$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/fe2e6333-2d0e-3d3a-ba9e-33923101cfbd.roa File: fe2e6333-2d0e-3d3a-ba9e-33923101cfbd.roa (raw, json) Hash identifier: ntTGZDv3EGj3pm7tVv7/b43gbYX2MWqwEqxubzxSW2U= Subject key identifier: 8B:9B:9D:D9:64:03:47:E5:79:DA:27:B5:9F:44:40:16:F1:46:D2:F5 Certificate issuer: /CN=be90895a-3c43-4b38-a5aa-b1ebc261b6f9 Certificate serial: 010D0C9F4328584F4973CC3CB35DB0EF18E49280 Authority key identifier: F1:55:6A:36:5B:CD:2A:BB:61:C0:A5:AC:37:B5:7E:E2:D6:D6:EE:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/fe2e6333-2d0e-3d3a-ba9e-33923101cfbd.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 398949 IP address blocks: 192.64.206.0/24 maxlen: 24 192.64.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:cc:3c:b3:5d:b0:ef:18:e4:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be90895a-3c43-4b38-a5aa-b1ebc261b6f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4b827431-45ce-4727-ad24-73b934eb98c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cd:75:96:ef:42:d2:0b:e0:6d:ae:ae:e2:ae: cb:15:19:7f:6d:84:b6:52:2f:7c:14:51:20:a1:bb: 2c:17:3a:9d:47:9a:fa:45:ed:9d:ae:30:c6:9c:4d: e4:ae:17:34:1c:d4:6b:17:b9:9a:2c:96:4b:08:d1: b5:9d:5c:d2:02:a1:0b:7b:33:ca:4e:6a:3f:25:7c: 40:5d:64:c1:ff:cd:22:1d:08:24:85:fa:f5:e4:d7: 8a:39:6b:2f:49:7d:7b:d6:18:8a:85:6e:7b:40:c7: 98:4f:bf:f4:5f:78:d5:5c:64:72:48:32:4a:b7:7f: 6d:96:b1:52:23:1c:ab:cd:6e:91:c4:b0:1f:98:5e: a2:35:e6:23:4c:63:9c:17:b6:c8:63:f3:53:79:bc: 1a:ec:63:8e:57:6e:b8:aa:57:f7:3d:5b:ac:cf:2b: 2a:dd:14:d9:48:46:09:78:1f:57:89:a9:4c:04:1e: 0f:5e:e4:82:35:17:ac:cb:98:ee:2d:cc:0f:41:9e: 83:35:58:ae:81:d0:a8:a9:52:0c:06:0f:89:bb:ef: 7c:bf:90:65:f8:c6:69:be:54:89:56:ee:3b:eb:bd: 0d:98:8d:6a:8d:c9:7e:b5:4d:16:e3:06:1b:05:ca: 62:d1:41:97:40:40:ee:f9:35:62:e1:cf:ba:99:bd: ff:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:9B:9D:D9:64:03:47:E5:79:DA:27:B5:9F:44:40:16:F1:46:D2:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/fe2e6333-2d0e-3d3a-ba9e-33923101cfbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.crl X509v3 Authority Key Identifier: keyid:F1:55:6A:36:5B:CD:2A:BB:61:C0:A5:AC:37:B5:7E:E2:D6:D6:EE:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.cer sbgp-ipAddrBlock: critical IPv4: 192.64.