$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70ea23bb-52a4-3de6-9d35-be3f1233af9c.roa File: 70ea23bb-52a4-3de6-9d35-be3f1233af9c.roa (raw, json) Hash identifier: MocoEuqyl6xSwOlULHMom/8ZxCQvJerSLMba+ruYghU= Subject key identifier: 68:28:A7:4D:97:3A:DF:86:FB:23:AF:30:DA:40:DD:09:E9:17:EC:C2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4972C58B6BD089972829B000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70ea23bb-52a4-3de6-9d35-be3f1233af9c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396580 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:c5:8b:6b:d0:89:97:28:29:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2ab20be4-454d-4dd9-a89f-2318a00ca898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a2:41:8f:7f:76:e2:8b:7d:6d:b2:7a:65:8d: 0d:e8:9c:b6:7f:e9:48:4b:21:3a:d6:03:85:a8:44: dc:8a:b8:a8:e4:8d:cb:e3:fa:13:26:5b:0f:4d:a7: 47:45:af:fd:ba:79:01:47:6a:92:80:23:40:e1:c1: 0d:6f:e5:ce:36:da:37:0b:37:93:97:f4:81:70:82: 37:d1:0f:48:83:ad:82:81:dd:48:98:f6:a1:8c:fe: 60:bf:44:8f:c7:58:20:1a:01:92:87:b0:84:34:17: 2d:e7:97:c6:b9:fc:be:b8:c4:71:6e:8b:29:a9:e5: 0b:6a:23:3e:87:a9:0e:d2:1f:39:96:64:28:9f:ea: 99:9f:a1:2c:2c:66:46:b9:7f:70:0b:87:d5:1b:67: 24:03:a4:60:72:b3:a2:f9:48:16:bc:6a:e4:9c:a4: 71:ae:ed:91:c9:e0:23:5b:1e:15:f9:de:f6:77:dd: ff:2a:c0:61:9c:4b:66:1f:d2:a2:dc:77:e0:5f:7e: 2f:b5:dd:97:c9:c0:b5:67:0e:2f:b3:09:28:18:0e: 7c:ce:99:1d:db:23:07:ed:dc:bb:a5:c2:9c:71:5b: 32:32:f2:c4:54:6d:b4:51:0d:0a:0c:1d:77:66:eb: cf:58:b2:46:50:01:30:7a:07:86:a8:cc:bf:27:15: 8c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:28:A7:4D:97:3A:DF:86:FB:23:AF:30:DA:40:DD:09:E9:17:EC:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70ea23bb-52a4-3de6-9d35-be3f1233af9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:5d:59:19:b9:3c:46:4c:e1:fe:4e:c5:95:e1:e8:06:86:52: 8e:f3:7a:3e:8e:f0:8a:68:08:f6:4c:bf:a5:42:ae:22:27:16: 6c:b6:b6:6b:e4:3e:d8:f9:ea:84:ee:f9:ff:46:78:55:b9:25: 71:b3:76:c8:8f:dc:3c:26:32:d4:65:3a:08:a1:f3:22:fa:c6: a6:e3:6f:c4:1b:93:91:e2:b1:ce:8b:3a:13:4a:be:e8:04:a3: 84:73:78:96:a6:56:8c:77:3d:0b:f7:43:47:26:f1:db:1a:d0: b9:8f:3a:e6:5e:42:a1:c6:19:2e:04:fa:ee:70:c3:ae:8b:bb: 20:6a:58:41:c6:64:3a:6a:a5:75:bd:ea:2d:74:f6:ca:79:56: 86:f0:2e:e7:7e:49:3e:17:15:8b:f2:88:d7:e9:1c:10:34:2c: 02:75:a2:71:f8:de:88:92:1a:96:db:0f:a3:27:32:e0:44:71: 50:92:df:92:62:65:79:ad:44:03:20:68:34:c9:9d:6a:40:6e: 9a:f1:1a:c6:e6:0d:dd:d5:61:aa:6a:3e:ac:65:46:60:f5:e1: 62:8b:98:f6:8a:1c:5f:0e:21:b1:1c:5c:df:32:8c:b7:ff:c2: d6:d2:d6:b8:65:b4:b7:a2:d1:e5:a5:3d:51:62:13:bc:25:32: 80:77:ad:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcsWLa9CJlygpsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmFiMjBiZTQtNDU0ZC00ZGQ5LWE4OWYtMjMxOGEwMGNhODk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6JBj3924ot9bbJ6ZY0N6Jy2f+lISyE61gOF qETcirio5I3L4/oTJlsPTadHRa/9unkBR2qSgCNA4cENb+XONto3CzeTl/SBcII3 0Q9Ig62Cgd1ImPahjP5gv0SPx1ggGgGSh7CENBct55fGufy+uMRxbospqeULaiM+ h6kO0h85lmQon+qZn6EsLGZGuX9wC4fVG2ckA6RgcrOi+UgWvGrknKRxru2RyeAj Wx4V+d72d93/KsBhnEtmH9Ki3HfgX34vtd2XycC1Zw4vswkoGA58zpkd2yMH7dy7 pcKccVsyMvLEVG20UQ0KDB13ZuvPWLJGUAEwegeGqMy/JxWMXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgop02XOt+G+yOvMNpA3QnpF+zCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzBlYTIzYmItNTJhNC0z ZGU2LTlkMzUtYmUzZjEyMzNhZjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALBdWRm5PEZM4f5OxZXh6AaGUo7zej6O8IpoCPZMv6VCriInFmy2tmvk Ptj56oTu+f9GeFW5JXGzdsiP3DwmMtRlOgih8yL6xqbjb8Qbk5Hisc6LOhNKvugE o4RzeJamVox3PQv3Q0cm8dsa0LmPOuZeQqHGGS4E+u5ww66LuyBqWEHGZDpqpXW9 6i109sp5VobwLud+ST4XFYvyiNfpHBA0LAJ1onH43oiSGpbbD6MnMuBEcVCS35Ji ZXmtRAMgaDTJnWpAbprxGsbmDd3VYapqPqxlRmD14WKLmPaKHF8OIbEcXN8yjLf/ wtbS1rhltLei0eWlPVFiE7wlMoB3rSA= -----END CERTIFICATE-----Generated at Fri Sep 25 07:39:48 2026 by rpki-client