$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9/0ff03b56-62f7-366f-bd10-b85204eb6e0c.roa File: 0ff03b56-62f7-366f-bd10-b85204eb6e0c.roa (raw, json) Hash identifier: rX2UZbzzcLN4tQBkkEWsqHp9JiZ44pwibOaQbbArUCs= Subject key identifier: EE:A9:E9:16:D4:7F:3A:BB:39:87:E3:E1:72:F5:C5:4D:19:62:DD:25 Certificate issuer: /CN=f9bc2011-5153-496f-bab6-66966f6f0df9 Certificate serial: 010D0C9F4328584F13023B90C3E945EA3A9A7480 Authority key identifier: 10:17:1F:F6:98:19:30:73:51:1B:32:CA:14:5D:C7:14:FD:FC:02:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9/0ff03b56-62f7-366f-bd10-b85204eb6e0c.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 22328 IP address blocks: 192.231.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9/f9bc2011-5153-496f-bab6-66966f6f0df9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9/f9bc2011-5153-496f-bab6-66966f6f0df9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:3b:90:c3:e9:45:ea:3a:9a:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9bc2011-5153-496f-bab6-66966f6f0df9 Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=1d48835a-551b-4e0b-8886-b664d5f3a994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b2:56:f3:5f:3e:02:78:a8:03:36:6f:5f:2d: 9e:64:96:cc:9a:47:b5:2e:40:67:8d:2e:e8:4c:09: e1:fe:7e:d7:4a:06:67:78:e2:1f:01:73:af:8c:a3: 9b:d2:21:60:a2:e2:e1:26:d3:0d:bb:6d:9c:96:d5: 6c:85:0e:15:85:c5:22:8d:37:26:ca:52:05:b3:d4: 2c:b1:b7:d0:46:cf:7b:e8:fd:e9:99:3b:ae:f3:6c: e3:2a:2e:14:c6:2e:0b:02:33:03:51:ba:78:69:1c: 15:c7:ce:5b:3d:c3:9b:63:04:94:99:c6:f2:03:14: eb:55:ec:99:96:58:eb:01:94:80:c1:32:6d:27:ef: 6e:6d:11:b3:84:b2:e6:d5:6b:ef:be:06:91:d7:12: b8:ce:d8:30:9d:ec:22:84:ee:a9:61:99:ae:14:d1: 82:0c:28:45:35:2a:b8:4a:a0:4b:b5:1d:c0:36:18: cd:1d:ae:b3:b3:db:c5:02:6b:d1:24:46:5d:a4:1c: 8b:24:84:09:96:1e:c7:ed:1e:41:b0:e5:d8:44:a4: 1a:6b:4d:f0:67:9f:06:71:9b:be:64:4b:28:31:55: fe:44:33:7c:9f:7b:55:8a:1e:b2:6e:94:7a:d0:03: 57:c5:dd:26:86:0b:31:32:d9:83:30:fc:c0:2a:af: 61:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A9:E9:16:D4:7F:3A:BB:39:87:E3:E1:72:F5:C5:4D:19:62:DD:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9/0ff03b56-62f7-366f-bd10-b85204eb6e0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9/f9bc2011-5153-496f-bab6-66966f6f0df9.crl X509v3 Authority Key Identifier: keyid:10:17:1F:F6:98:19:30:73:51:1B:32:CA:14:5D:C7:14:FD:FC:02:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9.cer sbgp-ipAddrBlock: critical IPv4: 192.231.