$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/45969bdc-1c7a-3c5e-9a51-cdb11c915d54.roa File: 45969bdc-1c7a-3c5e-9a51-cdb11c915d54.roa (raw, json) Hash identifier: kJAS3iGADdvz0oolo27qgyv7MOK4beT8uoGEKSqXFZs= Subject key identifier: 8D:19:B7:4A:13:55:A8:01:27:8F:79:A2:A0:FB:64:1F:DB:10:49:53 Certificate issuer: /CN=88e058e6-ff68-4d5d-b7b8-04d1661ec235 Certificate serial: 010D0C9F4328584F0672A442950317CE34A1CE80 Authority key identifier: 7F:1F:72:F4:8D:1D:D7:6F:87:2D:2D:EA:F2:15:9E:CA:D3:6A:2D:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/45969bdc-1c7a-3c5e-9a51-cdb11c915d54.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 20 IP address blocks: 192.12.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:a4:42:95:03:17:ce:34:a1:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88e058e6-ff68-4d5d-b7b8-04d1661ec235 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=caff9d2b-aa08-4e8f-bc85-1b4fe257db8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:77:9b:f5:bc:fe:1f:ee:9b:5c:02:f0:da:05: cc:7f:66:78:3d:52:01:da:ef:58:0d:f0:45:64:d1: d2:c2:57:c9:6e:1b:e0:29:0c:5d:bc:52:20:3f:05: 7a:40:fa:ec:cb:2c:7b:2d:d4:a6:a8:53:0f:ee:19: 91:74:47:10:7e:4a:74:8a:a8:19:ce:af:9b:f3:39: d3:13:3f:90:74:ba:9b:01:72:1b:b0:f3:03:a6:0e: 3c:45:63:11:05:e8:be:e0:e7:6a:28:38:6b:6d:97: 00:e2:0f:3f:52:11:1f:db:58:00:1f:57:a6:65:ec: 98:03:53:8b:65:11:55:b9:01:33:4b:83:45:93:bb: 38:ed:31:68:a9:ac:81:89:15:a4:d7:a8:ff:53:8d: 42:f8:8f:72:11:71:6a:f0:e3:17:ef:36:a5:49:93: 80:7a:b4:78:65:8e:ab:ec:4a:58:7a:6d:3f:c6:fd: 17:cb:71:d6:10:0e:3f:58:55:8c:9b:42:88:f4:a1: fa:4a:cf:26:d0:f4:d4:2f:d6:84:a3:5d:54:21:b3: 1a:e7:2a:9e:60:ad:cb:3f:f7:a6:c5:2e:e3:e2:d8: 38:ee:59:7c:8a:04:d1:65:51:f0:f4:c9:6e:ed:a2: d9:bd:18:69:9c:ae:2a:7d:ae:8c:f3:33:98:5a:15: 02:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:19:B7:4A:13:55:A8:01:27:8F:79:A2:A0:FB:64:1F:DB:10:49:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/45969bdc-1c7a-3c5e-9a51-cdb11c915d54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.crl X509v3 Authority Key Identifier: keyid:7F:1F:72:F4:8D:1D:D7:6F:87:2D:2D:EA:F2:15:9E:CA:D3:6A:2D:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer sbgp-ipAddrBlock: critical IPv4: 192.12.