$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f8ac9af-9826-3e87-876d-02a572c48591.roa File: 4f8ac9af-9826-3e87-876d-02a572c48591.roa (raw, json) Hash identifier: vEqgxUU9R0mOUwbYGJOKgHec873nWu4t1lD8htQrWOU= Subject key identifier: 8A:90:ED:5F:E7:B2:20:9F:81:A9:9A:32:B5:3C:30:B1:3C:17:97:99 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F3E47DE541473BB8DECC85B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f8ac9af-9826-3e87-876d-02a572c48591.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 396584 IP address blocks: 192.5.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:de:54:14:73:bb:8d:ec:c8:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=fc4dacda-248b-4947-8e2b-b2ce9b698db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:44:41:f1:4d:e3:d0:d8:cd:c7:1a:12:17:6f: 1a:14:3d:33:4a:62:a3:3e:83:08:8d:3f:92:82:df: 28:0f:b4:f6:25:a5:9c:8e:4d:3b:1f:3b:19:03:aa: 9e:37:03:95:8e:66:40:3b:eb:28:d2:1e:bb:ab:70: 05:2d:36:a9:26:96:01:d7:cd:78:a1:d5:22:9d:05: 8d:05:96:0e:9e:e3:5a:4d:b4:12:b2:29:0a:ce:21: 7c:6c:53:bf:62:87:79:43:14:37:08:93:c5:39:37: f1:13:03:a5:77:51:c7:25:b6:33:cc:c0:74:bf:01: 61:ed:77:31:18:d3:23:7c:97:b7:d8:86:76:86:33: 47:55:a2:95:38:69:e5:8c:84:f6:cc:66:05:af:23: a7:f0:93:d2:37:09:3c:07:07:5c:dd:ec:ad:5d:a7: 24:1f:7f:21:44:0c:00:20:44:6b:3d:b5:f7:ff:22: f1:3a:1c:a4:df:59:6d:e6:88:74:84:b2:fe:87:96: 46:6b:ca:c7:f2:d5:e9:48:a4:31:4e:4d:f3:e9:6a: 84:84:d7:28:63:35:4e:3a:fd:7c:4c:83:9d:73:26: b1:e0:7b:d2:4f:59:21:9f:f5:02:9e:69:ae:4d:5e: 55:c0:61:65:d6:a4:68:36:54:1b:1e:66:76:b5:b0: a4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:90:ED:5F:E7:B2:20:9F:81:A9:9A:32:B5:3C:30:B1:3C:17:97:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f8ac9af-9826-3e87-876d-02a572c48591.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.5.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:99:9a:81:bc:fa:91:ca:b6:ac:c3:d0:f7:e8:b2:43:48:63: 75:67:66:7e:8c:8b:75:34:8f:4e:0b:d7:30:f9:12:8e:f1:eb: e6:b8:4d:0e:a6:2d:19:50:59:f2:2e:c1:cd:fb:5f:d2:90:6f: 96:0d:32:7a:a1:8a:7e:02:08:f8:49:f0:0e:9c:b4:24:1a:73: 03:c1:aa:38:83:26:1d:01:3b:4c:e3:2a:b1:ac:41:04:bc:97: 07:fd:de:e1:67:02:cc:6d:2c:fb:b9:cd:01:ba:a7:2e:53:ba: 6e:cf:98:da:e8:36:89:31:0d:f9:51:b1:bc:4f:99:dd:48:29: 43:9e:8b:c6:19:a0:68:e0:29:17:21:63:e9:63:74:ac:7f:ab: 54:db:86:ce:a4:10:fe:85:ce:51:a4:6e:b9:d3:85:60:17:be: 19:8d:99:3b:5e:14:8e:ee:26:bb:48:af:83:08:7d:af:70:35: 56:fc:e3:8d:76:c6:4f:bb:ec:db:c7:1f:af:35:01:af:d3:c9: b5:eb:5a:33:5d:0c:2e:28:5e:76:17:d1:13:f4:64:dd:a0:d7: ac:c2:5b:e6:a5:42:e1:8e:59:3c:61:03:a6:01:d6:4e:ec:53: 9d:5a:65:8b:ba:8d:41:0d:a2:b0:d2:43:3a:0b:40:ff:f2:0d: e3:f9:d5:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R95UFHO7jezIW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk ZmM0ZGFjZGEtMjQ4Yi00OTQ3LThlMmItYjJjZTliNjk4ZGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkRB8U3j0NjNxxoSF28aFD0zSmKjPoMIjT+S gt8oD7T2JaWcjk07HzsZA6qeNwOVjmZAO+so0h67q3AFLTapJpYB1814odUinQWN BZYOnuNaTbQSsikKziF8bFO/Yod5QxQ3CJPFOTfxEwOld1HHJbYzzMB0vwFh7Xcx GNMjfJe32IZ2hjNHVaKVOGnljIT2zGYFryOn8JPSNwk8Bwdc3eytXackH38hRAwA IERrPbX3/yLxOhyk31lt5oh0hLL+h5ZGa8rH8tXpSKQxTk3z6WqEhNcoYzVOOv18 TIOdcyax4HvST1khn/UCnmmuTV5VwGFl1qRoNlQbHmZ2tbCkSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqQ7V/nsiCfgamaMrU8MLE8F5eZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGY4YWM5YWYtOTgyNi0z ZTg3LTg3NmQtMDJhNTcyYzQ4NTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAUGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+ZmoG8+pHKtqzD0PfoskNIY3VnZn6Mi3U0j04L1zD5Eo7x6+a4TQ6m LRlQWfIuwc37X9KQb5YNMnqhin4CCPhJ8A6ctCQacwPBqjiDJh0BO0zjKrGsQQS8 lwf93uFnAsxtLPu5zQG6py5Tum7PmNroNokxDflRsbxPmd1IKUOei8YZoGjgKRch Y+ljdKx/q1Tbhs6kEP6FzlGkbrnThWAXvhmNmTteFI7uJrtIr4MIfa9wNVb84412 xk+77NvHH681Aa/TybXrWjNdDC4oXnYX0RP0ZN2g16zCW+alQuGOWTxhA6YB1k7s U51aZYu6jUENorDSQzoLQP/yDeP51TQ= -----END CERTIFICATE-----Generated at Mon Sep 28 23:34:26 2026 by rpki-client