$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/7782712d-1e27-3c4f-bb3f-01c6dad76529.roa File: 7782712d-1e27-3c4f-bb3f-01c6dad76529.roa (raw, json) Hash identifier: iqFz0j+4UgeQ1/PX8U0mDCVyYacLZJRvzBGlRxRAETo= Subject key identifier: C1:A1:C6:90:BE:80:B2:18:B6:32:85:D9:E1:36:E8:8C:32:BA:6C:A0 Certificate issuer: /CN=2a71f00e-0200-48df-9cb4-008df9a4a854 Certificate serial: 010D0C9F4328584F35E7CB00B4A3FB6AFE4A42C0 Authority key identifier: 38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/7782712d-1e27-3c4f-bb3f-01c6dad76529.roa Signing time: Fri 18 Sep 2026 01:00:12 +0000 ROA not before: Fri 18 Sep 2026 01:00:12 +0000 ROA not after: Thu 17 Dec 2026 02:00:12 +0000 asID: 22855 IP address blocks: 199.230.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:35:e7:cb:00:b4:a3:fb:6a:fe:4a:42:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a71f00e-0200-48df-9cb4-008df9a4a854 Validity Not Before: Sep 18 01:00:12 2026 GMT Not After : Dec 17 02:00:12 2026 GMT Subject: CN=e0c02242-45cd-43ff-9f34-a0ffa39f7034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d5:b6:45:c1:a8:5d:b4:5c:2a:84:ec:34:88: 97:ac:43:1a:2f:dd:41:fe:c0:19:41:af:ad:d7:67: ab:3c:91:cd:b2:18:62:9c:75:7f:b3:77:79:82:3c: a5:bb:93:3e:25:7e:e8:76:a9:10:fc:92:67:a1:d2: c9:9d:e6:20:53:08:a2:0d:7b:74:21:99:b7:62:a3: 42:86:3d:c7:24:67:fc:3d:7f:d1:bf:17:08:9e:11: c7:e2:f2:98:65:8c:77:0f:c5:0d:18:42:fa:2b:61: 53:4b:7b:d5:11:0b:4b:18:2a:51:ec:f1:d1:7f:2a: f0:1e:21:83:c4:e7:fb:e6:2f:6a:75:13:05:5a:f0: 9f:c6:9b:70:b5:c0:a5:51:e5:81:c2:cd:f5:51:45: 93:c9:d9:92:78:cd:22:4f:7c:d3:e8:64:08:a1:60: 0e:c0:8a:33:42:c4:d4:30:b5:35:8a:9f:37:db:f5: 6f:61:80:d6:f1:c9:15:62:bf:3d:b1:b7:f4:ae:3e: 4b:7d:fb:fc:97:d0:89:26:25:61:3a:98:d7:62:e2: d1:17:2f:c6:69:39:b0:5b:20:58:8b:55:21:ed:18: 4c:37:a1:0f:77:35:66:19:a0:d8:1b:5b:1a:00:f1: 06:67:52:2d:d9:f1:44:77:91:3e:da:2e:5d:ae:44: 60:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A1:C6:90:BE:80:B2:18:B6:32:85:D9:E1:36:E8:8C:32:BA:6C:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/7782712d-1e27-3c4f-bb3f-01c6dad76529.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl X509v3 Authority Key Identifier: keyid:38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer sbgp-ipAddrBlock: critical IPv4: 199.230.