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:c5:cf:66:35:dc:2e:eb:37:33:2f:e5:1f:e9:b6:68:f1:02: 3a:f3:10:7c:57:5a:36:9b:ce:87:1d:92:b0:24:f4:77:96:c2: 04:14:e3:75:a7:2e:37:6b:47:35:7b:65:d6:34:18:24:63:d2: 86:14:7d:47:51:f0:3c:c9:d9:14:6c:3c:a4:40:1a:4d:87:24: d9:3c:85:72:d1:d6:ff:5f:17:f0:b7:fe:ce:df:54:b6:5d:c8: d7:0b:f1:a1:1b:3a:21:a2:a7:a3:32:ae:29:51:cb:19:c2:cd: ba:28:a9:a6:1a:99:bf:ff:98:b2:5c:90:48:b3:9a:fb:44:00: 2a:e4:d6:a1:f0:f0:63:82:7b:a1:ac:85:50:f1:c7:11:1d:b9: 41:70:d9:ac:be:ac:0c:99:bb:43:1f:43:71:30:6b:59:bf:ba: a0:34:9f:c0:92:75:cd:bd:f7:46:aa:91:0e:66:4b:ef:c0:85: 8f:26:b7:cc:db:c0:f8:13:4d:e8:fc:0b:ad:9b:76:8a:0b:d8: 8b:ad:f1:c9:de:a5:ca:4c:80:56:41:df:ed:a5:ec:69:1a:13: 61:85:b1:00:e9:83:6f:5d:e2:aa:39:42:05:25:1d:e2:cb:85: 5b:3d:9b:40:48:03:4e:28:2a:24:e3:ad:48:ae:3d:cf:c3:38: bf:21:0b:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc8w8s12w7xjkkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU5MDg5NWEtM2M0My00YjM4LWE1YWEtYjFlYmMyNjFi NmY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGI4Mjc0MzEtNDVjZS00NzI3LWFkMjQtNzNiOTM0ZWI5OGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz811lu9C0gvgba6u4q7LFRl/bYS2Ui98FFEg obssFzqdR5r6Re2drjDGnE3krhc0HNRrF7maLJZLCNG1nVzSAqELezPKTmo/JXxA XWTB/80iHQgkhfr15NeKOWsvSX171hiKhW57QMeYT7/0X3jVXGRySDJKt39tlrFS IxyrzW6RxLAfmF6iNeYjTGOcF7bIY/NTebwa7GOOV264qlf3PVuszysq3RTZSEYJ eB9XialMBB4PXuSCNResy5juLcwPQZ6DNViugdCoqVIMBg+Ju+98v5Bl+MZpvlSJ Vu47670NmI1qjcl+tU0W4wYbBcpi0UGXQEDu+TVi4c+6mb3/jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIubndlkA0fledontZ9EQBbxRtL1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iZTkw ODk1YS0zYzQzLTRiMzgtYTVhYS1iMWViYzI2MWI2ZjkvZmUyZTYzMzMtMmQwZS0z ZDNhLWJhOWUtMzM5MjMxMDFjZmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYmU5MDg5NWEtM2M0My00YjM4LWE1 YWEtYjFlYmMyNjFiNmY5L2JlOTA4OTVhLTNjNDMtNGIzOC1hNWFhLWIxZWJjMjYx YjZmOS5jcmwwHwYDVR0jBBgwFoAU8VVqNlvNKrthwKWsN7V+4tbW7gowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iZTkwODk1YS0zYzQzLTRiMzgtYTVhYS1iMWVi YzI2MWI2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwEDOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXFz2Y13C7rNzMv5R/ptmjxAjrzEHxXWjabzocdkrAk9HeWwgQU43Wn LjdrRzV7ZdY0GCRj0oYUfUdR8DzJ2RRsPKRAGk2HJNk8hXLR1v9fF/C3/s7fVLZd yNcL8aEbOiGip6MyrilRyxnCzbooqaYamb//mLJckEizmvtEACrk1qHw8GOCe6Gs hVDxxxEduUFw2ay+rAyZu0MfQ3Ewa1m/uqA0n8CSdc2990aqkQ5mS+/AhY8mt8zb wPgTTej8C62bdooL2Iut8cnepcpMgFZB3+2l7GkaE2GFsQDpg29d4qo5QgUlHeLL hVs9m0BIA04oKiTjrUiuPc/DOL8hCzI= -----END CERTIFICATE-----Generated at Sun Sep 27 14:21:09 2026 by rpki-client