$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8e711fc1-b683-48ae-99bf-67908f9c491c/49c8d31a-50f3-36bc-b6c7-7afd14de22e9.roa File: 49c8d31a-50f3-36bc-b6c7-7afd14de22e9.roa (raw, json) Hash identifier: psQpNCLJ+2QYj4BmWsnmi39sl6IoUjWhtyOJoYXWhtY= Subject key identifier: 22:E7:E1:C8:4C:D6:96:46:55:92:08:F6:E1:14:18:4A:F1:63:98:AD Certificate issuer: /CN=8e711fc1-b683-48ae-99bf-67908f9c491c Certificate serial: 010D0C9F4328584F15CD082BEBC6737A47A2C880 Authority key identifier: 36:01:80:33:6E:07:3F:17:4F:1B:68:B6:19:A5:ED:7D:08:27:2B:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8e711fc1-b683-48ae-99bf-67908f9c491c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8e711fc1-b683-48ae-99bf-67908f9c491c/49c8d31a-50f3-36bc-b6c7-7afd14de22e9.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 395565 IP address blocks: 192.159.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8e711fc1-b683-48ae-99bf-67908f9c491c/8e711fc1-b683-48ae-99bf-67908f9c491c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8e711fc1-b683-48ae-99bf-67908f9c491c/8e711fc1-b683-48ae-99bf-67908f9c491c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8e711fc1-b683-48ae-99bf-67908f9c491c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cd:08:2b:eb:c6:73:7a:47:a2:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e711fc1-b683-48ae-99bf-67908f9c491c Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=1bddc8b6-fa59-4dfa-910f-321ff2b29882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:55:72:d1:d8:30:6e:80:a5:8d:93:48:21:30: 82:96:96:75:a3:08:90:2a:d7:5a:ee:b0:60:f8:0a: dd:46:68:af:ff:b7:d3:49:cc:c4:fd:dd:30:0d:a5: d6:ba:27:57:77:e3:a0:18:91:ec:c9:5b:0c:a3:41: bb:fb:c2:cc:be:18:bf:3e:48:c0:a7:5e:55:ea:3b: 3c:2f:d5:77:04:ef:06:b7:3d:78:81:77:7c:ef:69: 5b:d8:4f:7a:e8:3e:5d:70:d9:6d:33:2c:b0:25:05: 2b:b7:df:c0:ec:4b:56:e4:b6:4a:3f:af:e6:ce:46: 74:13:60:4b:76:b3:64:5b:25:69:33:9b:f5:1b:21: c7:fd:fa:26:8f:36:92:86:8e:93:a6:49:88:80:d0: 46:ea:38:ab:d3:eb:b6:7b:d9:a9:ca:67:f1:82:a6: 11:15:09:47:bd:70:52:e0:7b:6e:93:c1:3d:5a:2c: 7f:fe:6c:c3:5f:e5:bb:e4:b6:51:56:48:2f:85:f0: e5:f1:9c:f0:be:69:12:90:96:00:cf:77:5b:94:1e: 8d:98:8b:53:16:e8:75:7d:22:31:52:c0:52:2d:c9: 1f:52:23:70:d3:49:f6:c4:03:48:69:c5:49:f4:86: 7b:d0:c3:bd:45:7b:b2:57:8f:d3:c7:83:f0:36:18: 69:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E7:E1:C8:4C:D6:96:46:55:92:08:F6:E1:14:18:4A:F1:63:98:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8e711fc1-b683-48ae-99bf-67908f9c491c/49c8d31a-50f3-36bc-b6c7-7afd14de22e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8e711fc1-b683-48ae-99bf-67908f9c491c/8e711fc1-b683-48ae-99bf-67908f9c491c.crl X509v3 Authority Key Identifier: keyid:36:01:80:33:6E:07:3F:17:4F:1B:68:B6:19:A5:ED:7D:08:27:2B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8e711fc1-b683-48ae-99bf-67908f9c491c.cer sbgp-ipAddrBlock: critical IPv4: 192.159.