$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce13cd65-cc2f-4c94-9d69-2a6db846736d/31f1afc6-a9a6-3f1e-a946-4c5157abf4aa.roa File: 31f1afc6-a9a6-3f1e-a946-4c5157abf4aa.roa (raw, json) Hash identifier: MNTzyTtF3RMa/AKPhXUzuhWxygs85c2ieteN4AcGy9A= Subject key identifier: ED:CE:D9:0D:BA:A6:37:7F:43:56:E4:F7:72:D2:77:D7:F9:8A:82:46 Certificate issuer: /CN=ce13cd65-cc2f-4c94-9d69-2a6db846736d Certificate serial: 010D0C9F4328584F498C02B74F7211F6FD664BE0 Authority key identifier: 09:3F:74:3A:18:E7:71:42:8E:0B:0F:83:23:7E:63:24:97:34:A0:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce13cd65-cc2f-4c94-9d69-2a6db846736d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce13cd65-cc2f-4c94-9d69-2a6db846736d/31f1afc6-a9a6-3f1e-a946-4c5157abf4aa.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14598 IP address blocks: 192.245.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce13cd65-cc2f-4c94-9d69-2a6db846736d/ce13cd65-cc2f-4c94-9d69-2a6db846736d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce13cd65-cc2f-4c94-9d69-2a6db846736d/ce13cd65-cc2f-4c94-9d69-2a6db846736d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce13cd65-cc2f-4c94-9d69-2a6db846736d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8c:02:b7:4f:72:11:f6:fd:66:4b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce13cd65-cc2f-4c94-9d69-2a6db846736d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b773e30c-ae8e-49c5-bc08-20ce259fa129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:1f:18:38:19:10:24:67:78:b4:28:45:c2:8f: 24:32:e1:57:3c:a2:cd:45:cb:f2:25:59:65:45:ba: a7:29:99:14:50:a5:02:09:f9:34:40:05:9a:a5:e3: 1f:4e:f0:b8:df:2c:45:4f:33:bb:d3:a2:70:23:3a: 73:61:22:f0:dc:77:c2:16:71:39:3e:b7:50:2f:57: 57:93:d5:ab:3b:35:a6:6b:38:ed:95:59:c2:da:d6: 95:b6:4c:cc:33:3e:30:9e:e2:99:7d:4e:2e:f7:6e: 26:1d:2d:2e:d4:c3:86:7b:ff:4d:47:e2:c4:bd:be: 53:fa:90:c0:92:79:a7:e7:78:60:42:25:a3:93:c5: 90:ae:e0:e3:5f:4b:06:b2:f6:bb:3d:48:c9:cf:95: 73:6c:c8:6c:0f:20:4e:25:d6:b4:89:4f:96:ce:fc: ee:bf:7f:75:7e:ab:da:a2:dc:c8:78:06:02:01:d7: c7:38:c1:d4:0e:ea:65:44:f3:11:df:d9:d9:53:64: 91:8a:ef:c3:9c:ca:5a:33:2a:c3:9f:17:0e:09:41: 76:c2:a8:34:a7:95:d6:f9:02:0a:c9:6b:10:1f:0e: a2:b5:6e:a1:f0:88:e6:2c:11:53:6d:cf:b1:f2:88: ab:31:fd:14:fb:eb:78:9e:2f:e6:64:b3:0b:78:cd: de:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CE:D9:0D:BA:A6:37:7F:43:56:E4:F7:72:D2:77:D7:F9:8A:82:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce13cd65-cc2f-4c94-9d69-2a6db846736d/31f1afc6-a9a6-3f1e-a946-4c5157abf4aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce13cd65-cc2f-4c94-9d69-2a6db846736d/ce13cd65-cc2f-4c94-9d69-2a6db846736d.crl X509v3 Authority Key Identifier: keyid:09:3F:74:3A:18:E7:71:42:8E:0B:0F:83:23:7E:63:24:97:34:A0:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce13cd65-cc2f-4c94-9d69-2a6db846736d.cer sbgp-ipAddrBlock: critical IPv4: 192.245.