$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/8139cd3e-ada3-37b4-83a1-e828edba3f11.roa File: 8139cd3e-ada3-37b4-83a1-e828edba3f11.roa (raw, json) Hash identifier: 8RNCi+66CbQXBmtHj2bHwwW5JZggqWrMZqbimPk0QNU= Subject key identifier: 44:E7:9C:7D:E1:53:42:DA:10:18:18:BA:00:92:65:E3:76:AF:B2:58 Certificate issuer: /CN=2a576405-6d12-4321-8aff-11069dafb9f1 Certificate serial: 010D0C9F4328584F66C8A5E6802D052599FB00C0 Authority key identifier: BB:4D:83:61:A4:90:4F:28:37:18:5F:95:D5:B1:1A:01:1F:4B:15:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/8139cd3e-ada3-37b4-83a1-e828edba3f11.roa Signing time: Mon 05 Oct 2026 13:12:11 +0000 ROA not before: Mon 05 Oct 2026 13:12:11 +0000 ROA not after: Sun 03 Jan 2027 14:12:11 +0000 asID: 211575 IP address blocks: 199.19.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/2a576405-6d12-4321-8aff-11069dafb9f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/2a576405-6d12-4321-8aff-11069dafb9f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:c8:a5:e6:80:2d:05:25:99:fb:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a576405-6d12-4321-8aff-11069dafb9f1 Validity Not Before: Oct 5 13:12:11 2026 GMT Not After : Jan 3 14:12:11 2027 GMT Subject: CN=320d17e4-a0aa-46c2-a0bd-17ca99e28a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:5c:72:99:d1:ea:ef:4b:5e:b0:71:5b:2a:4d: e6:5e:22:1f:17:9b:9b:20:dd:c4:59:44:d0:40:a2: 18:47:08:1d:26:eb:6c:56:77:61:c9:47:4f:b7:4e: 08:19:07:3d:15:47:c4:e7:0d:c2:ce:ba:22:2a:b2: 31:67:8b:60:2c:b3:89:f8:d1:b6:58:66:40:c6:fd: 96:0e:6b:e2:d6:db:9c:c6:bd:83:e0:3e:31:1d:81: 98:c5:f8:70:12:6f:32:37:43:0b:aa:21:99:2a:77: f3:79:de:88:87:26:c2:fa:e0:6d:0c:4f:45:f5:d8: 14:bc:ad:f7:b8:10:64:8d:e8:2f:16:bd:6e:b4:76: 55:ed:08:6e:e3:dd:01:0d:cb:24:d8:77:e8:f7:5c: 8a:01:54:c2:59:bd:10:f2:f8:6b:6f:26:a3:02:5c: 27:e7:f0:cc:76:ee:ff:5b:59:af:9c:4d:9f:17:ec: ee:17:07:75:d0:5b:d7:3d:39:88:d5:5d:f1:29:52: e8:89:15:9f:1d:d3:be:90:96:24:08:03:25:28:5c: 48:3c:27:6d:9d:1c:51:80:b8:84:a7:24:f1:a4:fa: 47:eb:c3:f1:16:76:4b:75:f1:1d:da:2a:70:08:30: fa:44:f3:24:ff:69:26:65:6c:85:c6:81:6a:6b:a2: 45:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E7:9C:7D:E1:53:42:DA:10:18:18:BA:00:92:65:E3:76:AF:B2:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/8139cd3e-ada3-37b4-83a1-e828edba3f11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/2a576405-6d12-4321-8aff-11069dafb9f1.crl X509v3 Authority Key Identifier: keyid:BB:4D:83:61:A4:90:4F:28:37:18:5F:95:D5:B1:1A:01:1F:4B:15:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1.cer sbgp-ipAddrBlock: critical IPv4: 199.19.