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:26:52:b4:d9:eb:a8:5d:b6:89:a2:2b:81:92:c3:d9:f1:11: 7a:15:ca:89:de:6d:8e:ce:8c:d5:73:91:bb:b3:2d:e8:5a:bb: f2:e1:4d:81:10:43:b7:6b:16:f1:79:7d:3d:c1:d2:6e:17:e6: 2c:1f:ee:76:c3:5b:e0:e5:12:78:c5:7b:5b:8b:92:71:07:8f: d4:dd:f5:a0:1c:15:9c:62:d7:fe:43:c0:1b:1e:d6:64:ce:7c: 12:1d:fe:6f:30:6b:b5:2f:a0:e3:0e:11:4a:88:21:14:f1:85: 65:8e:91:f2:6b:6a:9b:5b:a1:2b:67:ee:33:78:7c:ef:16:0c: 19:39:13:2f:50:08:88:55:e4:9a:37:bf:0d:07:e0:4f:e1:6e: f7:9b:10:4d:23:ba:8f:ca:50:21:97:79:c5:c8:e2:cc:f5:cb: 96:9e:e6:b0:fe:8f:29:53:b5:2b:b8:76:aa:29:26:57:32:74: ac:4e:69:37:33:20:b1:be:0d:06:ae:23:22:14:cd:bf:a5:18: 08:ab:84:a1:1f:d5:b0:45:ba:88:29:b5:c1:39:be:39:34:55: 9b:7f:16:7d:07:f6:3a:d0:4e:8e:35:68:81:c0:a0:a9:6c:ef: 1a:7c:7b:70:62:1f:16:9e:75:df:2c:e3:78:cf:5b:f8:6f:91: ae:69:c2:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GcqRClQMXzjShzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhlMDU4ZTYtZmY2OC00ZDVkLWI3YjgtMDRkMTY2MWVj MjM1MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk Y2FmZjlkMmItYWEwOC00ZThmLWJjODUtMWI0ZmUyNTdkYjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3eb9bz+H+6bXALw2gXMf2Z4PVIB2u9YDfBF ZNHSwlfJbhvgKQxdvFIgPwV6QPrsyyx7LdSmqFMP7hmRdEcQfkp0iqgZzq+b8znT Ez+QdLqbAXIbsPMDpg48RWMRBei+4OdqKDhrbZcA4g8/UhEf21gAH1emZeyYA1OL ZRFVuQEzS4NFk7s47TFoqayBiRWk16j/U41C+I9yEXFq8OMX7zalSZOAerR4ZY6r 7EpYem0/xv0Xy3HWEA4/WFWMm0KI9KH6Ss8m0PTUL9aEo11UIbMa5yqeYK3LP/em xS7j4tg47ll8igTRZVHw9Mlu7aLZvRhpnK4qfa6M8zOYWhUCDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0Zt0oTVagBJ495oqD7ZB/bEElTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84OGUw NThlNi1mZjY4LTRkNWQtYjdiOC0wNGQxNjYxZWMyMzUvNDU5NjliZGMtMWM3YS0z YzVlLTlhNTEtY2RiMTFjOTE1ZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODhlMDU4ZTYtZmY2OC00ZDVkLWI3 YjgtMDRkMTY2MWVjMjM1Lzg4ZTA1OGU2LWZmNjgtNGQ1ZC1iN2I4LTA0ZDE2NjFl YzIzNS5jcmwwHwYDVR0jBBgwFoAUfx9y9I0d12+HLS3q8hWeytNqLUIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84OGUwNThlNi1mZjY4LTRkNWQtYjdiOC0wNGQx NjYxZWMyMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAwbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAmUrTZ66hdtomiK4GSw9nxEXoVyonebY7OjNVzkbuzLehau/LhTYEQ Q7drFvF5fT3B0m4X5iwf7nbDW+DlEnjFe1uLknEHj9Td9aAcFZxi1/5DwBse1mTO fBId/m8wa7UvoOMOEUqIIRTxhWWOkfJraptboStn7jN4fO8WDBk5Ey9QCIhV5Jo3 vw0H4E/hbvebEE0juo/KUCGXecXI4sz1y5ae5rD+jylTtSu4dqopJlcydKxOaTcz ILG+DQauIyIUzb+lGAirhKEf1bBFuogptcE5vjk0VZt/Fn0H9jrQTo41aIHAoKls 7xp8e3BiHxaedd8s43jPW/hvka5pwuc= -----END CERTIFICATE-----Generated at Sat Sep 26 15:30:24 2026 by rpki-client