$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab/c1c676f0-87d5-3be9-aa2c-3d3e29b5dd2d.roa File: c1c676f0-87d5-3be9-aa2c-3d3e29b5dd2d.roa (raw, json) Hash identifier: gK7hlnZxK0AbhwBKz3rB8mVo9SJlxyuIOmTm601pWMI= Subject key identifier: 28:33:0E:7F:45:61:24:FB:CF:03:71:CF:84:A0:1D:C7:50:60:FD:5B Certificate issuer: /CN=e4e79c76-1a66-4449-a2b2-acc3c7eee9ab Certificate serial: 010D0C9F4328584F20F7BFAECF65B33362643E80 Authority key identifier: F3:74:EC:C0:46:EC:23:1A:2A:E1:0E:EC:4C:C7:D2:B3:D6:3D:6C:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab/c1c676f0-87d5-3be9-aa2c-3d3e29b5dd2d.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 40119 IP address blocks: 192.197.128.0/24 maxlen: 24 199.185.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:bf:ae:cf:65:b3:33:62:64:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4e79c76-1a66-4449-a2b2-acc3c7eee9ab Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=c6f7e526-abfd-4ca7-b972-5ed20c84f457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e3:77:e5:c9:37:c5:fc:cb:4e:d3:34:36:59: b0:fa:f2:0d:43:c9:25:83:0a:f3:72:ce:2f:38:52: 13:b7:73:17:0d:1a:94:58:f3:2a:ed:c3:25:d1:37: b5:ae:f0:e2:5c:55:aa:92:f6:77:4f:45:00:f5:b4: ba:3c:21:d4:17:79:46:89:8c:52:ef:29:2a:24:86: 69:ab:54:d3:fe:b0:87:43:1e:c7:ca:cb:2c:ff:9a: 9a:3c:73:08:09:86:13:54:b2:bc:28:66:d3:73:68: 03:aa:93:84:b9:1a:a9:aa:3d:30:06:74:f0:21:27: 55:55:5b:08:53:e9:d4:91:45:9c:38:7d:61:ae:ee: 31:91:45:f5:ea:9d:1e:b7:2c:5c:90:d2:73:51:6f: be:ca:13:fa:36:11:7d:a3:4c:89:d9:70:6d:2a:13: f6:4f:d6:97:08:58:59:f7:3a:39:1b:27:11:8d:7f: 82:8a:c2:d0:09:7c:69:d4:54:7c:ae:4a:c5:b9:be: 36:35:a2:62:8d:60:ee:84:2d:97:e5:57:81:5d:43: a9:96:ad:46:13:8b:42:2e:b2:63:ae:96:fd:99:c4: ce:c5:43:2a:72:86:98:71:74:94:85:f7:ba:6a:e7: c4:5e:99:8b:7c:28:d1:e7:f3:67:8c:5b:26:b5:f0: 6b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:33:0E:7F:45:61:24:FB:CF:03:71:CF:84:A0:1D:C7:50:60:FD:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab/c1c676f0-87d5-3be9-aa2c-3d3e29b5dd2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab.crl X509v3 Authority Key Identifier: keyid:F3:74:EC:C0:46:EC:23:1A:2A:E1:0E:EC:4C:C7:D2:B3:D6:3D:6C:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab.cer sbgp-ipAddrBlock: critical IPv4: 192.197.128.0/24 199.185.