$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/17ecd2fc-f460-3e6f-8e96-a8cc4ac885a7.roa File: 17ecd2fc-f460-3e6f-8e96-a8cc4ac885a7.roa (raw, json) Hash identifier: uv4vSWr3LoGsupskLzw02sLKbiPtkqh2yVmaEdl6ONM= Subject key identifier: 75:10:9C:51:4A:65:64:98:EC:21:6E:FC:76:58:6F:09:AE:78:F5:3A Certificate issuer: /CN=9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec Certificate serial: 010D0C9F4328584EFECFD9F7B48B88D27488B9A0 Authority key identifier: B6:F3:A8:F6:CC:10:73:46:38:5F:AB:6A:C9:47:D8:74:32:0F:94:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/17ecd2fc-f460-3e6f-8e96-a8cc4ac885a7.roa Signing time: Sat 29 Aug 2026 07:22:38 +0000 ROA not before: Sat 29 Aug 2026 07:22:38 +0000 ROA not after: Fri 27 Nov 2026 08:22:38 +0000 asID: 11179 IP address blocks: 192.158.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:cf:d9:f7:b4:8b:88:d2:74:88:b9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec Validity Not Before: Aug 29 07:22:38 2026 GMT Not After : Nov 27 08:22:38 2026 GMT Subject: CN=f1c51aff-4465-421c-b408-dda22be98f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1f:19:8d:03:f1:ff:02:62:31:8f:d1:77:56: 40:08:af:b0:21:a8:c8:80:f1:5c:90:dc:24:56:0f: e5:87:d7:e0:1f:31:c7:9b:30:e6:1b:2d:06:b1:3d: c2:e1:14:68:8e:c7:85:67:e4:c3:a0:a7:b7:84:ae: 7a:25:18:c7:f9:69:aa:c7:64:34:3c:41:0a:4d:6a: 9c:17:db:a0:39:ba:c3:d2:98:ab:1c:b8:f5:d9:17: 33:4e:75:22:3a:67:2d:ec:5b:b1:41:f5:81:6c:4c: 65:d5:ee:bf:01:73:c0:6a:f3:e7:57:bc:06:ef:39: fc:b9:2c:dc:d5:67:e3:50:e6:0d:16:2b:13:49:2f: 96:6e:33:e5:25:83:af:f2:15:44:3d:c7:25:bc:d2: cc:a6:97:64:f7:52:9c:2a:fb:27:00:d2:e7:93:e1: cc:40:07:8f:14:c0:84:50:56:7f:04:a6:44:0a:66: 94:b1:00:97:c3:cd:45:b8:9e:92:c5:d1:05:76:3a: 34:9f:99:b0:70:41:66:8d:0c:fc:5b:d4:9c:44:dd: 85:d0:5b:96:be:3b:29:f4:4d:e3:03:94:00:98:49: 2f:46:15:c3:4b:ba:7f:09:06:42:8f:3e:e1:15:16: 58:0f:2e:f9:63:8d:b6:31:c7:76:2c:4d:d6:78:f9: 5d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:10:9C:51:4A:65:64:98:EC:21:6E:FC:76:58:6F:09:AE:78:F5:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/17ecd2fc-f460-3e6f-8e96-a8cc4ac885a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.crl X509v3 Authority Key Identifier: keyid:B6:F3:A8:F6:CC:10:73:46:38:5F:AB:6A:C9:47:D8:74:32:0F:94:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer sbgp-ipAddrBlock: critical IPv4: 192.158.