$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/6bff204f-baf3-3c15-a992-3135c46aad0b.roa File: 6bff204f-baf3-3c15-a992-3135c46aad0b.roa (raw, json) Hash identifier: P0M+0DuLd3Lx677Cm5Y+YhOrmo9jxwuXg9Q5kVeOE2k= Subject key identifier: E0:EB:DF:DA:4D:5C:97:67:2C:C5:6E:31:FF:23:EF:25:DF:02:D0:16 Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Certificate serial: 010D0C9F4328584F4977399547B5D22AFE0C3200 Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/6bff204f-baf3-3c15-a992-3135c46aad0b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40244 IP address blocks: 192.154.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:39:95:47:b5:d2:2a:fe:0c:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0ac8bafa-f775-4364-9b60-b45b9aa3eebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:26:d2:cc:cc:06:6d:e8:f5:97:e3:ca:52:cb: 87:98:d7:84:90:65:e5:73:5c:7d:21:f6:7a:df:c4: a0:89:e3:42:88:13:20:a6:e0:b7:79:c4:ef:6f:33: 37:f5:a2:b2:92:f2:50:8f:00:d2:a0:bb:0c:50:22: 4a:12:4f:7c:8a:3f:e1:2e:70:08:24:52:b7:78:57: 85:36:f9:e5:00:d5:71:d0:5f:ae:2b:62:ad:23:e2: b7:2c:19:dc:f1:87:b0:a0:a0:f3:67:61:be:0c:81: a0:00:13:54:4d:29:47:17:7c:17:1c:9b:41:86:7a: e0:71:f0:69:31:3b:66:9d:bf:59:bc:82:89:42:f2: 56:30:84:1d:32:1a:59:cb:47:34:8e:b7:60:c9:83: ee:2b:ee:bf:4a:35:62:77:11:b6:50:be:bb:6e:b4: 63:d0:c3:ac:a4:cb:96:66:f6:2d:cf:fa:89:85:1d: 28:ad:1e:45:24:1b:da:41:5b:24:ad:69:28:38:37: 74:d7:89:16:b2:6e:57:2c:92:45:74:67:4b:4f:99: 2f:0b:a2:54:21:9e:01:db:20:69:99:27:98:81:e4: f3:f8:d2:25:0e:c4:a4:03:1e:ce:ba:89:c1:d4:8d: 01:54:5e:0d:d8:b3:87:5b:9c:f4:55:25:52:49:b1: 96:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:EB:DF:DA:4D:5C:97:67:2C:C5:6E:31:FF:23:EF:25:DF:02:D0:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/6bff204f-baf3-3c15-a992-3135c46aad0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl X509v3 Authority Key Identifier: keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer sbgp-ipAddrBlock: critical IPv4: 192.154.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:d1:d6:23:9e:ab:bf:dc:38:3b:94:ed:4c:10:39:79:4e:fa: 93:b6:e1:30:4f:c7:18:5f:ed:ce:7c:0e:d5:88:28:fc:fb:83: 9c:2b:69:2d:3f:a2:39:51:52:a7:bb:74:89:cd:31:71:22:c4: d0:5d:56:8f:b9:74:41:1c:30:2f:0f:02:7a:a4:53:8c:86:6e: 67:67:8d:1a:1c:63:c6:47:a5:b5:f6:6f:03:21:4f:cd:c4:a5: e0:11:a9:78:62:22:9d:a3:0d:cc:b6:9b:f7:6d:8a:f9:3f:ca: b2:7a:5f:16:e8:12:7b:77:71:54:ad:19:24:f0:04:3b:2f:55: 4d:23:de:51:33:09:3c:e7:dd:89:91:bc:93:a2:8b:5a:6a:25: e3:b0:86:78:34:fe:3f:b1:28:cf:d6:dd:4a:57:08:2b:3c:ca: 86:c6:a0:49:6d:f2:80:61:a3:b2:0c:63:b3:70:a3:65:d6:55: 09:5e:47:33:8b:e3:10:38:77:13:5c:e4:a9:a6:96:fd:fa:08: d0:15:e6:33:ac:0c:63:f0:d5:8a:5a:f4:ec:d6:9a:82:d7:ef: cc:d1:98:d1:14:9d:26:5c:3b:57:09:a3:bd:19:9f:76:92:b3: 4a:b7:dd:0e:78:24:b7:84:94:28:35:c2:cc:60:78:c2:cd:cc: 26:fd:5b:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdzmVR7XSKv4MMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky Yjg2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGFjOGJhZmEtZjc3NS00MzY0LTliNjAtYjQ1YjlhYTNlZWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxybSzMwGbej1l+PKUsuHmNeEkGXlc1x9IfZ6 38SgieNCiBMgpuC3ecTvbzM39aKykvJQjwDSoLsMUCJKEk98ij/hLnAIJFK3eFeF NvnlANVx0F+uK2KtI+K3LBnc8YewoKDzZ2G+DIGgABNUTSlHF3wXHJtBhnrgcfBp MTtmnb9ZvIKJQvJWMIQdMhpZy0c0jrdgyYPuK+6/SjVidxG2UL67brRj0MOspMuW ZvYtz/qJhR0orR5FJBvaQVskrWkoODd014kWsm5XLJJFdGdLT5kvC6JUIZ4B2yBp mSeYgeTz+NIlDsSkAx7OuonB1I0BVF4N2LOHW5z0VSVSSbGWHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODr39pNXJdnLMVuMf8j7yXfAtAWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvNmJmZjIwNGYtYmFmMy0z YzE1LWE5OTItMzEzNWM0NmFhZDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5 YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5 MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy Y2IyOTJiODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJr4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMPR1iOeq7/cODuU7UwQOXlO+pO24TBPxxhf7c58DtWIKPz7g5wraS0/ ojlRUqe7dInNMXEixNBdVo+5dEEcMC8PAnqkU4yGbmdnjRocY8ZHpbX2bwMhT83E peARqXhiIp2jDcy2m/dtivk/yrJ6XxboEnt3cVStGSTwBDsvVU0j3lEzCTzn3YmR vJOii1pqJeOwhng0/j+xKM/W3UpXCCs8yobGoElt8oBho7IMY7Nwo2XWVQleRzOL 4xA4dxNc5Kmmlv36CNAV5jOsDGPw1Ypa9OzWmoLX78zRmNEUnSZcO1cJo70Zn3aS s0q33Q54JLeElCg1wsxgeMLNzCb9W+Q= -----END CERTIFICATE-----Generated at Sat Oct 10 13:15:15 2026 by rpki-client