$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/d59b8c12-a1e4-38bb-857d-ea78ed3a3193.roa File: d59b8c12-a1e4-38bb-857d-ea78ed3a3193.roa (raw, json) Hash identifier: zFMXhbWdePfIpJI0Q0FZdI2tqdp5KIfBzGqO8F+DDQM= Subject key identifier: 12:4A:76:0C:F6:C8:72:06:59:FF:A5:F1:81:B6:4E:21:0C:99:47:FB Certificate issuer: /CN=4adc9f42-8201-4af2-a3c2-223d1e2687a2 Certificate serial: 010D0C9F4328584F20F7AC10CA6FE55181281680 Authority key identifier: E1:BB:68:98:83:73:DF:25:58:58:CF:EB:46:41:A0:01:FC:61:3D:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/d59b8c12-a1e4-38bb-857d-ea78ed3a3193.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 192.64.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:ac:10:ca:6f:e5:51:81:28:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4adc9f42-8201-4af2-a3c2-223d1e2687a2 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=622a2b59-22b0-44fb-9d3a-9ecc68e9cc3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c0:f8:9d:9d:99:bf:35:ca:a5:e0:c9:66:74: 2c:88:ab:ca:c8:d0:f8:30:80:38:b0:cd:a9:c3:8f: ca:52:54:1f:37:94:8c:f2:8f:c8:1c:7f:f7:1d:dc: 93:ea:ca:2a:19:b1:7d:19:1d:46:fc:45:eb:56:7a: 4d:df:14:33:0d:9e:89:f2:4e:2d:65:f0:e3:ea:81: 06:8a:25:46:d0:37:d3:f3:c2:f4:d8:c2:92:b2:93: 54:2d:13:05:53:6f:04:d3:56:75:d6:24:73:0a:d0: 20:7b:d7:15:bb:0f:41:56:f7:23:a5:6b:79:16:55: 5d:84:db:40:64:85:ef:11:9a:da:78:d0:97:70:29: 25:53:be:87:34:8b:99:91:a6:b3:61:8b:27:83:97: 50:c9:fc:bc:6d:f3:02:4a:37:96:29:34:20:18:c4: 21:0b:13:36:69:bb:95:56:c6:b1:c1:19:0a:63:8b: 26:3f:75:9d:ba:95:f8:da:b6:59:3a:86:66:5a:a7: 82:f2:72:df:20:f5:8d:03:30:4f:23:67:e9:2c:37: fb:af:dc:96:59:ab:9b:89:9b:44:79:58:db:33:e8: cc:dc:78:85:16:26:47:02:ad:15:52:f8:15:07:9b: 43:9b:af:ea:42:c8:be:2c:ca:7b:29:ae:de:7b:e8: 26:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:4A:76:0C:F6:C8:72:06:59:FF:A5:F1:81:B6:4E:21:0C:99:47:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/d59b8c12-a1e4-38bb-857d-ea78ed3a3193.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.crl X509v3 Authority Key Identifier: keyid:E1:BB:68:98:83:73:DF:25:58:58:CF:EB:46:41:A0:01:FC:61:3D:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer sbgp-ipAddrBlock: critical IPv4: 192.64.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:52:8c:9a:1e:54:38:70:90:e7:e5:cd:22:84:8e:e6:3a:0d: ac:4d:c9:86:18:24:ce:2e:7e:54:98:e4:fd:25:c8:94:ac:47: 59:89:77:23:18:ea:4e:2e:26:9a:72:49:b7:25:ed:84:6a:fe: 7b:46:9a:b2:e7:9b:2f:37:79:10:b9:79:f0:40:13:d0:14:30: 04:c8:9c:d7:53:5f:06:d0:99:88:19:62:11:52:15:8c:15:f0: b4:53:8f:51:2f:d5:7b:0d:e4:61:97:b9:cd:48:3c:be:fe:c7: 61:c1:3c:b7:c7:6c:92:0c:e6:f1:46:17:0c:c2:fe:cc:80:41: 37:b8:49:af:2f:ea:95:9d:95:5f:1d:01:25:6d:3d:a9:ba:d9: 09:9f:51:2e:e0:f0:19:1e:86:40:7d:6a:83:d1:4c:44:9f:12: d9:5c:08:e4:60:b8:7a:7a:bc:6f:99:a9:c6:98:69:60:62:22: 88:a7:85:35:14:be:35:26:b4:6a:09:9d:7e:3f:83:a8:2c:ca: ce:7b:43:de:77:45:b0:dc:07:ed:5b:ab:27:b7:86:63:c5:e1: 84:3c:22:cc:3b:6c:bc:51:f6:99:a8:70:cd:72:dc:b6:68:da: 06:00:b5:e1:75:9c:1e:47:27:46:7b:66:b9:91:65:30:73:87: c7:11:6b:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96wQym/lUYEoFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFkYzlmNDItODIwMS00YWYyLWEzYzItMjIzZDFlMjY4 N2EyMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NjIyYTJiNTktMjJiMC00NGZiLTlkM2EtOWVjYzY4ZTljYzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8D4nZ2ZvzXKpeDJZnQsiKvKyND4MIA4sM2p w4/KUlQfN5SM8o/IHH/3HdyT6soqGbF9GR1G/EXrVnpN3xQzDZ6J8k4tZfDj6oEG iiVG0DfT88L02MKSspNULRMFU28E01Z11iRzCtAge9cVuw9BVvcjpWt5FlVdhNtA ZIXvEZraeNCXcCklU76HNIuZkaazYYsng5dQyfy8bfMCSjeWKTQgGMQhCxM2abuV VsaxwRkKY4smP3WdupX42rZZOoZmWqeC8nLfIPWNAzBPI2fpLDf7r9yWWaubiZtE eVjbM+jM3HiFFiZHAq0VUvgVB5tDm6/qQsi+LMp7Ka7ee+gmswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJKdgz2yHIGWf+l8YG2TiEMmUf7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YWRj OWY0Mi04MjAxLTRhZjItYTNjMi0yMjNkMWUyNjg3YTIvZDU5YjhjMTItYTFlNC0z OGJiLTg1N2QtZWE3OGVkM2EzMTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGFkYzlmNDItODIwMS00YWYyLWEz YzItMjIzZDFlMjY4N2EyLzRhZGM5ZjQyLTgyMDEtNGFmMi1hM2MyLTIyM2QxZTI2 ODdhMi5jcmwwHwYDVR0jBBgwFoAU4btomINz3yVYWM/rRkGgAfxhPV8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YWRjOWY0Mi04MjAxLTRhZjItYTNjMi0yMjNk MWUyNjg3YTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEBHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBSjJoeVDhwkOflzSKEjuY6DaxNyYYYJM4uflSY5P0lyJSsR1mJdyMY 6k4uJppySbcl7YRq/ntGmrLnmy83eRC5efBAE9AUMATInNdTXwbQmYgZYhFSFYwV 8LRTj1Ev1XsN5GGXuc1IPL7+x2HBPLfHbJIM5vFGFwzC/syAQTe4Sa8v6pWdlV8d ASVtPam62QmfUS7g8BkehkB9aoPRTESfEtlcCORguHp6vG+ZqcaYaWBiIoinhTUU vjUmtGoJnX4/g6gsys57Q953RbDcB+1bqye3hmPF4YQ8Isw7bLxR9pmocM1y3LZo 2gYAteF1nB5HJ0Z7ZrmRZTBzh8cRa0Y= -----END CERTIFICATE-----Generated at Sat Oct 3 23:20:06 2026 by rpki-client