$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b54a82cc-027e-31e0-9c69-30ee467bb265.roa File: b54a82cc-027e-31e0-9c69-30ee467bb265.roa (raw, json) Hash identifier: GBqZi90dWb9ESZfc7ss+7ErobIndV84UxWQoStGOmWQ= Subject key identifier: 48:1F:64:21:C2:73:7D:08:37:D9:1D:24:CE:2B:23:BB:0C:65:BC:25 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584FB50BB2B89836C93DCFF40B00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b54a82cc-027e-31e0-9c69-30ee467bb265.roa Signing time: Mon 02 Nov 2026 14:00:14 +0000 ROA not before: Mon 02 Nov 2026 14:00:14 +0000 ROA not after: Sun 31 Jan 2027 14:00:14 +0000 asID: 31898 IP address blocks: 192.18.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b5:0b:b2:b8:98:36:c9:3d:cf:f4:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 2 14:00:14 2026 GMT Not After : Jan 31 14:00:14 2027 GMT Subject: CN=b9e9af3e-8341-4666-87e2-5cd5768f85c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:34:61:60:1f:a8:e2:2e:ba:fa:84:0e:72:59: ac:98:2b:07:f7:b2:bd:38:98:11:a4:73:29:e1:22: 85:a7:cc:9f:d5:36:57:fe:82:b3:7b:0d:74:3a:e4: 38:57:18:77:ce:ea:02:82:fa:0c:57:86:7f:b7:77: c4:5b:f3:a1:26:5c:c7:73:32:6b:c9:c9:5e:58:72: 13:ff:ea:28:d1:60:7f:7b:90:b9:5a:24:87:36:85: 37:8d:bb:68:ea:f6:c1:eb:fb:e2:d0:f5:06:b1:60: e9:f9:79:0f:9b:9e:d5:d6:2b:9b:93:04:42:e9:3a: 9c:fb:e4:aa:11:21:58:07:e5:ab:39:9e:a8:36:84: 44:e8:56:a4:f5:89:0c:66:be:a0:a8:58:9c:aa:88: a2:a4:3c:0b:f3:bf:31:a5:5d:84:78:8d:82:cb:bc: 75:6d:63:16:ae:a6:06:24:b2:7f:00:8e:0c:48:02: 33:ff:33:f8:49:4a:73:d2:1d:31:d3:92:4c:a1:91: 24:5c:b1:a3:26:bd:3d:e4:0c:81:50:ae:1b:49:68: a3:f4:83:12:b6:ed:92:0a:93:d8:16:a7:d4:8e:df: 0f:9d:d8:f5:27:c6:24:42:ae:0c:78:02:6f:ba:17: 57:10:ca:65:0c:11:60:e0:fb:49:dc:4b:95:9a:f4: 5e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:1F:64:21:C2:73:7D:08:37:D9:1D:24:CE:2B:23:BB:0C:65:BC:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b54a82cc-027e-31e0-9c69-30ee467bb265.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.18.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:43:b3:33:69:4c:b8:b2:74:8b:e0:ff:17:b4:03:a8:d1:02: 79:ef:de:4a:91:64:6f:ef:58:e6:df:12:eb:2d:ab:0d:1f:e4: 80:5d:7f:01:85:7d:b3:b6:ec:81:c2:5d:c3:13:13:cb:14:02: 3e:bc:8f:b8:df:5a:5d:4e:90:24:c0:66:d3:49:bc:ae:fd:c0: 7d:2c:6a:d5:7e:77:6a:1e:71:b7:cf:37:9c:f9:75:a1:c6:e8: 9f:84:75:b7:a4:8a:d8:6b:31:1f:f9:ba:ee:d7:2b:fc:59:71: e2:2d:1f:84:d6:c0:5f:37:af:37:da:8f:99:95:1e:7a:8b:de: 85:04:bc:b4:74:3a:03:53:27:c5:aa:1b:98:b8:04:f7:45:5f: f2:85:0c:38:c8:7a:36:23:da:39:2d:0c:d1:d5:4c:c7:86:e4: 91:58:9a:84:03:87:7c:11:f5:4a:10:d7:8b:20:3d:58:0c:53: 9b:f2:a2:f3:5e:d1:2f:e2:e9:1d:e1:21:57:67:1d:3d:4e:f1: fe:4b:4e:b7:02:a8:87:4a:73:81:4a:62:40:64:ed:e6:00:f6: 99:47:5c:fd:ae:6f:db:58:32:20:fa:d8:bd:42:cb:a9:f2:7b: 6c:16:c5:d8:bc:a8:8b:fd:f5:90:12:a5:26:32:9a:db:b3:ed: 0e:1e:4f:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+1C7K4mDbJPc/0CwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MTEwMjE0MDAxNFoXDTI3MDEzMTE0MDAxNFowLzEtMCsGA1UEAxMk YjllOWFmM2UtODM0MS00NjY2LTg3ZTItNWNkNTc2OGY4NWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDRhYB+o4i66+oQOclmsmCsH97K9OJgRpHMp 4SKFp8yf1TZX/oKzew10OuQ4Vxh3zuoCgvoMV4Z/t3fEW/OhJlzHczJrycleWHIT /+oo0WB/e5C5WiSHNoU3jbto6vbB6/vi0PUGsWDp+XkPm57V1iubkwRC6Tqc++Sq ESFYB+WrOZ6oNoRE6Fak9YkMZr6gqFicqoiipDwL878xpV2EeI2Cy7x1bWMWrqYG JLJ/AI4MSAIz/zP4SUpz0h0x05JMoZEkXLGjJr095AyBUK4bSWij9IMStu2SCpPY FqfUjt8Pndj1J8YkQq4MeAJvuhdXEMplDBFg4PtJ3EuVmvResQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgfZCHCc30IN9kdJM4rI7sMZbwlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjU0YTgyY2MtMDI3ZS0z MWUwLTljNjktMzBlZTQ2N2JiMjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwBLIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZDszNpTLiydIvg/xe0A6jRAnnv3kqRZG/vWObfEustqw0f5IBdfwGF fbO27IHCXcMTE8sUAj68j7jfWl1OkCTAZtNJvK79wH0satV+d2oecbfPN5z5daHG 6J+EdbekithrMR/5uu7XK/xZceItH4TWwF83rzfaj5mVHnqL3oUEvLR0OgNTJ8Wq G5i4BPdFX/KFDDjIejYj2jktDNHVTMeG5JFYmoQDh3wR9UoQ14sgPVgMU5vyovNe 0S/i6R3hIVdnHT1O8f5LTrcCqIdKc4FKYkBk7eYA9plHXP2ub9tYMiD62L1Cy6ny e2wWxdi8qIv99ZASpSYymtuz7Q4eTwo= -----END CERTIFICATE-----Generated at Thu Nov 5 11:08:47 2026 by rpki-client