$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9/a3882998-b194-316e-bc7e-431a28b0b577.roa File: a3882998-b194-316e-bc7e-431a28b0b577.roa (raw, json) Hash identifier: sJfjxaNGDn4OH9n03sB3jqoP1UwnQ2a4ZQLv1SRSW78= Subject key identifier: 01:B6:DF:03:F8:CE:66:38:D0:CB:B8:61:D5:35:33:40:2F:BA:2C:7C Certificate issuer: /CN=f9bc2011-5153-496f-bab6-66966f6f0df9 Certificate serial: 010D0C9F4328584F130248A669BF5ABC248A7080 Authority key identifier: 10:17:1F:F6:98:19:30:73:51:1B:32:CA:14:5D:C7:14:FD:FC:02:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9/a3882998-b194-316e-bc7e-431a28b0b577.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 192.231.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9/f9bc2011-5153-496f-bab6-66966f6f0df9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9/f9bc2011-5153-496f-bab6-66966f6f0df9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:48:a6:69:bf:5a:bc:24:8a:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9bc2011-5153-496f-bab6-66966f6f0df9 Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=3033f86a-b566-4c0f-b029-5ba437584009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fa:db:cf:a2:0b:30:3a:7b:a8:e9:21:51:73: 42:73:24:73:ec:90:ef:fd:6e:21:64:ca:a2:24:64: 39:dd:28:18:28:2d:0a:d4:fc:89:fe:45:d3:f8:f1: cd:0b:d2:05:c7:53:c7:14:9b:48:e0:8f:b2:b9:85: 92:42:46:67:15:46:5b:ae:58:c8:c7:fe:6c:c8:3b: a7:52:46:ae:43:db:fc:1e:27:1f:14:2d:5e:b2:02: 00:17:3b:3f:68:43:7d:e4:c8:0f:50:55:e1:5a:d6: 11:1e:a5:24:8c:7e:5b:a3:23:68:08:88:94:8e:38: 6c:3a:40:64:43:d5:ae:3b:f7:55:e4:67:7a:69:ae: ac:c2:77:d5:63:dc:1a:aa:6a:52:79:7b:9f:3f:a9: f9:0f:1c:68:9f:50:ea:c6:0d:d9:ef:cb:22:87:4c: 0e:65:d0:d5:b1:11:08:db:9f:17:61:ba:dc:f5:e3: c1:cd:e5:8b:e5:ca:5e:bc:03:27:74:1c:ea:df:6f: 18:5c:87:da:1b:c5:4b:6b:43:f5:f0:7e:e5:27:4e: 16:c6:8e:05:01:fc:8a:f2:21:34:a0:60:b0:02:e1: 0f:0f:7e:a1:3e:35:0b:8c:73:93:14:64:cc:30:5f: d7:dd:b7:be:24:dc:a6:3d:5a:2d:0e:7b:f6:08:6c: 78:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B6:DF:03:F8:CE:66:38:D0:CB:B8:61:D5:35:33:40:2F:BA:2C:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9/a3882998-b194-316e-bc7e-431a28b0b577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9/f9bc2011-5153-496f-bab6-66966f6f0df9.crl X509v3 Authority Key Identifier: keyid:10:17:1F:F6:98:19:30:73:51:1B:32:CA:14:5D:C7:14:FD:FC:02:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9.cer sbgp-ipAddrBlock: critical IPv4: 192.231.