$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3bc43be8-8d0b-4477-b04e-dd07b171f4c2/72186dda-6f66-3968-b592-e446e0ea02dc.roa File: 72186dda-6f66-3968-b592-e446e0ea02dc.roa (raw, json) Hash identifier: h5jaJvC3C3AICeBpsFGBqk6lhG8cziJIUlo2njGyJO4= Subject key identifier: CE:6D:FC:D9:1A:2A:3E:E8:B2:1C:1E:EE:89:C4:63:61:E4:41:73:D4 Certificate issuer: /CN=3bc43be8-8d0b-4477-b04e-dd07b171f4c2 Certificate serial: 010D0C9F4328584F1CC7AC4999AC13A5ECDA3F10 Authority key identifier: D2:16:24:B5:53:5E:F6:BB:B2:3C:CE:A9:B8:76:40:53:D6:3D:8D:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3bc43be8-8d0b-4477-b04e-dd07b171f4c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3bc43be8-8d0b-4477-b04e-dd07b171f4c2/72186dda-6f66-3968-b592-e446e0ea02dc.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 17188 IP address blocks: 192.150.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3bc43be8-8d0b-4477-b04e-dd07b171f4c2/3bc43be8-8d0b-4477-b04e-dd07b171f4c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3bc43be8-8d0b-4477-b04e-dd07b171f4c2/3bc43be8-8d0b-4477-b04e-dd07b171f4c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3bc43be8-8d0b-4477-b04e-dd07b171f4c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:ac:49:99:ac:13:a5:ec:da:3f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bc43be8-8d0b-4477-b04e-dd07b171f4c2 Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=1cb21710-c828-4cab-af10-fdb652c79cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:72:27:9c:da:b4:e3:73:b3:72:20:61:d6:4e: 15:26:0d:18:39:92:a2:a3:58:f0:b1:51:4e:1b:88: 63:cd:9e:f5:85:fc:91:10:a5:52:78:c5:60:27:d9: 98:5f:9a:7c:b1:4b:d7:ed:f5:4d:c3:f9:67:84:a2: 9e:96:89:4c:2d:8f:0e:4e:c5:82:8b:5b:14:8c:08: 07:71:6d:bb:83:e3:1b:b7:52:14:ee:4b:0b:17:88: 06:c9:f5:0b:40:14:c8:f9:1e:65:7b:71:c8:f6:03: 48:95:69:51:2c:01:a6:9e:f5:aa:5b:a8:1b:19:da: 98:d1:9e:fe:33:4f:80:e0:31:b7:0e:ab:30:8b:f7: 12:63:73:04:80:ce:ec:ae:86:87:d3:40:d1:24:f2: 46:12:64:f7:e8:2a:ff:63:59:04:2f:87:bb:f4:cc: b4:01:d5:de:2b:0f:6f:28:11:dd:e1:51:84:22:78: 79:71:db:d3:aa:55:52:7e:09:07:8d:b3:0b:11:4b: 5a:58:d8:7a:fb:c1:dd:f1:6f:11:3f:9f:69:e2:4c: a6:be:e4:aa:96:cb:2d:08:f5:44:08:92:5e:e7:79: 86:4b:e8:0b:1f:2a:89:04:a6:2e:a5:82:9b:7f:c0: f8:11:8b:4e:a4:7d:d0:13:9f:0b:0f:49:dc:77:72: ee:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:6D:FC:D9:1A:2A:3E:E8:B2:1C:1E:EE:89:C4:63:61:E4:41:73:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3bc43be8-8d0b-4477-b04e-dd07b171f4c2/72186dda-6f66-3968-b592-e446e0ea02dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3bc43be8-8d0b-4477-b04e-dd07b171f4c2/3bc43be8-8d0b-4477-b04e-dd07b171f4c2.crl X509v3 Authority Key Identifier: keyid:D2:16:24:B5:53:5E:F6:BB:B2:3C:CE:A9:B8:76:40:53:D6:3D:8D:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3bc43be8-8d0b-4477-b04e-dd07b171f4c2.cer sbgp-ipAddrBlock: critical IPv4: 192.150.