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:5b:cc:5b:51:f5:a5:6c:8d:fe:e8:ca:d0:52:d5:db:3c:03: f8:7c:e0:24:cd:3f:aa:44:e1:df:5d:aa:65:23:1b:17:59:22: 51:ec:a4:03:d0:4b:4f:cb:e4:20:f4:73:c1:fe:bb:59:31:cb: 86:a5:47:63:8d:55:56:88:c5:99:28:51:97:00:69:05:33:5c: a6:97:27:cc:72:f9:e2:c0:4a:16:94:c6:fd:d1:4e:55:78:26: c3:5a:93:be:ab:1f:6e:80:31:13:f4:c9:b6:10:2a:4f:ed:e5: f1:06:85:ce:d2:76:2f:d5:8d:7e:76:8b:eb:c4:a5:91:17:b7: a7:69:29:64:d5:5b:87:e2:81:2c:95:f6:db:e2:a1:af:4c:7d: d4:2c:4c:e6:06:f9:b3:ca:c2:98:56:0a:6b:3d:d9:5c:49:dd: dc:50:4d:20:fe:41:d9:c7:c5:c1:a3:db:98:70:c0:8a:d6:ab: 5d:88:4e:06:10:bb:24:6d:12:72:0d:ce:39:d3:6f:64:94:97: b8:58:d7:b1:ce:8c:26:7c:9c:bd:07:23:dc:c3:ff:1a:02:21: a3:5b:f9:c8:0f:07:44:f9:e6:8e:c8:53:d4:be:7e:53:a9:18: 42:ca:f1:cf:a1:eb:e0:fc:89:54:7c:25:58:c5:8b:d2:79:af: 66:cf:0a:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JjAK3T3IR9v1mS+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UxM2NkNjUtY2MyZi00Yzk0LTlkNjktMmE2ZGI4NDY3 MzZkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Yjc3M2UzMGMtYWU4ZS00OWM1LWJjMDgtMjBjZTI1OWZhMTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgh8YOBkQJGd4tChFwo8kMuFXPKLNRcvyJVll RbqnKZkUUKUCCfk0QAWapeMfTvC43yxFTzO706JwIzpzYSLw3HfCFnE5PrdQL1dX k9WrOzWmazjtlVnC2taVtkzMMz4wnuKZfU4u924mHS0u1MOGe/9NR+LEvb5T+pDA knmn53hgQiWjk8WQruDjX0sGsva7PUjJz5VzbMhsDyBOJda0iU+Wzvzuv391fqva otzIeAYCAdfHOMHUDuplRPMR39nZU2SRiu/DnMpaMyrDnxcOCUF2wqg0p5XW+QIK yWsQHw6itW6h8IjmLBFTbc+x8oirMf0U++t4ni/mZLMLeM3eEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3O2Q26pjd/Q1bk93LSd9f5ioJGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9jZTEz Y2Q2NS1jYzJmLTRjOTQtOWQ2OS0yYTZkYjg0NjczNmQvMzFmMWFmYzYtYTlhNi0z ZjFlLWE5NDYtNGM1MTU3YWJmNGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvY2UxM2NkNjUtY2MyZi00Yzk0LTlk NjktMmE2ZGI4NDY3MzZkL2NlMTNjZDY1LWNjMmYtNGM5NC05ZDY5LTJhNmRiODQ2 NzM2ZC5jcmwwHwYDVR0jBBgwFoAUCT90OhjncUKOCw+DI35jJJc0oDMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9jZTEzY2Q2NS1jYzJmLTRjOTQtOWQ2OS0yYTZk Yjg0NjczNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPVXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhbzFtR9aVsjf7oytBS1ds8A/h84CTNP6pE4d9dqmUjGxdZIlHspAPQ S0/L5CD0c8H+u1kxy4alR2ONVVaIxZkoUZcAaQUzXKaXJ8xy+eLAShaUxv3RTlV4 JsNak76rH26AMRP0ybYQKk/t5fEGhc7Sdi/VjX52i+vEpZEXt6dpKWTVW4figSyV 9tvioa9MfdQsTOYG+bPKwphWCms92VxJ3dxQTSD+QdnHxcGj25hwwIrWq12ITgYQ uyRtEnINzjnTb2SUl7hY17HOjCZ8nL0HI9zD/xoCIaNb+cgPB0T55o7IU9S+flOp GELK8c+h6+D8iVR8JVjFi9J5r2bPCqE= -----END CERTIFICATE-----Generated at Sat Sep 26 15:26:35 2026 by rpki-client