$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9/a4ce0d6d-793f-3986-b737-4371a5b0baf3.roa File: a4ce0d6d-793f-3986-b737-4371a5b0baf3.roa (raw, json) Hash identifier: +aLZ0Mfy3TFT4Y8ifc0ClGtRv/+Rix8MpLbaKNr3lMI= Subject key identifier: D2:14:07:0E:BE:06:5C:5D:B3:A7:FE:2F:C2:37:14:B3:9C:3D:35:E8 Certificate issuer: /CN=f9bc2011-5153-496f-bab6-66966f6f0df9 Certificate serial: 010D0C9F4328584FB50BAAE58A5369B6E4ABEF80 Authority key identifier: 10:17:1F:F6:98:19:30:73:51:1B:32:CA:14:5D:C7:14:FD:FC:02:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9/a4ce0d6d-793f-3986-b737-4371a5b0baf3.roa Signing time: Mon 02 Nov 2026 14:00:14 +0000 ROA not before: Mon 02 Nov 2026 14:00:14 +0000 ROA not after: Sun 31 Jan 2027 14:00:14 +0000 asID: 14618 IP address blocks: 192.231.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9/f9bc2011-5153-496f-bab6-66966f6f0df9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9/f9bc2011-5153-496f-bab6-66966f6f0df9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b5:0b:aa:e5:8a:53:69:b6:e4:ab:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9bc2011-5153-496f-bab6-66966f6f0df9 Validity Not Before: Nov 2 14:00:14 2026 GMT Not After : Jan 31 14:00:14 2027 GMT Subject: CN=abf9a061-069b-424d-8a4a-a35c571486c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:88:c0:c0:28:e3:e3:2b:b5:6e:0d:f6:97:fa: 4b:af:e2:db:b0:0d:5a:ba:5c:62:ea:a2:9f:63:a1: a1:6d:19:40:e1:85:ac:e5:4c:72:e2:22:5d:e6:a4: 67:72:6d:69:16:64:c1:e1:6d:5c:ca:74:9a:af:42: 41:1c:07:d7:a5:87:95:e5:84:6b:6c:2d:60:19:6b: 58:42:65:da:76:b5:32:9a:35:56:5e:e6:38:09:3f: a7:be:a8:20:07:6a:78:64:ff:48:85:f2:c5:d3:13: a0:f5:a2:16:1b:56:a4:90:dd:63:52:d5:e3:fe:67: 28:0f:fe:2a:8f:84:dc:11:85:f8:6c:92:17:88:e0: 99:95:e0:7d:a1:1e:0e:2d:26:0e:42:16:f7:ff:16: 9a:cf:0d:24:22:62:b1:74:2d:a4:d0:10:de:fc:2f: 81:3c:18:c9:58:da:d4:9a:5a:d9:34:54:45:3f:d4: 8f:2e:5c:1d:84:3d:2e:a0:2e:d4:33:1d:67:09:64: 3e:ab:76:3d:5b:c0:1d:eb:64:be:df:e5:aa:f0:5d: 41:a7:5c:51:4d:78:de:37:7c:b3:e2:d6:e6:d8:81: 27:a8:3e:17:6c:41:ae:2f:da:d3:84:d1:6c:db:e6: 94:c8:e2:c8:0d:e7:99:f6:91:c5:5a:0e:0d:85:34: 95:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:14:07:0E:BE:06:5C:5D:B3:A7:FE:2F:C2:37:14:B3:9C:3D:35:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9/a4ce0d6d-793f-3986-b737-4371a5b0baf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9/f9bc2011-5153-496f-bab6-66966f6f0df9.crl X509v3 Authority Key Identifier: keyid:10:17:1F:F6:98:19:30:73:51:1B:32:CA:14:5D:C7:14:FD:FC:02:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9.cer sbgp-ipAddrBlock: critical IPv4: 192.231.