$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969a8b97-1a80-41dd-895d-87bb48020564/299db0f5-6a2d-3f57-aaee-1d078f2a000b.roa File: 299db0f5-6a2d-3f57-aaee-1d078f2a000b.roa (raw, json) Hash identifier: sh1NFCOdpqF8RzFMecUiKcRhYVc+VK+MKc+WRLWM3iw= Subject key identifier: 7C:9E:1A:71:62:A2:4D:30:A6:83:EF:D5:D6:CA:2E:04:EB:1A:7D:81 Certificate issuer: /CN=969a8b97-1a80-41dd-895d-87bb48020564 Certificate serial: 010D0C9F4328584F0ED22DCD0A63B422640DC280 Authority key identifier: CC:CE:B3:A5:F0:E3:07:C5:8F:24:23:65:16:80:D8:E4:6E:CB:F4:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969a8b97-1a80-41dd-895d-87bb48020564.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969a8b97-1a80-41dd-895d-87bb48020564/299db0f5-6a2d-3f57-aaee-1d078f2a000b.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 812 IP address blocks: 199.187.224.0/24 maxlen: 24 199.187.225.0/24 maxlen: 24 199.187.226.0/24 maxlen: 24 199.187.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969a8b97-1a80-41dd-895d-87bb48020564/969a8b97-1a80-41dd-895d-87bb48020564.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969a8b97-1a80-41dd-895d-87bb48020564/969a8b97-1a80-41dd-895d-87bb48020564.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969a8b97-1a80-41dd-895d-87bb48020564.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:2d:cd:0a:63:b4:22:64:0d:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=969a8b97-1a80-41dd-895d-87bb48020564 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=7ca780b8-12c4-4b63-80a8-c845f94b0d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3c:a6:e3:c1:3e:7a:6c:b9:72:51:a0:a0:5f: 41:24:86:35:92:4b:40:76:cd:c5:84:17:16:56:83: 38:ec:83:bb:cb:ff:57:17:20:32:9b:dd:57:e3:d9: 77:c6:2c:5a:1c:e5:8e:ec:f2:d3:4c:57:5a:9a:5a: 6c:0a:1a:1b:ff:9c:3b:f2:bf:c0:29:8e:cf:c7:a5: 80:7b:c2:85:b4:b3:7d:ed:59:64:89:37:af:6f:58: 37:7a:5a:74:db:94:21:66:68:71:73:e9:cd:35:95: 76:36:2e:72:82:68:3e:e2:da:02:1e:77:88:8a:93: e3:28:7d:4a:be:61:5d:09:58:5c:f9:f3:c8:01:44: 44:ee:6f:7a:6c:d1:7d:2c:e5:2e:b2:af:a3:3d:cc: 2c:27:b3:63:b9:9b:e2:1f:ad:18:59:08:0b:69:6e: 75:6c:ce:5a:71:0e:eb:21:86:81:18:2e:59:c7:73: b4:18:19:b3:0e:6e:42:9a:92:94:82:ad:0b:54:7c: bf:88:3e:95:14:76:14:53:2b:f5:26:d2:fc:aa:f9: eb:38:f4:fe:4d:0c:94:7b:3d:ad:fa:a0:6b:a4:af: 66:24:0d:f9:8b:a5:5d:34:43:86:da:83:2f:f7:82: bc:3e:4b:f2:70:d9:69:38:25:c2:f8:18:f1:35:4e: 9d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:9E:1A:71:62:A2:4D:30:A6:83:EF:D5:D6:CA:2E:04:EB:1A:7D:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969a8b97-1a80-41dd-895d-87bb48020564/299db0f5-6a2d-3f57-aaee-1d078f2a000b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969a8b97-1a80-41dd-895d-87bb48020564/969a8b97-1a80-41dd-895d-87bb48020564.crl X509v3 Authority Key Identifier: keyid:CC:CE:B3:A5:F0:E3:07:C5:8F:24:23:65:16:80:D8:E4:6E:CB:F4:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969a8b97-1a80-41dd-895d-87bb48020564.cer sbgp-ipAddrBlock: critical IPv4: 199.187.