$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbc20942-662f-30ab-b2b5-18a2db6bb591.roa File: dbc20942-662f-30ab-b2b5-18a2db6bb591.roa (raw, json) Hash identifier: qXPuaAFIkJoJP9hmdLMKAs6FaQr2gw/Gy5VRfHzZj0Y= Subject key identifier: 2C:15:7B:C2:7D:69:47:6F:B6:65:CD:DC:02:D9:F2:CF:A4:0F:BC:DA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F1E2CF2063E7AED41D225E400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbc20942-662f-30ab-b2b5-18a2db6bb591.roa Signing time: Wed 09 Sep 2026 13:00:11 +0000 ROA not before: Wed 09 Sep 2026 13:00:11 +0000 ROA not after: Tue 08 Dec 2026 14:00:11 +0000 asID: 397198 IP address blocks: 192.54.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:2c:f2:06:3e:7a:ed:41:d2:25:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 9 13:00:11 2026 GMT Not After : Dec 8 14:00:11 2026 GMT Subject: CN=7a0b918a-1f75-4909-bbc5-158e76350b76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a1:71:ab:29:8a:59:a0:29:c3:81:f0:ab:be: bf:cf:b7:55:ce:dc:93:bf:90:08:ab:6f:e0:3c:cc: b6:e1:52:14:0d:79:0e:5e:32:09:d5:0b:e1:5a:76: 47:57:93:53:3e:f3:f1:8b:92:57:80:24:1d:85:6d: f7:8a:8d:79:4c:e3:1c:84:37:62:aa:7e:d5:01:69: 1a:c6:b5:64:cb:6b:db:80:23:aa:89:03:ec:e3:bb: e5:03:7a:73:69:76:60:b8:cf:e0:26:3b:b2:63:25: 80:c0:4e:30:85:87:55:af:ee:ee:7f:f1:01:8b:57: 82:14:a9:ba:ad:3f:9d:95:d5:fa:9c:cb:fa:74:6e: 08:48:22:cf:e3:9e:63:af:43:11:a8:91:03:1c:dd: 60:c9:41:bf:0e:a1:11:03:18:6f:4d:1e:52:20:5b: 61:d6:fc:fa:04:38:93:7c:19:72:20:eb:f4:50:b8: ac:67:21:63:a5:1d:50:a6:0e:2e:de:cb:bc:5b:08: 1c:a3:15:29:cb:70:8b:b7:ce:48:3d:1d:c0:2f:28: 4e:11:69:20:40:ce:6c:9a:21:9d:78:e9:1e:8e:ad: a9:e3:c1:14:36:57:03:c7:2f:ba:39:75:30:0d:47: e7:4b:7c:ec:79:c8:4d:c7:ce:03:44:17:b1:5d:c6: f3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:15:7B:C2:7D:69:47:6F:B6:65:CD:DC:02:D9:F2:CF:A4:0F:BC:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbc20942-662f-30ab-b2b5-18a2db6bb591.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.54.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:a1:e1:17:5b:bd:22:23:37:d4:2c:5b:c4:03:9b:05:22:e0: 5d:90:18:42:bf:65:5f:f4:a2:3a:2b:87:f9:a7:6e:cc:5d:28: 38:ac:ca:ea:ca:fb:07:ca:24:d4:fc:44:e0:a5:fa:b1:77:79: 4b:e0:cd:50:7f:96:38:b5:77:6d:73:4f:6e:48:c2:a1:f6:bb: 65:5b:bb:1a:f5:29:a8:63:5b:21:53:90:30:e3:af:d7:96:5f: 58:2f:58:c3:21:21:a1:25:4b:f0:80:1c:e0:72:bf:fd:c9:12: 71:54:e4:e1:21:e5:cf:ee:03:29:5f:1a:3f:77:1d:7c:c6:98: 4e:6a:31:54:61:24:d0:42:20:1a:07:ff:96:99:92:21:35:b8: 69:9f:e2:57:ee:8e:4b:3e:27:44:7f:34:b8:a8:c1:fa:47:60: 50:2f:08:7e:d6:65:4f:4a:76:e6:53:1c:7a:46:56:c6:20:86: a7:24:61:c9:5b:a5:14:59:a4:96:81:0d:ee:04:ea:cd:3d:86: 58:ee:4c:03:5c:58:5c:24:85:90:90:00:50:71:85:9a:cf:52: 7b:d7:f0:aa:4a:dd:3a:72:a5:52:fe:e7:04:b7:cd:ef:63:8e: ec:37:f0:48:39:75:2a:04:60:5c:0b:6c:34:09:2d:66:e0:82: 50:aa:5b:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8eLPIGPnrtQdIl5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwOTEzMDAxMVoXDTI2MTIwODE0MDAxMVowLzEtMCsGA1UEAxMk N2EwYjkxOGEtMWY3NS00OTA5LWJiYzUtMTU4ZTc2MzUwYjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKFxqymKWaApw4Hwq76/z7dVztyTv5AIq2/g PMy24VIUDXkOXjIJ1QvhWnZHV5NTPvPxi5JXgCQdhW33io15TOMchDdiqn7VAWka xrVky2vbgCOqiQPs47vlA3pzaXZguM/gJjuyYyWAwE4whYdVr+7uf/EBi1eCFKm6 rT+dldX6nMv6dG4ISCLP455jr0MRqJEDHN1gyUG/DqERAxhvTR5SIFth1vz6BDiT fBlyIOv0ULisZyFjpR1Qpg4u3su8WwgcoxUpy3CLt85IPR3ALyhOEWkgQM5smiGd eOkejq2p48EUNlcDxy+6OXUwDUfnS3zsechNx84DRBexXcbzyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwVe8J9aUdvtmXN3ALZ8s+kD7zaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGJjMjA5NDItNjYyZi0z MGFiLWIyYjUtMThhMmRiNmJiNTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL6h4RdbvSIjN9QsW8QDmwUi4F2QGEK/ZV/0ojorh/mnbsxdKDisyurK +wfKJNT8ROCl+rF3eUvgzVB/lji1d21zT25IwqH2u2Vbuxr1KahjWyFTkDDjr9eW X1gvWMMhIaElS/CAHOByv/3JEnFU5OEh5c/uAylfGj93HXzGmE5qMVRhJNBCIBoH /5aZkiE1uGmf4lfujks+J0R/NLiowfpHYFAvCH7WZU9KduZTHHpGVsYghqckYclb pRRZpJaBDe4E6s09hljuTANcWFwkhZCQAFBxhZrPUnvX8KpK3TpypVL+5wS3ze9j juw38Eg5dSoEYFwLbDQJLWbgglCqWyM= -----END CERTIFICATE-----Generated at Tue Sep 22 10:56:20 2026 by rpki-client