$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/1cbdc5bb-3d63-3935-be37-156c6b01c2b0.roa File: 1cbdc5bb-3d63-3935-be37-156c6b01c2b0.roa (raw, json) Hash identifier: ONlgcJNBauH1c/VVyx0BN89dYFW+BgU4OGGSrFaVAzE= Subject key identifier: BD:C4:58:05:6D:2F:EE:15:9F:37:2E:D5:21:43:4D:33:A5:B9:67:C1 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584F43DD56F962D10E10BBE5ED00 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/1cbdc5bb-3d63-3935-be37-156c6b01c2b0.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 22652 IP address blocks: 184.95.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:56:f9:62:d1:0e:10:bb:e5:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=1d512529-8e90-4630-be66-a1d9a5a807da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f2:7a:37:9d:03:8f:bf:59:86:70:a6:41:8e: e0:56:88:b2:ec:65:2f:85:fc:d0:17:19:49:73:21: 67:3d:da:3b:d2:65:86:6d:d4:fe:06:51:56:b5:66: 7a:cb:2d:78:80:8e:dd:7e:45:99:5f:cf:59:46:2b: 69:5b:43:52:4f:ec:6c:48:94:ea:7f:91:c2:ed:a8: 4a:94:eb:05:8a:08:36:c6:9b:89:cd:96:19:6d:2d: 42:7a:bf:2d:ec:f2:74:0d:4c:ef:bf:48:ad:bc:d8: aa:4d:64:78:31:8c:f6:e0:07:1c:53:e8:2d:50:e5: 15:13:96:35:ca:f8:ad:18:e8:1c:bc:34:e5:b8:aa: cd:d2:a5:3b:aa:44:c5:0f:13:04:11:0f:ca:a3:4c: 7a:3e:87:1e:dc:45:d3:42:9b:bc:c7:de:ee:5b:4b: 3b:54:9d:65:e2:ae:35:0b:0b:a0:e8:f8:43:a5:e1: 2d:d9:d4:09:f4:80:b4:be:ec:7d:fc:2f:88:90:70: 4c:12:31:bf:2c:47:56:d0:da:4f:34:27:62:aa:e3: a3:d8:78:4c:18:db:ac:cc:16:68:ab:a2:4b:2d:bf: 65:bb:b5:a6:7b:c3:d1:46:39:dd:ca:3d:60:a9:67: 60:7f:86:6f:9f:45:8f:48:59:1e:25:67:be:8f:8f: c3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C4:58:05:6D:2F:EE:15:9F:37:2E:D5:21:43:4D:33:A5:B9:67:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/1cbdc5bb-3d63-3935-be37-156c6b01c2b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 184.95.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:98:bd:48:c3:62:57:6d:84:c9:85:d1:2e:d3:dc:12:9c:78: 44:01:1a:a7:9a:fa:4c:9c:0b:c9:35:20:28:2a:96:72:e7:71: 9a:86:b6:b7:c9:30:78:da:1e:15:1d:cc:92:07:fa:5b:78:80: 4f:16:9a:2f:89:ce:65:28:7a:4b:59:40:cd:86:33:cd:3d:74: ff:d9:f7:79:e7:26:b3:ba:00:12:97:5c:82:cb:b7:30:c3:66: 79:02:5d:b1:94:90:17:b1:36:ae:c2:c8:b5:39:d4:2c:6a:6d: 08:dc:f2:9a:03:76:97:fa:14:c2:99:4a:f4:42:86:7b:0b:9f: 5c:30:92:73:73:1d:30:0a:10:2c:fb:12:11:1d:de:49:ba:da: fd:11:c0:8a:13:9b:6c:23:09:70:75:16:b6:79:74:79:d3:f2: bf:b9:8a:b1:33:1e:c8:66:af:9e:9a:33:a2:10:f0:f5:f1:f9: 7b:46:28:c9:ac:8f:4b:24:9c:01:01:3e:c8:86:00:97:80:0b: d4:42:21:24:a9:83:d7:b6:0a:f3:99:e2:62:a1:27:fe:a7:53: 4b:3c:d1:a7:19:0b:4a:da:81:9c:55:7b:83:9c:f5:8e:47:da: c1:12:d8:e7:7f:68:39:17:60:63:c9:8e:3b:73:fd:19:2e:11: 6c:a6:32:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3Vb5YtEOELvl7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk MWQ1MTI1MjktOGU5MC00NjMwLWJlNjYtYTFkOWE1YTgwN2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvJ6N50Dj79ZhnCmQY7gVoiy7GUvhfzQFxlJ cyFnPdo70mWGbdT+BlFWtWZ6yy14gI7dfkWZX89ZRitpW0NST+xsSJTqf5HC7ahK lOsFigg2xpuJzZYZbS1Cer8t7PJ0DUzvv0itvNiqTWR4MYz24AccU+gtUOUVE5Y1 yvitGOgcvDTluKrN0qU7qkTFDxMEEQ/Ko0x6Poce3EXTQpu8x97uW0s7VJ1l4q41 Cwug6PhDpeEt2dQJ9IC0vux9/C+IkHBMEjG/LEdW0NpPNCdiquOj2HhMGNuszBZo q6JLLb9lu7Wme8PRRjndyj1gqWdgf4Zvn0WPSFkeJWe+j4/DzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3EWAVtL+4Vnzcu1SFDTTOluWfBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvMWNiZGM1YmItM2Q2My0z OTM1LWJlMzctMTU2YzZiMDFjMmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuF/4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuYvUjDYldthMmF0S7T3BKceEQBGqea+kycC8k1ICgqlnLncZqGtrfJ MHjaHhUdzJIH+lt4gE8Wmi+JzmUoektZQM2GM809dP/Z93nnJrO6ABKXXILLtzDD ZnkCXbGUkBexNq7CyLU51CxqbQjc8poDdpf6FMKZSvRChnsLn1wwknNzHTAKECz7 EhEd3km62v0RwIoTm2wjCXB1FrZ5dHnT8r+5irEzHshmr56aM6IQ8PXx+XtGKMms j0sknAEBPsiGAJeAC9RCISSpg9e2CvOZ4mKhJ/6nU0s80acZC0ragZxVe4Oc9Y5H 2sES2Od/aDkXYGPJjjtz/RkuEWymMio= -----END CERTIFICATE-----Generated at Wed Sep 23 10:21:20 2026 by rpki-client