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:33:a8:09:99:f0:3c:eb:3a:86:d3:f6:29:e0:44:ec:49:ef: e2:38:7c:66:b2:fc:ff:8e:07:c8:e1:40:26:0a:55:9e:d6:f7: 55:15:3c:fb:c5:18:bf:4d:43:b0:b0:3d:14:5a:ea:ee:3c:5b: f7:5b:b0:50:26:e2:fe:a8:39:13:3a:07:59:6b:01:31:57:a5: bd:2e:6e:a6:3c:3f:19:f3:20:a8:b3:fa:f3:7a:6a:02:99:3b: c7:3d:91:c7:c5:8c:1c:8f:c2:f9:b4:a4:be:7c:66:83:60:bf: 2d:99:10:46:fb:d5:fa:ba:61:30:35:d5:e6:2a:e2:21:d8:91: c5:3a:df:8f:5d:4a:f4:99:a0:e9:b5:be:91:0a:99:17:a7:1d: 09:80:ef:4a:0c:c5:bd:21:ad:e7:0e:9f:e4:2d:cd:a8:cb:5b: 26:47:e6:7e:ec:51:58:18:1b:c5:c1:ce:4e:f2:f3:04:17:ec: 68:c9:f8:4f:39:fd:37:80:eb:2c:80:2b:09:bc:d3:15:e4:f2: 43:41:47:6a:5c:0f:37:ad:63:b6:be:77:dc:4d:d1:3e:43:b5: e9:f6:18:37:b6:04:c1:ce:f0:25:20:f6:5a:ea:3c:e6:ed:98: 41:cc:62:58:5a:2f:de:b7:de:9c:ef:d1:ce:28:5f:15:de:e1: 25:f7:72:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0i3NCmO0ImQNwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY5YThiOTctMWE4MC00MWRkLTg5NWQtODdiYjQ4MDIw NTY0MB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk N2NhNzgwYjgtMTJjNC00YjYzLTgwYTgtYzg0NWY5NGIwZDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDym48E+emy5clGgoF9BJIY1kktAds3FhBcW VoM47IO7y/9XFyAym91X49l3xixaHOWO7PLTTFdamlpsChob/5w78r/AKY7Px6WA e8KFtLN97VlkiTevb1g3elp025QhZmhxc+nNNZV2Ni5ygmg+4toCHneIipPjKH1K vmFdCVhc+fPIAURE7m96bNF9LOUusq+jPcwsJ7NjuZviH60YWQgLaW51bM5acQ7r IYaBGC5Zx3O0GBmzDm5CmpKUgq0LVHy/iD6VFHYUUyv1JtL8qvnrOPT+TQyUez2t +qBrpK9mJA35i6VdNEOG2oMv94K8PkvycNlpOCXC+BjxNU6dcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHyeGnFiok0wpoPv1dbKLgTrGn2BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85Njlh OGI5Ny0xYTgwLTQxZGQtODk1ZC04N2JiNDgwMjA1NjQvMjk5ZGIwZjUtNmEyZC0z ZjU3LWFhZWUtMWQwNzhmMmEwMDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOTY5YThiOTctMWE4MC00MWRkLTg5 NWQtODdiYjQ4MDIwNTY0Lzk2OWE4Yjk3LTFhODAtNDFkZC04OTVkLTg3YmI0ODAy MDU2NC5jcmwwHwYDVR0jBBgwFoAUzM6zpfDjB8WPJCNlFoDY5G7L9PowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi85NjlhOGI5Ny0xYTgwLTQxZGQtODk1ZC04N2Ji NDgwMjA1NjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7vgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIszqAmZ8DzrOobT9ingROxJ7+I4fGay/P+OB8jhQCYKVZ7W91UVPPvF GL9NQ7CwPRRa6u48W/dbsFAm4v6oORM6B1lrATFXpb0ubqY8PxnzIKiz+vN6agKZ O8c9kcfFjByPwvm0pL58ZoNgvy2ZEEb71fq6YTA11eYq4iHYkcU6349dSvSZoOm1 vpEKmRenHQmA70oMxb0hrecOn+QtzajLWyZH5n7sUVgYG8XBzk7y8wQX7GjJ+E85 /TeA6yyAKwm80xXk8kNBR2pcDzetY7a+d9xN0T5Dten2GDe2BMHO8CUg9lrqPObt mEHMYlhaL9633pzv0c4oXxXe4SX3csI= -----END CERTIFICATE-----Generated at Mon Sep 21 19:17:31 2026 by rpki-client