$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/6284af02-d42e-3b40-8748-6bee172ebf9c.roa File: 6284af02-d42e-3b40-8748-6bee172ebf9c.roa (raw, json) Hash identifier: 5CC7K5Vze89E+nXxtWjrZEpxjlQXWJZeiujNmh5y8uQ= Subject key identifier: 12:4E:D5:5D:46:FD:23:D7:58:2E:63:9B:48:E2:B9:39:63:BD:2E:8F Certificate issuer: /CN=581a8b49-a06e-4497-972f-fd8792bfe9dd Certificate serial: 010D0C9F4328584F119CF0FC6413A911D331D000 Authority key identifier: 70:5F:04:3F:F0:07:01:E7:30:D4:3C:E7:1B:F9:84:EB:62:53:4A:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/6284af02-d42e-3b40-8748-6bee172ebf9c.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 396845 IP address blocks: 141.193.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:f0:fc:64:13:a9:11:d3:31:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=581a8b49-a06e-4497-972f-fd8792bfe9dd Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=c5b9e8f8-a474-4f32-bc7c-e357af058fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:15:09:0c:ec:ad:b1:ff:18:41:1e:86:72:5a: 0f:a5:cc:2c:40:93:6f:ef:0d:20:c6:b5:92:ac:02: 7d:a7:75:1f:ae:fc:a4:78:e8:1a:87:d4:9a:e5:70: 65:3d:3c:2e:79:3e:6d:25:8c:56:74:2d:09:5e:5b: 05:ec:fb:b4:46:4c:44:e6:fb:eb:c5:9c:a0:81:84: 1f:82:ed:92:21:18:84:bb:09:1a:a6:5b:78:af:df: 5c:12:4a:02:2e:05:83:a8:47:11:c8:35:28:a4:2e: 44:5a:a2:72:ba:08:9d:eb:e8:eb:ea:92:f2:4d:73: db:61:b1:d4:eb:b9:fb:15:2a:b3:98:09:e5:cf:ee: b8:12:72:2c:b4:b1:b2:41:1b:4a:ea:d9:6d:42:69: 18:87:cc:f1:92:9e:a7:37:7a:14:6b:76:1b:21:06: b4:f8:ac:28:4a:57:11:89:d7:07:cb:0e:c3:a5:aa: bf:34:57:4b:9e:1d:a2:e2:dc:31:ff:f3:34:bc:dd: e0:5d:93:c9:96:ad:51:cd:35:17:78:11:33:4b:23: 66:ff:0a:6b:cd:db:41:54:e4:44:05:75:f3:d2:10: 33:03:39:07:54:d8:5b:50:e5:36:46:52:2a:17:92: f6:2a:58:3a:6a:3f:72:8c:2f:83:65:b1:de:a4:bd: 48:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:4E:D5:5D:46:FD:23:D7:58:2E:63:9B:48:E2:B9:39:63:BD:2E:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/6284af02-d42e-3b40-8748-6bee172ebf9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.crl X509v3 Authority Key Identifier: keyid:70:5F:04:3F:F0:07:01:E7:30:D4:3C:E7:1B:F9:84:EB:62:53:4A:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd.cer sbgp-ipAddrBlock: critical IPv4: 141.193.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:55:75:42:c3:8d:5a:36:a9:31:36:8c:6d:5e:eb:e6:09:09: e9:99:2b:37:8b:43:55:58:6d:33:a5:29:74:68:d7:31:3f:6f: 8c:a4:00:6b:9b:ec:f5:41:cf:c7:bf:84:04:ab:5b:44:9a:15: ae:db:93:9d:49:76:80:44:b8:33:b2:be:6f:8c:72:26:93:ed: a0:78:62:48:e5:f8:b6:e4:46:bf:ae:0b:ab:e3:9d:fe:64:eb: 47:d4:5f:fb:d9:66:d1:05:36:ce:c8:96:68:e8:24:da:99:cc: d4:42:16:8e:c2:18:1e:0f:ab:1d:12:48:4f:1e:0f:32:a8:d8: ce:15:aa:dc:6d:27:5b:df:b0:54:11:00:71:d4:57:7a:56:a6: 47:c5:64:f5:5e:35:c2:89:26:e3:8a:2a:a5:af:b3:7b:d9:9f: ee:c0:40:29:ed:f0:25:26:d6:eb:42:61:2c:1f:33:07:0e:d3: 76:de:99:87:09:77:a6:ff:72:e3:ea:9a:de:8c:80:e6:31:c6: b5:ee:68:cb:9d:b0:96:93:ef:c3:7e:39:b3:6f:91:6c:33:62: 5d:06:7d:05:29:6d:0a:ce:8f:41:dc:87:32:bd:d7:bb:b8:3c: aa:7b:9b:73:9a:f4:dd:25:b4:ad:56:2d:ee:59:d8:61:bb:34: bd:53:78:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnPD8ZBOpEdMx0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTgxYThiNDktYTA2ZS00NDk3LTk3MmYtZmQ4NzkyYmZl OWRkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YzViOWU4ZjgtYTQ3NC00ZjMyLWJjN2MtZTM1N2FmMDU4ZmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxUJDOytsf8YQR6GcloPpcwsQJNv7w0gxrWS rAJ9p3UfrvykeOgah9Sa5XBlPTwueT5tJYxWdC0JXlsF7Pu0RkxE5vvrxZyggYQf gu2SIRiEuwkaplt4r99cEkoCLgWDqEcRyDUopC5EWqJyugid6+jr6pLyTXPbYbHU 67n7FSqzmAnlz+64EnIstLGyQRtK6tltQmkYh8zxkp6nN3oUa3YbIQa0+KwoSlcR idcHyw7Dpaq/NFdLnh2i4twx//M0vN3gXZPJlq1RzTUXeBEzSyNm/wprzdtBVORE BXXz0hAzAzkHVNhbUOU2RlIqF5L2Klg6aj9yjC+DZbHepL1IWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJO1V1G/SPXWC5jm0jiuTljvS6PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ODFh OGI0OS1hMDZlLTQ0OTctOTcyZi1mZDg3OTJiZmU5ZGQvNjI4NGFmMDItZDQyZS0z YjQwLTg3NDgtNmJlZTE3MmViZjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTgxYThiNDktYTA2ZS00NDk3LTk3 MmYtZmQ4NzkyYmZlOWRkLzU4MWE4YjQ5LWEwNmUtNDQ5Ny05NzJmLWZkODc5MmJm ZTlkZC5jcmwwHwYDVR0jBBgwFoAUcF8EP/AHAecw1DznG/mE62JTSkYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ODFhOGI0OS1hMDZlLTQ0OTctOTcyZi1mZDg3 OTJiZmU5ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjcHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1VdULDjVo2qTE2jG1e6+YJCemZKzeLQ1VYbTOlKXRo1zE/b4ykAGub 7PVBz8e/hASrW0SaFa7bk51JdoBEuDOyvm+MciaT7aB4Ykjl+LbkRr+uC6vjnf5k 60fUX/vZZtEFNs7IlmjoJNqZzNRCFo7CGB4Pqx0SSE8eDzKo2M4VqtxtJ1vfsFQR AHHUV3pWpkfFZPVeNcKJJuOKKqWvs3vZn+7AQCnt8CUm1utCYSwfMwcO03bemYcJ d6b/cuPqmt6MgOYxxrXuaMudsJaT78N+ObNvkWwzYl0GfQUpbQrOj0HchzK917u4 PKp7m3Oa9N0ltK1WLe5Z2GG7NL1TePs= -----END CERTIFICATE-----Generated at Thu Sep 24 19:14:34 2026 by rpki-client