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:c7:3e:fe:e0:23:33:b0:c7:6f:4b:34:90:7d:87:77:48:39: 7d:01:fd:1b:47:2c:79:49:80:7a:ab:8f:ca:75:0c:fb:3c:f9: 4b:ad:19:98:5a:2c:cb:d5:8c:2d:36:ec:b0:9b:58:e8:36:19: 31:59:3a:95:0f:70:17:86:5c:9b:4c:9b:42:d4:6c:19:12:be: be:2e:de:4e:c0:ed:6f:44:d9:2e:af:1a:17:7f:2f:49:62:30: 5b:7d:29:d7:d2:e5:34:0d:e8:94:4b:41:8d:f3:38:33:31:3a: 10:4e:9d:0f:68:aa:1e:eb:73:72:40:87:05:0d:ad:6d:af:c6: b4:0a:10:44:16:2e:32:77:14:db:f5:72:75:32:80:0f:e9:47: 0f:3b:21:f8:68:23:69:89:f8:cf:52:e7:1e:ef:64:7e:c0:78: b6:45:ce:cf:9e:9b:e5:0d:5b:04:33:4c:3b:c5:0f:98:73:cb: e1:23:5a:a9:32:13:3f:5a:fe:11:0e:31:12:09:d5:52:fa:6a: 8a:93:4d:89:a5:dc:ad:ca:06:eb:30:96:1d:c4:3f:fc:a3:9d: 96:e3:aa:f4:6d:c1:13:58:1e:be:39:58:4c:bc:26:3f:ea:68: 6b:45:e3:83:7a:f3:22:97:f3:32:08:f6:e3:18:7a:f4:93:63: 2f:27:a9:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAkimab9avCSKcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjliYzIwMTEtNTE1My00OTZmLWJhYjYtNjY5NjZmNmYw ZGY5MB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk MzAzM2Y4NmEtYjU2Ni00YzBmLWIwMjktNWJhNDM3NTg0MDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/rbz6ILMDp7qOkhUXNCcyRz7JDv/W4hZMqi JGQ53SgYKC0K1PyJ/kXT+PHNC9IFx1PHFJtI4I+yuYWSQkZnFUZbrljIx/5syDun UkauQ9v8HicfFC1esgIAFzs/aEN95MgPUFXhWtYRHqUkjH5boyNoCIiUjjhsOkBk Q9WuO/dV5Gd6aa6swnfVY9waqmpSeXufP6n5Dxxon1Dqxg3Z78sih0wOZdDVsREI 258XYbrc9ePBzeWL5cpevAMndBzq328YXIfaG8VLa0P18H7lJ04Wxo4FAfyK8iE0 oGCwAuEPD36hPjULjHOTFGTMMF/X3be+JNymPVotDnv2CGx4BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAG23wP4zmY40Mu4YdU1M0Avuix8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9mOWJj MjAxMS01MTUzLTQ5NmYtYmFiNi02Njk2NmY2ZjBkZjkvYTM4ODI5OTgtYjE5NC0z MTZlLWJjN2UtNDMxYTI4YjBiNTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZjliYzIwMTEtNTE1My00OTZmLWJh YjYtNjY5NjZmNmYwZGY5L2Y5YmMyMDExLTUxNTMtNDk2Zi1iYWI2LTY2OTY2ZjZm MGRmOS5jcmwwHwYDVR0jBBgwFoAUEBcf9pgZMHNRGzLKFF3HFP38AqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9mOWJjMjAxMS01MTUzLTQ5NmYtYmFiNi02Njk2 NmY2ZjBkZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOeFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbHPv7gIzOwx29LNJB9h3dIOX0B/RtHLHlJgHqrj8p1DPs8+UutGZha LMvVjC027LCbWOg2GTFZOpUPcBeGXJtMm0LUbBkSvr4u3k7A7W9E2S6vGhd/L0li MFt9KdfS5TQN6JRLQY3zODMxOhBOnQ9oqh7rc3JAhwUNrW2vxrQKEEQWLjJ3FNv1 cnUygA/pRw87IfhoI2mJ+M9S5x7vZH7AeLZFzs+em+UNWwQzTDvFD5hzy+EjWqky Ez9a/hEOMRIJ1VL6aoqTTYml3K3KBuswlh3EP/yjnZbjqvRtwRNYHr45WEy8Jj/q aGtF44N68yKX8zII9uMYevSTYy8nqdE= -----END CERTIFICATE-----Generated at Sat Sep 26 03:09:17 2026 by rpki-client