$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5e49a48-d63f-37f2-a14a-f4b014e0447b.roa File: a5e49a48-d63f-37f2-a14a-f4b014e0447b.roa (raw, json) Hash identifier: psKOReY0BTOEb5nXE+y0suaFb3hSjt0mt7O8kr90prc= Subject key identifier: 1F:52:86:FA:99:6F:A0:2D:FB:E7:22:A5:08:B2:9E:95:45:A7:62:11 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F2D87E070C74FFF41B83C4B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5e49a48-d63f-37f2-a14a-f4b014e0447b.roa Signing time: Tue 15 Sep 2026 01:00:12 +0000 ROA not before: Tue 15 Sep 2026 01:00:12 +0000 ROA not after: Mon 14 Dec 2026 02:00:12 +0000 asID: 397196 IP address blocks: 192.81.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2d:87:e0:70:c7:4f:ff:41:b8:3c:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 15 01:00:12 2026 GMT Not After : Dec 14 02:00:12 2026 GMT Subject: CN=eca0caa0-cb34-417c-ac6c-6f54abd583c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:19:7d:e6:b1:46:02:4b:49:0f:22:66:36:2a: 51:ec:0c:1d:de:a3:8b:24:c2:d4:c2:24:7b:e9:68: eb:cb:01:12:2e:50:9c:a8:6b:8c:f0:08:f5:70:a3: ed:16:b7:47:b2:78:20:7c:58:55:b0:e4:b3:fa:2a: 7e:9d:7e:e6:5c:98:27:10:fb:1f:c3:4d:08:98:3f: 47:a4:d7:78:6f:69:31:1f:eb:c6:e4:42:5e:3c:ac: 52:45:5e:d7:d7:76:76:ac:a7:4b:07:c2:46:39:41: a8:e3:db:fc:8c:45:99:ba:51:80:1a:97:3d:09:cb: 3c:78:01:89:22:f7:61:47:8a:2c:5c:c9:3c:00:4b: 0a:b7:ef:e1:8c:32:b5:d2:4a:41:f0:47:c9:bd:00: fb:9a:98:31:03:f2:f4:0e:c2:c6:c9:d6:75:69:91: c5:dc:24:df:90:77:9b:f6:0c:21:b3:47:af:a2:c9: a5:30:53:66:af:59:71:14:5f:d5:dd:8b:a9:23:8c: 1b:77:dd:07:91:1a:cb:cd:96:32:ab:da:00:1f:12: a5:70:c3:76:ec:37:6b:ef:07:6f:6c:15:1d:43:28: 0e:de:00:77:d3:59:16:04:fa:a8:1c:2f:5b:db:8c: 6f:33:c4:31:82:0a:10:cd:94:13:c0:0b:19:0f:c0: 25:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:52:86:FA:99:6F:A0:2D:FB:E7:22:A5:08:B2:9E:95:45:A7:62:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5e49a48-d63f-37f2-a14a-f4b014e0447b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.81.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:a7:9e:b8:db:94:49:7e:74:5c:04:94:b9:81:3f:3c:d7:7d: 0b:7f:fa:9b:d6:85:0c:64:38:1a:d2:82:ed:03:43:c0:de:73: d4:43:0a:c7:d6:cb:0e:e8:4f:a4:87:63:1a:f3:ad:1f:b0:fb: 41:b6:ff:51:81:4d:02:a0:aa:2b:97:04:b0:41:ec:d9:06:55: 1e:45:c8:f6:4b:c9:d9:00:c6:0d:e2:f5:fd:22:9a:25:21:ae: ed:bc:19:f7:98:f8:6e:f9:3a:ed:bb:60:32:db:a7:81:7c:9b: 7b:2a:5e:61:74:ff:a8:12:b8:48:b6:13:77:4b:54:b1:c1:d4: 4f:6c:68:50:ee:0e:67:02:b5:a1:75:05:a1:bf:79:85:09:33: d9:b2:f0:e9:6c:de:ad:53:b1:2f:f7:68:77:d3:f8:f6:6a:b2: c8:e0:19:9f:17:2f:51:55:f3:b0:4e:5b:61:9a:9b:37:48:26: 4d:b6:20:f5:d0:4f:07:85:4d:f6:22:7d:d3:c2:3d:7f:ca:cc: 2b:d3:79:30:b6:f1:41:06:e5:44:a3:da:86:57:60:f5:09:2b: 9f:f3:01:98:f7:85:5a:f1:43:9b:4a:27:46:75:96:9e:6f:6a: e1:08:19:57:18:f9:95:82:fa:cf:ca:a7:c5:e1:5e:bf:eb:4c: 00:ac:74:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8th+Bwx0//Qbg8S4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWNhMGNhYTAtY2IzNC00MTdjLWFjNmMtNmY1NGFiZDU4M2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBl95rFGAktJDyJmNipR7Awd3qOLJMLUwiR7 6WjrywESLlCcqGuM8Aj1cKPtFrdHsnggfFhVsOSz+ip+nX7mXJgnEPsfw00ImD9H pNd4b2kxH+vG5EJePKxSRV7X13Z2rKdLB8JGOUGo49v8jEWZulGAGpc9Ccs8eAGJ IvdhR4osXMk8AEsKt+/hjDK10kpB8EfJvQD7mpgxA/L0DsLGydZ1aZHF3CTfkHeb 9gwhs0evosmlMFNmr1lxFF/V3YupI4wbd90HkRrLzZYyq9oAHxKlcMN27Ddr7wdv bBUdQygO3gB301kWBPqoHC9b24xvM8QxggoQzZQTwAsZD8AlEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9ShvqZb6At++cipQiynpVFp2IRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTVlNDlhNDgtZDYzZi0z N2YyLWExNGEtZjRiMDE0ZTA0NDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFG5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6nnrjblEl+dFwElLmBPzzXfQt/+pvWhQxkOBrSgu0DQ8Dec9RDCsfW yw7oT6SHYxrzrR+w+0G2/1GBTQKgqiuXBLBB7NkGVR5FyPZLydkAxg3i9f0imiUh ru28GfeY+G75Ou27YDLbp4F8m3sqXmF0/6gSuEi2E3dLVLHB1E9saFDuDmcCtaF1 BaG/eYUJM9my8Ols3q1TsS/3aHfT+PZqssjgGZ8XL1FV87BOW2GamzdIJk22IPXQ TweFTfYifdPCPX/KzCvTeTC28UEG5USj2oZXYPUJK5/zAZj3hVrxQ5tKJ0Z1lp5v auEIGVcY+ZWC+s/Kp8XhXr/rTACsdFs= -----END CERTIFICATE-----Generated at Tue Sep 22 07:27:36 2026 by rpki-client