$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/893cd2a1-ffd7-42b2-af7a-45dc5cbce148/af7504ec-cbcb-396b-9f93-b1f6522a698e.roa File: af7504ec-cbcb-396b-9f93-b1f6522a698e.roa (raw, json) Hash identifier: 2Rv33gdjRy8Kl1DM5ufu6sREd4cHpipaKF9TSeJLtrU= Subject key identifier: 5D:22:93:D5:61:FE:7C:25:31:68:CD:C6:7E:24:78:C1:E6:FA:47:45 Certificate issuer: /CN=893cd2a1-ffd7-42b2-af7a-45dc5cbce148 Certificate serial: 010D0C9F4328584F3FAD2A03724FF547C10AD900 Authority key identifier: 70:69:53:F2:57:BB:7B:D0:57:53:9C:62:32:B1:F6:E6:00:55:83:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/893cd2a1-ffd7-42b2-af7a-45dc5cbce148.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/893cd2a1-ffd7-42b2-af7a-45dc5cbce148/af7504ec-cbcb-396b-9f93-b1f6522a698e.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 23486 IP address blocks: 199.192.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/893cd2a1-ffd7-42b2-af7a-45dc5cbce148/893cd2a1-ffd7-42b2-af7a-45dc5cbce148.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/893cd2a1-ffd7-42b2-af7a-45dc5cbce148/893cd2a1-ffd7-42b2-af7a-45dc5cbce148.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/893cd2a1-ffd7-42b2-af7a-45dc5cbce148.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:2a:03:72:4f:f5:47:c1:0a:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893cd2a1-ffd7-42b2-af7a-45dc5cbce148 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=af8e63ad-ec05-4201-8d08-db8660859e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d1:46:07:ed:7b:6f:ef:0e:f0:69:3e:47:44: c0:aa:43:23:75:2e:6b:f2:bd:07:68:c2:3b:9b:0b: 65:37:b0:8e:01:f0:a5:ca:4a:3b:0c:0b:b1:b5:37: b7:55:d2:9c:0c:4f:16:60:43:6f:29:d9:90:bb:5f: 95:54:b1:d6:12:d0:d0:a5:94:8f:17:f6:3a:53:04: 3f:0e:68:10:29:d7:5a:12:42:ca:ad:d7:00:65:da: 6a:94:c6:d0:5b:1d:4f:3b:1f:22:3a:fe:c1:07:3c: 31:81:04:31:b9:06:57:d2:6a:32:40:81:df:91:ec: 1f:4c:58:1c:83:5f:6d:df:6a:74:50:96:dc:9f:67: 26:4e:1e:c5:27:1b:13:ae:c6:a6:87:92:32:c4:16: c3:87:d7:e4:cf:cc:0c:3c:5b:65:2f:c3:51:7e:05: b8:5a:6a:c0:6b:07:a0:3b:57:d2:d4:91:d8:73:72: c4:20:e0:08:a1:6f:29:e0:b5:3f:68:34:4d:2a:c6: 6a:e8:9c:45:ea:b5:ca:14:35:73:0f:b3:0e:0a:07: 06:bb:0f:69:2c:b9:6a:6a:9f:ea:9f:a0:b0:2b:5e: ac:85:56:bf:bf:48:1d:ec:3d:b7:d3:3d:bc:c5:b1: 86:6d:c2:fd:e2:0a:f3:c8:1e:de:4a:56:bf:40:5b: bb:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:22:93:D5:61:FE:7C:25:31:68:CD:C6:7E:24:78:C1:E6:FA:47:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/893cd2a1-ffd7-42b2-af7a-45dc5cbce148/af7504ec-cbcb-396b-9f93-b1f6522a698e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/893cd2a1-ffd7-42b2-af7a-45dc5cbce148/893cd2a1-ffd7-42b2-af7a-45dc5cbce148.crl X509v3 Authority Key Identifier: keyid:70:69:53:F2:57:BB:7B:D0:57:53:9C:62:32:B1:F6:E6:00:55:83:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/893cd2a1-ffd7-42b2-af7a-45dc5cbce148.cer sbgp-ipAddrBlock: critical IPv4: 199.192.