$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dfb066c3-6f23-4900-8595-27446299d106/9c7b555e-afd9-3b05-92d0-a737c605c7f4.roa File: 9c7b555e-afd9-3b05-92d0-a737c605c7f4.roa (raw, json) Hash identifier: Ak+tGH3n54YmA+7Klli1Zm0MB4fV8W+83VLbThtfWn8= Subject key identifier: AF:B5:25:27:83:AA:4E:A4:37:EC:AA:8D:CB:F4:00:18:34:92:C5:55 Certificate issuer: /CN=dfb066c3-6f23-4900-8595-27446299d106 Certificate serial: 010D0C9F4328584F497297CE91DB6B49458B1B80 Authority key identifier: D1:CF:42:2C:11:AF:42:C2:34:C3:04:08:96:E8:4E:59:34:F5:3B:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dfb066c3-6f23-4900-8595-27446299d106.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dfb066c3-6f23-4900-8595-27446299d106/9c7b555e-afd9-3b05-92d0-a737c605c7f4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16276 IP address blocks: 192.65.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dfb066c3-6f23-4900-8595-27446299d106/dfb066c3-6f23-4900-8595-27446299d106.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dfb066c3-6f23-4900-8595-27446299d106/dfb066c3-6f23-4900-8595-27446299d106.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dfb066c3-6f23-4900-8595-27446299d106.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:97:ce:91:db:6b:49:45:8b:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfb066c3-6f23-4900-8595-27446299d106 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f71d34cc-00d1-44a3-8ed8-a55c0ce6bf46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a7:fd:71:77:75:f8:3d:84:84:82:d7:b5:8e: c5:fe:09:ee:20:6a:9c:a8:33:17:29:ac:bd:91:5d: f2:59:42:87:4b:75:31:ac:a1:5a:6e:20:52:2c:a9: 00:a6:4f:8b:4a:1c:77:19:1a:60:65:b2:7f:21:a6: 70:6e:bf:23:7c:56:4c:28:23:cf:a9:0d:ce:76:90: dd:ec:bd:5b:1f:2f:2c:de:a8:1f:2c:0f:e2:16:d9: b0:e1:cb:49:60:dd:08:73:e7:96:75:bd:c5:b1:60: f9:0c:df:5f:4f:63:c6:77:f1:cd:dc:28:e0:03:3c: 66:af:cc:da:2f:89:db:93:77:3a:1d:b8:53:e0:3f: c3:2a:4b:fd:18:89:f3:b2:14:49:97:5a:e1:22:26: 76:ff:c0:e4:ee:93:89:99:12:18:5a:52:8e:11:3b: 3a:16:01:04:2d:67:d2:ee:21:57:6d:d9:8e:64:11: 47:5c:4e:87:ad:52:50:d1:bf:32:16:24:35:06:61: 63:3e:50:fe:01:2a:df:98:86:04:20:37:a5:7e:7f: 5d:f4:01:de:cc:23:1d:99:ae:b2:11:c2:bd:14:c9: ee:f1:4b:aa:e2:af:dc:60:b3:8f:47:96:85:a8:8e: 95:52:df:53:52:43:1d:1b:3f:87:1e:16:4f:07:d8: ff:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B5:25:27:83:AA:4E:A4:37:EC:AA:8D:CB:F4:00:18:34:92:C5:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dfb066c3-6f23-4900-8595-27446299d106/9c7b555e-afd9-3b05-92d0-a737c605c7f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dfb066c3-6f23-4900-8595-27446299d106/dfb066c3-6f23-4900-8595-27446299d106.crl X509v3 Authority Key Identifier: keyid:D1:CF:42:2C:11:AF:42:C2:34:C3:04:08:96:E8:4E:59:34:F5:3B:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dfb066c3-6f23-4900-8595-27446299d106.cer sbgp-ipAddrBlock: critical IPv4: 192.65.