$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/962a24c5-1ca9-38e4-bc73-aa2cd3fdcf8a.roa File: 962a24c5-1ca9-38e4-bc73-aa2cd3fdcf8a.roa (raw, json) Hash identifier: +WRKnn5ViXR0wq1FbVxK0aeAu4hZWK1YrJd5R8IfpOk= Subject key identifier: 21:00:6C:AB:67:9E:9D:EF:72:AB:B6:89:1C:90:89:67:75:A6:E8:34 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584EE7BCBDAADEB3D723688FDDA0 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/962a24c5-1ca9-38e4-bc73-aa2cd3fdcf8a.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 16696 IP address blocks: 170.199.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:bd:aa:de:b3:d7:23:68:8f:dd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=7c1f4280-641f-4b4d-92fa-e30c60a8a889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b1:84:a7:8a:9d:8d:6f:6b:21:50:cc:81:0e: 87:03:3a:d2:fc:87:71:90:df:80:fb:e5:29:74:e1: ae:6e:da:41:f7:96:65:5e:92:9b:97:8f:de:1c:ad: a2:1e:c6:ae:35:f4:ba:c8:d1:3d:a1:ed:cf:27:13: 65:e9:fb:3e:f4:b5:ea:e8:b6:c7:bb:37:a8:5e:c9: 3f:29:b9:c2:8d:27:a2:be:35:08:ea:6d:cb:ac:86: f7:f0:13:4f:19:59:8b:a6:58:19:57:37:95:51:a2: a7:75:b6:7b:5a:26:0e:f6:54:06:4d:2b:8a:09:8b: 5f:9f:2f:a1:95:20:c3:5c:80:62:26:09:f0:20:2c: f9:b7:88:d6:c0:42:aa:e9:34:48:db:46:57:cf:8a: 1c:15:76:a6:14:40:75:d5:43:22:ea:a9:11:c9:9c: e1:27:ec:31:25:d7:0d:55:18:a3:eb:56:0a:6c:5a: 45:75:6e:61:a1:3e:31:cb:8e:77:9b:9a:be:bc:16: a0:2a:0e:ee:b2:12:42:e2:02:a6:06:5a:9a:78:97: 2f:04:a6:8a:71:7b:4a:cd:fc:5e:37:54:fb:4e:03: 8f:71:89:e9:aa:03:f3:43:4c:29:7a:a6:6c:5f:7f: 6c:64:14:c4:ea:bb:f0:88:d7:8c:8b:89:d5:6e:17: 60:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:00:6C:AB:67:9E:9D:EF:72:AB:B6:89:1C:90:89:67:75:A6:E8:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/962a24c5-1ca9-38e4-bc73-aa2cd3fdcf8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 170.199.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:63:bf:62:f7:e5:11:bc:c1:52:87:1d:26:d1:85:3f:4b:3b: 2d:71:fc:c2:4c:6f:c1:b9:97:4c:f0:26:09:0a:ae:cc:44:20: 95:fe:b7:bf:d4:84:d1:39:85:f2:d4:11:d4:8c:79:1e:e2:ad: 44:df:a2:f9:7b:6d:0c:3a:4f:c6:59:8f:88:be:d6:ae:1b:97: e3:f1:6f:64:0c:c1:0c:96:84:34:82:00:c7:3b:6e:6a:a1:5b: 65:5d:4e:f6:72:c2:de:f8:68:fb:68:31:26:a1:21:92:3f:4d: 51:c5:ec:a9:d4:f2:30:c9:33:fe:f4:3d:84:de:c8:d6:2d:e4: 52:60:53:dd:96:b7:d8:8d:ec:2c:a8:79:0b:a6:54:d7:34:ba: e7:3b:a4:f0:d4:3a:ac:b3:68:ab:2c:74:67:bd:47:83:da:62: ce:21:aa:00:34:5b:43:f5:44:a1:1f:eb:41:7b:e8:1a:a1:3b: e8:0f:89:ab:f5:47:ea:18:4d:cf:6b:2f:e8:6e:95:e2:bd:98: 5e:b6:2f:7d:d1:4b:c1:d3:ef:ac:43:13:a3:6a:b0:74:76:a4: 0c:ef:c0:40:c6:ef:a4:18:a5:56:13:16:3f:0d:7e:99:1f:94: f4:db:31:b6:11:e3:bb:63:99:a8:92:18:03:a4:ad:90:39:11: 28:ab:a5:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvL2q3rPXI2iP3aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk N2MxZjQyODAtNjQxZi00YjRkLTkyZmEtZTMwYzYwYThhODg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLGEp4qdjW9rIVDMgQ6HAzrS/IdxkN+A++Up dOGubtpB95ZlXpKbl4/eHK2iHsauNfS6yNE9oe3PJxNl6fs+9LXq6LbHuzeoXsk/ KbnCjSeivjUI6m3LrIb38BNPGVmLplgZVzeVUaKndbZ7WiYO9lQGTSuKCYtfny+h lSDDXIBiJgnwICz5t4jWwEKq6TRI20ZXz4ocFXamFEB11UMi6qkRyZzhJ+wxJdcN VRij61YKbFpFdW5hoT4xy453m5q+vBagKg7ushJC4gKmBlqaeJcvBKaKcXtKzfxe N1T7TgOPcYnpqgPzQ0wpeqZsX39sZBTE6rvwiNeMi4nVbhdgQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEAbKtnnp3vcqu2iRyQiWd1pug0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvOTYyYTI0YzUtMWNhOS0z OGU0LWJjNzMtYWEyY2QzZmRjZjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsfsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNjv2L35RG8wVKHHSbRhT9LOy1x/MJMb8G5l0zwJgkKrsxEIJX+t7/U hNE5hfLUEdSMeR7irUTfovl7bQw6T8ZZj4i+1q4bl+Pxb2QMwQyWhDSCAMc7bmqh W2VdTvZywt74aPtoMSahIZI/TVHF7KnU8jDJM/70PYTeyNYt5FJgU92Wt9iN7Cyo eQumVNc0uuc7pPDUOqyzaKssdGe9R4PaYs4hqgA0W0P1RKEf60F76BqhO+gPiav1 R+oYTc9rL+huleK9mF62L33RS8HT76xDE6NqsHR2pAzvwEDG76QYpVYTFj8Nfpkf lPTbMbYR47tjmaiSGAOkrZA5ESirpa8= -----END CERTIFICATE-----Generated at Thu Sep 24 12:12:40 2026 by rpki-client