$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/e283225c-fee3-3ec9-97e8-1e15d3a12437.roa File: e283225c-fee3-3ec9-97e8-1e15d3a12437.roa (raw, json) Hash identifier: NRb+cpCggB14nogmws3zxDGMZi4F9eIhBZfWVfIepu4= Subject key identifier: 5D:CE:D5:E2:E3:3B:EE:A2:BF:78:50:28:E5:59:1A:59:D5:C5:0B:E3 Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584F497448E5994EA4AD4FF30DC8 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/e283225c-fee3-3ec9-97e8-1e15d3a12437.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 46696 IP address blocks: 192.31.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:48:e5:99:4e:a4:ad:4f:f3:0d:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c3d9f034-ea1a-4aab-b441-29fb443a4069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:bc:4c:38:02:99:8f:21:f4:89:6e:5d:81:5d: 85:d5:04:5b:c2:20:07:89:8f:6b:14:9d:3e:a1:94: 4e:bb:ac:16:af:88:92:81:ee:f0:7d:36:0a:c7:4e: 77:40:40:97:48:84:34:15:1c:b4:29:1e:af:6c:18: cb:5e:26:85:37:62:3a:9d:28:67:06:f1:35:f5:af: 7a:1e:03:e7:f1:c7:4b:87:1e:57:f2:4b:7e:b3:35: 9b:c5:e3:2e:64:f6:d9:c2:e3:b6:53:ae:3d:c4:0f: d3:26:c3:15:a5:0c:02:6d:ea:7c:71:1c:12:55:64: 9c:e8:3e:13:19:07:36:27:77:34:7c:d9:b5:d8:bd: a7:b6:9f:99:58:66:f3:1a:77:47:d9:19:fa:85:66: 1d:0f:44:91:6f:56:71:ec:0d:f9:12:fc:5d:0a:bc: b5:59:80:3a:3d:26:38:9b:6d:15:04:a5:b0:d5:64: 24:a0:63:9a:b8:20:2b:99:93:6b:b5:19:45:34:ed: b4:58:21:5a:59:4a:5a:e4:e1:fb:36:ac:ff:dc:4d: e6:36:a9:51:2a:83:fe:9b:9e:f9:26:98:eb:b5:29: 53:18:aa:3d:44:14:df:99:b9:f6:6d:55:8c:a9:5f: ba:8e:43:6f:e2:6f:2d:e8:83:02:0b:1c:bc:58:92: 84:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:CE:D5:E2:E3:3B:EE:A2:BF:78:50:28:E5:59:1A:59:D5:C5:0B:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/e283225c-fee3-3ec9-97e8-1e15d3a12437.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 192.31.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:cd:08:25:59:3b:8d:eb:d3:37:3f:66:14:58:2e:7e:5a:5c: 7c:c9:69:ac:6b:99:3e:af:65:9c:c6:e7:ba:94:45:b8:83:d4: 11:4a:9f:a1:d5:11:d9:91:2e:2b:de:03:70:73:ad:88:88:1b: 40:6b:ff:33:61:08:70:b7:db:6f:88:13:b5:f8:05:4a:73:93: 05:14:3a:2e:68:ef:c4:cb:1c:23:8b:e4:04:ab:20:ed:04:83: 3b:e9:a5:ca:04:2c:af:d1:36:0d:2c:bd:b3:12:2f:18:16:99: 15:5f:0c:fe:b6:0e:03:dc:b3:10:21:12:0b:5f:0e:47:1d:04: 5b:0c:0a:8a:5a:24:1c:3c:91:8f:a7:07:a9:5b:b1:d6:30:19: 51:80:a9:93:2e:9d:ce:27:b0:6a:9f:a5:5d:5e:0e:6d:ac:f7: 9d:e5:2d:fd:c2:14:c8:1b:53:84:e9:24:71:25:86:f6:e4:d4: 96:e7:87:35:85:5b:eb:be:58:28:7c:4a:31:fc:32:9e:3e:80: 16:d1:30:d0:07:b9:30:f2:1c:1f:ed:3b:84:db:64:27:01:cc: cc:4f:eb:d0:e3:f7:4f:ca:6d:34:4d:fa:6c:7d:69:32:f2:db: 58:9b:ab:c1:65:89:0d:1f:90:2c:53:06:b7:44:29:29:01:cb: 35:d4:cd:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdEjlmU6krU/zDcgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzNkOWYwMzQtZWExYS00YWFiLWI0NDEtMjlmYjQ0M2E0MDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LxMOAKZjyH0iW5dgV2F1QRbwiAHiY9rFJ0+ oZROu6wWr4iSge7wfTYKx053QECXSIQ0FRy0KR6vbBjLXiaFN2I6nShnBvE19a96 HgPn8cdLhx5X8kt+szWbxeMuZPbZwuO2U649xA/TJsMVpQwCbep8cRwSVWSc6D4T GQc2J3c0fNm12L2ntp+ZWGbzGndH2Rn6hWYdD0SRb1Zx7A35EvxdCry1WYA6PSY4 m20VBKWw1WQkoGOauCArmZNrtRlFNO20WCFaWUpa5OH7Nqz/3E3mNqlRKoP+m575 JpjrtSlTGKo9RBTfmbn2bVWMqV+6jkNv4m8t6IMCCxy8WJKEgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3O1eLjO+6iv3hQKOVZGlnVxQvjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvZTI4MzIyNWMtZmVlMy0z ZWM5LTk3ZTgtMWUxNWQzYTEyNDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwB+OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvNCCVZO43r0zc/ZhRYLn5aXHzJaaxrmT6vZZzG57qURbiD1BFKn6HV EdmRLiveA3BzrYiIG0Br/zNhCHC322+IE7X4BUpzkwUUOi5o78TLHCOL5ASrIO0E gzvppcoELK/RNg0svbMSLxgWmRVfDP62DgPcsxAhEgtfDkcdBFsMCopaJBw8kY+n B6lbsdYwGVGAqZMunc4nsGqfpV1eDm2s953lLf3CFMgbU4TpJHElhvbk1JbnhzWF W+u+WCh8SjH8Mp4+gBbRMNAHuTDyHB/tO4TbZCcBzMxP69Dj90/KbTRN+mx9aTLy 21ibq8FliQ0fkCxTBrdEKSkByzXUzRk= -----END CERTIFICATE-----Generated at Sat Sep 26 07:32:03 2026 by rpki-client