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:86:da:03:67:a5:99:64:0a:99:db:a1:ac:14:02:0d:4f:8d: ef:ea:9d:40:4d:9f:75:83:3b:bd:1a:f7:80:7b:08:87:d3:94: 3c:f7:02:d8:1e:ac:5b:6e:be:ed:03:92:82:d6:36:eb:9f:9e: 5a:41:f5:67:ef:33:f0:ef:dc:76:68:32:2a:00:17:51:b3:87: f0:76:7a:51:f6:4f:fa:5d:25:de:35:8d:e6:72:cf:12:67:6d: 44:7e:6b:b6:66:37:19:76:b3:08:a5:04:1e:ac:19:bb:7a:f2: 1e:6d:f9:cc:ef:08:d7:6b:30:69:6d:d5:60:39:67:93:85:65: 92:f8:72:a3:45:0b:b0:cf:7b:e8:d6:2f:c2:d8:06:81:69:a8: 56:28:ef:6f:1f:81:b3:7e:36:34:2f:de:9d:de:8f:a3:33:73: 43:38:74:db:ce:cb:5e:a4:9b:7c:1d:b4:82:48:23:94:29:3a: c6:75:2e:63:11:f0:13:e0:64:3f:c0:81:b3:a1:f2:ae:65:09: e2:d5:3d:68:0c:94:65:b2:12:fe:25:85:26:43:55:b3:91:ce: 0d:04:98:5d:de:52:4d:ca:f5:83:44:ee:c2:04:53:ed:c6:6c: 32:0c:c3:62:f9:83:1f:73:cb:57:97:5f:53:c6:02:23:e3:85: 56:ae:1c:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAjuQw+lF6jqadIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjliYzIwMTEtNTE1My00OTZmLWJhYjYtNjY5NjZmNmYw ZGY5MB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk MWQ0ODgzNWEtNTUxYi00ZTBiLTg4ODYtYjY2NGQ1ZjNhOTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7JW818+AnioAzZvXy2eZJbMmke1LkBnjS7o TAnh/n7XSgZneOIfAXOvjKOb0iFgouLhJtMNu22cltVshQ4VhcUijTcmylIFs9Qs sbfQRs976P3pmTuu82zjKi4Uxi4LAjMDUbp4aRwVx85bPcObYwSUmcbyAxTrVeyZ lljrAZSAwTJtJ+9ubRGzhLLm1WvvvgaR1xK4ztgwnewihO6pYZmuFNGCDChFNSq4 SqBLtR3ANhjNHa6zs9vFAmvRJEZdpByLJIQJlh7H7R5BsOXYRKQaa03wZ58GcZu+ ZEsoMVX+RDN8n3tVih6ybpR60ANXxd0mhgsxMtmDMPzAKq9hRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6p6RbUfzq7OYfj4XL1xU0ZYt0lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9mOWJj MjAxMS01MTUzLTQ5NmYtYmFiNi02Njk2NmY2ZjBkZjkvMGZmMDNiNTYtNjJmNy0z NjZmLWJkMTAtYjg1MjA0ZWI2ZTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZjliYzIwMTEtNTE1My00OTZmLWJh YjYtNjY5NjZmNmYwZGY5L2Y5YmMyMDExLTUxNTMtNDk2Zi1iYWI2LTY2OTY2ZjZm MGRmOS5jcmwwHwYDVR0jBBgwFoAUEBcf9pgZMHNRGzLKFF3HFP38AqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9mOWJjMjAxMS01MTUzLTQ5NmYtYmFiNi02Njk2 NmY2ZjBkZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOeFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWG2gNnpZlkCpnboawUAg1Pje/qnUBNn3WDO70a94B7CIfTlDz3Atge rFtuvu0DkoLWNuufnlpB9WfvM/Dv3HZoMioAF1Gzh/B2elH2T/pdJd41jeZyzxJn bUR+a7ZmNxl2swilBB6sGbt68h5t+czvCNdrMGlt1WA5Z5OFZZL4cqNFC7DPe+jW L8LYBoFpqFYo728fgbN+NjQv3p3ej6Mzc0M4dNvOy16km3wdtIJII5QpOsZ1LmMR 8BPgZD/AgbOh8q5lCeLVPWgMlGWyEv4lhSZDVbORzg0EmF3eUk3K9YNE7sIEU+3G bDIMw2L5gx9zy1eXX1PGAiPjhVauHEY= -----END CERTIFICATE-----Generated at Wed Sep 23 02:28:38 2026 by rpki-client