$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/268804eb-2209-3eca-acfc-34c2ed1ba10d.roa File: 268804eb-2209-3eca-acfc-34c2ed1ba10d.roa (raw, json) Hash identifier: gc2M0LRzaSU7RuMQ0sCM9dzPwoKHjL9rJ/SqXoI5iSU= Subject key identifier: 3C:D8:0B:3D:82:96:52:10:2D:41:54:7B:83:ED:FD:2F:AA:4F:F1:B0 Certificate issuer: /CN=cc39a973-cf2e-44b1-984a-6596dc0b6963 Certificate serial: 010D0C9F4328584EF7176BE6584B063D8DDA5108 Authority key identifier: 45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/268804eb-2209-3eca-acfc-34c2ed1ba10d.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 4476 IP address blocks: 192.68.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:6b:e6:58:4b:06:3d:8d:da:51:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc39a973-cf2e-44b1-984a-6596dc0b6963 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=cba12d81-ef43-42a3-b097-efb3e1a9807e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e0:a6:20:d0:85:3c:d7:eb:83:95:f9:6b:d0: 18:db:f9:8e:bf:89:2d:51:32:84:52:49:d3:55:a0: 27:90:71:36:53:16:bb:1d:0a:62:79:cb:ee:40:c8: 12:0d:0d:25:5c:fb:39:a7:6c:28:60:fb:36:37:37: 9f:62:c6:c8:16:0e:20:c2:eb:84:11:94:f1:7b:ad: 4b:2e:c7:6d:25:7b:c3:cf:37:90:83:83:7e:f3:89: 2d:d9:83:21:37:61:fd:f6:53:40:30:0c:43:fc:95: f7:43:47:d5:9f:e8:c6:94:62:ba:0f:6c:a0:a4:35: 7a:89:1a:a0:d2:e8:b3:1b:b0:96:10:5f:2a:b4:30: 09:bc:3b:f0:21:46:4c:78:b7:b8:90:c5:a5:08:73: 25:ea:c9:1e:2f:77:eb:18:72:f1:0e:2c:bc:28:53: 6a:36:db:3c:ff:8d:15:f7:d6:44:83:c7:ca:4a:62: 28:db:e1:04:c3:9f:d3:64:ac:d8:75:22:5c:97:1e: b1:e3:59:ed:01:6d:42:f7:a5:88:85:94:1c:ee:48: e9:01:24:10:cd:52:d3:4a:df:ef:da:46:5b:0d:87: 32:14:a4:d1:8d:e3:3b:59:df:5e:44:9b:89:cd:2f: d7:d5:6d:5b:37:dd:30:14:6c:fc:28:04:b0:33:a2: 83:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D8:0B:3D:82:96:52:10:2D:41:54:7B:83:ED:FD:2F:AA:4F:F1:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/268804eb-2209-3eca-acfc-34c2ed1ba10d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl X509v3 Authority Key Identifier: keyid:45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer sbgp-ipAddrBlock: critical IPv4: 192.68.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:9a:fc:99:0b:a6:3b:74:45:84:c6:4c:a6:4c:75:81:fe:5b: b5:c5:48:5a:62:1e:32:85:01:cc:97:38:66:ff:ff:0d:86:54: 07:df:94:3c:fa:72:11:be:86:1d:14:42:d2:87:93:e3:ab:34: b5:d3:5c:31:ea:21:1f:48:60:ba:9c:9d:4e:3e:bb:82:61:17: f2:96:7b:0f:0d:99:b5:ec:91:ad:8a:2a:a7:91:09:f1:dd:97: 6e:1f:33:bd:8e:44:e1:f1:f9:74:2a:09:75:aa:8f:2d:e7:ee: d0:f3:f1:94:66:3a:c4:f4:a8:f0:f7:8b:c5:c9:8d:d7:1d:f5: a5:0c:f4:a6:88:17:4b:e8:26:83:54:fb:0c:2d:bf:eb:f2:42: 44:95:2c:0e:c7:a7:25:d5:a8:10:ee:d0:ed:bc:47:65:1e:11: ca:de:75:59:e2:32:5f:ce:8a:df:a4:2d:fd:22:9d:be:25:38: 1b:60:04:3f:04:94:08:06:69:97:f8:a3:9d:6d:ac:ae:8a:b4: e2:c5:16:9a:a7:ee:48:f2:20:ee:ac:cf:c5:d6:a5:c4:fd:8a: b6:74:08:55:de:fa:e7:06:3e:27:30:b5:73:48:a1:cf:ac:28: d7:33:b3:b1:5c:6b:0b:e6:7e:0f:db:0e:8a:24:48:43:90:4d: 2c:d2:8e:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F2vmWEsGPY3aUQgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzOWE5NzMtY2YyZS00NGIxLTk4NGEtNjU5NmRjMGI2 OTYzMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk Y2JhMTJkODEtZWY0My00MmEzLWIwOTctZWZiM2UxYTk4MDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+CmINCFPNfrg5X5a9AY2/mOv4ktUTKEUknT VaAnkHE2Uxa7HQpiecvuQMgSDQ0lXPs5p2woYPs2NzefYsbIFg4gwuuEEZTxe61L LsdtJXvDzzeQg4N+84kt2YMhN2H99lNAMAxD/JX3Q0fVn+jGlGK6D2ygpDV6iRqg 0uizG7CWEF8qtDAJvDvwIUZMeLe4kMWlCHMl6skeL3frGHLxDiy8KFNqNts8/40V 99ZEg8fKSmIo2+EEw5/TZKzYdSJclx6x41ntAW1C96WIhZQc7kjpASQQzVLTSt/v 2kZbDYcyFKTRjeM7Wd9eRJuJzS/X1W1bN90wFGz8KASwM6KDOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzYCz2CllIQLUFUe4Pt/S+qT/GwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jYzM5 YTk3My1jZjJlLTQ0YjEtOTg0YS02NTk2ZGMwYjY5NjMvMjY4ODA0ZWItMjIwOS0z ZWNhLWFjZmMtMzRjMmVkMWJhMTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2MzOWE5NzMtY2YyZS00NGIxLTk4 NGEtNjU5NmRjMGI2OTYzL2NjMzlhOTczLWNmMmUtNDRiMS05ODRhLTY1OTZkYzBi Njk2My5jcmwwHwYDVR0jBBgwFoAURaGd2u0urqKIyrHJ+roNx0DS2I8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jYzM5YTk3My1jZjJlLTQ0YjEtOTg0YS02NTk2 ZGMwYjY5NjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwERFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKa/JkLpjt0RYTGTKZMdYH+W7XFSFpiHjKFAcyXOGb//w2GVAfflDz6 chG+hh0UQtKHk+OrNLXTXDHqIR9IYLqcnU4+u4JhF/KWew8NmbXska2KKqeRCfHd l24fM72OROHx+XQqCXWqjy3n7tDz8ZRmOsT0qPD3i8XJjdcd9aUM9KaIF0voJoNU +wwtv+vyQkSVLA7HpyXVqBDu0O28R2UeEcredVniMl/Oit+kLf0inb4lOBtgBD8E lAgGaZf4o51trK6KtOLFFpqn7kjyIO6sz8XWpcT9irZ0CFXe+ucGPicwtXNIoc+s KNczs7Fcawvmfg/bDookSEOQTSzSjjI= -----END CERTIFICATE-----Generated at Tue Sep 22 06:38:46 2026 by rpki-client