$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/f445d3e8-d349-3125-bd4c-6fd4c0d324c5.roa File: f445d3e8-d349-3125-bd4c-6fd4c0d324c5.roa (raw, json) Hash identifier: BTmTSoEmtB86BN8/SV+0Yt5q0yUqtL0opC5v6S6yGLs= Subject key identifier: 40:7F:9C:FE:C2:29:A3:35:C6:F5:7A:50:DE:76:94:D0:A8:D9:0C:0D Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Certificate serial: 010D0C9F4328584F1CC7A86D617F705468B5C600 Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/f445d3e8-d349-3125-bd4c-6fd4c0d324c5.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 1280 IP address blocks: 192.158.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:a8:6d:61:7f:70:54:68:b5:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=911b7c3a-ae3d-412b-864c-dcd0e4a16fc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c5:67:e4:bf:40:f9:0e:c7:53:16:4f:28:90: 09:2a:cf:bc:55:0f:36:a5:6e:14:e5:63:b8:ca:d2: c4:49:06:6d:05:17:ee:13:a4:61:a4:b6:59:96:49: 9f:f3:bb:40:10:f5:fd:b2:fd:f8:1c:1f:07:3c:9e: ff:67:2e:e5:4d:d9:30:5a:26:e6:c7:17:d1:f0:50: 2e:7c:cf:2b:5c:b9:96:8b:48:fb:5e:38:97:48:b7: 33:cc:5d:c3:34:79:6d:77:d3:96:af:8f:e9:d1:3f: ee:39:e8:f2:d6:f9:ca:39:2d:89:f9:34:69:dc:73: 56:60:39:2a:c2:c7:fb:26:57:ce:43:67:d3:ad:21: 11:23:09:07:34:08:8f:33:70:62:2c:a8:e9:b5:ed: e9:22:a1:52:e6:18:e9:de:d9:cf:eb:fd:61:f9:35: 04:4b:f6:b8:c3:f8:45:2f:0f:c0:ca:4e:b7:f2:4f: b7:ea:8e:57:f7:9d:d9:ea:d9:e4:6d:df:60:34:40: e9:0d:1b:d4:23:e9:43:1d:09:51:80:b5:6f:06:33: f4:e7:02:8c:80:d6:7e:c5:aa:ec:7b:7a:f9:56:1d: ed:44:a8:30:47:bb:dd:48:f8:25:8f:d2:de:7e:ee: 4d:04:20:1d:e8:37:57:8f:a0:f2:43:76:2e:fb:be: d9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7F:9C:FE:C2:29:A3:35:C6:F5:7A:50:DE:76:94:D0:A8:D9:0C:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/f445d3e8-d349-3125-bd4c-6fd4c0d324c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl X509v3 Authority Key Identifier: keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer sbgp-ipAddrBlock: critical IPv4: 192.158.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:b7:7d:db:e4:3f:93:67:41:6b:87:64:47:34:9c:cf:04:4a: 29:e7:56:9b:bd:c8:5c:75:c5:e5:84:26:29:a3:bb:83:8a:56: 9b:89:30:63:ba:cc:c6:db:0e:09:e2:86:66:da:b1:78:f7:be: 58:76:07:d6:79:43:e7:b8:46:2d:28:89:0b:5e:2f:78:4e:e1: f1:04:88:7f:c6:68:e8:9d:78:24:9c:2c:c9:95:8c:d7:46:e9: cd:2f:3f:8b:10:57:40:a6:0d:82:a8:6a:14:cb:aa:5f:69:f6: e9:a1:c8:a2:e8:ef:27:27:ca:ad:b5:9a:b6:0b:eb:10:86:92: 54:d6:0b:a8:a8:a3:7d:1e:02:6d:15:f7:54:3a:f5:62:97:00: 77:50:bc:eb:28:c1:b0:6b:19:8c:63:b3:4c:8e:0d:cb:7f:eb: c8:e4:52:d4:af:0a:dc:7d:41:3f:70:36:81:07:1e:e4:00:e7: b7:a3:a6:58:ba:15:4d:3b:c5:2d:52:ce:60:fc:e5:d9:c6:f1: 0f:8e:48:26:b7:80:99:ef:50:51:4a:bc:27:29:4f:72:2a:ed: 26:9f:bf:49:a6:4b:fd:be:76:4f:11:c5:12:61:9c:2d:a3:ea: 80:ca:3f:7b:5f:b5:58:88:2f:a5:33:27:10:d2:d4:c9:18:cf: b8:a0:9c:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx6htYX9wVGi1xgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk MTc3MB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk OTExYjdjM2EtYWUzZC00MTJiLTg2NGMtZGNkMGU0YTE2ZmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMVn5L9A+Q7HUxZPKJAJKs+8VQ82pW4U5WO4 ytLESQZtBRfuE6RhpLZZlkmf87tAEPX9sv34HB8HPJ7/Zy7lTdkwWibmxxfR8FAu fM8rXLmWi0j7XjiXSLczzF3DNHltd9OWr4/p0T/uOejy1vnKOS2J+TRp3HNWYDkq wsf7JlfOQ2fTrSERIwkHNAiPM3BiLKjpte3pIqFS5hjp3tnP6/1h+TUES/a4w/hF Lw/Ayk638k+36o5X953Z6tnkbd9gNEDpDRvUI+lDHQlRgLVvBjP05wKMgNZ+xars e3r5Vh3tRKgwR7vdSPglj9Lefu5NBCAd6DdXj6DyQ3Yu+77ZnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEB/nP7CKaM1xvV6UN52lNCo2QwNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1 NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvZjQ0NWQzZTgtZDM0OS0z MTI1LWJkNGMtNmZkNGMwZDMyNGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4 ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5 MDQ4MGQxNzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ78MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADi3fdvkP5NnQWuHZEc0nM8ESinnVpu9yFx1xeWEJimju4OKVpuJMGO6 zMbbDgnihmbasXj3vlh2B9Z5Q+e4Ri0oiQteL3hO4fEEiH/GaOideCScLMmVjNdG 6c0vP4sQV0CmDYKoahTLql9p9umhyKLo7ycnyq21mrYL6xCGklTWC6ioo30eAm0V 91Q69WKXAHdQvOsowbBrGYxjs0yODct/68jkUtSvCtx9QT9wNoEHHuQA57ejpli6 FU07xS1SzmD85dnG8Q+OSCa3gJnvUFFKvCcpT3Iq7Safv0mmS/2+dk8RxRJhnC2j 6oDKP3tftViIL6UzJxDS1MkYz7ignPE= -----END CERTIFICATE-----Generated at Tue Sep 22 07:20:02 2026 by rpki-client