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:52:bb:df:00:58:bb:25:92:71:b2:75:66:02:0f:65:c3:23: c3:19:1d:ff:2d:da:a5:96:be:44:11:c1:6a:7e:b5:32:e0:5a: 18:09:cf:b4:d1:87:b6:93:4a:61:b2:48:cc:c6:86:b4:b9:fa: cb:79:7f:dd:2d:55:ed:9e:9b:c4:55:2c:18:1e:de:de:f3:71: 6e:35:08:13:13:49:41:30:eb:a1:2c:0f:1d:30:6a:c7:4e:a4: 55:29:84:80:c0:e9:49:1b:c2:1e:7c:3f:1f:f3:50:b9:e8:12: 51:c8:7a:4d:d9:75:14:f0:9d:c9:4e:1f:4c:54:86:f5:3c:4f: bd:e9:f8:a7:09:78:2d:82:6e:d5:e1:da:97:3d:3c:05:b9:28: 84:14:cf:b6:5a:32:27:1e:d4:aa:31:ac:b6:58:a3:c2:0e:fa: 69:c8:3b:04:f9:3b:8d:05:d4:0a:e1:15:7f:a0:1b:9f:6e:66: 41:ee:f9:4d:6a:5e:49:4a:2a:d7:9b:0a:97:29:90:e7:91:fe: c3:59:b9:9b:62:fb:d4:0b:ad:cf:91:90:f9:35:f3:2d:17:46: 1d:b7:e5:9e:dd:09:0b:dc:be:cf:4c:5d:cf:c1:6b:67:a3:5b: 85:eb:8a:29:9e:91:37:ab:8e:50:d9:f9:1f:58:42:92:e2:2c: e4:6f:89:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7+z9n3tIuI0nSIuaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFjMzNiZDUtOWRmNC00YWIwLWIwODQtOGQ1OGU1MmZm N2VjMB4XDTI2MDgyOTA3MjIzOFoXDTI2MTEyNzA4MjIzOFowLzEtMCsGA1UEAxMk ZjFjNTFhZmYtNDQ2NS00MjFjLWI0MDgtZGRhMjJiZTk4ZjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx8ZjQPx/wJiMY/Rd1ZACK+wIajIgPFckNwk Vg/lh9fgHzHHmzDmGy0GsT3C4RRojseFZ+TDoKe3hK56JRjH+Wmqx2Q0PEEKTWqc F9ugObrD0pirHLj12RczTnUiOmct7FuxQfWBbExl1e6/AXPAavPnV7wG7zn8uSzc 1WfjUOYNFisTSS+WbjPlJYOv8hVEPcclvNLMppdk91KcKvsnANLnk+HMQAePFMCE UFZ/BKZECmaUsQCXw81FuJ6SxdEFdjo0n5mwcEFmjQz8W9ScRN2F0FuWvjsp9E3j A5QAmEkvRhXDS7p/CQZCjz7hFRZYDy75Y422Mcd2LE3WePldoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUQnFFKZWSY7CFu/HZYbwmuePU6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi85YWMz M2JkNS05ZGY0LTRhYjAtYjA4NC04ZDU4ZTUyZmY3ZWMvMTdlY2QyZmMtZjQ2MC0z ZTZmLThlOTYtYThjYzRhYzg4NWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvOWFjMzNiZDUtOWRmNC00YWIwLWIw ODQtOGQ1OGU1MmZmN2VjLzlhYzMzYmQ1LTlkZjQtNGFiMC1iMDg0LThkNThlNTJm ZjdlYy5jcmwwHwYDVR0jBBgwFoAUtvOo9swQc0Y4X6tqyUfYdDIPlMgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi85YWMzM2JkNS05ZGY0LTRhYjAtYjA4NC04ZDU4 ZTUyZmY3ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ71MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlSu98AWLslknGydWYCD2XDI8MZHf8t2qWWvkQRwWp+tTLgWhgJz7TR h7aTSmGySMzGhrS5+st5f90tVe2em8RVLBge3t7zcW41CBMTSUEw66EsDx0wasdO pFUphIDA6Ukbwh58Px/zULnoElHIek3ZdRTwnclOH0xUhvU8T73p+KcJeC2CbtXh 2pc9PAW5KIQUz7ZaMice1KoxrLZYo8IO+mnIOwT5O40F1ArhFX+gG59uZkHu+U1q XklKKtebCpcpkOeR/sNZuZti+9QLrc+RkPk18y0XRh235Z7dCQvcvs9MXc/Ba2ej W4XriimekTerjlDZ+R9YQpLiLORvibM= -----END CERTIFICATE-----Generated at Tue Sep 22 12:26:14 2026 by rpki-client