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:36:e0:da:5b:fb:b5:aa:ad:a9:aa:61:0c:47:19:95:0e:68: 4a:5e:50:97:ec:88:fa:fb:55:e7:7b:9f:2a:44:42:af:fc:dd: a9:df:51:f5:c9:16:9c:d2:52:64:38:9f:11:0b:7b:17:ea:43: 3c:b9:14:c1:0c:90:88:14:6a:31:ee:36:f8:d1:c1:4d:d8:7b: b2:1d:99:2c:c3:66:c9:9b:5d:47:41:03:61:27:9e:d6:fe:d2: 8d:53:3f:14:14:59:33:6a:74:b3:76:c3:15:67:88:4e:fc:b0: ef:56:8d:34:6c:b4:ab:92:4a:f9:ea:c7:54:e5:84:2c:22:41: e3:bb:8a:13:71:97:d4:2a:03:85:73:98:59:59:fd:fe:29:11: 94:35:ac:dd:e2:33:52:67:55:36:17:28:37:30:4c:41:b3:cb: e3:d8:cc:5d:a1:f1:29:47:91:e0:89:c0:3e:11:6b:67:9e:c9: 6f:0d:77:87:18:c6:fb:4d:df:3d:e9:8c:fb:74:2c:ca:29:8a: 41:df:f3:9f:fa:90:2b:b8:25:78:d2:14:ef:78:6e:4c:fa:ab: a4:76:b0:bc:ed:df:94:a5:5a:22:f0:7d:53:4b:56:e4:e7:5a: 99:36:eb:cb:f0:1c:e5:58:18:e7:90:65:0d:f9:10:5c:1b:01: b8:46:de:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzQgr68ZzekeiyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU3MTFmYzEtYjY4My00OGFlLTk5YmYtNjc5MDhmOWM0 OTFjMB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk MWJkZGM4YjYtZmE1OS00ZGZhLTkxMGYtMzIxZmYyYjI5ODgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVVy0dgwboCljZNIITCClpZ1owiQKtda7rBg +ArdRmiv/7fTSczE/d0wDaXWuidXd+OgGJHsyVsMo0G7+8LMvhi/PkjAp15V6js8 L9V3BO8Gtz14gXd872lb2E966D5dcNltMyywJQUrt9/A7EtW5LZKP6/mzkZ0E2BL drNkWyVpM5v1GyHH/fomjzaSho6TpkmIgNBG6jir0+u2e9mpymfxgqYRFQlHvXBS 4Htuk8E9Wix//mzDX+W75LZRVkgvhfDl8ZzwvmkSkJYAz3dblB6NmItTFuh1fSIx UsBSLckfUiNw00n2xANIacVJ9IZ70MO9RXuyV4/Tx4PwNhhpZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLn4chM1pZGVZII9uEUGErxY5itMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84ZTcx MWZjMS1iNjgzLTQ4YWUtOTliZi02NzkwOGY5YzQ5MWMvNDljOGQzMWEtNTBmMy0z NmJjLWI2YzctN2FmZDE0ZGUyMmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGU3MTFmYzEtYjY4My00OGFlLTk5 YmYtNjc5MDhmOWM0OTFjLzhlNzExZmMxLWI2ODMtNDhhZS05OWJmLTY3OTA4Zjlj NDkxYy5jcmwwHwYDVR0jBBgwFoAUNgGAM24HPxdPG2i2GaXtfQgnK04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84ZTcxMWZjMS1iNjgzLTQ4YWUtOTliZi02Nzkw OGY5YzQ5MWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJ+sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEg24Npb+7WqramqYQxHGZUOaEpeUJfsiPr7Ved7nypEQq/83anfUfXJ FpzSUmQ4nxELexfqQzy5FMEMkIgUajHuNvjRwU3Ye7IdmSzDZsmbXUdBA2Enntb+ 0o1TPxQUWTNqdLN2wxVniE78sO9WjTRstKuSSvnqx1TlhCwiQeO7ihNxl9QqA4Vz mFlZ/f4pEZQ1rN3iM1JnVTYXKDcwTEGzy+PYzF2h8SlHkeCJwD4Ra2eeyW8Nd4cY xvtN3z3pjPt0LMopikHf85/6kCu4JXjSFO94bkz6q6R2sLzt35SlWiLwfVNLVuTn Wpk268vwHOVYGOeQZQ35EFwbAbhG3js= -----END CERTIFICATE-----Generated at Sun Oct 4 21:50:46 2026 by rpki-client