$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8b67b3c5-a1c4-33af-9d77-42349b4c66db.roa File: 8b67b3c5-a1c4-33af-9d77-42349b4c66db.roa (raw, json) Hash identifier: 5gIOC401CzESVtTx01e891nNlXd2R0Jv/+raoJHpo4c= Subject key identifier: 24:E5:4C:3B:D7:29:CF:85:39:DB:B8:0D:BA:8F:12:11:64:96:64:74 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584F6C583A0DF82A2988332BD3D8 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8b67b3c5-a1c4-33af-9d77-42349b4c66db.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 3356 IP address blocks: 199.35.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:3a:0d:f8:2a:29:88:33:2b:d3:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=9f56bf5f-356b-4c12-ba2d-607d24bdede5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:69:58:6d:7b:52:d5:c1:c3:ed:fd:33:38:f1: 92:e5:0c:6b:8a:3c:a5:21:b9:69:a1:45:8c:a1:4d: 3a:ba:7a:5f:f6:97:73:71:63:8b:90:e3:d6:61:eb: 9d:39:2f:41:a4:a2:9e:a0:f0:f0:89:24:54:78:c9: 0b:0c:fa:33:6f:59:02:17:f3:33:11:f4:78:95:3e: 37:6a:a7:1f:69:fc:5f:fe:5c:ed:6b:0b:3d:4f:b7: 38:00:9f:18:67:cb:a8:a0:9f:4e:da:35:c8:af:10: 4f:df:fe:ee:ff:5b:11:c1:ca:51:26:27:eb:e8:17: ef:ed:90:fa:f6:2b:26:49:4b:b4:c2:dd:25:9d:09: 99:58:cc:2f:d4:42:14:13:df:75:80:d3:eb:6f:15: c8:7f:e6:98:cd:fb:52:63:ea:b6:65:f7:29:7b:b6: 9f:3a:51:f4:d5:f2:d0:ba:cf:86:b9:c6:1a:f5:8d: 0e:1c:17:84:17:5d:f0:e1:1c:88:a4:4a:20:8d:1e: 73:d7:0f:64:60:1f:e1:79:69:cb:44:55:3c:c7:56: bd:69:7d:2d:65:61:68:06:d4:88:66:1a:a2:3f:43: 66:6d:a3:79:f1:b9:e0:62:f9:f9:7f:0c:c9:41:9e: ad:fd:14:8e:bb:a3:0b:7b:4b:98:e9:47:c7:5c:0c: 3a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E5:4C:3B:D7:29:CF:85:39:DB:B8:0D:BA:8F:12:11:64:96:64:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8b67b3c5-a1c4-33af-9d77-42349b4c66db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 199.35.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:8e:3b:5b:25:25:17:6f:f0:39:e8:01:2f:b4:c0:27:60:1e: 94:21:f7:b3:11:b6:97:31:4d:eb:49:b7:2a:21:cf:09:9e:49: ed:2d:51:19:9c:9c:4c:e4:b6:3e:00:41:23:d7:52:08:cf:15: 11:38:6f:c1:0f:9d:a8:fb:84:4b:1d:b6:63:a2:7b:52:ca:bc: 4a:77:07:13:9a:c2:bf:c9:00:a6:57:79:75:b0:d8:b3:93:6b: 06:8a:03:38:5f:f7:48:6c:31:8a:bf:24:16:70:09:cd:44:29: ca:6f:64:4f:90:9f:11:ae:3d:b3:11:d2:91:ae:b0:59:f3:6c: 32:95:4f:2a:fa:4f:45:ea:25:33:ff:26:8c:97:d1:d8:d4:71: 6a:23:42:53:41:77:15:60:c2:b3:a6:bb:d4:92:b8:72:b6:2f: 5b:ec:8b:89:22:07:39:7f:6c:36:c6:2a:a5:ea:28:81:b1:bb: da:48:b4:74:25:fc:cc:5a:42:a4:ee:ba:76:5d:f3:09:d3:14: 8c:a0:56:58:9d:6b:74:5f:db:65:92:32:76:3b:6d:20:1d:d5: e9:90:f3:af:fc:74:50:cd:a7:30:c9:8d:54:ff:f9:41:44:71: ae:37:fc:d6:f3:03:75:b2:af:57:0c:f9:b1:c3:79:1c:a0:c9: a7:9a:b0:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWDoN+CopiDMr09gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk OWY1NmJmNWYtMzU2Yi00YzEyLWJhMmQtNjA3ZDI0YmRlZGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWlYbXtS1cHD7f0zOPGS5QxrijylIblpoUWM oU06unpf9pdzcWOLkOPWYeudOS9BpKKeoPDwiSRUeMkLDPozb1kCF/MzEfR4lT43 aqcfafxf/lztaws9T7c4AJ8YZ8uooJ9O2jXIrxBP3/7u/1sRwcpRJifr6Bfv7ZD6 9ismSUu0wt0lnQmZWMwv1EIUE991gNPrbxXIf+aYzftSY+q2Zfcpe7afOlH01fLQ us+GucYa9Y0OHBeEF13w4RyIpEogjR5z1w9kYB/heWnLRFU8x1a9aX0tZWFoBtSI ZhqiP0NmbaN58bngYvn5fwzJQZ6t/RSOu6MLe0uY6UfHXAw6qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTlTDvXKc+FOdu4DbqPEhFklmR0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvOGI2N2IzYzUtYTFjNC0z M2FmLTlkNzctNDIzNDliNGM2NmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxyNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALmOO1slJRdv8DnoAS+0wCdgHpQh97MRtpcxTetJtyohzwmeSe0tURmc nEzktj4AQSPXUgjPFRE4b8EPnaj7hEsdtmOie1LKvEp3BxOawr/JAKZXeXWw2LOT awaKAzhf90hsMYq/JBZwCc1EKcpvZE+QnxGuPbMR0pGusFnzbDKVTyr6T0XqJTP/ JoyX0djUcWojQlNBdxVgwrOmu9SSuHK2L1vsi4kiBzl/bDbGKqXqKIGxu9pItHQl /MxaQqTuunZd8wnTFIygVlida3Rf22WSMnY7bSAd1emQ86/8dFDNpzDJjVT/+UFE ca43/NbzA3Wyr1cM+bHDeRygyaeasHY= -----END CERTIFICATE-----Generated at Sat Oct 10 16:52:32 2026 by rpki-client