$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/a038e2ce-821a-310e-8a75-565105e24c30.roa File: a038e2ce-821a-310e-8a75-565105e24c30.roa (raw, json) Hash identifier: jT7GVb4LsVgFigJh2fXj9TpwRY1bVz0elvmIEx+/0FQ= Subject key identifier: F1:F6:54:53:86:3C:47:24:1D:6B:38:92:EA:03:19:68:DE:33:CC:A0 Certificate issuer: /CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043 Certificate serial: 010D0C9F4328584F2FAAC257B6021D01111B2440 Authority key identifier: 5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/a038e2ce-821a-310e-8a75-565105e24c30.roa Signing time: Tue 15 Sep 2026 19:22:30 +0000 ROA not before: Tue 15 Sep 2026 19:22:30 +0000 ROA not after: Thu 10 Dec 2026 16:54:37 +0000 asID: 197959 IP address blocks: 192.25.128.0/24 maxlen: 24 192.170.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2f:aa:c2:57:b6:02:1d:01:11:1b:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043 Validity Not Before: Sep 15 19:22:30 2026 GMT Not After : Dec 10 16:54:37 2026 GMT Subject: CN=ec543119-a9f2-4820-8b9a-b55826111abd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3f:61:e5:40:43:c1:06:df:fd:e2:cb:1a:70: f0:9b:43:c4:a0:2b:82:3d:45:e4:33:d1:bc:4d:c1: 2c:a7:ec:61:04:8a:25:39:3a:bd:a0:c1:c6:99:32: 4c:e9:93:e4:c7:db:62:0c:58:38:ff:6b:e7:60:dd: 5b:98:09:44:0e:9d:90:eb:a7:4a:9b:2c:77:7b:5b: 73:e3:8c:f1:ed:97:43:02:2c:40:8a:6f:89:e2:2a: a3:83:bd:66:39:b0:54:39:a3:9a:da:5f:fc:21:51: db:c6:1c:04:da:f7:04:8a:e9:28:70:13:fd:3b:ec: 3c:74:4d:c0:05:c2:f0:db:ab:9b:e3:7f:a6:27:db: b5:80:f9:0c:23:95:67:c3:64:55:b9:2a:a6:e9:59: 59:98:83:0b:5b:38:4e:c6:84:11:33:b0:1a:11:b5: 2b:20:b5:a8:0b:58:a1:9d:18:3e:89:b6:91:87:db: 1e:05:57:85:a2:3e:ba:37:6c:53:ea:09:a2:50:58: 7f:dd:75:9d:0d:d1:3c:df:4f:5d:0c:9c:43:f6:a0: 75:f1:53:95:ba:2b:e0:43:16:9c:d0:45:ca:08:a0: de:75:80:ba:0f:1d:07:79:5e:d7:7f:25:ca:18:0a: bb:4c:cf:d7:fd:f5:f0:e6:f0:3b:07:4d:a8:a2:12: 0a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F6:54:53:86:3C:47:24:1D:6B:38:92:EA:03:19:68:DE:33:CC:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/a038e2ce-821a-310e-8a75-565105e24c30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl X509v3 Authority Key Identifier: keyid:5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer sbgp-ipAddrBlock: critical IPv4: 192.25.128.0/24 192.170.