$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/886407bc-5739-3526-a629-5271b78db2de.roa File: 886407bc-5739-3526-a629-5271b78db2de.roa (raw, json) Hash identifier: YxCHoL3uu5y6ZU0M9jro6FfMh8nIwlztZfRaq4usAGQ= Subject key identifier: 95:EA:04:8F:B6:03:15:91:C7:B5:C3:39:5D:D6:E8:AF:69:7E:A5:AF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4974E2EFA8E301F7426BD9F0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/886407bc-5739-3526-a629-5271b78db2de.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396540 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:e2:ef:a8:e3:01:f7:42:6b:d9:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a41a9d85-1684-4a92-9870-924f6e95c6cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:90:fb:ec:69:02:57:45:e1:3d:8f:7c:72:f6: e8:e1:27:20:20:69:0c:a7:6a:72:14:21:f0:ba:1e: a1:c4:bc:ed:fb:a2:04:3c:b9:16:b3:53:82:99:f9: de:f5:a7:a9:86:53:42:7a:18:81:eb:e9:d5:33:f6: 1d:a3:35:b5:c4:d5:ff:24:61:f5:ef:6c:a1:9e:93: 48:c7:b2:5c:ee:16:c3:10:0a:1b:1b:98:4a:0b:af: 2e:9f:be:96:06:4b:03:26:53:93:93:08:db:52:8c: 6c:dd:e8:e5:d7:f5:74:c4:68:05:00:90:82:bc:5b: b3:e4:b6:09:ba:4b:67:67:73:08:a3:fc:82:4a:b9: 39:e3:51:39:1b:12:07:68:2c:70:32:e7:65:58:d4: cc:7d:e3:56:13:3c:71:f0:51:8d:e7:09:e5:3a:ec: eb:3e:ce:a5:8b:82:f0:58:8e:fd:70:4d:be:8b:7a: ab:ab:cf:08:75:f9:26:c4:46:26:4f:c2:73:e8:cd: f0:01:b5:84:24:c9:79:01:07:02:1b:20:41:75:01: 35:a3:92:db:70:78:1c:fd:31:94:0a:22:32:0b:d1: 58:37:b9:97:68:52:63:0f:5a:e6:db:49:2a:ae:a2: 03:24:2b:d7:90:b8:18:35:e9:47:26:f2:5e:b3:ca: c2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:EA:04:8F:B6:03:15:91:C7:B5:C3:39:5D:D6:E8:AF:69:7E:A5:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/886407bc-5739-3526-a629-5271b78db2de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:5f:d8:95:7d:57:8b:1b:49:e2:e7:81:b5:26:fe:93:fe:53: 3b:7f:0e:72:4f:f9:63:bc:1d:ba:18:1c:13:86:6c:27:d0:84: 6d:61:7d:ae:2f:68:74:5b:c6:e1:3b:0e:78:64:da:89:b3:8b: a0:58:29:4d:14:a9:d3:c3:d6:60:cf:6f:c0:e1:83:10:45:70: f2:38:63:30:93:79:20:11:38:12:47:2b:1a:f5:c2:a6:99:dc: 21:19:92:ee:38:65:c3:22:5d:71:8d:6f:f0:01:49:3e:d1:cf: b2:ac:32:70:75:24:1d:22:b7:17:35:f9:71:25:2f:b4:60:26: 1f:4d:59:72:14:89:8c:fd:b2:5d:e1:ae:a3:41:67:fa:d8:0c: 8a:32:5a:cd:49:22:b7:7d:76:12:32:8a:24:e9:18:5b:b9:07: 32:70:6a:e6:8e:5a:7e:03:a5:c1:4e:70:49:0e:38:61:97:6b: ec:5a:eb:30:2b:f5:51:e8:75:63:f0:d0:dd:1d:8b:a4:d8:1e: d1:4d:2d:68:56:3a:cc:43:6d:43:b0:6f:e1:64:e7:f3:bd:6f: b3:92:72:bb:4e:6e:3b:b2:af:44:81:07:13:1c:22:12:d4:2d: c2:a0:a2:47:0d:a1:7e:1a:c1:64:d0:44:a7:36:81:6f:8c:5b: e9:ef:d9:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdOLvqOMB90Jr2fAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTQxYTlkODUtMTY4NC00YTkyLTk4NzAtOTI0ZjZlOTVjNmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZD77GkCV0XhPY98cvbo4ScgIGkMp2pyFCHw uh6hxLzt+6IEPLkWs1OCmfne9aephlNCehiB6+nVM/YdozW1xNX/JGH172yhnpNI x7Jc7hbDEAobG5hKC68un76WBksDJlOTkwjbUoxs3ejl1/V0xGgFAJCCvFuz5LYJ uktnZ3MIo/yCSrk541E5GxIHaCxwMudlWNTMfeNWEzxx8FGN5wnlOuzrPs6li4Lw WI79cE2+i3qrq88IdfkmxEYmT8Jz6M3wAbWEJMl5AQcCGyBBdQE1o5LbcHgc/TGU CiIyC9FYN7mXaFJjD1rm20kqrqIDJCvXkLgYNelHJvJes8rCFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXqBI+2AxWRx7XDOV3W6K9pfqWvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODg2NDA3YmMtNTczOS0z NTI2LWE2MjktNTI3MWI3OGRiMmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9f2JV9V4sbSeLngbUm/pP+Uzt/DnJP+WO8HboYHBOGbCfQhG1hfa4v aHRbxuE7Dnhk2omzi6BYKU0UqdPD1mDPb8DhgxBFcPI4YzCTeSAROBJHKxr1wqaZ 3CEZku44ZcMiXXGNb/ABST7Rz7KsMnB1JB0itxc1+XElL7RgJh9NWXIUiYz9sl3h rqNBZ/rYDIoyWs1JIrd9dhIyiiTpGFu5BzJwauaOWn4DpcFOcEkOOGGXa+xa6zAr 9VHodWPw0N0di6TYHtFNLWhWOsxDbUOwb+Fk5/O9b7OScrtObjuyr0SBBxMcIhLU LcKgokcNoX4awWTQRKc2gW+MW+nv2RI= -----END CERTIFICATE-----Generated at Sun Oct 4 22:49:47 2026 by rpki-client