$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/f304bfed-6aa3-3d7a-a7df-324800baf33c.roa File: f304bfed-6aa3-3d7a-a7df-324800baf33c.roa (raw, json) Hash identifier: ZtkeKYh2ZidA0svC227p2fSExdwdKdOraHCEHcCA4z8= Subject key identifier: CB:18:23:8C:EE:B0:7A:C5:2F:7F:CD:04:BA:E0:0B:D3:66:33:43:B1 Certificate issuer: /CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f Certificate serial: 010D0C9F4328584F2EED13AFC6D95964089D3980 Authority key identifier: 54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/f304bfed-6aa3-3d7a-a7df-324800baf33c.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 198949 IP address blocks: 192.200.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:13:af:c6:d9:59:64:08:9d:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=419ae35d-ee34-43a8-85a6-808b8ac435de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:92:8a:55:99:45:c2:0f:1c:8a:89:74:60:ef: 76:49:ef:54:3f:9f:4d:47:71:78:1d:72:43:3b:79: 87:54:c5:c1:08:9f:69:ef:64:e9:a8:c3:bf:e5:16: 41:02:b2:50:26:83:ac:6a:73:69:17:9c:80:c7:ed: c8:a9:7b:82:e0:c8:9d:c1:33:06:76:82:d2:ac:36: eb:27:de:6b:cb:9b:10:36:52:07:5a:e9:b6:6b:7e: df:50:0b:90:5e:3d:e0:b4:c9:35:96:67:0f:f0:42: da:fb:59:8f:33:43:71:1a:ac:b1:be:6f:96:e9:f8: 79:16:4d:c6:4a:01:53:87:e3:eb:5a:23:c6:d7:29: 01:28:b5:58:be:22:5b:ed:77:2c:cc:5b:0b:87:9e: ad:77:bf:5d:46:8c:f5:aa:77:d4:0a:65:50:90:49: e3:06:a3:93:fe:5c:59:59:4b:08:98:90:5a:c7:de: fe:ce:92:05:60:92:14:40:35:10:46:48:32:ff:b2: bd:2e:fd:6c:e5:8a:aa:a4:22:a6:90:46:f1:29:ef: 34:39:03:60:ce:3d:ca:cb:9d:b6:14:9f:b2:07:f3: 76:e1:7c:bf:1a:06:69:24:f6:f7:56:a8:14:67:34: 6d:e6:f6:58:d3:7d:c0:86:6a:8d:f4:e7:aa:1f:48: 73:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:18:23:8C:EE:B0:7A:C5:2F:7F:CD:04:BA:E0:0B:D3:66:33:43:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/f304bfed-6aa3-3d7a-a7df-324800baf33c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl X509v3 Authority Key Identifier: keyid:54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer sbgp-ipAddrBlock: critical IPv4: 192.200.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:c4:c0:3d:ad:a1:c5:3a:ff:22:b4:18:dc:21:c3:12:04:e4: 96:7f:bc:7a:27:f1:c4:fe:e0:58:e3:03:fd:81:21:d4:18:9a: cc:fa:f5:6b:c8:3f:c4:d0:9f:77:9f:e6:b5:cc:6a:e4:fc:ff: c1:3b:e6:cb:f8:05:c6:25:7f:16:bf:ab:32:b5:31:de:51:4c: f8:f3:97:b1:5f:72:e4:2d:ef:cd:f1:09:e4:3f:fa:c2:08:3d: 64:70:ad:f7:e0:e9:6f:ca:c4:83:c0:f0:b9:19:ca:da:92:5d: 77:dd:0b:a8:07:1d:95:e5:c1:e4:39:32:8a:c2:87:22:87:91: d7:ce:43:37:14:8f:b0:22:3e:f0:08:44:c8:6b:d5:44:05:ca: 0b:48:1f:4c:f0:37:71:b0:0f:38:53:da:7d:24:1f:bc:cf:15: ab:15:44:4f:35:f4:88:26:5b:c5:46:6a:72:76:b0:6c:b5:26: d6:85:61:db:27:18:f0:3e:eb:e0:ce:ab:80:34:bd:3f:75:f3: fc:77:ac:02:6c:62:8d:a4:4c:49:27:8f:88:15:f5:05:b8:95: e8:01:be:3a:a5:96:53:ed:ca:6d:38:29:2e:82:88:47:b4:52: fe:fa:6c:13:35:8d:3b:48:08:4b:49:31:1e:72:bf:3d:c8:a1: 31:3f:98:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7ROvxtlZZAidOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQyMWZmZDgtMzZlNi00YTZiLTkwMzQtNDY3MTU5MmM1 YTRmMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk NDE5YWUzNWQtZWUzNC00M2E4LTg1YTYtODA4YjhhYzQzNWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpKKVZlFwg8ciol0YO92Se9UP59NR3F4HXJD O3mHVMXBCJ9p72TpqMO/5RZBArJQJoOsanNpF5yAx+3IqXuC4MidwTMGdoLSrDbr J95ry5sQNlIHWum2a37fUAuQXj3gtMk1lmcP8ELa+1mPM0NxGqyxvm+W6fh5Fk3G SgFTh+PrWiPG1ykBKLVYviJb7XcszFsLh56td79dRoz1qnfUCmVQkEnjBqOT/lxZ WUsImJBax97+zpIFYJIUQDUQRkgy/7K9Lv1s5YqqpCKmkEbxKe80OQNgzj3Ky522 FJ+yB/N24Xy/GgZpJPb3VqgUZzRt5vZY033AhmqN9OeqH0hz1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsYI4zusHrFL3/NBLrgC9NmM0OxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81NDIx ZmZkOC0zNmU2LTRhNmItOTAzNC00NjcxNTkyYzVhNGYvZjMwNGJmZWQtNmFhMy0z ZDdhLWE3ZGYtMzI0ODAwYmFmMzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNTQyMWZmZDgtMzZlNi00YTZiLTkw MzQtNDY3MTU5MmM1YTRmLzU0MjFmZmQ4LTM2ZTYtNGE2Yi05MDM0LTQ2NzE1OTJj NWE0Zi5jcmwwHwYDVR0jBBgwFoAUVBKTOoHmICO96AuZwkVU3VkRZm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81NDIxZmZkOC0zNmU2LTRhNmItOTAzNC00Njcx NTkyYzVhNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwMiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHEwD2tocU6/yK0GNwhwxIE5JZ/vHon8cT+4FjjA/2BIdQYmsz69WvI P8TQn3ef5rXMauT8/8E75sv4BcYlfxa/qzK1Md5RTPjzl7FfcuQt783xCeQ/+sII PWRwrffg6W/KxIPA8LkZytqSXXfdC6gHHZXlweQ5MorChyKHkdfOQzcUj7AiPvAI RMhr1UQFygtIH0zwN3GwDzhT2n0kH7zPFasVRE819IgmW8VGanJ2sGy1JtaFYdsn GPA+6+DOq4A0vT918/x3rAJsYo2kTEknj4gV9QW4legBvjqlllPtym04KS6CiEe0 Uv76bBM1jTtICEtJMR5yvz3IoTE/mC4= -----END CERTIFICATE-----Generated at Sun Sep 20 13:06:57 2026 by rpki-client