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:fb:1b:12:36:21:e5:77:36:8a:85:8a:14:29:25:da:b1:42: df:71:5e:aa:16:d1:d5:ce:7d:d6:ff:6c:25:d6:51:e0:f4:26: fc:37:35:b2:9c:35:1b:1f:ca:cd:88:94:6b:1c:a9:5e:a2:af: 3b:bb:cd:d2:25:8a:bd:00:78:af:0b:a3:a5:e2:e8:d4:c3:e1: 59:01:32:10:3f:07:f7:65:b4:5b:3c:73:07:59:ef:68:fb:3a: 12:2c:bd:ed:fc:3f:80:3f:d9:fe:f2:3e:ad:5b:59:f4:93:b2: ff:e7:7c:58:1a:4e:0a:70:1e:1a:a4:f0:8c:dc:13:ff:dc:01: e9:d5:08:16:0e:f1:3d:2f:0e:b9:23:a2:d3:b6:45:a3:88:65: 65:0b:80:5d:36:59:e6:24:45:8e:92:fe:a5:bb:14:6f:97:83: 50:aa:4a:10:d1:ab:79:7c:1a:5e:d5:86:5a:30:e7:77:f2:a5: 26:0a:8e:5f:26:8e:31:40:fc:3d:8c:85:4c:c2:b7:34:9f:27: 69:90:e0:ac:f3:eb:f2:32:23:fa:0b:f7:e7:0b:3d:53:ae:6f: fd:70:39:18:8c:8c:93:68:47:46:c3:65:92:42:9a:cd:28:90: 3d:a8:d9:93:52:c5:5b:1c:fd:bc:b5:2b:eb:1c:e9:29:92:64: 0f:a4:d3:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8158sAtKP7av5KQsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE3MWYwMGUtMDIwMC00OGRmLTljYjQtMDA4ZGY5YTRh ODU0MB4XDTI2MDkxODAxMDAxMloXDTI2MTIxNzAyMDAxMlowLzEtMCsGA1UEAxMk ZTBjMDIyNDItNDVjZC00M2ZmLTlmMzQtYTBmZmEzOWY3MDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69W2RcGoXbRcKoTsNIiXrEMaL91B/sAZQa+t 12erPJHNshhinHV/s3d5gjylu5M+JX7odqkQ/JJnodLJneYgUwiiDXt0IZm3YqNC hj3HJGf8PX/RvxcInhHH4vKYZYx3D8UNGEL6K2FTS3vVEQtLGCpR7PHRfyrwHiGD xOf75i9qdRMFWvCfxptwtcClUeWBws31UUWTydmSeM0iT3zT6GQIoWAOwIozQsTU MLU1ip832/VvYYDW8ckVYr89sbf0rj5Lffv8l9CJJiVhOpjXYuLRFy/GaTmwWyBY i1Uh7RhMN6EPdzVmGaDYG1saAPEGZ1It2fFEd5E+2i5drkRgkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGhxpC+gLIYtjKF2eE26IwyumygMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yYTcx ZjAwZS0wMjAwLTQ4ZGYtOWNiNC0wMDhkZjlhNGE4NTQvNzc4MjcxMmQtMWUyNy0z YzRmLWJiM2YtMDFjNmRhZDc2NTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmE3MWYwMGUtMDIwMC00OGRmLTlj YjQtMDA4ZGY5YTRhODU0LzJhNzFmMDBlLTAyMDAtNDhkZi05Y2I0LTAwOGRmOWE0 YTg1NC5jcmwwHwYDVR0jBBgwFoAUOA1kwPwYBvuiE5kqAVi9GUZ3do0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yYTcxZjAwZS0wMjAwLTQ4ZGYtOWNiNC0wMDhk ZjlhNGE4NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHx+aAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHP7GxI2IeV3NoqFihQpJdqxQt9xXqoW0dXOfdb/bCXWUeD0Jvw3NbKc NRsfys2IlGscqV6irzu7zdIlir0AeK8Lo6Xi6NTD4VkBMhA/B/dltFs8cwdZ72j7 OhIsve38P4A/2f7yPq1bWfSTsv/nfFgaTgpwHhqk8IzcE//cAenVCBYO8T0vDrkj otO2RaOIZWULgF02WeYkRY6S/qW7FG+Xg1CqShDRq3l8Gl7Vhlow53fypSYKjl8m jjFA/D2MhUzCtzSfJ2mQ4Kzz6/IyI/oL9+cLPVOub/1wORiMjJNoR0bDZZJCms0o kD2o2ZNSxVsc/by1K+sc6SmSZA+k01o= -----END CERTIFICATE-----Generated at Thu Sep 24 13:01:21 2026 by rpki-client