$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aced272d-c583-305e-a5c9-431696641c32.roa File: aced272d-c583-305e-a5c9-431696641c32.roa (raw, json) Hash identifier: QrjnDDt2ghy7BjxGwgIm0oaAoD11KNo+Cq4eFrEGeeo= Subject key identifier: C9:A5:1B:3C:1E:D2:A1:44:2C:E0:41:51:D2:62:68:23:04:B7:9A:44 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F093CE00601D8794F4C263380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aced272d-c583-305e-a5c9-431696641c32.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 397203 IP address blocks: 192.42.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:e0:06:01:d8:79:4f:4c:26:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=768a49df-21fe-44c6-bfbb-54f305222536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6a:5f:6f:f8:69:9f:b6:33:50:c0:73:4c:16: 50:6e:14:26:a7:38:d4:0b:21:0f:7c:29:26:7d:a8: 8c:f8:33:0d:41:e5:6f:d3:25:de:6b:63:a6:23:b2: 83:95:9c:2d:12:0e:28:f6:fb:23:b5:b4:03:e6:82: 58:4a:bb:dd:02:ce:fa:6b:06:91:ec:f2:7f:69:95: 62:9a:07:53:b3:cc:b2:df:1a:32:62:4e:cb:50:9e: 9e:50:a0:3b:a2:c2:01:25:f6:80:9b:91:44:ed:70: 56:32:34:d6:34:b2:e2:b7:81:34:64:11:58:9d:eb: d0:a5:99:ba:cb:47:4a:a6:0a:13:a1:b1:8f:eb:2e: 84:de:7c:ad:b2:c7:da:d7:13:e1:9b:69:07:c0:00: 19:74:6d:d3:8e:e8:07:61:84:80:5d:44:d8:3d:27: 65:79:d1:ba:b2:73:18:16:ef:8e:69:21:e6:e5:b1: f7:94:e1:4f:07:e2:0b:5a:06:db:8b:f8:30:e2:8e: c9:d4:d8:70:f9:98:bc:1f:fd:e2:3f:7e:e2:9b:eb: 11:4d:09:e7:da:86:60:21:ba:5f:b8:cb:81:7e:bf: a2:7d:57:52:4b:2b:60:5a:f6:34:b6:ff:01:e0:42: ee:a5:82:3c:24:6e:d5:8f:52:6b:24:53:3a:6f:6c: d1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A5:1B:3C:1E:D2:A1:44:2C:E0:41:51:D2:62:68:23:04:B7:9A:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aced272d-c583-305e-a5c9-431696641c32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:f9:ac:31:60:61:86:f2:7d:33:a0:e0:55:ec:13:80:9f:75: 82:80:17:50:59:ed:53:d3:97:31:db:d3:a0:72:01:20:aa:bd: e8:18:90:eb:aa:59:88:d3:75:88:b9:5b:f1:19:2b:a8:cc:2b: 3b:26:8d:19:04:53:32:43:a0:66:00:64:4f:c3:9c:a9:05:e9: c5:0d:a8:d2:a7:09:65:2b:48:d3:41:df:de:06:e1:16:8f:25: e3:69:16:75:56:f7:60:0c:bd:31:bd:56:d6:a8:cc:04:a2:ac: 6f:52:7d:69:40:29:8a:5a:bd:cb:f6:39:ca:67:dc:5e:13:44: 74:14:3e:b3:c0:1c:bc:d4:63:59:76:42:6d:10:55:1f:0a:2d: 7d:6d:e0:f3:41:73:79:09:23:b5:fa:bc:48:7e:31:81:a9:51: 63:43:69:f5:48:17:df:82:a6:0e:83:2a:cf:d5:e1:ba:10:8b: c7:6d:a3:3a:82:99:51:0c:09:f1:25:37:b0:04:e5:a9:d6:7a: f4:f3:2b:0a:ae:eb:8a:b3:58:13:2a:ee:a6:3b:96:c9:5d:f0: 43:7d:93:ce:d5:fa:d6:db:38:9a:d7:b8:df:d8:46:97:9d:39: d7:f7:d0:f4:1a:3a:28:53:e4:d1:e0:4a:8f:ec:62:0d:fd:ff: 16:b9:48:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPOAGAdh5T0wmM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk NzY4YTQ5ZGYtMjFmZS00NGM2LWJmYmItNTRmMzA1MjIyNTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2pfb/hpn7YzUMBzTBZQbhQmpzjUCyEPfCkm faiM+DMNQeVv0yXea2OmI7KDlZwtEg4o9vsjtbQD5oJYSrvdAs76awaR7PJ/aZVi mgdTs8yy3xoyYk7LUJ6eUKA7osIBJfaAm5FE7XBWMjTWNLLit4E0ZBFYnevQpZm6 y0dKpgoTobGP6y6E3nytssfa1xPhm2kHwAAZdG3TjugHYYSAXUTYPSdledG6snMY Fu+OaSHm5bH3lOFPB+ILWgbbi/gw4o7J1Nhw+Zi8H/3iP37im+sRTQnn2oZgIbpf uMuBfr+ifVdSSytgWvY0tv8B4ELupYI8JG7Vj1JrJFM6b2zRgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmlGzwe0qFELOBBUdJiaCMEt5pEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWNlZDI3MmQtYzU4My0z MDVlLWE1YzktNDMxNjk2NjQxYzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFX5rDFgYYbyfTOg4FXsE4CfdYKAF1BZ7VPTlzHb06ByASCqvegYkOuq WYjTdYi5W/EZK6jMKzsmjRkEUzJDoGYAZE/DnKkF6cUNqNKnCWUrSNNB394G4RaP JeNpFnVW92AMvTG9VtaozASirG9SfWlAKYpavcv2Ocpn3F4TRHQUPrPAHLzUY1l2 Qm0QVR8KLX1t4PNBc3kJI7X6vEh+MYGpUWNDafVIF9+Cpg6DKs/V4boQi8dtozqC mVEMCfElN7AE5anWevTzKwqu64qzWBMq7qY7lsld8EN9k87V+tbbOJrXuN/YRped Odf30PQaOihT5NHgSo/sYg39/xa5SME= -----END CERTIFICATE-----Generated at Sat Sep 26 15:34:33 2026 by rpki-client