$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/420c3a45-4816-3b80-8972-def4cba6aa7e.roa File: 420c3a45-4816-3b80-8972-def4cba6aa7e.roa (raw, json) Hash identifier: KICda6AfEDJgUZ2o7czVAyw7kgdJKljU5BPZP6NyS6c= Subject key identifier: A1:F1:84:CF:C1:C0:96:57:EF:60:A5:0B:A1:4B:00:9C:EE:D9:3E:3C Certificate issuer: /CN=dafe2535-2dc5-4d47-b03e-d44eea26032f Certificate serial: 010D0C9F4328584F0DFD2E37462E8EE5DAD0C380 Authority key identifier: 37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/420c3a45-4816-3b80-8972-def4cba6aa7e.roa Signing time: Thu 03 Sep 2026 17:51:05 +0000 ROA not before: Thu 03 Sep 2026 17:51:05 +0000 ROA not after: Wed 02 Dec 2026 18:51:05 +0000 asID: 20185 IP address blocks: 192.92.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:fd:2e:37:46:2e:8e:e5:da:d0:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafe2535-2dc5-4d47-b03e-d44eea26032f Validity Not Before: Sep 3 17:51:05 2026 GMT Not After : Dec 2 18:51:05 2026 GMT Subject: CN=bc946ab7-efbf-4a85-9fd3-f5278b59b220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6c:0d:0e:06:59:6f:7e:9b:b2:df:1a:79:29: aa:1c:d5:3c:53:ce:10:46:42:a9:09:47:cb:15:40: 73:1a:f8:b2:51:63:c2:12:a0:03:42:c8:40:e0:5e: 21:e9:8f:ba:e0:1a:ea:65:8c:57:71:be:7a:21:a2: 62:1c:c4:2d:25:31:f3:0c:5f:05:0a:84:34:7d:e9: b1:b5:b9:2b:0d:45:21:6a:6e:bf:bd:ac:ae:6b:4e: e1:79:49:38:75:8d:25:e8:2a:96:a3:8f:f8:f4:c2: 51:16:d2:81:64:b9:10:04:ae:0e:fb:f5:e6:af:96: c4:d2:0e:78:93:72:96:af:88:cc:cc:ae:57:5b:75: 42:cc:a0:dd:26:c3:5d:0f:c5:1f:15:18:9a:d2:7b: 64:12:22:c9:8b:90:56:2e:c1:b7:1d:cb:d1:20:f7: 39:20:1a:32:0a:ed:f2:72:f6:7c:e7:3d:42:e5:01: 74:69:a9:11:ea:c3:9d:c5:7b:f3:19:8a:60:ad:9f: 8c:34:de:b3:af:4c:d2:47:61:63:88:73:8d:91:76: 70:39:d3:5b:7f:22:ba:a0:47:25:46:c6:31:6c:40: 23:59:1d:e2:94:82:7f:2e:1f:ab:68:91:68:0b:76: df:a8:bf:8f:44:ae:16:f8:76:ac:8f:d2:f3:0d:0f: bf:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F1:84:CF:C1:C0:96:57:EF:60:A5:0B:A1:4B:00:9C:EE:D9:3E:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/420c3a45-4816-3b80-8972-def4cba6aa7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl X509v3 Authority Key Identifier: keyid:37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer sbgp-ipAddrBlock: critical IPv4: 192.92.