$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/b8f1cd10-ce5e-3fac-9723-e3190551e274.roa File: b8f1cd10-ce5e-3fac-9723-e3190551e274.roa (raw, json) Hash identifier: VoYNqrUJCgzdqeMX9sPvylmIWuAgtFtgc8saWCmWgTg= Subject key identifier: 2C:B1:33:53:07:BA:90:7F:1F:68:A9:B1:39:D7:1B:C0:75:D0:19:43 Certificate issuer: /CN=ae21b62b-7bfc-4a0d-81bc-77f998df2cbe Certificate serial: 010D0C9F4328584F0672A49D13A7A8390B56B300 Authority key identifier: 2C:80:E9:A3:91:5A:A2:9A:27:C4:41:A7:85:55:97:93:D6:6D:BC:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/b8f1cd10-ce5e-3fac-9723-e3190551e274.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 14298 IP address blocks: 192.58.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:a4:9d:13:a7:a8:39:0b:56:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae21b62b-7bfc-4a0d-81bc-77f998df2cbe Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=51209a1a-5336-4d21-a920-f521377969eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f2:31:ef:cf:50:48:e8:31:c2:fd:99:47:4b: 2a:8b:f8:0c:5a:d3:53:41:b6:5a:72:2f:78:dc:82: 2d:42:2b:f6:b5:17:a2:a8:df:a3:a7:28:fa:86:83: ec:c0:f9:bf:7f:94:71:cc:94:12:18:d6:43:de:4b: d6:fb:eb:e1:67:ed:d2:ea:7b:aa:a4:20:8c:ed:96: 4e:37:4d:6a:6c:da:b9:46:c3:c4:3b:1d:10:2c:3b: 00:37:f6:62:63:68:17:08:d2:87:6f:70:69:26:42: 56:7d:ee:7c:9b:3f:3c:69:73:45:06:09:c8:64:b3: 3d:df:db:53:26:4c:72:3d:69:ec:29:76:42:9d:17: 0f:86:4d:dc:bf:01:41:9c:a3:40:20:c0:28:98:95: e5:9f:b2:60:eb:a9:d7:6c:a2:48:7c:f7:ed:47:97: fc:bb:e0:54:58:9e:1e:e1:1a:9a:6d:f4:ad:d6:db: ba:ad:e3:df:31:b9:e9:cd:39:50:ca:9d:c7:5f:cc: a8:72:8e:f0:c4:cd:e9:23:35:74:4d:98:fe:ed:f9: 5e:89:a3:72:68:cc:0f:2d:5f:20:71:e2:f0:c1:22: 1d:d5:b8:53:66:aa:c9:35:d5:d7:ed:ac:fe:9e:a7: c5:0d:61:7f:62:e6:d8:9a:40:c8:3c:d6:2c:12:56: 7e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:B1:33:53:07:BA:90:7F:1F:68:A9:B1:39:D7:1B:C0:75:D0:19:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/b8f1cd10-ce5e-3fac-9723-e3190551e274.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.crl X509v3 Authority Key Identifier: keyid:2C:80:E9:A3:91:5A:A2:9A:27:C4:41:A7:85:55:97:93:D6:6D:BC:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.cer sbgp-ipAddrBlock: critical IPv4: 192.58.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:c1:c2:13:3d:1d:82:97:20:5a:2c:3e:0d:f2:fe:ab:fa:eb: 43:53:30:35:d1:07:9d:13:38:88:cc:0c:50:f1:2d:86:cc:3f: 4a:c6:a4:0c:c2:5b:88:33:ab:b5:31:32:5f:07:30:70:73:a3: cc:a1:d7:5f:48:47:3d:8a:07:47:81:a1:e2:71:01:ea:50:7a: 0c:c8:92:45:70:0a:ad:75:59:2e:e6:68:17:96:37:5d:63:f9: 69:cb:ab:91:ca:98:8d:b4:98:14:82:a9:8a:1e:82:23:67:fc: 95:dc:41:8f:e1:ab:89:97:79:71:c4:82:7e:58:c0:4b:60:8e: c3:78:cf:9b:ab:d0:79:40:f6:a1:a8:cc:0e:75:dc:fd:6b:44: 55:28:e3:9e:19:c4:69:13:c8:2e:91:cc:b3:ac:6f:19:f7:54: c6:9c:88:66:14:b5:16:c0:8c:3f:a3:11:43:04:4f:c2:cc:87: 7e:c3:95:bf:67:0e:a3:4c:16:cb:22:57:fb:32:ab:29:bf:37: 5f:a4:47:a6:a0:7b:0e:8a:ad:a8:10:78:67:9c:99:37:69:5e: a2:52:64:77:e6:62:44:26:2d:f7:e7:4e:f0:af:d6:cb:49:26: a0:d8:c1:0b:e2:30:2b:33:29:fd:57:b5:45:4a:69:22:0d:2d: ef:6e:a0:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GcqSdE6eoOQtWswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWUyMWI2MmItN2JmYy00YTBkLTgxYmMtNzdmOTk4ZGYy Y2JlMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk NTEyMDlhMWEtNTMzNi00ZDIxLWE5MjAtZjUyMTM3Nzk2OWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PIx789QSOgxwv2ZR0sqi/gMWtNTQbZaci94 3IItQiv2tReiqN+jpyj6hoPswPm/f5RxzJQSGNZD3kvW++vhZ+3S6nuqpCCM7ZZO N01qbNq5RsPEOx0QLDsAN/ZiY2gXCNKHb3BpJkJWfe58mz88aXNFBgnIZLM939tT JkxyPWnsKXZCnRcPhk3cvwFBnKNAIMAomJXln7Jg66nXbKJIfPftR5f8u+BUWJ4e 4RqabfSt1tu6rePfMbnpzTlQyp3HX8yoco7wxM3pIzV0TZj+7fleiaNyaMwPLV8g ceLwwSId1bhTZqrJNdXX7az+nqfFDWF/YubYmkDIPNYsElZ+OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyxM1MHupB/H2ipsTnXG8B10BlDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZTIx YjYyYi03YmZjLTRhMGQtODFiYy03N2Y5OThkZjJjYmUvYjhmMWNkMTAtY2U1ZS0z ZmFjLTk3MjMtZTMxOTA1NTFlMjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWUyMWI2MmItN2JmYy00YTBkLTgx YmMtNzdmOTk4ZGYyY2JlL2FlMjFiNjJiLTdiZmMtNGEwZC04MWJjLTc3Zjk5OGRm MmNiZS5jcmwwHwYDVR0jBBgwFoAULIDpo5FaoponxEGnhVWXk9ZtvFAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZTIxYjYyYi03YmZjLTRhMGQtODFiYy03N2Y5 OThkZjJjYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDr3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALvBwhM9HYKXIFosPg3y/qv660NTMDXRB50TOIjMDFDxLYbMP0rGpAzC W4gzq7UxMl8HMHBzo8yh119IRz2KB0eBoeJxAepQegzIkkVwCq11WS7maBeWN11j +WnLq5HKmI20mBSCqYoegiNn/JXcQY/hq4mXeXHEgn5YwEtgjsN4z5ur0HlA9qGo zA513P1rRFUo454ZxGkTyC6RzLOsbxn3VMaciGYUtRbAjD+jEUMET8LMh37Dlb9n DqNMFssiV/syqym/N1+kR6agew6KragQeGecmTdpXqJSZHfmYkQmLffnTvCv1stJ JqDYwQviMCszKf1XtUVKaSINLe9uoPY= -----END CERTIFICATE-----Generated at Thu Sep 24 08:42:59 2026 by rpki-client