$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f591fe84-0ff1-364b-af2b-e32db5494c95.roa File: f591fe84-0ff1-364b-af2b-e32db5494c95.roa (raw, json) Hash identifier: LRlo02U+159CI8uXgY9usr+esIkvkUmL8Sx4SjvmyOs= Subject key identifier: A8:84:7F:70:DD:75:E4:E5:EF:99:99:2A:C8:2A:E7:92:93:EB:D4:38 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F093D1532B60FEF2AC0F93000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f591fe84-0ff1-364b-af2b-e32db5494c95.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 397209 IP address blocks: 192.42.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3d:15:32:b6:0f:ef:2a:c0:f9:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=f4328057-4bd5-4b34-8a7f-b126ac95eebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:89:3f:34:d7:fa:87:8e:5d:01:51:c4:0e:8e: ad:7c:ef:4e:ea:ce:8a:e7:46:37:23:0e:2b:8c:e0: 22:15:09:00:ad:00:71:37:25:4a:71:ae:d7:52:4b: ac:58:9c:ff:53:e7:b8:45:46:31:18:e5:49:54:ab: 0f:90:58:d6:f5:5e:61:bf:92:e6:b1:e4:f7:bf:57: c1:c3:1f:e8:c1:6b:10:4d:a9:66:39:8e:1c:f8:a9: 57:57:dd:d2:75:c9:9e:db:08:ed:53:b7:98:29:56: c5:85:b9:2b:c4:a5:97:3c:97:0f:bc:69:04:7b:0c: 88:24:d0:1f:a3:bb:7f:31:b7:c6:18:d2:8f:0e:fb: 85:44:4e:bb:0b:d4:55:9d:c1:37:9a:3f:e0:e6:f2: 52:ff:97:54:db:a2:5c:2c:08:34:3b:40:a9:6e:00: 2b:61:df:98:1c:47:e8:d7:3a:8d:56:4e:8f:b6:aa: 3e:41:0d:76:4e:1d:e0:c0:1d:77:4f:3d:58:27:ec: d4:b9:51:bc:59:e8:7c:fc:ce:f9:f0:5c:6d:19:cb: 70:e2:88:20:56:9f:68:b7:3d:00:af:6e:6f:14:00: 92:31:f9:7a:a5:1b:83:67:e3:1d:5e:26:d9:d3:51: 69:8e:8d:3f:a2:06:cc:d4:a9:df:17:e1:73:e4:26: 6a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:84:7F:70:DD:75:E4:E5:EF:99:99:2A:C8:2A:E7:92:93:EB:D4:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f591fe84-0ff1-364b-af2b-e32db5494c95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:d6:5f:f2:7a:83:c8:91:41:98:c5:01:51:88:0c:04:00:26: 68:d9:4e:ca:6f:b8:2d:ca:fc:0f:ed:d6:f9:f0:78:42:1c:5a: 46:ed:fb:44:dd:6c:02:ef:5a:55:52:3e:c4:fe:24:2b:e2:09: 7c:76:45:96:54:10:6c:2d:ca:1d:0b:ef:96:51:00:18:de:26: a0:4d:58:d5:89:7f:71:2a:92:b1:38:a7:16:4d:f3:c1:34:3c: 5c:53:07:cd:b7:4c:1d:07:e7:7c:e4:95:39:a1:bf:fb:5c:5b: dd:19:a8:1a:c1:00:7a:9a:8a:0d:51:1c:bf:25:37:5c:bb:38: b0:7f:1e:0a:d6:43:80:dc:d7:17:06:77:aa:58:d1:29:32:66: ad:50:fa:77:22:dc:22:63:9c:7e:c3:7f:5e:e1:a7:95:41:3b: 7c:bb:b2:5b:4e:c2:de:5b:b6:69:ba:54:e2:bc:f2:11:84:c1: 2d:6a:da:43:a2:40:84:d9:c0:de:33:87:45:d4:a9:9d:53:f2: 12:f1:12:04:00:86:1b:cd:18:d8:59:56:71:19:64:02:b9:e7: d8:cc:7e:ed:aa:5c:4a:38:7e:f7:9e:e2:9f:0d:2c:ed:f4:b9: 74:4a:37:27:cb:71:ac:03:dd:92:39:3a:6f:20:65:9b:4c:40: 03:dd:d0:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPRUytg/vKsD5MAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk ZjQzMjgwNTctNGJkNS00YjM0LThhN2YtYjEyNmFjOTVlZWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYk/NNf6h45dAVHEDo6tfO9O6s6K50Y3Iw4r jOAiFQkArQBxNyVKca7XUkusWJz/U+e4RUYxGOVJVKsPkFjW9V5hv5LmseT3v1fB wx/owWsQTalmOY4c+KlXV93Sdcme2wjtU7eYKVbFhbkrxKWXPJcPvGkEewyIJNAf o7t/MbfGGNKPDvuFRE67C9RVncE3mj/g5vJS/5dU26JcLAg0O0CpbgArYd+YHEfo 1zqNVk6Ptqo+QQ12Th3gwB13Tz1YJ+zUuVG8Weh8/M758FxtGctw4oggVp9otz0A r25vFACSMfl6pRuDZ+MdXibZ01Fpjo0/ogbM1KnfF+Fz5CZqCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiEf3DddeTl75mZKsgq55KT69Q4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjU5MWZlODQtMGZmMS0z NjRiLWFmMmItZTMyZGI1NDk0Yzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInWX/J6g8iRQZjFAVGIDAQAJmjZTspvuC3K/A/t1vnweEIcWkbt+0Td bALvWlVSPsT+JCviCXx2RZZUEGwtyh0L75ZRABjeJqBNWNWJf3EqkrE4pxZN88E0 PFxTB823TB0H53zklTmhv/tcW90ZqBrBAHqaig1RHL8lN1y7OLB/HgrWQ4Dc1xcG d6pY0SkyZq1Q+nci3CJjnH7Df17hp5VBO3y7sltOwt5btmm6VOK88hGEwS1q2kOi QITZwN4zh0XUqZ1T8hLxEgQAhhvNGNhZVnEZZAK559jMfu2qXEo4fvee4p8NLO30 uXRKNyfLcawD3ZI5Om8gZZtMQAPd0AM= -----END CERTIFICATE-----Generated at Tue Sep 22 09:56:48 2026 by rpki-client