$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/351e5898-2460-47d0-a912-241434a1533d/1bedefba-96df-3aa5-9309-3383f0bbb200.roa File: 1bedefba-96df-3aa5-9309-3383f0bbb200.roa (raw, json) Hash identifier: SZtYbU7kUiRvSm9F5ebTfhSJDACLvuXIZ0oHc6yd16s= Subject key identifier: 1F:7D:32:56:D0:B2:AD:75:BD:9A:F1:E7:94:75:82:E7:E4:FB:5B:DF Certificate issuer: /CN=351e5898-2460-47d0-a912-241434a1533d Certificate serial: 010D0C9F4328584F761D7C0D5EBE7A69F25F7038 Authority key identifier: A8:88:04:8F:97:23:36:E4:2B:C1:23:A8:83:B6:35:97:A4:D9:65:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/351e5898-2460-47d0-a912-241434a1533d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/351e5898-2460-47d0-a912-241434a1533d/1bedefba-96df-3aa5-9309-3383f0bbb200.roa Signing time: Sun 11 Oct 2026 01:00:13 +0000 ROA not before: Sun 11 Oct 2026 01:00:13 +0000 ROA not after: Sat 09 Jan 2027 02:00:13 +0000 asID: 12082 IP address blocks: 192.80.28.0/24 maxlen: 24 208.68.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/351e5898-2460-47d0-a912-241434a1533d/351e5898-2460-47d0-a912-241434a1533d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/351e5898-2460-47d0-a912-241434a1533d/351e5898-2460-47d0-a912-241434a1533d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/351e5898-2460-47d0-a912-241434a1533d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:76:1d:7c:0d:5e:be:7a:69:f2:5f:70:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351e5898-2460-47d0-a912-241434a1533d Validity Not Before: Oct 11 01:00:13 2026 GMT Not After : Jan 9 02:00:13 2027 GMT Subject: CN=2b47d8f9-1e2e-4841-acee-5d003042555f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d2:3e:fa:44:6d:d2:d5:e1:5e:b2:49:a3:fd: 79:6e:c8:6a:e1:1d:86:b6:56:ee:56:cc:50:60:be: 0d:aa:3e:0b:78:a7:96:2f:37:26:c0:7f:4e:02:41: f1:99:24:a8:be:36:22:38:bc:e0:d6:95:0c:a0:1c: 8f:8f:c9:c1:73:cd:87:d9:c9:6c:3a:99:aa:4e:f2: 37:7b:3c:af:2c:3e:61:1f:0b:26:ff:5c:8f:25:c7: 1a:9e:33:d0:c0:f8:17:d8:62:d0:5c:9b:7c:46:0d: a2:e7:d8:46:04:8f:27:fa:cd:35:c2:de:ed:4c:05: 3e:43:13:a0:b1:71:ef:1f:b0:01:ac:0f:85:97:fb: 52:5a:62:14:ad:bf:55:44:d5:aa:d5:c0:2c:25:02: 2c:72:bf:58:f4:aa:1d:de:52:1c:c6:25:bd:72:07: f1:83:8c:a5:57:21:bc:21:de:40:77:90:21:a7:8b: b9:a0:86:36:f2:66:1e:05:97:02:9f:7d:9a:f8:c3: c8:b0:c9:18:69:25:7d:84:31:c6:cf:eb:f3:68:7e: 1b:79:f5:22:84:95:fc:0a:d1:04:06:12:74:2d:c2: 59:bc:57:3b:ae:fd:cc:04:23:73:d7:3e:06:2d:5a: 47:23:4f:6c:a1:2b:26:1d:b5:4e:cf:e7:50:d7:a4: 70:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7D:32:56:D0:B2:AD:75:BD:9A:F1:E7:94:75:82:E7:E4:FB:5B:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/351e5898-2460-47d0-a912-241434a1533d/1bedefba-96df-3aa5-9309-3383f0bbb200.