$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3/31de5975-70d3-38db-af47-39cb7d439a32.roa File: 31de5975-70d3-38db-af47-39cb7d439a32.roa (raw, json) Hash identifier: UDKFevYSTm7odBzDULeOis+WQcN8BOeuh6hiwBjpTlk= Subject key identifier: C8:66:29:BF:4D:DE:CE:B3:1E:07:C9:D7:F0:0A:30:70:3A:23:F5:AB Certificate issuer: /CN=f12b39cc-0108-4db1-b059-b4833b53c1a3 Certificate serial: 010D0C9F4328584F498BC1A7CD33EDAC32466440 Authority key identifier: 14:E1:61:53:5C:BC:2F:83:DD:08:30:20:6B:35:12:AD:DA:E6:8F:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3/31de5975-70d3-38db-af47-39cb7d439a32.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3450 IP address blocks: 192.249.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3/f12b39cc-0108-4db1-b059-b4833b53c1a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3/f12b39cc-0108-4db1-b059-b4833b53c1a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:c1:a7:cd:33:ed:ac:32:46:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f12b39cc-0108-4db1-b059-b4833b53c1a3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=61397bf8-e1bd-4c34-be15-3c5f3611c30a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8b:6b:8a:93:92:3e:38:10:32:65:56:78:1d: b3:e7:dd:27:f4:59:68:15:16:91:82:60:3c:d3:eb: bf:9e:40:5c:6a:be:26:55:2d:e8:19:64:65:57:f7: 70:73:ea:ae:83:d3:84:97:fc:27:f8:fa:ce:9a:68: ac:1d:92:5f:b2:84:96:31:18:d8:5d:0b:bb:95:31: c1:36:f3:de:b2:74:8d:e1:bf:25:af:c5:79:d4:3f: 8f:3f:93:37:ef:a7:ec:36:79:fb:c3:ea:3c:1f:d2: e0:f5:9f:6a:e5:c9:85:9f:b6:c2:32:83:68:4f:92: 3e:b5:d2:29:da:c6:9c:22:55:a0:6d:22:9b:98:04: 70:85:00:59:86:01:9b:4c:26:24:64:7e:54:b0:46: d3:1b:03:a0:b7:bb:35:f9:ec:3b:b2:0f:f0:fb:20: e8:22:a7:11:45:e4:86:bc:11:6e:fb:24:cf:e0:b3: b9:ac:b4:99:95:87:c8:16:64:84:9f:9a:35:b0:f8: 05:d5:e9:72:e2:7d:0e:50:e1:18:71:47:60:fc:55: cb:cf:21:17:a5:e8:7c:8a:a2:d7:53:cb:93:49:d0: 0c:e6:c9:9b:8e:16:a6:54:7e:dc:e2:75:c2:23:b5: bb:d8:fd:ff:79:02:9f:74:9c:b8:28:4e:0e:af:46: 34:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:66:29:BF:4D:DE:CE:B3:1E:07:C9:D7:F0:0A:30:70:3A:23:F5:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3/31de5975-70d3-38db-af47-39cb7d439a32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3/f12b39cc-0108-4db1-b059-b4833b53c1a3.crl X509v3 Authority Key Identifier: keyid:14:E1:61:53:5C:BC:2F:83:DD:08:30:20:6B:35:12:AD:DA:E6:8F:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3.cer sbgp-ipAddrBlock: critical IPv4: 192.249.