:32:72: 23:df:5a:26:1a:79:7b:90:29:12:0d:41:70:95:84:9a:4c:f0: 56:59:42:f6:3b:a4:25:15:98:02:61:6c:46:c3:3d:6c:08:6e: e7:69:69:4d:af:c8:19:fb:1e:4c:32:8d:c8:9e:05:3d:cb:de: be:24:71:83:a9:b8:f3:16:c3:91:0b:21:4a:ea:64:43:69:45: 2d:0a:06:cd:05:78:a9:69:15:cd:23:90:7a:ed:8f:26:03:80: f8:39:db:f5:d1:a6:34:94:77:9a:92:a5:22:41:0e:66:d0:b3: d3:c7:d3:ca:07:72:d8:e7:c3:13:0f:30:c9:a2:ab:fd:36:eb: fd:d7:c1:07:a5:d1:61:e0:cb:36:9b:fa:3d:c1:0b:81:67:b2: 92:bf:d0:f7:fe:45:7f:3d:59:73:f0:a7:13:2c:4d:00:3c:2b: 18:56:b0:ca:39:32:b8:2b:d4:ee:e0:0d:ea:81:9a:31:90:c7: 47:57:4d:63:62:d8:8c:bd:09:d5:d0:0d:a0:a7:2e:a8:d3:8b: 89:0e:dc:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIyS7ycUjxdQEfKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDMzOFoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk OTFkNTVkY2YtNTk4MC00Zjk5LThmMzgtYWExZmUxMWQ1NGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirEJ+BRszhFOdC6OdGfI7m1P6uU1Lc/es9b6 qgn30oua4bKPEvAWmXUSGXExmrEq+1wNTiYtzgeWlrLRr5BZK+MGVgHENASH2Qth pTcY4AhL9AT5I4e/TqsyhCDQNUbpalHKummpY5uJdpdjRJyNBBCugrQ02FdiE/Hc Fn0a5/N+V0d1AVmMxI3fakbaGgrGp8jdlYdw9N7jrnL2lKdDmLANTO6/5oqYORA4 gCbZM5ypcneOGkXw1UR8soevM83grGFddPWhnI0msRqQjyHGjTHGZdbJIUhMQX7D V0hFwGMrd6TaoVJ/b9UfOnaNQw2P3NBF/KBAtBWMqCZQUvRgpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEG2MMSFlRqsC+ZzULlm/KL2lMNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYzNhNDcyODctNmE5Mi0z NTlmLWI2OWItMzc0MGIxOWNkNmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJOoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDEBbsa4iZxuL41Q/PnaoE0nYMJMl2GVT8kWyzBdmPvXihZY8+9OJ1L tHdVLiam7A0XQD8yciPfWiYaeXuQKRINQXCVhJpM8FZZQvY7pCUVmAJhbEbDPWwI budpaU2vyBn7HkwyjcieBT3L3r4kcYOpuPMWw5ELIUrqZENpRS0KBs0FeKlpFc0j kHrtjyYDgPg52/XRpjSUd5qSpSJBDmbQs9PH08oHctjnwxMPMMmiq/026/3XwQel 0WHgyzab+j3BC4FnspK/0Pf+RX89WXPwpxMsTQA8KxhWsMo5Mrgr1O7gDeqBmjGQ x0dXTWNi2Iy9CdXQDaCnLqjTi4kO3CA= -----END CERTIFICATE-----Generated at Sun Sep 20 12:54:20 2026 by rpki-client