$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98348da3-919c-32ff-b063-c586cecf7a91.roa File: 98348da3-919c-32ff-b063-c586cecf7a91.roa (raw, json) Hash identifier: gkebCzIizAZNBtGKpB0RXNZa88X3B5xSBsujrSbAfWU= Subject key identifier: E9:09:D3:DD:70:2E:C7:80:6A:79:22:F5:1E:84:B5:59:7A:63:70:9C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F093CD1CB165811F40B2EA180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98348da3-919c-32ff-b063-c586cecf7a91.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 396585 IP address blocks: 192.42.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:d1:cb:16:58:11:f4:0b:2e:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=19f08510-c4ea-4bf3-afc8-a9f7b3b90201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:89:bc:98:d1:58:b7:cd:c9:82:4d:19:bc:a1: 25:de:a9:bb:24:2b:ab:a1:14:cf:a4:34:8b:ea:8c: ab:d1:7c:b2:d6:0a:ca:35:c1:a7:34:de:0b:80:24: c2:1d:b0:48:99:5c:3a:d9:9d:46:8c:4f:0f:44:03: 42:75:35:ed:28:db:82:9b:aa:69:23:95:cd:f8:5b: dc:bb:cf:39:66:dc:33:1a:b2:7b:c0:33:3a:3d:dc: c3:4f:8d:0a:a2:68:e9:a2:3d:5f:00:c9:37:80:a5: 1a:2d:c9:f8:cd:5b:2e:1f:98:85:02:4e:bc:01:c0: 77:9c:c7:99:16:f4:e8:3f:53:2c:39:67:cd:7f:bb: 41:3e:e1:35:16:9d:09:98:e7:7d:3d:e0:f7:bd:f9: 25:d9:b7:50:2e:92:2d:38:ca:a5:a5:c4:ba:e5:00: 4c:00:0f:0f:5f:9e:bb:91:cf:01:60:d2:be:94:4f: 3f:2c:5c:0d:fa:3e:50:e7:f6:46:d2:ae:4a:2b:b0: 2a:2b:d9:fe:1a:af:e2:d6:30:47:25:65:1c:9e:d8: 6a:29:cb:81:9f:32:5a:28:7e:f8:b8:c9:6e:71:69: 3d:07:bb:92:31:0c:85:5a:75:40:fd:a5:b3:d7:8b: b5:3f:1a:0d:22:e2:52:7e:37:1b:7c:ad:8c:37:13: 0b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:09:D3:DD:70:2E:C7:80:6A:79:22:F5:1E:84:B5:59:7A:63:70:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98348da3-919c-32ff-b063-c586cecf7a91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:1f:12:5e:2c:88:13:29:c0:b5:18:c8:5b:b2:97:10:e0:74: db:68:0e:d1:e9:d6:dd:29:a3:eb:91:28:39:64:13:b0:c3:e4: 96:bd:1b:ab:9e:97:1b:2d:f1:7d:8f:5d:3e:64:e1:10:7e:7a: bf:96:42:52:a2:00:ef:46:3b:c2:76:42:01:07:78:22:6f:69: fa:f6:08:19:af:2d:a7:56:06:60:97:e3:9d:34:9a:3a:0d:56: 92:a7:48:91:01:58:ea:75:71:f4:19:01:aa:51:ca:4a:44:0f: f4:ef:f5:bd:eb:ff:58:3f:da:b4:96:2b:35:92:6c:c0:a9:a0: 34:eb:be:27:3b:77:dc:a8:b7:67:58:a5:29:12:cd:44:a1:0d: 87:cf:2e:9a:88:2b:c1:da:85:9a:59:a6:81:00:f3:6e:93:09: 92:b7:6b:4a:e4:54:8e:0f:e3:1d:1e:5f:9e:ce:73:38:1b:13: 5c:8e:06:46:e7:26:77:54:8f:4d:00:d2:2c:54:80:be:4a:66: 8c:a2:46:ff:78:83:81:d6:d8:06:b8:62:9e:cb:d6:e6:3a:6f: 24:a5:bc:26:b6:48:b7:0c:11:13:89:40:4a:37:b1:25:8d:42: 20:32:ea:08:76:83:a4:0d:2e:c8:0b:f0:23:1d:6f:a9:b2:b6: 88:d2:47:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPNHLFlgR9AsuoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk MTlmMDg1MTAtYzRlYS00YmYzLWFmYzgtYTlmN2IzYjkwMjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYm8mNFYt83Jgk0ZvKEl3qm7JCuroRTPpDSL 6oyr0Xyy1grKNcGnNN4LgCTCHbBImVw62Z1GjE8PRANCdTXtKNuCm6ppI5XN+Fvc u885ZtwzGrJ7wDM6PdzDT40Komjpoj1fAMk3gKUaLcn4zVsuH5iFAk68AcB3nMeZ FvToP1MsOWfNf7tBPuE1Fp0JmOd9PeD3vfkl2bdQLpItOMqlpcS65QBMAA8PX567 kc8BYNK+lE8/LFwN+j5Q5/ZG0q5KK7AqK9n+Gq/i1jBHJWUcnthqKcuBnzJaKH74 uMlucWk9B7uSMQyFWnVA/aWz14u1PxoNIuJSfjcbfK2MNxMLNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkJ091wLseAanki9R6EtVl6Y3CcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTgzNDhkYTMtOTE5Yy0z MmZmLWIwNjMtYzU4NmNlY2Y3YTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkfEl4siBMpwLUYyFuylxDgdNtoDtHp1t0po+uRKDlkE7DD5Ja9G6ue lxst8X2PXT5k4RB+er+WQlKiAO9GO8J2QgEHeCJvafr2CBmvLadWBmCX4500mjoN VpKnSJEBWOp1cfQZAapRykpED/Tv9b3r/1g/2rSWKzWSbMCpoDTrvic7d9yot2dY pSkSzUShDYfPLpqIK8HahZpZpoEA826TCZK3a0rkVI4P4x0eX57OczgbE1yOBkbn JndUj00A0ixUgL5KZoyiRv94g4HW2Aa4Yp7L1uY6bySlvCa2SLcMEROJQEo3sSWN QiAy6gh2g6QNLsgL8CMdb6mytojSR+I= -----END CERTIFICATE-----Generated at Tue Sep 22 07:25:37 2026 by rpki-client