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:9e:de:fe:64:43:3c:cf:1e:65:dc:4f:92:04:c3:da:f4:39: 61:86:b2:26:e9:57:21:54:3c:e1:4a:e2:da:7d:2e:9a:6e:a6: 95:cb:50:00:d2:d7:8d:1a:a7:36:a5:c7:ad:ee:7c:fb:34:19: e9:5c:18:de:02:2d:4b:f5:90:fd:3b:46:e7:e4:fc:b8:4f:52: c2:58:be:ab:45:6b:7a:97:de:f0:92:e7:88:a2:1b:44:c4:b7: a0:07:fb:90:39:08:d3:4a:af:15:ab:62:a3:1d:fc:a3:d4:6b: 69:21:b2:d5:c5:52:20:92:cf:09:b2:65:74:bf:55:58:99:33: eb:b6:d4:f3:0d:69:b2:96:2a:42:26:5a:d4:b3:85:6f:35:a0: 32:9a:1f:1a:50:e5:7e:c1:0b:53:54:f9:69:b9:22:a1:1f:bf: b0:3d:d2:ac:7c:cf:bc:99:72:f0:81:4e:16:ee:32:52:73:0d: 5d:71:9f:ef:bf:40:6f:f2:ed:a0:b0:d1:61:b0:3f:7a:55:df: 24:16:fa:30:2a:93:0e:ec:13:a7:f6:f7:64:80:d3:8d:76:7d: 38:08:8b:d1:8e:8b:5e:84:b6:4a:3a:06:f5:39:10:e1:fe:8f: ad:13:07:f2:0d:4a:a4:87:2f:16:32:6c:a6:24:7b:d5:7d:38: fc:c5:c8:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9myKXmgC0FJZn7AMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE1NzY0MDUtNmQxMi00MzIxLThhZmYtMTEwNjlkYWZi OWYxMB4XDTI2MTAwNTEzMTIxMVoXDTI3MDEwMzE0MTIxMVowLzEtMCsGA1UEAxMk MzIwZDE3ZTQtYTBhYS00NmMyLWEwYmQtMTdjYTk5ZTI4YThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/VxymdHq70tesHFbKk3mXiIfF5ubIN3EWUTQ QKIYRwgdJutsVndhyUdPt04IGQc9FUfE5w3CzroiKrIxZ4tgLLOJ+NG2WGZAxv2W Dmvi1tucxr2D4D4xHYGYxfhwEm8yN0MLqiGZKnfzed6IhybC+uBtDE9F9dgUvK33 uBBkjegvFr1utHZV7Qhu490BDcsk2Hfo91yKAVTCWb0Q8vhrbyajAlwn5/DMdu7/ W1mvnE2fF+zuFwd10FvXPTmI1V3xKVLoiRWfHdO+kJYkCAMlKFxIPCdtnRxRgLiE pyTxpPpH68PxFnZLdfEd2ipwCDD6RPMk/2kmZWyFxoFqa6JF9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETnnH3hU0LaEBgYugCSZeN2r7JYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yYTU3 NjQwNS02ZDEyLTQzMjEtOGFmZi0xMTA2OWRhZmI5ZjEvODEzOWNkM2UtYWRhMy0z N2I0LTgzYTEtZTgyOGVkYmEzZjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMmE1NzY0MDUtNmQxMi00MzIxLThh ZmYtMTEwNjlkYWZiOWYxLzJhNTc2NDA1LTZkMTItNDMyMS04YWZmLTExMDY5ZGFm YjlmMS5jcmwwHwYDVR0jBBgwFoAUu02DYaSQTyg3GF+V1bEaAR9LFUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yYTU3NjQwNS02ZDEyLTQzMjEtOGFmZi0xMTA2 OWRhZmI5ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxMWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6e3v5kQzzPHmXcT5IEw9r0OWGGsibpVyFUPOFK4tp9LppuppXLUADS 140apzalx63ufPs0GelcGN4CLUv1kP07Rufk/LhPUsJYvqtFa3qX3vCS54iiG0TE t6AH+5A5CNNKrxWrYqMd/KPUa2khstXFUiCSzwmyZXS/VViZM+u21PMNabKWKkIm WtSzhW81oDKaHxpQ5X7BC1NU+Wm5IqEfv7A90qx8z7yZcvCBThbuMlJzDV1xn++/ QG/y7aCw0WGwP3pV3yQW+jAqkw7sE6f292SA0412fTgIi9GOi16Etko6BvU5EOH+ j60TB/INSqSHLxYybKYke9V9OPzFyDw= -----END CERTIFICATE-----Generated at Wed Oct 14 15:44:47 2026 by rpki-client