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:6e:e0:2e:65:3a:69:a1:bb:db:34:f0:1c:c1:6e:e1:6c:e2: 03:84:60:cb:71:bd:73:e3:dc:72:13:a5:a2:8a:c4:25:b6:96: 16:9f:50:53:0e:b0:99:dc:ca:d2:b0:95:e6:03:98:e7:80:79: a3:4a:d7:97:15:63:26:5e:51:44:7d:48:bd:7b:a9:53:8b:22: 46:ba:d9:6c:42:ee:89:8f:8e:dd:5e:5f:e3:b6:ed:0c:2b:2c: 36:59:70:1d:0c:3b:1d:2c:e0:04:0b:04:3b:66:1c:58:1f:4b: 16:da:50:fc:21:8f:f4:60:a4:bc:a0:ef:99:7c:0e:d9:ab:60: b6:a6:05:cd:b5:0b:ff:cc:ee:98:96:b5:7e:95:92:b4:e7:a2: 9f:e9:57:5a:0c:7f:b6:25:a3:80:e0:5a:8c:be:96:d1:3e:12: e5:ed:af:89:0d:23:6e:3b:f6:93:0c:35:5f:34:d3:f1:1e:77: 04:c4:99:ac:54:b6:4d:5e:35:b1:85:cf:96:a4:e0:26:88:f4: ff:5f:e6:c8:d4:66:b4:11:0c:1b:e3:cc:0b:00:c1:41:1e:c2: 49:74:92:23:cd:ef:18:ef:34:d6:4c:59:96:b9:f1:3d:01:7b: 67:10:24:d7:79:7f:e7:12:be:70:ec:ff:18:85:d3:05:84:32: 23:e4:ec:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8N/S43Ri6O5drQw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFmZTI1MzUtMmRjNS00ZDQ3LWIwM2UtZDQ0ZWVhMjYw MzJmMB4XDTI2MDkwMzE3NTEwNVoXDTI2MTIwMjE4NTEwNVowLzEtMCsGA1UEAxMk YmM5NDZhYjctZWZiZi00YTg1LTlmZDMtZjUyNzhiNTliMjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWwNDgZZb36bst8aeSmqHNU8U84QRkKpCUfL FUBzGviyUWPCEqADQshA4F4h6Y+64BrqZYxXcb56IaJiHMQtJTHzDF8FCoQ0femx tbkrDUUham6/vayua07heUk4dY0l6CqWo4/49MJRFtKBZLkQBK4O+/Xmr5bE0g54 k3KWr4jMzK5XW3VCzKDdJsNdD8UfFRia0ntkEiLJi5BWLsG3HcvRIPc5IBoyCu3y cvZ85z1C5QF0aakR6sOdxXvzGYpgrZ+MNN6zr0zSR2FjiHONkXZwOdNbfyK6oEcl RsYxbEAjWR3ilIJ/Lh+raJFoC3bfqL+PRK4W+Hasj9LzDQ+/zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHxhM/BwJZX72ClC6FLAJzu2T48MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYWZl MjUzNS0yZGM1LTRkNDctYjAzZS1kNDRlZWEyNjAzMmYvNDIwYzNhNDUtNDgxNi0z YjgwLTg5NzItZGVmNGNiYTZhYTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGFmZTI1MzUtMmRjNS00ZDQ3LWIw M2UtZDQ0ZWVhMjYwMzJmL2RhZmUyNTM1LTJkYzUtNGQ0Ny1iMDNlLWQ0NGVlYTI2 MDMyZi5jcmwwHwYDVR0jBBgwFoAUN8t1jDs52bn6L7Uc75kQZ5e56xAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYWZlMjUzNS0yZGM1LTRkNDctYjAzZS1kNDRl ZWEyNjAzMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFxwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFu4C5lOmmhu9s08BzBbuFs4gOEYMtxvXPj3HITpaKKxCW2lhafUFMO sJncytKwleYDmOeAeaNK15cVYyZeUUR9SL17qVOLIka62WxC7omPjt1eX+O27Qwr LDZZcB0MOx0s4AQLBDtmHFgfSxbaUPwhj/RgpLyg75l8DtmrYLamBc21C//M7piW tX6VkrTnop/pV1oMf7Ylo4DgWoy+ltE+EuXtr4kNI2479pMMNV800/EedwTEmaxU tk1eNbGFz5ak4CaI9P9f5sjUZrQRDBvjzAsAwUEewkl0kiPN7xjvNNZMWZa58T0B e2cQJNd5f+cSvnDs/xiF0wWEMiPk7Hk= -----END CERTIFICATE-----Generated at Tue Sep 22 22:14:46 2026 by rpki-client