$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/d0bec9ba-4f4b-357b-8594-40eb527c7f82.roa File: d0bec9ba-4f4b-357b-8594-40eb527c7f82.roa (raw, json) Hash identifier: 5rwd1DkfuLKLvUlc62MWo2F+s64UND7zac0CMeUDzDE= Subject key identifier: 8B:E0:2A:84:CF:01:3F:BD:87:C2:23:65:5B:98:96:37:D3:B2:41:81 Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F4328584F71EDB828DD707969F3CD8A80 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/d0bec9ba-4f4b-357b-8594-40eb527c7f82.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 5769 IP address blocks: 199.119.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:b8:28:dd:70:79:69:f3:cd:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=22ce0dd0-db9d-4749-97ef-726ae85f73c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8c:6f:19:80:b8:b7:01:47:0b:0c:57:37:cd: 60:9c:fc:a6:6f:0f:5d:a2:8c:8f:5c:95:02:eb:a1: 67:9b:89:e5:45:e3:eb:d4:08:53:7a:63:82:92:e5: a6:48:01:85:f0:84:c6:b1:fd:37:af:2d:a9:61:1d: 1b:83:17:9b:82:2b:d0:ca:40:98:eb:32:81:14:fb: 61:cc:17:fa:ac:dc:a8:a0:8d:37:86:81:37:01:9f: 00:81:94:b3:41:4e:58:1a:8d:b4:4b:56:d0:ca:5d: f6:70:53:c3:63:f6:35:5c:f5:a3:0c:ea:39:fb:42: e4:15:3b:31:5a:bc:2d:0c:17:46:42:f5:77:5a:9d: 03:a4:a0:7d:96:15:2d:52:d0:7a:cf:c7:01:8b:e9: f7:84:0f:c5:64:f9:53:9c:86:30:18:6c:47:b6:35: f1:33:43:0f:cf:15:3e:91:c3:bd:6f:2b:e2:28:01: 68:c3:8a:72:b9:a2:51:6c:df:95:b4:cf:fa:e3:30: f8:e9:7c:74:b2:ad:4c:78:f9:97:49:91:52:14:8e: 57:3e:60:ad:5a:2b:66:ce:1e:d2:15:86:9d:2d:11: 6a:6c:54:3a:64:1f:fd:3d:cc:6c:19:cf:be:ef:6c: 8c:57:e4:29:d9:e5:8b:27:4b:e9:cb:81:de:d5:72: 9d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E0:2A:84:CF:01:3F:BD:87:C2:23:65:5B:98:96:37:D3:B2:41:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/d0bec9ba-4f4b-357b-8594-40eb527c7f82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv4: 199.119.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:79:dc:fb:86:78:40:95:38:d4:ed:32:55:ae:8c:15:ae:86: 6c:1f:38:d4:ff:f6:6d:09:03:e0:a4:5b:a9:bf:1e:3b:e3:e9: 5e:fe:37:c3:b4:69:4f:62:f0:4b:90:38:df:a0:8d:e4:67:df: 7f:32:64:4e:81:cf:c6:35:0a:b6:c3:54:58:5a:05:73:ce:04: bb:58:db:12:d8:b7:ba:fb:d3:f1:e4:7e:97:5e:54:40:bc:09: ea:50:c4:c4:7d:a0:3b:c0:ac:14:db:13:68:06:52:ef:e3:f5: 10:0c:11:3b:09:6b:4d:2d:b6:6f:85:51:9d:21:77:7b:8c:22: 7d:af:bf:1a:cb:aa:4a:62:85:23:9e:d9:16:95:b7:66:e8:94: c7:ae:2b:46:cb:6e:3d:99:ec:44:7d:12:18:14:12:25:ca:19: 8c:3b:53:fb:51:2f:f0:3d:07:50:63:c4:db:eb:50:32:87:0d: 3c:f0:96:58:ea:92:b2:90:a2:7e:4a:28:65:cf:41:48:f4:6b: 0e:21:8e:9f:ef:7e:cf:5d:be:23:51:9b:ba:c8:55:31:53:71: 52:8e:4e:ce:34:ab:f5:c8:07:97:c7:0f:ed:99:37:be:98:42: 0a:1a:32:ea:fa:5d:24:a4:bf:a5:ad:c7:8f:75:b3:3f:25:62: 94:8c:91:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7bgo3XB5afPNioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk MjJjZTBkZDAtZGI5ZC00NzQ5LTk3ZWYtNzI2YWU4NWY3M2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIxvGYC4twFHCwxXN81gnPymbw9dooyPXJUC 66Fnm4nlRePr1AhTemOCkuWmSAGF8ITGsf03ry2pYR0bgxebgivQykCY6zKBFPth zBf6rNyooI03hoE3AZ8AgZSzQU5YGo20S1bQyl32cFPDY/Y1XPWjDOo5+0LkFTsx WrwtDBdGQvV3Wp0DpKB9lhUtUtB6z8cBi+n3hA/FZPlTnIYwGGxHtjXxM0MPzxU+ kcO9byviKAFow4pyuaJRbN+VtM/64zD46Xx0sq1MePmXSZFSFI5XPmCtWitmzh7S FYadLRFqbFQ6ZB/9PcxsGc++72yMV+Qp2eWLJ0vpy4He1XKdDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvgKoTPAT+9h8IjZVuYljfTskGBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvZDBiZWM5YmEtNGY0Yi0z NTdiLTg1OTQtNDBlYjUyN2M3ZjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx3foMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACF53PuGeECVONTtMlWujBWuhmwfONT/9m0JA+CkW6m/Hjvj6V7+N8O0 aU9i8EuQON+gjeRn338yZE6Bz8Y1CrbDVFhaBXPOBLtY2xLYt7r70/HkfpdeVEC8 CepQxMR9oDvArBTbE2gGUu/j9RAMETsJa00ttm+FUZ0hd3uMIn2vvxrLqkpihSOe 2RaVt2bolMeuK0bLbj2Z7ER9EhgUEiXKGYw7U/tRL/A9B1BjxNvrUDKHDTzwlljq krKQon5KKGXPQUj0aw4hjp/vfs9dviNRm7rIVTFTcVKOTs40q/XIB5fHD+2ZN76Y QgoaMur6XSSkv6Wtx491sz8lYpSMkWw= -----END CERTIFICATE-----Generated at Sat Oct 10 14:23:42 2026 by rpki-client