$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/c6dfd44e-12b4-3531-849b-f2893fe1f88e.roa File: c6dfd44e-12b4-3531-849b-f2893fe1f88e.roa (raw, json) Hash identifier: H0h60BsNCj+aHWkDAzP13amuhpXykYbqSl8saWJ3iec= Subject key identifier: BC:85:61:45:7E:29:85:31:E1:68:E3:8A:66:CB:9B:6A:64:D1:18:35 Certificate issuer: /CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50 Certificate serial: 010D0C9F4328584F1B62547E01DA890E953AEC00 Authority key identifier: 39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/c6dfd44e-12b4-3531-849b-f2893fe1f88e.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 33164 IP address blocks: 194.61.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:54:7e:01:da:89:0e:95:3a:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50 Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=e230afc2-5e1e-4d83-af2c-9b51270608b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:31:dd:b9:ae:3b:6b:16:ae:78:e8:d0:83:47: ce:4f:91:38:8f:ce:0c:df:82:f1:fe:7f:8b:ca:1f: ed:aa:6e:11:8a:3f:ad:10:16:c8:03:49:b7:dc:58: 50:ae:0b:e3:f5:72:46:f2:ab:e9:4b:be:18:75:93: ab:53:b8:f8:77:55:3e:75:b2:e2:04:f6:fe:6e:bd: f1:7d:32:fe:42:08:1a:9e:e0:44:b8:ae:d5:81:4c: 81:d4:a4:fa:7e:d3:19:e7:b4:ba:eb:6b:db:14:0b: 17:40:54:96:f5:7b:3b:13:4d:d3:9e:2a:92:f4:aa: 35:9e:a7:cf:8f:80:15:e9:71:02:7b:48:e9:e5:b5: 22:4d:a8:43:50:ee:54:5a:3f:10:8d:1d:5a:61:f2: 97:77:47:36:8d:aa:e8:62:86:0f:d1:3e:ef:be:61: 08:05:ca:c3:1a:5a:7e:98:b2:ee:b8:fc:bd:52:fe: 8e:bb:1a:42:4f:1c:d4:8a:f7:9f:67:f3:ff:c8:38: 4b:00:29:97:f0:50:d6:ce:51:bb:47:d3:68:19:06: ac:2a:72:90:b5:f1:17:33:6d:3a:c5:c1:32:c3:35: dd:9c:17:44:a7:6a:12:f8:d9:26:02:4c:a3:95:74: 2b:f8:1f:87:8c:39:b5:15:02:c8:6a:cd:8c:f0:e3: cf:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:85:61:45:7E:29:85:31:E1:68:E3:8A:66:CB:9B:6A:64:D1:18:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/c6dfd44e-12b4-3531-849b-f2893fe1f88e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl X509v3 Authority Key Identifier: keyid:39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer sbgp-ipAddrBlock: critical IPv4: 194.61.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:21:8f:e3:c9:2f:07:80:54:fd:9f:ec:5f:86:95:61:67:00: ab:8d:04:46:9e:6e:98:24:a4:8e:dc:96:e8:2e:05:81:d1:da: fe:be:35:c2:ee:9a:a9:03:da:d7:61:bf:b7:a4:2c:57:df:ac: 81:a0:88:e2:36:0a:8e:ad:72:dc:64:d4:d7:ce:76:78:90:00: 52:5b:f0:07:1f:88:b3:47:79:45:ed:0f:ec:33:c7:72:6a:51: a2:03:d2:97:e5:bb:76:e8:ba:25:81:1b:9c:61:64:3c:3b:d9: b7:40:ec:d5:df:ff:66:79:2a:1f:16:dc:67:ba:d5:62:ae:9c: bc:94:e1:70:1b:06:9b:07:52:cf:d3:96:a1:b3:8a:e8:e2:ac: 82:12:8f:c6:44:07:ec:bd:a6:78:fd:be:92:fe:7e:6f:ad:9d: 7d:e9:92:8c:ba:98:d5:6c:b0:ef:64:25:fb:d4:ce:22:b3:7d: 67:eb:dd:ef:20:52:4e:40:20:3d:6a:cd:bf:1a:e9:c5:39:2f: 29:73:00:66:ac:43:76:ca:a2:45:51:5e:67:95:12:45:34:ec: f9:fe:67:a6:07:2b:bc:c3:42:07:be:01:40:09:a0:4e:d7:9b: 1e:32:b1:27:bd:0c:80:1e:65:81:ca:10:7d:dc:29:90:f4:7f: 7e:64:39:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYlR+AdqJDpU67AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQyZWY5OWMtYzAwYy00MzFiLTg1MTktY2FiYjlkMmE0 ZDUwMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk ZTIzMGFmYzItNWUxZS00ZDgzLWFmMmMtOWI1MTI3MDYwOGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDHdua47axaueOjQg0fOT5E4j84M34Lx/n+L yh/tqm4Rij+tEBbIA0m33FhQrgvj9XJG8qvpS74YdZOrU7j4d1U+dbLiBPb+br3x fTL+QgganuBEuK7VgUyB1KT6ftMZ57S662vbFAsXQFSW9Xs7E03TniqS9Ko1nqfP j4AV6XECe0jp5bUiTahDUO5UWj8QjR1aYfKXd0c2jaroYoYP0T7vvmEIBcrDGlp+ mLLuuPy9Uv6OuxpCTxzUivefZ/P/yDhLACmX8FDWzlG7R9NoGQasKnKQtfEXM206 xcEywzXdnBdEp2oS+NkmAkyjlXQr+B+HjDm1FQLIas2M8OPPHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLyFYUV+KYUx4WjjimbLm2pk0Rg1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mZDJl Zjk5Yy1jMDBjLTQzMWItODUxOS1jYWJiOWQyYTRkNTAvYzZkZmQ0NGUtMTJiNC0z NTMxLTg0OWItZjI4OTNmZTFmODhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZmQyZWY5OWMtYzAwYy00MzFiLTg1 MTktY2FiYjlkMmE0ZDUwL2ZkMmVmOTljLWMwMGMtNDMxYi04NTE5LWNhYmI5ZDJh NGQ1MC5jcmwwHwYDVR0jBBgwFoAUOQF+i31ACX9kDx3DLqvfnnmLytUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mZDJlZjk5Yy1jMDBjLTQzMWItODUxOS1jYWJi OWQyYTRkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwj2cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQhj+PJLweAVP2f7F+GlWFnAKuNBEaebpgkpI7cluguBYHR2v6+NcLu mqkD2tdhv7ekLFffrIGgiOI2Co6tctxk1NfOdniQAFJb8AcfiLNHeUXtD+wzx3Jq UaID0pflu3bouiWBG5xhZDw72bdA7NXf/2Z5Kh8W3Ge61WKunLyU4XAbBpsHUs/T lqGziujirIISj8ZEB+y9pnj9vpL+fm+tnX3pkoy6mNVssO9kJfvUziKzfWfr3e8g Uk5AID1qzb8a6cU5LylzAGasQ3bKokVRXmeVEkU07Pn+Z6YHK7zDQge+AUAJoE7X mx4ysSe9DIAeZYHKEH3cKZD0f35kOfg= -----END CERTIFICATE-----Generated at Wed Sep 23 21:22:21 2026 by rpki-client