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:04:dd:3d:14:54:b9:aa:7e:f6:25:cf:0b:92:f6:e4:a0:26: 48:b3:d1:4a:70:2d:04:8d:8a:de:52:c3:aa:bc:1f:c7:eb:21: 24:89:3f:6f:5b:f3:fc:39:8a:7e:08:10:39:a5:aa:b1:60:f5: 64:93:d4:81:70:e7:f3:7c:ec:5e:35:96:35:c8:c7:39:30:65: 0e:dc:64:57:04:a0:3e:d4:fa:8b:36:74:f1:c9:3a:e1:ae:e4: 73:54:24:56:49:cb:c7:f9:23:5b:6b:49:bd:75:ad:8b:45:4c: 16:ef:3e:f6:9c:c1:7f:d3:da:19:47:03:a3:19:b3:8a:2f:99: 96:28:27:d8:cc:7d:f3:11:5e:d6:36:2f:70:3b:82:c6:39:66: 4e:2a:d9:80:02:b5:8e:f4:da:0f:28:f0:8c:ae:61:9c:28:cc: 77:43:f4:65:b3:4d:4d:25:a6:df:be:73:9e:f5:5a:6f:88:91: cd:69:00:b8:ca:09:9d:03:9f:05:ea:2e:94:0b:10:94:d8:9c: f8:48:06:b6:d6:aa:5b:f0:bb:1e:aa:eb:5f:21:4d:ef:39:c7: 37:0d:01:80:35:7e:bb:f8:9a:7b:75:76:d0:7c:9a:da:ed:7a: d5:ee:3e:21:93:dd:0d:38:8c:be:43:80:a8:e1:9b:d8:e2:12: ce:7e:ef:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji8GnzTPtrDJGZEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjEyYjM5Y2MtMDEwOC00ZGIxLWIwNTktYjQ4MzNiNTNj MWEzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjEzOTdiZjgtZTFiZC00YzM0LWJlMTUtM2M1ZjM2MTFjMzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYtripOSPjgQMmVWeB2z590n9FloFRaRgmA8 0+u/nkBcar4mVS3oGWRlV/dwc+qug9OEl/wn+PrOmmisHZJfsoSWMRjYXQu7lTHB NvPesnSN4b8lr8V51D+PP5M376fsNnn7w+o8H9Lg9Z9q5cmFn7bCMoNoT5I+tdIp 2sacIlWgbSKbmARwhQBZhgGbTCYkZH5UsEbTGwOgt7s1+ew7sg/w+yDoIqcRReSG vBFu+yTP4LO5rLSZlYfIFmSEn5o1sPgF1ely4n0OUOEYcUdg/FXLzyEXpeh8iqLX U8uTSdAM5smbjhamVH7c4nXCI7W72P3/eQKfdJy4KE4Or0Y0sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhmKb9N3s6zHgfJ1/AKMHA6I/WrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mMTJi MzljYy0wMTA4LTRkYjEtYjA1OS1iNDgzM2I1M2MxYTMvMzFkZTU5NzUtNzBkMy0z OGRiLWFmNDctMzljYjdkNDM5YTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZjEyYjM5Y2MtMDEwOC00ZGIxLWIw NTktYjQ4MzNiNTNjMWEzL2YxMmIzOWNjLTAxMDgtNGRiMS1iMDU5LWI0ODMzYjUz YzFhMy5jcmwwHwYDVR0jBBgwFoAUFOFhU1y8L4PdCDAgazUSrdrmj9MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mMTJiMzljYy0wMTA4LTRkYjEtYjA1OS1iNDgz M2I1M2MxYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwPkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJsE3T0UVLmqfvYlzwuS9uSgJkiz0UpwLQSNit5Sw6q8H8frISSJP29b 8/w5in4IEDmlqrFg9WST1IFw5/N87F41ljXIxzkwZQ7cZFcEoD7U+os2dPHJOuGu 5HNUJFZJy8f5I1trSb11rYtFTBbvPvacwX/T2hlHA6MZs4ovmZYoJ9jMffMRXtY2 L3A7gsY5Zk4q2YACtY702g8o8IyuYZwozHdD9GWzTU0lpt++c571Wm+Ikc1pALjK CZ0DnwXqLpQLEJTYnPhIBrbWqlvwux6q618hTe85xzcNAYA1frv4mnt1dtB8mtrt etXuPiGT3Q04jL5DgKjhm9jiEs5+724= -----END CERTIFICATE-----Generated at Sat Sep 26 15:19:31 2026 by rpki-client