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/351e5898-2460-47d0-a912-241434a1533d/351e5898-2460-47d0-a912-241434a1533d.crl X509v3 Authority Key Identifier: keyid:A8:88:04:8F:97:23:36:E4:2B:C1:23:A8:83:B6:35:97:A4:D9:65:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/351e5898-2460-47d0-a912-241434a1533d.cer sbgp-ipAddrBlock: critical IPv4: 192.80.28.0/24 208.68.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:c0:68:43:e5:de:99:87:21:bb:40:0d:77:be:61:f5:d9:3c: d4:19:cf:e4:f8:e3:f4:08:0e:db:3e:5d:d1:78:f8:91:1e:e3: 06:8c:3f:bc:4f:77:14:cd:af:8b:74:09:41:af:ac:47:71:9c: 00:06:8c:37:3d:8c:d9:5a:1e:e0:ad:fd:be:9f:01:c9:6b:3b: 99:9d:48:99:ff:dd:8a:06:3f:ab:aa:3e:cb:a5:21:f2:32:f1: a2:b0:3a:b9:86:0e:7c:4d:c6:ff:20:59:dc:d2:92:8c:a0:fa: c2:b0:dc:24:a8:83:b0:1f:14:63:7d:7e:3e:af:fb:bd:07:ed: 09:37:0b:8b:68:a6:67:93:d1:2a:e3:50:b6:b1:23:e0:5b:27: db:7b:56:d4:11:26:be:1a:d6:63:86:84:de:02:2c:cb:be:34: 16:99:ed:b4:08:80:ea:31:a9:9c:a0:e5:1b:c9:b2:5d:9a:a2: 24:5c:96:2f:bf:37:ca:33:b8:cc:74:13:f9:2b:12:77:8a:70: e1:ae:23:51:ea:4b:24:53:c9:49:27:d0:a6:44:c9:45:b8:b8: d4:b1:78:9f:62:b2:43:33:66:8b:73:dc:9e:4a:75:a7:12:17: 85:76:93:45:14:c9:df:36:24:9f:b2:3f:4f:d1:b8:3d:b8:44: 53:ca:57:11 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE92HXwNXr56afJfcDgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzUxZTU4OTgtMjQ2MC00N2QwLWE5MTItMjQxNDM0YTE1 MzNkMB4XDTI2MTAxMTAxMDAxM1oXDTI3MDEwOTAyMDAxM1owLzEtMCsGA1UEAxMk MmI0N2Q4ZjktMWUyZS00ODQxLWFjZWUtNWQwMDMwNDI1NTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49I++kRt0tXhXrJJo/15bshq4R2GtlbuVsxQ YL4Nqj4LeKeWLzcmwH9OAkHxmSSovjYiOLzg1pUMoByPj8nBc82H2clsOpmqTvI3 ezyvLD5hHwsm/1yPJccanjPQwPgX2GLQXJt8Rg2i59hGBI8n+s01wt7tTAU+QxOg sXHvH7ABrA+Fl/tSWmIUrb9VRNWq1cAsJQIscr9Y9Kod3lIcxiW9cgfxg4ylVyG8 Id5Ad5Ahp4u5oIY28mYeBZcCn32a+MPIsMkYaSV9hDHGz+vzaH4befUihJX8CtEE BhJ0LcJZvFc7rv3MBCNz1z4GLVpHI09soSsmHbVOz+dQ16RwJQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFB99MlbQsq11vZrx55R1gufk+1vfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8zNTFl NTg5OC0yNDYwLTQ3ZDAtYTkxMi0yNDE0MzRhMTUzM2QvMWJlZGVmYmEtOTZkZi0z YWE1LTkzMDktMzM4M2YwYmJiMjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvMzUxZTU4OTgtMjQ2MC00N2QwLWE5 MTItMjQxNDM0YTE1MzNkLzM1MWU1ODk4LTI0NjAtNDdkMC1hOTEyLTI0MTQzNGEx NTMzZC5jcmwwHwYDVR0jBBgwFoAUqIgEj5cjNuQrwSOog7Y1l6TZZbcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi8zNTFlNTg5OC0yNDYwLTQ3ZDAtYTkxMi0yNDE0 MzRhMTUzM2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwFAcAwQC 0ETgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHzAaEPl3pmHIbtADXe+YfXZPNQZz+T44/QIDts+XdF4+JEe 4waMP7xPdxTNr4t0CUGvrEdxnAAGjDc9jNlaHuCt/b6fAclrO5mdSJn/3YoGP6uq PsulIfIy8aKwOrmGDnxNxv8gWdzSkoyg+sKw3CSog7AfFGN9fj6v+70H7Qk3C4to pmeT0SrjULaxI+BbJ9t7VtQRJr4a1mOGhN4CLMu+NBaZ7bQIgOoxqZyg5RvJsl2a oiRcli+/N8ozuMx0E/krEneKcOGuI1HqSyRTyUkn0KZEyUW4uNSxeJ9iskMzZotz 3J5KdacSF4V2k0UUyd82JJ+yP0/RuD24RFPKVxE= -----END CERTIFICATE-----Generated at Sun Oct 11 22:28:18 2026 by rpki-client