$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/1f7fd2df-dd16-3ff6-b7e1-a8f36e10bc5a.roa File: 1f7fd2df-dd16-3ff6-b7e1-a8f36e10bc5a.roa (raw, json) Hash identifier: E1G+Agbmozv3on+5ni2RDXXVYBl2oDXtjd6TdkeZiXM= Subject key identifier: 8A:0E:C9:7E:7C:74:1C:26:0B:87:07:59:5D:8E:01:06:F5:CA:39:7F Certificate issuer: /CN=888d6cc7-0aa2-467e-9649-a453942c2d85 Certificate serial: 010D0C9F4328584F498B0B849DFFED76EB840C40 Authority key identifier: 85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/1f7fd2df-dd16-3ff6-b7e1-a8f36e10bc5a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 21769 IP address blocks: 199.30.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:0b:84:9d:ff:ed:76:eb:84:0c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=888d6cc7-0aa2-467e-9649-a453942c2d85 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=21b1a9a0-dc43-449b-a315-be9b0b25d629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:10:d1:4c:23:39:37:6a:2d:4c:1d:fe:43:e0: 88:bd:5a:c1:63:2a:24:c7:50:22:e1:8d:02:49:94: fa:bf:e1:99:cc:ba:ce:7c:ea:1c:84:d2:5b:54:f6: 22:a0:79:c0:ab:0d:03:e9:63:fb:b4:4b:65:29:8a: 46:f7:ae:a8:25:90:94:41:95:91:9f:11:c7:35:51: 13:e6:c5:58:be:29:4d:46:40:77:f3:0a:49:0b:5c: b7:c8:76:d4:a4:c1:58:66:cc:fc:51:f2:b2:fa:a7: 57:ef:10:58:c5:90:d9:35:fa:a4:ad:4a:2c:df:05: bb:fb:c1:31:39:b1:5c:25:e5:f9:ce:56:08:62:00: 53:05:6e:68:48:7c:c9:03:55:9c:b9:13:3f:87:55: 57:41:4f:c1:eb:54:0c:ec:50:23:dc:6a:63:12:66: 1e:5a:7e:a5:96:6e:ac:1a:63:14:ca:b6:00:5c:9e: c6:5b:45:9c:b6:06:a6:e1:13:45:92:4f:d7:a0:83: 38:0f:d3:13:6e:97:f1:4b:c3:a8:15:83:12:72:0d: d2:d0:0b:df:d0:0d:bf:9a:05:f5:99:79:7c:ef:96: f0:e6:6d:b9:36:fb:c1:1c:f6:4b:3e:d2:4f:cf:d9: 33:6a:1c:a4:05:4a:99:57:15:63:6e:ef:e4:8a:f4: e7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:0E:C9:7E:7C:74:1C:26:0B:87:07:59:5D:8E:01:06:F5:CA:39:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/1f7fd2df-dd16-3ff6-b7e1-a8f36e10bc5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl X509v3 Authority Key Identifier: keyid:85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer sbgp-ipAddrBlock: critical IPv4: 199.30.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:89:b8:80:fa:c6:78:0a:bc:55:b8:af:cf:e5:eb:bf:22:e1: 9c:a1:f7:9d:12:98:0b:c8:aa:d9:d5:2f:23:6f:c5:50:c1:ab: f3:2f:11:47:c2:9b:99:00:84:8d:37:30:56:a4:42:a1:d1:7e: f5:0e:19:d8:ed:a5:62:5b:01:65:cc:5f:22:ee:09:75:a3:63: b1:41:3e:de:f1:44:0a:22:c5:b4:5c:78:2d:71:f2:fb:a6:a0: 08:64:bb:04:49:76:8e:3a:98:11:1a:df:ad:04:5e:8a:7e:61: 27:4a:2a:6f:31:48:3d:bb:06:8f:1d:91:12:78:b8:98:24:6e: f0:cf:69:99:ce:f0:7d:98:80:da:00:b4:e1:0d:3a:1b:a5:f8: 62:df:c0:ed:37:d6:46:89:1c:25:c9:18:9e:63:96:64:5b:06: ce:50:db:25:5c:41:0d:70:6d:67:8a:64:8f:7f:09:23:7f:f6: b7:78:1c:f1:f3:f3:76:f4:7f:ab:0f:1c:b4:3c:d6:4e:29:c0: 19:5b:d8:e4:15:e4:da:34:25:05:36:9b:21:04:95:91:0d:0e: 6c:c5:9e:c5:54:65:c0:a5:7f:a1:e9:d9:c3:8f:83:3d:8c:e9: 9b:9f:03:a2:9a:a6:ef:35:fe:b6:5d:df:ca:f9:be:52:a2:6b: 28:d9:72:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiwuEnf/tduuEDEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg4ZDZjYzctMGFhMi00NjdlLTk2NDktYTQ1Mzk0MmMy ZDg1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjFiMWE5YTAtZGM0My00NDliLWEzMTUtYmU5YjBiMjVkNjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxDRTCM5N2otTB3+Q+CIvVrBYyokx1Ai4Y0C SZT6v+GZzLrOfOochNJbVPYioHnAqw0D6WP7tEtlKYpG966oJZCUQZWRnxHHNVET 5sVYvilNRkB38wpJC1y3yHbUpMFYZsz8UfKy+qdX7xBYxZDZNfqkrUos3wW7+8Ex ObFcJeX5zlYIYgBTBW5oSHzJA1WcuRM/h1VXQU/B61QM7FAj3GpjEmYeWn6llm6s GmMUyrYAXJ7GW0Wctgam4RNFkk/XoIM4D9MTbpfxS8OoFYMScg3S0Avf0A2/mgX1 mXl875bw5m25NvvBHPZLPtJPz9kzahykBUqZVxVjbu/kivTn1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIoOyX58dBwmC4cHWV2OAQb1yjl/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ODhk NmNjNy0wYWEyLTQ2N2UtOTY0OS1hNDUzOTQyYzJkODUvMWY3ZmQyZGYtZGQxNi0z ZmY2LWI3ZTEtYThmMzZlMTBiYzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODg4ZDZjYzctMGFhMi00NjdlLTk2 NDktYTQ1Mzk0MmMyZDg1Lzg4OGQ2Y2M3LTBhYTItNDY3ZS05NjQ5LWE0NTM5NDJj MmQ4NS5jcmwwHwYDVR0jBBgwFoAUhZ7JvEc6T40fyGuPSOeyqr56VrIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ODhkNmNjNy0wYWEyLTQ2N2UtOTY0OS1hNDUz OTQyYzJkODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxx4EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALmJuID6xngKvFW4r8/l678i4Zyh950SmAvIqtnVLyNvxVDBq/MvEUfC m5kAhI03MFakQqHRfvUOGdjtpWJbAWXMXyLuCXWjY7FBPt7xRAoixbRceC1x8vum oAhkuwRJdo46mBEa360EXop+YSdKKm8xSD27Bo8dkRJ4uJgkbvDPaZnO8H2YgNoA tOENOhul+GLfwO031kaJHCXJGJ5jlmRbBs5Q2yVcQQ1wbWeKZI9/CSN/9rd4HPHz 83b0f6sPHLQ81k4pwBlb2OQV5No0JQU2myEElZENDmzFnsVUZcClf6Hp2cOPgz2M 6ZufA6Kapu81/rZd38r5vlKiayjZch8= -----END CERTIFICATE-----Generated at Sat Sep 26 22:37:19 2026 by rpki-client