$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/5f5d5d23-6421-3ae0-ae56-12e6898d03c8.roa File: 5f5d5d23-6421-3ae0-ae56-12e6898d03c8.roa (raw, json) Hash identifier: nAcJ6r011XZGzsdKBoK4YPTv5W9dFVp7yhL0G1+GY6M= Subject key identifier: 69:78:CB:89:FF:6A:71:58:89:3A:D9:02:70:A3:AB:65:0F:5B:12:87 Certificate issuer: /CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1 Certificate serial: 010D0C9F4328584F3CE2B63A2A247C45A4A25480 Authority key identifier: 5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/5f5d5d23-6421-3ae0-ae56-12e6898d03c8.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 397268 IP address blocks: 199.58.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:b6:3a:2a:24:7c:45:a4:a2:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=724a710f-9b44-4872-90b9-b11a5a7c7171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9c:29:0a:a4:80:eb:10:47:6f:a4:30:d1:94: 79:96:ed:8f:08:d0:13:70:6d:db:d9:16:1b:6e:f7: c8:04:ab:75:7b:5e:96:3e:9b:d7:b8:6b:c1:f7:08: eb:1f:07:a9:ac:65:2b:55:35:07:32:00:23:7d:e5: 36:fa:00:d4:50:29:8c:29:c0:eb:e3:5b:89:06:77: dd:a4:22:de:c2:94:31:c5:dd:06:d0:72:00:24:0e: d1:b8:20:43:1f:e0:56:25:fb:d0:46:87:b6:52:b6: 2a:14:28:5d:e1:ca:3c:40:8a:3c:c4:10:0d:a7:f7: b1:23:8f:e7:d4:75:36:00:37:f9:26:82:77:40:bc: b6:b9:5e:f4:92:42:79:d3:c7:be:f1:7f:52:58:ac: 5d:34:5a:79:cb:b5:c9:08:89:6b:dd:ed:79:7a:40: 0e:3e:ab:4f:1c:81:2d:2c:da:3e:db:86:0b:02:8e: 62:fa:90:5f:3a:9d:a9:6d:d7:5d:7f:84:27:ae:4c: f0:9d:c2:f3:6b:92:7e:74:77:d0:41:86:c3:14:2a: 87:2f:31:de:f1:8a:ce:2d:1d:86:18:9c:94:d6:8f: 6f:3d:1e:c3:bc:6c:3a:2c:2f:97:6b:ea:bc:90:fc: 5d:a5:95:5e:96:0d:40:d0:2e:bc:16:76:74:e1:92: e4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:78:CB:89:FF:6A:71:58:89:3A:D9:02:70:A3:AB:65:0F:5B:12:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/5f5d5d23-6421-3ae0-ae56-12e6898d03c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl X509v3 Authority Key Identifier: keyid:5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer sbgp-ipAddrBlock: critical IPv4: 199.58.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:8a:c3:5b:75:9c:b0:2d:6c:3e:b1:5e:19:7b:18:eb:38:fd: 61:6b:1b:ff:0a:50:eb:f1:ca:ce:d7:00:f9:2c:b4:60:de:14: 14:40:1c:05:2a:bd:24:cb:37:29:fb:c2:fc:71:27:80:d7:7f: 73:8a:5e:e4:c7:99:18:26:c8:18:0f:eb:60:84:de:d4:c0:ff: 9d:c1:9a:09:9c:e6:2c:f4:d5:9e:70:83:be:a5:9d:41:ef:15: af:29:86:7a:eb:e2:eb:58:32:ce:fe:97:da:f5:37:2d:cc:96: 12:06:68:8e:52:c4:7f:80:7b:56:71:c4:10:5e:2d:7b:d3:11: e7:54:74:8b:61:45:b2:f1:e3:4b:ba:e8:e4:56:ec:6d:e1:99: 1e:85:d9:82:dc:b9:8b:0c:91:0a:97:83:42:03:11:f6:a8:14: 2a:bd:fa:c6:c2:4c:b7:d7:d9:9f:5f:96:e5:07:02:37:f1:6f: 7a:64:88:50:52:98:1e:e2:df:b9:b7:54:ed:c0:6b:ea:b4:47: d5:79:21:5d:ca:96:5d:ba:c7:4c:05:05:ba:b7:d3:01:e2:54: 9e:4e:34:c7:4c:6c:b3:90:f1:b2:b2:9d:08:89:09:10:dc:fe: 85:29:e9:8a:3d:9e:7b:02:0a:86:2c:18:76:d9:d4:6a:10:b6: 4a:f8:c7:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884rY6KiR8RaSiVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjZhMTUxODMtMmMyMy00ZDBhLTlhYWEtZmVlNDdmN2E2 MWYxMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk NzI0YTcxMGYtOWI0NC00ODcyLTkwYjktYjExYTVhN2M3MTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZwpCqSA6xBHb6Qw0ZR5lu2PCNATcG3b2RYb bvfIBKt1e16WPpvXuGvB9wjrHweprGUrVTUHMgAjfeU2+gDUUCmMKcDr41uJBnfd pCLewpQxxd0G0HIAJA7RuCBDH+BWJfvQRoe2UrYqFChd4co8QIo8xBANp/exI4/n 1HU2ADf5JoJ3QLy2uV70kkJ508e+8X9SWKxdNFp5y7XJCIlr3e15ekAOPqtPHIEt LNo+24YLAo5i+pBfOp2pbdddf4QnrkzwncLza5J+dHfQQYbDFCqHLzHe8YrOLR2G GJyU1o9vPR7DvGw6LC+Xa+q8kPxdpZVelg1A0C68FnZ04ZLkuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGl4y4n/anFYiTrZAnCjq2UPWxKHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9mNmEx NTE4My0yYzIzLTRkMGEtOWFhYS1mZWU0N2Y3YTYxZjEvNWY1ZDVkMjMtNjQyMS0z YWUwLWFlNTYtMTJlNjg5OGQwM2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZjZhMTUxODMtMmMyMy00ZDBhLTlh YWEtZmVlNDdmN2E2MWYxL2Y2YTE1MTgzLTJjMjMtNGQwYS05YWFhLWZlZTQ3Zjdh NjFmMS5jcmwwHwYDVR0jBBgwFoAUXn1mq2g8dHRGhTS6+1CkL33PqZowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9mNmExNTE4My0yYzIzLTRkMGEtOWFhYS1mZWU0 N2Y3YTYxZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzp/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiKw1t1nLAtbD6xXhl7GOs4/WFrG/8KUOvxys7XAPkstGDeFBRAHAUq vSTLNyn7wvxxJ4DXf3OKXuTHmRgmyBgP62CE3tTA/53Bmgmc5iz01Z5wg76lnUHv Fa8phnrr4utYMs7+l9r1Ny3MlhIGaI5SxH+Ae1ZxxBBeLXvTEedUdIthRbLx40u6 6ORW7G3hmR6F2YLcuYsMkQqXg0IDEfaoFCq9+sbCTLfX2Z9fluUHAjfxb3pkiFBS mB7i37m3VO3Aa+q0R9V5IV3Kll26x0wFBbq30wHiVJ5ONMdMbLOQ8bKynQiJCRDc /oUp6Yo9nnsCCoYsGHbZ1GoQtkr4x8k= -----END CERTIFICATE-----Generated at Tue Sep 22 17:43:59 2026 by rpki-client