$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/384d6f74-fd7a-327e-a87f-c6caad6cb149.roa File: 384d6f74-fd7a-327e-a87f-c6caad6cb149.roa (raw, json) Hash identifier: Q9ma2TlulgWfPSBNwwoNGRQhGlJuca7xUrUCfUFdPa0= Subject key identifier: 83:DC:E3:40:31:3E:99:1E:17:51:5F:19:59:E4:E3:5E:F5:FA:ED:AC Certificate issuer: /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae Certificate serial: 010D0C9F4328584F3FDF3698044C489152D8EA80 Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/384d6f74-fd7a-327e-a87f-c6caad6cb149.roa Signing time: Mon 21 Sep 2026 14:41:07 +0000 ROA not before: Mon 21 Sep 2026 14:41:07 +0000 ROA not after: Sun 20 Dec 2026 15:41:07 +0000 asID: 54641 IP address blocks: 199.250.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:df:36:98:04:4c:48:91:52:d8:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae Validity Not Before: Sep 21 14:41:07 2026 GMT Not After : Dec 20 15:41:07 2026 GMT Subject: CN=649362d5-9d5f-4ab6-a4ac-63e69644aad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b7:74:c5:e9:5f:cc:06:89:c6:66:03:bd:5e: 0b:c6:17:72:b4:86:1d:ce:37:ff:f2:bb:18:51:87: d1:26:25:b9:7a:70:ff:83:b6:15:e3:9f:ef:3f:c4: 63:4b:3a:26:90:de:00:67:59:78:bc:3f:f1:cf:76: 08:43:7e:0d:cf:ec:64:9b:15:de:79:7c:85:8b:9e: fc:8e:2a:c4:78:70:06:4d:1c:2e:c8:51:59:44:ca: 94:62:64:7a:3c:91:33:eb:ee:c1:dd:29:0b:64:89: 27:fc:64:34:98:72:5a:51:75:65:78:62:37:2f:e0: 54:49:f2:f5:34:e0:da:ba:69:96:ce:ec:35:e3:21: 28:7e:e7:78:15:26:9b:61:16:3e:13:b1:7c:f4:d3: 70:ee:9a:38:d7:1a:f1:b5:04:59:e5:74:9d:ac:89: 25:8b:b3:e9:fa:6a:40:04:8e:3f:fd:c3:a3:05:dc: 0b:83:8f:1b:14:c4:3d:5a:a8:a5:87:45:59:15:6a: 49:bb:f9:72:29:b8:64:4d:ee:26:5f:7b:58:7f:d0: 42:6e:e0:12:e1:0e:e0:20:6b:7f:9c:2f:b3:00:a8: 9c:b6:cc:2f:8c:c8:2f:9e:a1:1d:62:8f:dd:71:1d: f8:33:9a:48:df:0c:61:43:9b:41:50:a2:a4:09:f2: 03:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:DC:E3:40:31:3E:99:1E:17:51:5F:19:59:E4:E3:5E:F5:FA:ED:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/384d6f74-fd7a-327e-a87f-c6caad6cb149.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl X509v3 Authority Key Identifier: keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer sbgp-ipAddrBlock: critical IPv4: 199.250.