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:38:51:95:2b:03:ae:b8:cf:af:04:e1:8f:63:84:fa:ed:2b: 65:f7:56:aa:10:32:cd:ec:96:61:14:eb:99:e3:2d:61:43:c2: e0:f1:38:d3:21:b6:af:a2:33:94:aa:9b:08:dc:2c:e5:c1:9a: fc:a5:54:fc:a5:c4:72:58:10:84:a2:b5:9b:8d:15:f5:37:be: e8:20:76:51:5a:9c:b5:a2:26:87:ea:cf:65:f9:1f:bc:2f:86: 22:41:11:2c:39:87:3e:9a:50:7e:2a:04:7f:d1:79:14:f1:63: c1:4e:48:85:ef:2f:7e:4d:c6:39:c3:f9:b4:11:2f:5c:f1:b2: d0:49:4b:e8:89:a3:d9:de:71:3e:61:82:f6:87:4c:bb:78:64: 9d:b8:2e:ab:1a:6e:39:08:f5:71:03:5a:c2:da:d0:6b:fd:4b: 5c:2d:a7:bd:85:fb:6a:8e:9f:07:b3:91:19:8b:b3:67:ef:66: a0:0e:87:90:02:ca:7e:7a:d0:2c:9d:63:51:58:ee:e1:c6:47: 0a:f9:a9:37:08:dd:e4:c1:07:aa:77:be:63:ee:59:1e:dd:a1: 37:85:90:db:39:e2:80:dd:c8:3f:dd:e1:7b:da:0c:51:31:d4: fb:e7:b3:ca:6e:75:86:4b:05:5b:84:20:c3:82:d3:d8:de:be: f3:08:38:ef -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8g97+uz2WzM2JkPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRlNzljNzYtMWE2Ni00NDQ5LWEyYjItYWNjM2M3ZWVl OWFiMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk YzZmN2U1MjYtYWJmZC00Y2E3LWI5NzItNWVkMjBjODRmNDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluN35ck3xfzLTtM0Nlmw+vINQ8klgwrzcs4v OFITt3MXDRqUWPMq7cMl0Te1rvDiXFWqkvZ3T0UA9bS6PCHUF3lGiYxS7ykqJIZp q1TT/rCHQx7Hysss/5qaPHMICYYTVLK8KGbTc2gDqpOEuRqpqj0wBnTwISdVVVsI U+nUkUWcOH1hru4xkUX16p0etyxckNJzUW++yhP6NhF9o0yJ2XBtKhP2T9aXCFhZ 9zo5GycRjX+CisLQCXxp1FR8rkrFub42NaJijWDuhC2X5VeBXUOplq1GE4tCLrJj rpb9mcTOxUMqcoaYcXSUhfe6aufEXpmLfCjR5/NnjFsmtfBrdwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCgzDn9FYST7zwNxz4SgHcdQYP1bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNGU3 OWM3Ni0xYTY2LTQ0NDktYTJiMi1hY2MzYzdlZWU5YWIvYzFjNjc2ZjAtODdkNS0z YmU5LWFhMmMtM2QzZTI5YjVkZDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTRlNzljNzYtMWE2Ni00NDQ5LWEy YjItYWNjM2M3ZWVlOWFiL2U0ZTc5Yzc2LTFhNjYtNDQ0OS1hMmIyLWFjYzNjN2Vl ZTlhYi5jcmwwHwYDVR0jBBgwFoAU83TswEbsIxoq4Q7sTMfSs9Y9bHgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNGU3OWM3Ni0xYTY2LTQ0NDktYTJiMi1hY2Mz YzdlZWU5YWIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwMWAAwQF x7kgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJE4UZUrA664z68E4Y9jhPrtK2X3VqoQMs3slmEU65njLWFD wuDxONMhtq+iM5SqmwjcLOXBmvylVPylxHJYEISitZuNFfU3vuggdlFanLWiJofq z2X5H7wvhiJBESw5hz6aUH4qBH/ReRTxY8FOSIXvL35NxjnD+bQRL1zxstBJS+iJ o9necT5hgvaHTLt4ZJ24LqsabjkI9XEDWsLa0Gv9S1wtp72F+2qOnwezkRmLs2fv ZqAOh5ACyn560CydY1FY7uHGRwr5qTcI3eTBB6p3vmPuWR7doTeFkNs54oDdyD/d 4XvaDFEx1Pvns8pudYZLBVuEIMOC09jevvMIOO8= -----END CERTIFICATE-----Generated at Tue Sep 22 05:09:55 2026 by rpki-client