$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa/6cfd4cc1-a1b1-38de-8fd2-cd211b3b2686.roa File: 6cfd4cc1-a1b1-38de-8fd2-cd211b3b2686.roa (raw, json) Hash identifier: m/Hmz31dXecqivBt7PQSjQji0Xsj956TxdZLp+ey0xQ= Subject key identifier: 29:02:97:0C:A9:8E:D1:E4:54:9C:38:33:88:C4:18:05:B5:22:A5:18 Certificate issuer: /CN=c428d8f6-c296-4695-bec2-37368886f4fa Certificate serial: 010D0C9F4328584F119D1D0D7DC8EC63DF5B6CC0 Authority key identifier: 0B:95:A5:41:B2:58:7E:61:BD:4B:EF:6E:31:2E:A9:37:26:D6:DB:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa/6cfd4cc1-a1b1-38de-8fd2-cd211b3b2686.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 399654 IP address blocks: 192.64.13.0/24 maxlen: 24 198.17.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa/c428d8f6-c296-4695-bec2-37368886f4fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa/c428d8f6-c296-4695-bec2-37368886f4fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:1d:0d:7d:c8:ec:63:df:5b:6c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c428d8f6-c296-4695-bec2-37368886f4fa Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=44fed86c-d233-4fa7-b7c6-2ae4640b05b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:97:27:a2:b1:dd:b3:f1:46:e4:f1:43:5e:df: c2:b0:ac:41:c7:c8:f7:7d:cd:d8:59:56:ab:7f:e3: 9b:f5:d4:f5:5f:b1:0f:f8:2b:45:da:8f:71:5b:92: 6b:3c:2d:da:8f:52:09:05:8b:e9:8b:a8:b0:59:a8: f8:6f:42:bc:54:4d:f7:c4:e5:9a:f2:90:af:d5:ec: ab:39:b0:47:19:46:5c:a9:86:4f:52:08:54:d1:1f: da:fc:f6:30:4a:65:ea:aa:6a:04:3d:e2:85:12:7d: 4c:1e:74:e2:3f:53:27:21:1f:da:27:a8:cd:4e:6c: 17:94:31:4d:2c:21:f1:d0:43:de:9d:43:5d:04:dc: 3f:68:11:51:5e:0a:63:1c:c3:21:9a:37:33:ed:12: 7c:f8:f0:14:17:c2:84:31:66:fd:c0:ef:ba:1d:28: 67:b9:ac:b3:43:f9:ac:7c:d7:bd:a8:ff:98:3e:22: 2f:b7:a5:c3:02:20:76:da:77:4b:81:37:16:8f:eb: 6b:14:06:5e:62:4d:86:cc:0c:e4:16:2c:4f:c4:3b: 85:24:15:fa:ca:f0:53:37:36:f3:5e:bf:a6:49:18: c7:78:07:de:02:af:58:1f:98:7e:fe:4d:5e:02:8b: 2c:97:71:e1:53:2a:34:2e:b9:ef:00:7b:78:63:4d: e3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:02:97:0C:A9:8E:D1:E4:54:9C:38:33:88:C4:18:05:B5:22:A5:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa/6cfd4cc1-a1b1-38de-8fd2-cd211b3b2686.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa/c428d8f6-c296-4695-bec2-37368886f4fa.crl X509v3 Authority Key Identifier: keyid:0B:95:A5:41:B2:58:7E:61:BD:4B:EF:6E:31:2E:A9:37:26:D6:DB:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa.cer sbgp-ipAddrBlock: critical IPv4: 192.64.13.0/24 198.17.