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:7a:9c:1f:9e:35:1f:9c:d0:38:54:c6:38:5a:ac:b1:85:26: c1:65:d0:92:26:8b:8d:81:16:00:f7:e2:5d:78:8e:6d:d4:93: 9c:d3:99:7e:57:7e:f3:14:2d:fc:47:13:3b:2d:7e:fd:c4:a8: f2:51:ca:27:c0:ba:a2:40:ca:3c:61:19:ef:a4:05:e6:b6:da: 76:a3:93:ad:cc:5a:1b:b3:bf:cd:78:44:be:2c:da:f1:25:53: fc:2d:d0:ed:15:6a:b2:54:39:94:00:6f:f2:90:53:6c:73:dd: d4:25:95:48:a9:b1:a0:34:96:3d:7c:e2:3d:81:a9:1a:68:b7: ba:c9:d2:6e:e3:4a:8f:62:50:19:69:ba:1b:0f:98:44:74:cb: 0e:fc:4f:69:c9:1b:7f:f6:c1:17:68:0c:3a:3b:db:7f:92:a3: 1e:6c:77:20:a8:0d:25:51:bc:86:08:55:81:06:25:89:29:66: b2:4d:88:ad:6f:82:88:68:7b:e6:32:92:99:0b:73:98:5e:eb: 94:a3:e3:6f:66:ec:a8:b2:d0:24:1d:a5:ca:e2:38:c9:f9:63: ec:8a:a6:9f:54:57:02:42:59:78:5e:7b:ca:c7:86:c9:bd:88: da:f9:bb:56:be:20:2a:b6:db:e0:ab:a2:fd:44:14:fc:5d:c9: d7:1a:fd:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcpfOkdtrSUWLG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZiMDY2YzMtNmYyMy00OTAwLTg1OTUtMjc0NDYyOTlk MTA2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjcxZDM0Y2MtMDBkMS00NGEzLThlZDgtYTU1YzBjZTZiZjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKf9cXd1+D2EhILXtY7F/gnuIGqcqDMXKay9 kV3yWUKHS3UxrKFabiBSLKkApk+LShx3GRpgZbJ/IaZwbr8jfFZMKCPPqQ3OdpDd 7L1bHy8s3qgfLA/iFtmw4ctJYN0Ic+eWdb3FsWD5DN9fT2PGd/HN3CjgAzxmr8za L4nbk3c6HbhT4D/DKkv9GInzshRJl1rhIiZ2/8Dk7pOJmRIYWlKOETs6FgEELWfS 7iFXbdmOZBFHXE6HrVJQ0b8yFiQ1BmFjPlD+ASrfmIYEIDelfn9d9AHezCMdma6y EcK9FMnu8Uuq4q/cYLOPR5aFqI6VUt9TUkMdGz+HHhZPB9j/rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+1JSeDqk6kN+yqjcv0ABg0ksVVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZmIw NjZjMy02ZjIzLTQ5MDAtODU5NS0yNzQ0NjI5OWQxMDYvOWM3YjU1NWUtYWZkOS0z YjA1LTkyZDAtYTczN2M2MDVjN2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZGZiMDY2YzMtNmYyMy00OTAwLTg1 OTUtMjc0NDYyOTlkMTA2L2RmYjA2NmMzLTZmMjMtNDkwMC04NTk1LTI3NDQ2Mjk5 ZDEwNi5jcmwwHwYDVR0jBBgwFoAU0c9CLBGvQsI0wwQIluhOWTT1OxUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZmIwNjZjMy02ZjIzLTQ5MDAtODU5NS0yNzQ0 NjI5OWQxMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwEEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFR6nB+eNR+c0DhUxjharLGFJsFl0JImi42BFgD34l14jm3Uk5zTmX5X fvMULfxHEzstfv3EqPJRyifAuqJAyjxhGe+kBea22najk63MWhuzv814RL4s2vEl U/wt0O0VarJUOZQAb/KQU2xz3dQllUipsaA0lj184j2BqRpot7rJ0m7jSo9iUBlp uhsPmER0yw78T2nJG3/2wRdoDDo723+Sox5sdyCoDSVRvIYIVYEGJYkpZrJNiK1v gohoe+YykpkLc5he65Sj429m7Kiy0CQdpcriOMn5Y+yKpp9UVwJCWXhee8rHhsm9 iNr5u1a+ICq22+Crov1EFPxdydca/U4= -----END CERTIFICATE-----Generated at Thu Oct 8 15:38:16 2026 by rpki-client