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:00:94:1b:8b:bf:ea:94:bb:a4:bc:85:7e:51:31:be:bc:e7: e6:03:2e:2b:b1:3e:8c:2d:44:10:07:97:b1:c9:f9:a8:81:6f: 84:12:43:f1:85:82:ed:4d:fa:32:b9:8f:0a:81:6c:bc:eb:46: e9:bf:02:79:5d:90:64:df:a1:75:54:4b:db:50:40:56:18:29: 8a:6d:88:ed:08:cf:d6:d8:98:8c:c8:58:21:44:0f:a6:dd:bd: 4f:43:d7:6a:60:a0:6b:91:de:94:ef:13:86:db:fb:0e:2b:f9: 73:73:88:b0:21:cf:26:b6:53:7c:16:cc:75:9a:ba:c8:ee:a7: b6:b7:27:4f:9b:3a:05:c6:01:4c:53:82:12:cd:ac:e7:71:73: 83:4d:ce:2b:04:ae:74:31:c6:78:05:74:4d:b5:2b:0b:c3:6f: a7:46:92:11:1a:3b:f5:4b:f9:fe:51:56:9b:b4:d5:35:66:92: 65:68:92:85:80:b1:fd:c1:ef:ad:62:9c:12:c3:ab:c1:f7:6e: 23:45:4f:d9:90:35:84:05:5b:14:99:fd:e1:55:9d:e3:b3:f2: ab:a7:5d:a0:0d:de:ab:ca:83:49:56:a9:9d:49:e1:75:23:6c: 9e:ac:44:3e:30:ba:80:0e:98:3f:66:73:63:54:70:a7:76:d0: 2b:f9:94:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx6xJmawTpezaPxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JjNDNiZTgtOGQwYi00NDc3LWIwNGUtZGQwN2IxNzFm NGMyMB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk MWNiMjE3MTAtYzgyOC00Y2FiLWFmMTAtZmRiNjUyYzc5Y2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXInnNq043OzciBh1k4VJg0YOZKio1jwsVFO G4hjzZ71hfyREKVSeMVgJ9mYX5p8sUvX7fVNw/lnhKKelolMLY8OTsWCi1sUjAgH cW27g+Mbt1IU7ksLF4gGyfULQBTI+R5le3HI9gNIlWlRLAGmnvWqW6gbGdqY0Z7+ M0+A4DG3Dqswi/cSY3MEgM7sroaH00DRJPJGEmT36Cr/Y1kEL4e79My0AdXeKw9v KBHd4VGEInh5cdvTqlVSfgkHjbMLEUtaWNh6+8Hd8W8RP59p4kymvuSqlsstCPVE CJJe53mGS+gLHyqJBKYupYKbf8D4EYtOpH3QE58LD0ncd3LuwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5t/NkaKj7oshwe7onEY2HkQXPUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zYmM0 M2JlOC04ZDBiLTQ0NzctYjA0ZS1kZDA3YjE3MWY0YzIvNzIxODZkZGEtNmY2Ni0z OTY4LWI1OTItZTQ0NmUwZWEwMmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2JjNDNiZTgtOGQwYi00NDc3LWIw NGUtZGQwN2IxNzFmNGMyLzNiYzQzYmU4LThkMGItNDQ3Ny1iMDRlLWRkMDdiMTcx ZjRjMi5jcmwwHwYDVR0jBBgwFoAU0hYktVNe9ruyPM6puHZAU9Y9jS0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zYmM0M2JlOC04ZDBiLTQ0NzctYjA0ZS1kZDA3 YjE3MWY0YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJa5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMAlBuLv+qUu6S8hX5RMb685+YDLiuxPowtRBAHl7HJ+aiBb4QSQ/GF gu1N+jK5jwqBbLzrRum/AnldkGTfoXVUS9tQQFYYKYptiO0Iz9bYmIzIWCFED6bd vU9D12pgoGuR3pTvE4bb+w4r+XNziLAhzya2U3wWzHWausjup7a3J0+bOgXGAUxT ghLNrOdxc4NNzisErnQxxngFdE21KwvDb6dGkhEaO/VL+f5RVpu01TVmkmVokoWA sf3B761inBLDq8H3biNFT9mQNYQFWxSZ/eFVneOz8qunXaAN3qvKg0lWqZ1J4XUj bJ6sRD4wuoAOmD9mc2NUcKd20Cv5lNA= -----END CERTIFICATE-----Generated at Tue Sep 22 01:34:15 2026 by rpki-client