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:dc:09:1a:6f:d4:98:4a:2b:59:f9:83:fc:7e:de:e9:06:c3: 5b:fa:8f:b3:7c:33:ec:18:96:ca:b6:5b:b8:52:bf:50:8c:26: 19:0e:39:63:34:e5:7c:5e:33:15:75:49:40:55:35:f3:fa:9f: ad:da:af:1c:b5:6b:cf:99:82:93:04:93:68:d1:e5:72:b6:fc: d3:14:eb:de:1a:f1:3b:61:0b:50:1f:59:b0:b1:01:1e:8f:f0: 3e:b6:c0:59:57:9d:63:8a:97:f2:69:96:94:d6:86:e7:80:0d: 4c:15:24:ce:4e:8e:e5:ad:53:31:0c:b9:3c:db:92:c5:28:cd: d8:67:ca:63:6e:80:04:f0:59:0a:47:f5:a4:9e:30:c9:2f:e8: 48:36:5a:7e:8a:c3:e4:a7:50:7d:26:ff:dc:61:b3:4a:d6:77: 6b:07:3e:cf:ea:e9:f4:06:fb:52:c8:8c:e8:d3:59:e3:3c:9b: 91:55:2f:81:04:52:26:34:bd:d8:c4:f4:19:22:27:18:85:16: 2d:b3:7e:d0:29:cc:bc:b1:4e:76:62:49:b6:54:2f:6b:2f:18: 75:91:3e:88:82:5b:95:17:dd:3d:2f:db:f0:11:e6:a4:54:2a: 7a:4d:be:2e:21:6f:f2:6f:80:a9:92:52:5b:29:b9:b9:0f:68: 13:84:65:ca -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8RnR0NfcjsY99bbMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyOGQ4ZjYtYzI5Ni00Njk1LWJlYzItMzczNjg4ODZm NGZhMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NDRmZWQ4NmMtZDIzMy00ZmE3LWI3YzYtMmFlNDY0MGIwNWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5cnorHds/FG5PFDXt/CsKxBx8j3fc3YWVar f+Ob9dT1X7EP+CtF2o9xW5JrPC3aj1IJBYvpi6iwWaj4b0K8VE33xOWa8pCv1eyr ObBHGUZcqYZPUghU0R/a/PYwSmXqqmoEPeKFEn1MHnTiP1MnIR/aJ6jNTmwXlDFN LCHx0EPenUNdBNw/aBFRXgpjHMMhmjcz7RJ8+PAUF8KEMWb9wO+6HShnuayzQ/ms fNe9qP+YPiIvt6XDAiB22ndLgTcWj+trFAZeYk2GzAzkFixPxDuFJBX6yvBTNzbz Xr+mSRjHeAfeAq9YH5h+/k1eAossl3HhUyo0LrnvAHt4Y03jwwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCkClwypjtHkVJw4M4jEGAW1IqUYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNDI4 ZDhmNi1jMjk2LTQ2OTUtYmVjMi0zNzM2ODg4NmY0ZmEvNmNmZDRjYzEtYTFiMS0z OGRlLThmZDItY2QyMTFiM2IyNjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzQyOGQ4ZjYtYzI5Ni00Njk1LWJl YzItMzczNjg4ODZmNGZhL2M0MjhkOGY2LWMyOTYtNDY5NS1iZWMyLTM3MzY4ODg2 ZjRmYS5jcmwwHwYDVR0jBBgwFoAUC5WlQbJYfmG9S+9uMS6pNybW25AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNDI4ZDhmNi1jMjk2LTQ2OTUtYmVjMi0zNzM2 ODg4NmY0ZmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwEANAwQA xhGLMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAB/cCRpv1JhKK1n5g/x+3ukGw1v6j7N8M+wYlsq2W7hSv1CM JhkOOWM05XxeMxV1SUBVNfP6n63arxy1a8+ZgpMEk2jR5XK2/NMU694a8TthC1Af WbCxAR6P8D62wFlXnWOKl/JplpTWhueADUwVJM5OjuWtUzEMuTzbksUozdhnymNu gATwWQpH9aSeMMkv6Eg2Wn6Kw+SnUH0m/9xhs0rWd2sHPs/q6fQG+1LIjOjTWeM8 m5FVL4EEUiY0vdjE9BkiJxiFFi2zftApzLyxTnZiSbZUL2svGHWRPoiCW5UX3T0v 2/AR5qRUKnpNvi4hb/JvgKmSUlspubkPaBOEZco= -----END CERTIFICATE-----Generated at Wed Sep 23 13:35:50 2026 by rpki-client