$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f87d5a20-149f-3629-80d5-cf1ba07d4be6.roa File: f87d5a20-149f-3629-80d5-cf1ba07d4be6.roa (raw, json) Hash identifier: Q+Fgpcs3cXmfCn6x84aiRw53xi5oiM4xQb+BqSlfT6A= Subject key identifier: BD:99:B8:A0:60:02:74:2D:DA:1D:F6:D7:89:2E:7E:E3:0F:8C:83:36 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584F0AA22FC0C6FF2B5BE0745100 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f87d5a20-149f-3629-80d5-cf1ba07d4be6.roa Signing time: Wed 02 Sep 2026 13:00:12 +0000 ROA not before: Wed 02 Sep 2026 13:00:12 +0000 ROA not after: Tue 01 Dec 2026 14:00:12 +0000 asID: 0 IP address blocks: 24.169.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:a2:2f:c0:c6:ff:2b:5b:e0:74:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Sep 2 13:00:12 2026 GMT Not After : Dec 1 14:00:12 2026 GMT Subject: CN=3044784e-0b88-4749-869a-7625b8a9d6a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:de:bb:81:b7:a9:61:1c:6d:63:93:53:84:46: b2:99:a8:65:b1:0f:47:39:6e:a3:fc:0e:50:91:88: cf:2e:4d:17:d2:6d:13:b9:75:22:32:f4:a6:18:82: 5d:01:22:73:88:b9:c7:a6:fd:2b:aa:a4:80:75:83: 6e:d9:f3:6e:65:a9:8a:55:83:ab:29:6a:84:c3:f0: 69:f6:4c:ce:57:5d:74:99:3f:82:a8:c0:e6:53:5c: 1a:f5:77:bb:37:0e:f3:74:8f:ff:2e:cc:c8:c5:22: c7:82:4f:7b:58:69:f4:22:31:61:88:79:4e:ea:ef: 76:e5:b1:da:4b:5b:62:5c:6c:78:7b:e7:bb:87:65: 71:be:07:6a:08:03:7a:93:52:30:b3:e6:43:72:06: a9:72:1f:52:fc:6d:f2:f0:ae:bb:df:85:1e:73:dc: 51:d0:cf:e5:00:c3:cd:fb:f0:d4:a0:17:b9:ec:d1: 32:35:2e:0b:fa:83:ce:a8:aa:dd:7c:4d:e0:2d:8b: 84:5f:6e:f5:d6:30:4a:f4:f0:dc:50:df:47:b9:15: 3c:ce:39:c8:ff:f7:53:5c:f3:5b:0c:58:62:a9:4a: d0:77:81:d9:5f:fc:c1:c8:f8:86:2d:7c:56:67:21: 30:ba:1a:f1:03:7b:e6:2a:19:21:70:61:7d:1d:73: 96:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:99:B8:A0:60:02:74:2D:DA:1D:F6:D7:89:2E:7E:E3:0F:8C:83:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f87d5a20-149f-3629-80d5-cf1ba07d4be6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 24.169.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:e3:4e:b3:2a:bd:9b:56:d2:7b:22:9e:91:d4:ce:e3:75:aa: 5b:ca:14:6a:23:fb:f5:db:cb:40:21:94:69:f8:33:4d:ad:c0: 80:f7:9c:c8:6a:d5:84:15:ab:63:8e:f5:64:b6:89:82:e9:ef: d2:bc:4e:bd:c9:0d:4e:97:b9:c4:a3:13:92:df:46:0b:03:9a: b4:f3:71:46:a9:34:e9:9a:e1:df:95:36:c9:1e:9d:3b:ca:6d: 0d:91:7f:75:fe:af:17:c1:1b:ef:a1:62:49:0d:45:21:b8:6c: 3e:29:1f:3c:21:f3:b3:5d:43:d6:df:fa:2c:9e:70:60:d5:e7: 6e:af:3b:0a:77:b6:2b:89:fb:3a:97:85:d9:10:f7:d3:37:a0: 40:e3:f1:70:d3:4c:f8:30:9d:58:46:e6:f0:ef:d1:88:0b:c6: 3c:49:7f:de:ec:34:e2:20:ca:5f:15:07:8b:14:08:67:34:4f: 99:32:bb:4c:95:a9:cf:d8:cd:7a:6d:82:37:5e:79:92:4e:de: d2:95:43:99:1f:7a:ed:8c:11:67:6a:ac:d5:93:80:a8:3c:cd: a4:21:76:5d:c8:31:8e:67:66:9f:d6:95:c7:1e:07:c3:0b:8f: 5f:36:5b:ce:c1:19:5e:44:26:aa:7e:27:50:ff:b4:98:fb:f6: 6e:06:9b:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Koi/Axv8rW+B0UQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI2MDkwMjEzMDAxMloXDTI2MTIwMTE0MDAxMlowLzEtMCsGA1UEAxMk MzA0NDc4NGUtMGI4OC00NzQ5LTg2OWEtNzYyNWI4YTlkNmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj967gbepYRxtY5NThEaymahlsQ9HOW6j/A5Q kYjPLk0X0m0TuXUiMvSmGIJdASJziLnHpv0rqqSAdYNu2fNuZamKVYOrKWqEw/Bp 9kzOV110mT+CqMDmU1wa9Xe7Nw7zdI//LszIxSLHgk97WGn0IjFhiHlO6u925bHa S1tiXGx4e+e7h2VxvgdqCAN6k1Iws+ZDcgapch9S/G3y8K6734Uec9xR0M/lAMPN +/DUoBe57NEyNS4L+oPOqKrdfE3gLYuEX2711jBK9PDcUN9HuRU8zjnI//dTXPNb DFhiqUrQd4HZX/zByPiGLXxWZyEwuhrxA3vmKhkhcGF9HXOWCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2ZuKBgAnQt2h3214kufuMPjIM2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZjg3ZDVhMjAtMTQ5Zi0z NjI5LTgwZDUtY2YxYmEwN2Q0YmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGKnBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHjTrMqvZtW0nsinpHUzuN1qlvKFGoj+/Xby0AhlGn4M02twID3nMhq 1YQVq2OO9WS2iYLp79K8Tr3JDU6XucSjE5LfRgsDmrTzcUapNOma4d+VNskenTvK bQ2Rf3X+rxfBG++hYkkNRSG4bD4pHzwh87NdQ9bf+iyecGDV526vOwp3tiuJ+zqX hdkQ99M3oEDj8XDTTPgwnVhG5vDv0YgLxjxJf97sNOIgyl8VB4sUCGc0T5kyu0yV qc/YzXptgjdeeZJO3tKVQ5kfeu2MEWdqrNWTgKg8zaQhdl3IMY5nZp/WlcceB8ML j182W87BGV5EJqp+J1D/tJj79m4GmzA= -----END CERTIFICATE-----Generated at Tue Sep 22 11:37:57 2026 by rpki-client