$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7892e8b-a1a2-33f7-bdf1-bd0a0aacec9d.roa File: b7892e8b-a1a2-33f7-bdf1-bd0a0aacec9d.roa (raw, json) Hash identifier: q1mwIbOSkcFXuX2YiacUk9z/vPanQF1YcojWAo3NLt4= Subject key identifier: FB:AB:31:D4:3A:D7:2C:62:64:06:ED:00:F3:7E:E7:25:E6:6A:C9:42 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F093D0D743E64C08B72D8D000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7892e8b-a1a2-33f7-bdf1-bd0a0aacec9d.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 397193 IP address blocks: 192.42.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3d:0d:74:3e:64:c0:8b:72:d8:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=63b39fab-435a-41c0-89e2-9cbc24da5504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fb:24:8b:cc:97:3a:ad:9f:5a:03:bd:dc:d4: a3:9b:83:71:c8:f4:e2:2b:b0:86:5e:97:31:3e:d6: 58:4b:62:85:a3:11:9f:73:26:10:36:54:fb:fc:3c: c2:c7:b9:39:36:be:c4:c1:a1:4e:e4:ee:79:e4:ab: 3c:b5:b6:2f:5b:3f:9d:5d:f1:4b:da:b1:79:ff:da: 19:13:39:8f:6a:b3:fd:84:43:d5:6b:24:9a:93:1d: 46:3f:63:70:79:63:9e:79:81:45:e7:77:28:a8:d4: 10:f8:64:f3:94:31:67:24:20:e3:c0:da:b8:2b:b4: 21:43:a3:51:7e:7c:57:b7:29:fc:36:3d:f4:72:b1: f4:5a:87:a4:83:34:05:c5:b8:7a:be:66:2e:8c:4f: 16:53:bc:36:a4:d8:1b:0f:bf:c3:66:73:aa:95:8e: 83:58:3e:e0:83:3a:62:af:93:14:a1:26:83:92:d6: cc:58:85:da:d4:23:17:9e:79:15:29:35:bd:48:b8: 07:2e:ed:62:92:32:e6:b5:17:81:6a:24:da:54:61: e6:29:a9:11:ab:14:0b:8b:76:93:11:82:06:e0:41: 4c:80:eb:de:90:ac:9d:ff:b6:6c:36:e2:b7:34:78: 4f:ba:1e:45:77:2b:0a:bd:5a:d8:2d:df:76:2d:b4: 9a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AB:31:D4:3A:D7:2C:62:64:06:ED:00:F3:7E:E7:25:E6:6A:C9:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7892e8b-a1a2-33f7-bdf1-bd0a0aacec9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:ff:da:bf:40:d2:b4:6d:92:2f:34:24:9f:4a:bd:0f:7c:24: 5f:4a:91:93:e6:22:a7:38:2f:24:a4:0e:bc:ff:44:ef:83:27: ed:f6:21:17:70:3e:b9:3c:05:92:1a:16:9c:84:a1:8c:06:fa: ac:de:e8:38:80:f1:50:e0:7d:c3:6d:e9:1e:c1:21:29:ad:d3: be:2d:1f:2f:58:77:e4:1d:98:27:38:4d:d8:d1:1d:17:16:eb: fc:78:5c:a2:87:85:1a:7c:73:05:b9:2f:eb:33:38:02:15:cd: 98:e6:26:bc:05:f4:f4:5d:4e:09:07:c8:09:56:e5:de:6b:f2: 75:e0:e3:38:69:51:cb:34:6a:3d:ac:c3:c6:01:ba:39:22:e0: 3b:6f:71:c8:95:81:48:0e:97:2b:67:88:0e:2d:34:06:36:e4: 64:78:22:0c:94:43:cb:92:4f:21:74:a2:d8:39:c7:34:1f:6d: 35:4c:a1:47:f8:51:c8:e3:34:3d:dc:88:72:a8:8d:d7:cb:6f: 5b:4f:ea:aa:85:d6:c9:1e:8a:9c:e4:48:b6:73:62:af:5a:c3: 37:50:d5:56:92:cf:da:13:47:d7:43:55:b2:c2:04:19:9c:cd: 96:33:99:15:cf:4d:0e:f6:40:44:43:05:81:3b:25:06:00:44: f8:65:e2:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPQ10PmTAi3LY0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk NjNiMzlmYWItNDM1YS00MWMwLTg5ZTItOWNiYzI0ZGE1NTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvski8yXOq2fWgO93NSjm4NxyPTiK7CGXpcx PtZYS2KFoxGfcyYQNlT7/DzCx7k5Nr7EwaFO5O555Ks8tbYvWz+dXfFL2rF5/9oZ EzmParP9hEPVaySakx1GP2NweWOeeYFF53coqNQQ+GTzlDFnJCDjwNq4K7QhQ6NR fnxXtyn8Nj30crH0WoekgzQFxbh6vmYujE8WU7w2pNgbD7/DZnOqlY6DWD7ggzpi r5MUoSaDktbMWIXa1CMXnnkVKTW9SLgHLu1ikjLmtReBaiTaVGHmKakRqxQLi3aT EYIG4EFMgOvekKyd/7ZsNuK3NHhPuh5FdysKvVrYLd92LbSa/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPurMdQ61yxiZAbtAPN+5yXmaslCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjc4OTJlOGItYTFhMi0z M2Y3LWJkZjEtYmQwYTBhYWNlYzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKf/2r9A0rRtki80JJ9KvQ98JF9KkZPmIqc4LySkDrz/RO+DJ+32IRdw Prk8BZIaFpyEoYwG+qze6DiA8VDgfcNt6R7BISmt074tHy9Yd+QdmCc4TdjRHRcW 6/x4XKKHhRp8cwW5L+szOAIVzZjmJrwF9PRdTgkHyAlW5d5r8nXg4zhpUcs0aj2s w8YBujki4DtvcciVgUgOlytniA4tNAY25GR4IgyUQ8uSTyF0otg5xzQfbTVMoUf4 UcjjND3ciHKojdfLb1tP6qqF1skeipzkSLZzYq9awzdQ1VaSz9oTR9dDVbLCBBmc zZYzmRXPTQ72QERDBYE7JQYARPhl4qg= -----END CERTIFICATE-----Generated at Mon Sep 21 08:07:50 2026 by rpki-client