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:b8:e6:14:c8:e0:f5:2b:42:75:89:1c:c1:a6:11:09:8e:e5: 3a:df:be:ef:b6:68:88:2b:08:5d:fd:55:fa:39:1d:c1:07:71: 3a:82:59:b6:a2:0d:0d:21:3d:18:e6:e1:18:94:34:dc:16:de: 7a:bc:d5:f4:df:b3:ec:33:fa:98:55:31:7b:da:2e:f3:f7:e5: 08:90:36:d8:01:dc:77:fe:74:1d:56:5a:18:77:33:33:c0:6f: c7:fc:64:91:d9:1c:f4:2f:b5:2b:2e:29:19:bb:a6:03:24:f2: 7c:cb:69:c5:26:db:12:71:81:28:b0:87:ca:47:68:bf:84:63: 38:37:b5:10:90:e7:52:4b:8d:b4:a4:3e:ac:0c:15:36:70:aa: 5c:7f:fc:7a:41:cf:c5:92:68:3b:65:34:de:4e:f5:a3:c3:fa: 7a:72:25:7a:a7:18:9f:cd:c2:00:2f:39:76:67:c1:03:90:fc: 65:3d:50:9d:65:15:5b:da:d1:e5:8a:28:08:cb:cc:63:60:a3: 37:fa:54:93:f9:96:11:95:f9:52:70:3c:96:c3:22:4d:1f:c1: a6:37:4a:be:ed:c1:e1:36:8a:98:95:16:91:05:53:33:51:db: 95:2d:c9:73:09:f7:65:fc:9b:db:94:29:33:e4:6a:3e:c4:4e: f7:b2:ea:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/3zaYBExIkVLY6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY3MTA2MjItN2VjNC00YmIyLTllODctMjdjNWU1OTY0 ZmFlMB4XDTI2MDkyMTE0NDEwN1oXDTI2MTIyMDE1NDEwN1owLzEtMCsGA1UEAxMk NjQ5MzYyZDUtOWQ1Zi00YWI2LWE0YWMtNjNlNjk2NDRhYWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLd0xelfzAaJxmYDvV4LxhdytIYdzjf/8rsY UYfRJiW5enD/g7YV45/vP8RjSzomkN4AZ1l4vD/xz3YIQ34Nz+xkmxXeeXyFi578 jirEeHAGTRwuyFFZRMqUYmR6PJEz6+7B3SkLZIkn/GQ0mHJaUXVleGI3L+BUSfL1 NODaummWzuw14yEofud4FSabYRY+E7F89NNw7po41xrxtQRZ5XSdrIkli7Pp+mpA BI4//cOjBdwLg48bFMQ9Wqilh0VZFWpJu/lyKbhkTe4mX3tYf9BCbuAS4Q7gIGt/ nC+zAKictswvjMgvnqEdYo/dcR34M5pI3wxhQ5tBUKKkCfIDQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIPc40AxPpkeF1FfGVnk4171+u2sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZjcx MDYyMi03ZWM0LTRiYjItOWU4Ny0yN2M1ZTU5NjRmYWUvMzg0ZDZmNzQtZmQ3YS0z MjdlLWE4N2YtYzZjYWFkNmNiMTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWY3MTA2MjItN2VjNC00YmIyLTll ODctMjdjNWU1OTY0ZmFlL2VmNzEwNjIyLTdlYzQtNGJiMi05ZTg3LTI3YzVlNTk2 NGZhZS5jcmwwHwYDVR0jBBgwFoAUi0oOeoRIPRQYvawxB5YPaCph7dcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZjcxMDYyMi03ZWM0LTRiYjItOWU4Ny0yN2M1 ZTU5NjRmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/rMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+45hTI4PUrQnWJHMGmEQmO5Trfvu+2aIgrCF39Vfo5HcEHcTqCWbai DQ0hPRjm4RiUNNwW3nq81fTfs+wz+phVMXvaLvP35QiQNtgB3Hf+dB1WWhh3MzPA b8f8ZJHZHPQvtSsuKRm7pgMk8nzLacUm2xJxgSiwh8pHaL+EYzg3tRCQ51JLjbSk PqwMFTZwqlx//HpBz8WSaDtlNN5O9aPD+npyJXqnGJ/NwgAvOXZnwQOQ/GU9UJ1l FVva0eWKKAjLzGNgozf6VJP5lhGV+VJwPJbDIk0fwaY3Sr7tweE2ipiVFpEFUzNR 25UtyXMJ92X8m9uUKTPkaj7ETvey6jQ= -----END CERTIFICATE-----Generated at Tue Sep 29 04:25:09 2026 by rpki-client