$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/441ba8c3-51b4-353d-b914-e586c621a0f9.roa File: 441ba8c3-51b4-353d-b914-e586c621a0f9.roa (raw, json) Hash identifier: KQU99TA7QVXIIyx/7Cr7rsfgFIjP3Ue1+A3fOTgmckA= Subject key identifier: 05:FC:44:74:B7:4A:57:B7:EE:6A:31:9A:1D:64:E0:45:25:53:F7:BD Certificate issuer: /CN=c85989e4-dae0-4a06-83a1-0ce7104427a0 Certificate serial: 010D0C9F4328584F71ED9004CEF727E24F127500 Authority key identifier: 99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/441ba8c3-51b4-353d-b914-e586c621a0f9.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 30148 IP address blocks: 192.161.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:90:04:ce:f7:27:e2:4f:12:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85989e4-dae0-4a06-83a1-0ce7104427a0 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=ad2c279f-f248-445f-b1c2-5d95ab82d5b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d8:9a:96:6c:c4:be:12:01:75:b7:51:d3:f0: ad:91:01:fd:98:d0:75:2d:17:16:b8:a3:80:95:19: 55:0b:ee:4e:0f:b2:15:7e:e2:8d:0b:0b:d1:d8:72: 57:0e:91:9b:11:79:55:bd:fa:a3:c3:b9:5d:99:ae: 21:f9:d0:4b:b3:ba:71:98:2a:89:97:79:d0:0c:ea: 2c:9c:b9:c0:d5:47:7a:f2:ba:c3:62:0c:97:a8:e2: 60:a0:d7:dd:50:4c:33:00:15:eb:99:25:98:4d:84: ee:d3:bf:0a:7c:df:09:44:c7:d4:25:6c:e4:19:9d: 18:75:ba:c8:12:9e:bc:ce:13:63:2f:cc:1f:8e:e1: 43:b1:28:ab:0a:87:3c:8b:f6:5e:b6:f4:a3:57:38: 53:f5:df:ef:09:ce:c2:c7:fa:bb:cd:91:a1:20:ff: 23:b7:29:f6:e9:67:c8:2d:0a:af:a1:6f:c3:6f:0b: c5:36:3b:01:91:7a:54:02:e6:ee:d4:30:01:5b:fb: 63:9e:b7:83:16:8b:9f:28:2e:70:90:f7:93:21:ef: df:9a:4f:c9:e3:e8:73:2b:d4:fa:95:65:41:fe:25: c2:62:5f:60:35:67:50:75:7c:ec:71:80:a2:19:6d: f9:4a:3c:56:76:08:6e:03:3d:f7:84:68:33:77:16: c1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:FC:44:74:B7:4A:57:B7:EE:6A:31:9A:1D:64:E0:45:25:53:F7:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/441ba8c3-51b4-353d-b914-e586c621a0f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl X509v3 Authority Key Identifier: keyid:99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer sbgp-ipAddrBlock: critical IPv4: 192.161.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:8b:cc:01:1a:ba:d1:19:0f:24:58:b4:0f:3f:f3:ae:82:a0: 6e:88:a5:d0:6a:43:36:7d:a1:c6:fa:b9:bd:51:e3:3d:83:12: 98:7a:97:a8:bb:d9:7f:86:8e:9e:5a:34:7e:08:29:a7:24:67: 18:36:b2:aa:e0:c2:9b:22:7a:5d:cf:92:d8:5f:43:52:dc:17: 2a:6a:28:c5:ac:3a:eb:c3:79:d0:c5:25:86:e3:c6:1b:16:3d: b4:16:e6:d7:13:3e:59:96:ee:c0:21:62:7b:ae:39:ac:2a:dd: f6:a4:32:09:38:59:96:40:a6:33:2a:ac:94:69:dc:b3:3a:30: 96:34:6e:e8:d9:ab:fe:f4:9f:29:69:cc:a6:ac:ca:52:f0:cf: e3:57:0f:e6:d0:c8:47:bd:b0:16:98:c1:fe:d0:39:c3:c9:48: a2:90:cf:91:e2:7b:ca:b5:e9:fe:8e:f1:00:aa:b5:fb:a9:1b: fa:8c:09:10:fa:49:47:57:ac:d5:0c:22:0c:79:a3:30:ab:55: 0e:e2:3e:af:2b:79:30:9c:66:07:93:34:87:3e:13:ae:d7:46: c5:61:a6:95:43:4d:3d:24:93:b0:ae:ae:fd:e2:16:5c:07:ec: 18:63:84:02:c7:5d:eb:75:eb:59:da:8b:d2:92:5f:ed:be:3a: 8a:aa:41:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7ZAEzvcn4k8SdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1OTg5ZTQtZGFlMC00YTA2LTgzYTEtMGNlNzEwNDQy N2EwMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk YWQyYzI3OWYtZjI0OC00NDVmLWIxYzItNWQ5NWFiODJkNWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NialmzEvhIBdbdR0/CtkQH9mNB1LRcWuKOA lRlVC+5OD7IVfuKNCwvR2HJXDpGbEXlVvfqjw7ldma4h+dBLs7pxmCqJl3nQDOos nLnA1Ud68rrDYgyXqOJgoNfdUEwzABXrmSWYTYTu078KfN8JRMfUJWzkGZ0YdbrI Ep68zhNjL8wfjuFDsSirCoc8i/ZetvSjVzhT9d/vCc7Cx/q7zZGhIP8jtyn26WfI LQqvoW/DbwvFNjsBkXpUAubu1DABW/tjnreDFoufKC5wkPeTIe/fmk/J4+hzK9T6 lWVB/iXCYl9gNWdQdXzscYCiGW35SjxWdghuAz33hGgzdxbB0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAX8RHS3Sle37moxmh1k4EUlU/e9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jODU5 ODllNC1kYWUwLTRhMDYtODNhMS0wY2U3MTA0NDI3YTAvNDQxYmE4YzMtNTFiNC0z NTNkLWI5MTQtZTU4NmM2MjFhMGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzg1OTg5ZTQtZGFlMC00YTA2LTgz YTEtMGNlNzEwNDQyN2EwL2M4NTk4OWU0LWRhZTAtNGEwNi04M2ExLTBjZTcxMDQ0 MjdhMC5jcmwwHwYDVR0jBBgwFoAUmTHFPg8NlLOYQPQPd1wZThW+8iEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jODU5ODllNC1kYWUwLTRhMDYtODNhMS0wY2U3 MTA0NDI3YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmLzAEautEZDyRYtA8/866CoG6IpdBqQzZ9ocb6ub1R4z2DEph6l6i7 2X+Gjp5aNH4IKackZxg2sqrgwpsiel3PkthfQ1LcFypqKMWsOuvDedDFJYbjxhsW PbQW5tcTPlmW7sAhYnuuOawq3fakMgk4WZZApjMqrJRp3LM6MJY0bujZq/70nylp zKasylLwz+NXD+bQyEe9sBaYwf7QOcPJSKKQz5Hie8q16f6O8QCqtfupG/qMCRD6 SUdXrNUMIgx5ozCrVQ7iPq8reTCcZgeTNIc+E67XRsVhppVDTT0kk7Curv3iFlwH 7BhjhALHXet161nai9KSX+2+OoqqQVk= -----END CERTIFICATE-----Generated at Sun Oct 11 07:44:47 2026 by rpki-client