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:8e:65:e0:36:10:a2:42:f5:70:ad:b2:ff:a6:da:8c:6a:bb: 28:0a:b1:e4:61:35:94:11:91:2a:a8:8d:15:ff:c4:f5:a2:cc: 9b:b4:86:78:67:45:ce:f8:22:56:57:e8:8d:66:93:cf:94:a0: 3e:bd:c4:09:a2:85:e3:a9:33:da:82:08:f2:82:67:5d:17:c7: 94:fd:f0:54:1d:9c:7e:1e:31:ab:bd:ba:4f:e1:df:c7:dc:b6: 0e:3e:77:62:3f:87:9f:a1:32:45:5e:35:4d:11:fd:35:b6:f5: 29:26:f6:eb:0f:d5:dc:bc:79:9f:f5:96:c9:f2:2d:bb:d7:45: d7:11:3c:6f:98:62:3f:ba:59:41:46:ae:4f:16:91:bb:a9:e9: 30:62:0c:6a:af:3e:64:ce:1d:5c:2f:ba:d3:89:ee:ea:a5:eb: c1:c2:d2:11:d3:ac:2a:28:35:95:d9:9c:53:64:d2:f5:66:13: 2c:40:52:85:f0:37:fb:1e:51:d6:b9:f5:23:7f:61:1e:b7:db: 7d:f1:e8:89:2f:97:c7:75:cd:03:74:09:aa:e5:bc:f4:1f:31: e0:c4:c4:a9:83:d9:ce:df:86:c2:b3:74:4d:d7:c9:94:b0:7c: ec:5f:b2:5e:81:8a:22:46:56:d7:1a:56:b2:08:ae:5b:0f:86: 4a:5a:81:13 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8vqsJXtgIdAREbJEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFlMDg3M2ItODU0MS00ZDZlLWI5MWMtMzZkYmJiZTUx MDQzMB4XDTI2MDkxNTE5MjIzMFoXDTI2MTIxMDE2NTQzN1owLzEtMCsGA1UEAxMk ZWM1NDMxMTktYTlmMi00ODIwLThiOWEtYjU1ODI2MTExYWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz9h5UBDwQbf/eLLGnDwm0PEoCuCPUXkM9G8 TcEsp+xhBIolOTq9oMHGmTJM6ZPkx9tiDFg4/2vnYN1bmAlEDp2Q66dKmyx3e1tz 44zx7ZdDAixAim+J4iqjg71mObBUOaOa2l/8IVHbxhwE2vcEiukocBP9O+w8dE3A BcLw26ub43+mJ9u1gPkMI5Vnw2RVuSqm6VlZmIMLWzhOxoQRM7AaEbUrILWoC1ih nRg+ibaRh9seBVeFoj66N2xT6gmiUFh/3XWdDdE8309dDJxD9qB18VOVuivgQxac 0EXKCKDedYC6Dx0HeV7XfyXKGAq7TM/X/fXw5vA7B02oohIKuwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPH2VFOGPEckHWs4kuoDGWjeM8ygMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YWUw ODczYi04NTQxLTRkNmUtYjkxYy0zNmRiYmJlNTEwNDMvYTAzOGUyY2UtODIxYS0z MTBlLThhNzUtNTY1MTA1ZTI0YzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWFlMDg3M2ItODU0MS00ZDZlLWI5 MWMtMzZkYmJiZTUxMDQzLzlhZTA4NzNiLTg1NDEtNGQ2ZS1iOTFjLTM2ZGJiYmU1 MTA0My5jcmwwHwYDVR0jBBgwFoAUWwqyXF4s4cEXnbXgEwh62rvNi20wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YWUwODczYi04NTQxLTRkNmUtYjkxYy0zNmRi YmJlNTEwNDMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwBmAAwQA wKpoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGyOZeA2EKJC9XCtsv+m2oxquygKseRhNZQRkSqojRX/xPWi zJu0hnhnRc74IlZX6I1mk8+UoD69xAmiheOpM9qCCPKCZ10Xx5T98FQdnH4eMau9 uk/h38fctg4+d2I/h5+hMkVeNU0R/TW29Skm9usP1dy8eZ/1lsnyLbvXRdcRPG+Y Yj+6WUFGrk8Wkbup6TBiDGqvPmTOHVwvutOJ7uql68HC0hHTrCooNZXZnFNk0vVm EyxAUoXwN/seUda59SN/YR63233x6Ikvl8d1zQN0CarlvPQfMeDExKmD2c7fhsKz dE3XyZSwfOxfsl6BiiJGVtcaVrIIrlsPhkpagRM= -----END CERTIFICATE-----Generated at Sun Sep 20 19:06:05 2026 by rpki-client