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:bc:34:99:2b:9a:46:a6:07:50:25:ac:5c:3b:ac:8a:53:db: 69:ff:c5:49:24:cb:3d:8e:cc:ce:a4:e8:f1:6d:5f:71:40:8e: 50:c0:40:b2:4a:80:13:7e:e0:8a:1b:90:82:2c:ae:81:b4:dd: b6:06:be:0f:0f:9a:31:ff:a3:d0:25:dc:a7:f8:dc:a9:e2:be: bd:24:72:c4:a4:53:91:c6:b4:f6:80:8c:9b:5f:42:e3:38:29: a7:a1:36:af:cc:69:69:f8:89:ce:8c:bd:98:06:74:d6:7b:66: 5e:62:ff:a9:ce:1b:d7:17:c0:09:6a:f1:84:cf:9f:86:cf:0d: 82:1f:2e:85:6a:05:27:1b:94:d0:7e:af:00:e0:32:13:5c:de: bc:e7:a3:41:60:ca:d1:2c:b9:b8:80:ed:6a:da:53:39:72:b6: 28:bd:96:84:6c:78:c6:1b:3e:4e:a1:40:ad:44:4d:09:0b:eb: e5:da:2c:19:e6:9e:8d:b9:0a:38:6e:1a:88:1c:6f:fe:26:e7: 0a:86:ce:e9:c0:fa:db:99:96:7a:c0:0b:a6:2d:bf:37:4e:d8: ef:ee:46:c3:95:92:ce:bc:52:97:19:9c:6e:d4:31:f8:b3:d0: 4f:70:d9:51:2a:f8:cb:b5:16:d7:20:18:03:6f:0d:ef:83:89: 23:a9:8a:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+1C6rlilNptuSr74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjliYzIwMTEtNTE1My00OTZmLWJhYjYtNjY5NjZmNmYw ZGY5MB4XDTI2MTEwMjE0MDAxNFoXDTI3MDEzMTE0MDAxNFowLzEtMCsGA1UEAxMk YWJmOWEwNjEtMDY5Yi00MjRkLThhNGEtYTM1YzU3MTQ4NmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4jAwCjj4yu1bg32l/pLr+LbsA1aulxi6qKf Y6GhbRlA4YWs5Uxy4iJd5qRncm1pFmTB4W1cynSar0JBHAfXpYeV5YRrbC1gGWtY QmXadrUymjVWXuY4CT+nvqggB2p4ZP9IhfLF0xOg9aIWG1akkN1jUtXj/mcoD/4q j4TcEYX4bJIXiOCZleB9oR4OLSYOQhb3/xaazw0kImKxdC2k0BDe/C+BPBjJWNrU mlrZNFRFP9SPLlwdhD0uoC7UMx1nCWQ+q3Y9W8Ad62S+3+Wq8F1Bp1xRTXjeN3yz 4tbm2IEnqD4XbEGuL9rThNFs2+aUyOLIDeeZ9pHFWg4NhTSV6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIUBw6+Blxds6f+L8I3FLOcPTXoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9mOWJj MjAxMS01MTUzLTQ5NmYtYmFiNi02Njk2NmY2ZjBkZjkvYTRjZTBkNmQtNzkzZi0z OTg2LWI3MzctNDM3MWE1YjBiYWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZjliYzIwMTEtNTE1My00OTZmLWJh YjYtNjY5NjZmNmYwZGY5L2Y5YmMyMDExLTUxNTMtNDk2Zi1iYWI2LTY2OTY2ZjZm MGRmOS5jcmwwHwYDVR0jBBgwFoAUEBcf9pgZMHNRGzLKFF3HFP38AqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9mOWJjMjAxMS01MTUzLTQ5NmYtYmFiNi02Njk2 NmY2ZjBkZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOeFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKS8NJkrmkamB1AlrFw7rIpT22n/xUkkyz2OzM6k6PFtX3FAjlDAQLJK gBN+4IobkIIsroG03bYGvg8PmjH/o9Al3Kf43Knivr0kcsSkU5HGtPaAjJtfQuM4 KaehNq/MaWn4ic6MvZgGdNZ7Zl5i/6nOG9cXwAlq8YTPn4bPDYIfLoVqBScblNB+ rwDgMhNc3rzno0FgytEsubiA7WraUzlytii9loRseMYbPk6hQK1ETQkL6+XaLBnm no25CjhuGogcb/4m5wqGzunA+tuZlnrAC6YtvzdO2O/uRsOVks68UpcZnG7UMfiz 0E9w2VEq+Mu1FtcgGANvDe+DiSOpiuQ= -----END CERTIFICATE-----Generated at Thu Nov 5 09:30:42 2026 by rpki-client