$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ee87ba0-6e6c-3046-9435-0071ddbc60be.roa File: 0ee87ba0-6e6c-3046-9435-0071ddbc60be.roa (raw, json) Hash identifier: Ny6nwfhCzbhBfyr5u790I7Gh7+0kYMkd20SuZ9pgCiE= Subject key identifier: 49:59:6E:91:A0:47:35:1C:29:5A:0E:F1:77:77:85:5F:90:98:D5:1C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F62931165E7F894F5AE83EF80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ee87ba0-6e6c-3046-9435-0071ddbc60be.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396694 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:11:65:e7:f8:94:f5:ae:83:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=cebec8d7-a18a-4ba8-ad37-70dc0bdd14ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:dd:73:28:1f:b1:6a:ee:19:79:ac:a3:b0:b1: fe:88:5c:4e:50:e4:2a:eb:89:91:b2:7b:39:e5:09: 15:83:32:3b:75:68:94:4e:d7:9c:b1:9d:f0:d7:3b: 4d:51:3a:fd:e5:1d:53:43:f3:41:fd:b5:2c:e0:3d: c4:84:31:75:0f:a0:9e:d0:8e:0a:18:19:42:c6:be: 0f:59:44:57:87:16:cf:74:a9:7b:62:72:a4:14:ca: f5:48:27:9d:e9:12:59:78:60:fb:04:f9:1c:ac:a3: a0:1f:76:83:f8:07:3c:f2:64:05:82:27:bf:d3:d5: b6:e5:fe:9a:7c:62:80:70:c4:68:43:8a:a6:aa:b3: 18:26:c8:8c:97:f5:e9:c5:2c:af:bf:ab:da:00:5d: 70:ee:f8:74:6d:1b:7f:9f:fc:9b:26:90:3c:bd:71: 38:bb:89:e5:08:5f:78:f3:6f:b1:d2:c7:80:f9:e2: 0c:b8:6d:49:04:4b:6f:d5:8f:6f:a0:72:45:31:db: 00:4a:45:a5:22:21:cd:c5:51:d6:9a:8e:7e:55:72: 0f:2d:e9:f7:fe:2e:3a:7a:0f:61:13:b1:92:ef:d8: 2c:0a:2f:8d:1f:e8:5e:f9:d7:e8:89:c4:5d:ab:97: c9:78:f1:30:91:ae:c8:98:f4:11:00:07:e7:3f:5f: 28:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:59:6E:91:A0:47:35:1C:29:5A:0E:F1:77:77:85:5F:90:98:D5:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ee87ba0-6e6c-3046-9435-0071ddbc60be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:38:d9:4d:3a:06:d8:77:c9:2e:fd:3a:be:90:0a:04:f3:34: 5c:d1:fb:ed:06:2c:4f:4e:b2:d9:50:b3:6d:a2:8b:7b:94:1f: 4a:76:fb:6f:95:01:63:16:b4:bc:e6:2a:6f:cc:8a:17:94:54: 30:96:88:22:d7:10:94:04:a1:c2:ea:72:f0:ef:ea:1d:8c:63: 94:b0:69:35:21:be:c7:ff:cb:8a:63:5e:77:36:d8:e0:ae:c8: 49:43:c4:a7:b3:71:8e:59:30:9f:d0:0f:8c:a5:74:0c:a0:7e: 00:8c:93:26:c7:9a:e8:70:cf:a7:04:9a:70:a0:48:3f:d4:59: c1:88:ed:bb:32:ec:e5:9a:17:d5:03:94:0a:cc:61:58:8e:9b: 33:72:90:e7:c6:2e:59:bc:8e:00:2b:f7:c6:1c:bb:9f:55:bc: 73:50:30:d3:42:a0:e7:1a:7b:60:4d:4c:01:45:48:31:a6:65: 53:d8:69:d6:8c:4c:7e:bf:71:77:b5:2c:a6:43:e6:d8:81:83: 25:22:49:3a:65:fc:6b:55:05:7f:15:46:16:7b:5c:64:3e:d5: 0b:e3:ac:b9:fd:f3:c1:2c:6e:2f:40:2a:a8:3a:af:b8:f6:05: be:3d:b4:ec:a4:0d:b0:fd:08:50:b3:c0:89:b0:6b:13:1a:16: df:98:47:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikxFl5/iU9a6D74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk Y2ViZWM4ZDctYTE4YS00YmE4LWFkMzctNzBkYzBiZGQxNGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzd1zKB+xau4ZeayjsLH+iFxOUOQq64mRsns5 5QkVgzI7dWiUTtecsZ3w1ztNUTr95R1TQ/NB/bUs4D3EhDF1D6Ce0I4KGBlCxr4P WURXhxbPdKl7YnKkFMr1SCed6RJZeGD7BPkcrKOgH3aD+Ac88mQFgie/09W25f6a fGKAcMRoQ4qmqrMYJsiMl/XpxSyvv6vaAF1w7vh0bRt/n/ybJpA8vXE4u4nlCF94 82+x0seA+eIMuG1JBEtv1Y9voHJFMdsASkWlIiHNxVHWmo5+VXIPLen3/i46eg9h E7GS79gsCi+NH+he+dfoicRdq5fJePEwka7ImPQRAAfnP18oJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElZbpGgRzUcKVoO8Xd3hV+QmNUcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGVlODdiYTAtNmU2Yy0z MDQ2LTk0MzUtMDA3MWRkYmM2MGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACU42U06Bth3yS79Or6QCgTzNFzR++0GLE9OstlQs22ii3uUH0p2+2+V AWMWtLzmKm/MiheUVDCWiCLXEJQEocLqcvDv6h2MY5SwaTUhvsf/y4pjXnc22OCu yElDxKezcY5ZMJ/QD4yldAygfgCMkybHmuhwz6cEmnCgSD/UWcGI7bsy7OWaF9UD lArMYViOmzNykOfGLlm8jgAr98Ycu59VvHNQMNNCoOcae2BNTAFFSDGmZVPYadaM TH6/cXe1LKZD5tiBgyUiSTpl/GtVBX8VRhZ7XGQ+1QvjrLn988Esbi9AKqg6r7j2 Bb49tOykDbD9CFCzwImwaxMaFt+YRyQ= -----END CERTIFICATE-----Generated at Fri Oct 9 06:30:39 2026 by rpki-client