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:85:36:2c:34:a2:81:f7:c2:26:61:48:e1:1c:f8:fa:49:9e: ea:61:05:59:d1:e7:fd:e8:00:77:5c:02:4e:48:bc:ba:b7:b4: d4:c3:6f:58:43:9a:4c:3c:92:80:49:53:c3:1e:29:8c:a4:09: 92:10:82:b9:1a:c5:5d:d6:c5:1a:0a:27:a0:5d:8f:8b:ed:26: 9e:14:51:c9:47:60:7e:a2:a1:22:ea:88:77:1c:0b:88:83:f6: 5e:14:f1:e1:0a:b4:e2:f8:1c:bf:6a:3c:30:9b:ff:3b:0a:29: cf:b5:a4:b0:d6:bb:ed:82:94:49:c7:a0:cb:20:02:71:6e:1a: 04:c5:1e:ff:83:bd:56:8b:73:04:73:92:c3:70:57:64:92:80: 44:2f:07:d3:e3:b6:d3:01:e7:d8:b2:36:27:8b:db:10:6c:0d: ab:75:1e:d6:c7:12:0b:45:00:1d:06:6c:25:87:9d:70:87:e3: d1:63:a2:55:ee:83:c8:50:9a:51:7d:43:5e:ef:fa:3a:d4:cb: fe:dc:e9:ae:73:83:a6:db:63:ec:b8:fb:12:03:d8:26:ae:3c: c4:f7:d6:f2:b0:72:21:89:b0:c3:e5:5b:cf:b5:54:b3:60:ff: 83:ae:db:4c:fb:39:f0:f0:48:a0:33:a0:f7:7c:66:e2:1b:96: 0a:ab:b2:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rSoDck/1R8EK2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkzY2QyYTEtZmZkNy00MmIyLWFmN2EtNDVkYzVjYmNl MTQ4MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk YWY4ZTYzYWQtZWMwNS00MjAxLThkMDgtZGI4NjYwODU5ZTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNFGB+17b+8O8Gk+R0TAqkMjdS5r8r0HaMI7 mwtlN7COAfClyko7DAuxtTe3VdKcDE8WYENvKdmQu1+VVLHWEtDQpZSPF/Y6UwQ/ DmgQKddaEkLKrdcAZdpqlMbQWx1POx8iOv7BBzwxgQQxuQZX0moyQIHfkewfTFgc g19t32p0UJbcn2cmTh7FJxsTrsamh5IyxBbDh9fkz8wMPFtlL8NRfgW4WmrAaweg O1fS1JHYc3LEIOAIoW8p4LU/aDRNKsZq6JxF6rXKFDVzD7MOCgcGuw9pLLlqap/q n6CwK16shVa/v0gd7D230z28xbGGbcL94grzyB7eSla/QFu7cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0ik9Vh/nwlMWjNxn4keMHm+kdFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84OTNj ZDJhMS1mZmQ3LTQyYjItYWY3YS00NWRjNWNiY2UxNDgvYWY3NTA0ZWMtY2JjYi0z OTZiLTlmOTMtYjFmNjUyMmE2OThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODkzY2QyYTEtZmZkNy00MmIyLWFm N2EtNDVkYzVjYmNlMTQ4Lzg5M2NkMmExLWZmZDctNDJiMi1hZjdhLTQ1ZGM1Y2Jj ZTE0OC5jcmwwHwYDVR0jBBgwFoAUcGlT8le7e9BXU5xiMrH25gBVg+wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84OTNjZDJhMS1mZmQ3LTQyYjItYWY3YS00NWRj NWNiY2UxNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8D0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyFNiw0ooH3wiZhSOEc+PpJnuphBVnR5/3oAHdcAk5IvLq3tNTDb1hD mkw8koBJU8MeKYykCZIQgrkaxV3WxRoKJ6Bdj4vtJp4UUclHYH6ioSLqiHccC4iD 9l4U8eEKtOL4HL9qPDCb/zsKKc+1pLDWu+2ClEnHoMsgAnFuGgTFHv+DvVaLcwRz ksNwV2SSgEQvB9PjttMB59iyNieL2xBsDat1HtbHEgtFAB0GbCWHnXCH49FjolXu g8hQmlF9Q17v+jrUy/7c6a5zg6bbY+y4+xID2CauPMT31vKwciGJsMPlW8+1VLNg /4Ou20z7OfDwSKAzoPd8ZuIblgqrsko= -----END CERTIFICATE-----Generated at Mon Sep 21 16:03:05 2026 by rpki-client