$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/daa9356c-7f09-3ba8-b4bd-e90180444d80.roa File: daa9356c-7f09-3ba8-b4bd-e90180444d80.roa (raw, json) Hash identifier: lqEM2mrJZTdyIYyfjPAEz8n/dbtYSNOsFoKirXdCNZI= Subject key identifier: AE:93:18:55:B5:28:D7:D5:16:EE:66:C9:45:33:76:3E:C2:B1:58:95 Certificate issuer: /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae Certificate serial: 010D0C9F4328584F3FE0EA75C70FDF73FD102A80 Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/daa9356c-7f09-3ba8-b4bd-e90180444d80.roa Signing time: Mon 21 Sep 2026 14:44:33 +0000 ROA not before: Mon 21 Sep 2026 14:44:33 +0000 ROA not after: Sun 20 Dec 2026 15:44:33 +0000 asID: 54641 IP address blocks: 199.250.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:e0:ea:75:c7:0f:df:73:fd:10:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae Validity Not Before: Sep 21 14:44:33 2026 GMT Not After : Dec 20 15:44:33 2026 GMT Subject: CN=0cee35a8-25fd-4e88-be99-df769e51779c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:dd:fb:53:6c:08:af:1e:cf:91:22:27:73:fe: c5:e8:c9:bc:f6:7e:74:96:b9:32:9f:41:c0:48:f8: 50:48:92:73:1e:b8:07:69:fe:b8:62:32:f6:6f:64: 63:63:97:cc:54:ce:6d:35:b7:a5:4b:ff:68:9f:8d: 1f:a1:3e:28:d6:79:6d:74:68:99:f6:fe:65:21:d0: 08:2c:0b:bc:07:d1:44:ce:5c:2d:6b:b0:be:7d:df: ca:4b:e0:73:cb:f9:d7:dc:ef:35:3d:4d:f3:e6:63: 3e:40:68:db:51:2a:7f:d1:a5:e7:82:a1:a2:7b:a7: 57:d9:0f:d5:72:c4:20:09:eb:6b:e1:1c:6d:46:2c: 44:47:fd:82:92:85:54:82:36:8d:fc:74:fb:73:0a: e0:92:de:ac:39:0c:c1:16:7b:fa:3e:73:c6:9f:4b: 8b:5e:3c:5c:82:25:04:4f:22:2f:a2:de:9d:47:bd: 52:60:3b:2d:45:da:ad:66:4a:f0:57:19:7c:15:28: a9:ed:8d:5d:e1:38:13:0a:6c:f4:87:66:fd:d7:cf: 2c:3d:ea:28:dc:b6:de:06:bf:56:d6:8c:f3:57:22: f2:3a:2d:88:00:69:6a:21:de:e7:95:75:2e:c7:3f: d1:3b:32:68:7b:11:9d:0f:38:e2:29:49:8b:46:39: 4a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:93:18:55:B5:28:D7:D5:16:EE:66:C9:45:33:76:3E:C2:B1:58:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/daa9356c-7f09-3ba8-b4bd-e90180444d80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl X509v3 Authority Key Identifier: keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer sbgp-ipAddrBlock: critical IPv4: 199.250.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:cc:f6:fd:2d:31:da:44:5d:ae:26:76:3a:70:45:a8:f9:8b: f0:97:d9:ca:a6:81:94:da:e4:c9:a4:ff:fe:a0:d3:d7:56:67: 57:4f:a8:b9:59:0d:4b:32:02:00:63:5f:a3:e0:2f:e4:6f:82: e2:66:4a:bb:e9:a0:84:3c:87:7c:cb:6f:14:9c:0a:14:ad:03: ee:5b:3e:5e:fa:72:97:88:eb:ae:97:e7:93:d5:fa:b9:c0:68: 81:08:ac:c1:b9:f9:37:5d:3d:c9:33:39:d5:7c:68:3c:d8:92: f6:96:f5:f6:5c:9f:60:66:3a:b6:ff:43:d2:c3:de:c9:99:b0: ec:cd:22:7d:7a:2b:64:42:c9:67:dc:eb:4e:dd:e0:83:a4:e0: 9e:54:0e:41:45:dd:25:1d:d6:c5:92:b5:8d:73:db:5a:c3:15: b0:73:54:9d:9e:68:38:0f:d4:9e:eb:3a:5e:a5:e1:35:15:5e: b9:9f:7b:11:bd:98:d4:d8:f1:df:42:16:a5:29:61:ee:63:a1: 60:5d:b8:6d:f4:7e:27:78:80:dd:32:91:6b:40:dd:da:fd:84: 17:dd:29:ff:ac:bc:b1:17:6e:63:71:d7:ed:a5:03:68:51:f7: 7e:f6:e8:f3:ec:45:f4:d9:90:8f:fa:58:5d:51:8e:a6:ff:53: b2:30:bf:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/4Op1xw/fc/0QKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY3MTA2MjItN2VjNC00YmIyLTllODctMjdjNWU1OTY0 ZmFlMB4XDTI2MDkyMTE0NDQzM1oXDTI2MTIyMDE1NDQzM1owLzEtMCsGA1UEAxMk MGNlZTM1YTgtMjVmZC00ZTg4LWJlOTktZGY3NjllNTE3NzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArN37U2wIrx7PkSInc/7F6Mm89n50lrkyn0HA SPhQSJJzHrgHaf64YjL2b2RjY5fMVM5tNbelS/9on40foT4o1nltdGiZ9v5lIdAI LAu8B9FEzlwta7C+fd/KS+Bzy/nX3O81PU3z5mM+QGjbUSp/0aXngqGie6dX2Q/V csQgCetr4RxtRixER/2CkoVUgjaN/HT7cwrgkt6sOQzBFnv6PnPGn0uLXjxcgiUE TyIvot6dR71SYDstRdqtZkrwVxl8FSip7Y1d4TgTCmz0h2b9188sPeoo3LbeBr9W 1ozzVyLyOi2IAGlqId7nlXUuxz/ROzJoexGdDzjiKUmLRjlK/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6TGFW1KNfVFu5myUUzdj7CsViVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZjcx MDYyMi03ZWM0LTRiYjItOWU4Ny0yN2M1ZTU5NjRmYWUvZGFhOTM1NmMtN2YwOS0z YmE4LWI0YmQtZTkwMTgwNDQ0ZDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWY3MTA2MjItN2VjNC00YmIyLTll ODctMjdjNWU1OTY0ZmFlL2VmNzEwNjIyLTdlYzQtNGJiMi05ZTg3LTI3YzVlNTk2 NGZhZS5jcmwwHwYDVR0jBBgwFoAUi0oOeoRIPRQYvawxB5YPaCph7dcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZjcxMDYyMi03ZWM0LTRiYjItOWU4Ny0yN2M1 ZTU5NjRmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx/rAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPM9v0tMdpEXa4mdjpwRaj5i/CX2cqmgZTa5Mmk//6g09dWZ1dPqLlZ DUsyAgBjX6PgL+RvguJmSrvpoIQ8h3zLbxScChStA+5bPl76cpeI666X55PV+rnA aIEIrMG5+TddPckzOdV8aDzYkvaW9fZcn2BmOrb/Q9LD3smZsOzNIn16K2RCyWfc 607d4IOk4J5UDkFF3SUd1sWStY1z21rDFbBzVJ2eaDgP1J7rOl6l4TUVXrmfexG9 mNTY8d9CFqUpYe5joWBduG30fid4gN0ykWtA3dr9hBfdKf+svLEXbmNx1+2lA2hR 93726PPsRfTZkI/6WF1Rjqb/U7Iwv1E= -----END CERTIFICATE-----Generated at Tue Sep 29 04:24:55 2026 by rpki-client