$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06dcca32-0336-4ac7-9c00-79ccd9e61ba0/f2d5b1f3-9be7-3c39-9b76-ff499d3173ae.roa File: f2d5b1f3-9be7-3c39-9b76-ff499d3173ae.roa (raw, json) Hash identifier: vUe1/EPPWDyFt5a5flMMJuNxp0ZbdfHHJ8uEzaCP1po= Subject key identifier: 78:33:F5:8A:5C:6B:19:1C:BA:44:FC:79:8E:49:BB:AD:29:26:42:DE Certificate issuer: /CN=06dcca32-0336-4ac7-9c00-79ccd9e61ba0 Certificate serial: 010D0C9F4328584F0D6CDDFB80EDCECEA31E9B80 Authority key identifier: EF:0B:2B:E9:83:A2:A1:78:65:71:AE:D8:C3:FD:B7:BE:7F:AE:A9:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06dcca32-0336-4ac7-9c00-79ccd9e61ba0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06dcca32-0336-4ac7-9c00-79ccd9e61ba0/f2d5b1f3-9be7-3c39-9b76-ff499d3173ae.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 11852 IP address blocks: 199.242.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06dcca32-0336-4ac7-9c00-79ccd9e61ba0/06dcca32-0336-4ac7-9c00-79ccd9e61ba0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06dcca32-0336-4ac7-9c00-79ccd9e61ba0/06dcca32-0336-4ac7-9c00-79ccd9e61ba0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06dcca32-0336-4ac7-9c00-79ccd9e61ba0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:dd:fb:80:ed:ce:ce:a3:1e:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06dcca32-0336-4ac7-9c00-79ccd9e61ba0 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=9b0bd79f-f726-4b96-a074-146f1b23d14a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:21:41:ae:8c:96:4e:93:12:93:14:a7:4c:65: 15:54:61:a7:78:f2:c1:e7:d9:a3:e2:a8:52:ad:37: e2:b1:b4:6b:ab:eb:f9:78:02:7a:33:95:35:0d:d1: df:8c:99:32:f9:5c:92:31:79:a9:91:ac:a3:b0:12: ae:b9:e5:38:60:8c:c4:55:f2:33:bd:41:8c:07:af: 25:fe:a2:a5:90:ab:3a:ad:0e:0a:e1:d8:0e:64:fd: ba:c6:1d:9e:52:8a:2f:76:b0:f3:6d:1a:d9:33:6d: ed:53:74:7a:fc:18:78:70:9b:0b:31:c1:e6:1f:31: c4:b1:d8:3c:ac:59:06:01:0d:3b:7d:59:4f:43:ef: b1:ff:5a:d0:dd:ab:d7:11:90:34:a8:ad:d2:90:c2: d6:5e:6b:3a:a7:f6:fe:e8:14:ac:67:38:7b:40:b3: b5:45:78:7b:07:a0:74:fc:45:c4:8e:aa:7d:c8:ac: 9a:c1:9e:bc:7f:89:75:15:6a:7c:e3:1d:1d:16:e9: 83:d7:80:56:3c:82:b7:6a:6f:1b:2f:c5:17:9e:76: f8:0c:c0:26:cb:af:19:64:be:95:bd:34:b8:34:a7: 45:d2:5d:ce:4f:f4:75:6d:b3:0e:97:24:07:04:ff: 25:24:19:0c:5d:3a:31:1b:b9:f4:62:7a:f3:74:e7: 35:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:33:F5:8A:5C:6B:19:1C:BA:44:FC:79:8E:49:BB:AD:29:26:42:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06dcca32-0336-4ac7-9c00-79ccd9e61ba0/f2d5b1f3-9be7-3c39-9b76-ff499d3173ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06dcca32-0336-4ac7-9c00-79ccd9e61ba0/06dcca32-0336-4ac7-9c00-79ccd9e61ba0.crl X509v3 Authority Key Identifier: keyid:EF:0B:2B:E9:83:A2:A1:78:65:71:AE:D8:C3:FD:B7:BE:7F:AE:A9:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06dcca32-0336-4ac7-9c00-79ccd9e61ba0.cer sbgp-ipAddrBlock: critical IPv4: 199.242.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:96:d6:ba:64:a2:27:67:f4:5d:c3:87:9a:1a:a2:ab:df:01: ad:3b:4c:f4:46:34:9f:8c:ba:f7:01:78:f6:5d:b7:6e:47:54: d0:69:fd:dd:22:e5:da:60:f3:0d:61:35:7d:a2:3c:0c:64:14: cb:5a:27:91:ab:05:94:a7:f4:e2:72:2d:5e:66:92:a1:a5:00: 60:a0:79:8d:62:55:a3:36:a5:be:ad:7f:41:64:d2:f4:56:2b: 5a:98:38:47:6a:56:43:2b:4a:48:9f:2e:4e:7b:51:d1:e3:b7: ce:a6:26:54:3f:4c:b3:e9:82:18:58:02:c2:15:33:a7:3a:ff: 35:4a:b4:51:61:26:82:5c:67:6c:2f:5f:17:99:ce:1d:39:26: de:83:4d:73:28:38:dc:c7:00:97:a8:b5:a2:0d:36:24:5d:7a: 66:8a:9e:ec:0c:67:75:92:68:83:35:de:00:1a:10:e8:32:7e: 1b:82:89:bb:d4:e5:e7:c6:0b:73:bb:c9:82:8f:c4:b6:f8:02: 6c:5d:2e:ce:47:de:70:59:f0:dd:e6:47:5c:6e:6b:eb:1d:c9: 3d:0b:e9:81:f6:db:53:72:05:69:2c:57:39:ff:31:b8:b1:57: d7:08:bf:70:f7:2d:33:0a:7c:ee:75:36:85:19:83:a1:5f:55: 75:33:24:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbN37gO3OzqMem4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDZkY2NhMzItMDMzNi00YWM3LTljMDAtNzljY2Q5ZTYx YmEwMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk OWIwYmQ3OWYtZjcyNi00Yjk2LWEwNzQtMTQ2ZjFiMjNkMTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSFBroyWTpMSkxSnTGUVVGGnePLB59mj4qhS rTfisbRrq+v5eAJ6M5U1DdHfjJky+VySMXmpkayjsBKuueU4YIzEVfIzvUGMB68l /qKlkKs6rQ4K4dgOZP26xh2eUoovdrDzbRrZM23tU3R6/Bh4cJsLMcHmHzHEsdg8 rFkGAQ07fVlPQ++x/1rQ3avXEZA0qK3SkMLWXms6p/b+6BSsZzh7QLO1RXh7B6B0 /EXEjqp9yKyawZ68f4l1FWp84x0dFumD14BWPIK3am8bL8UXnnb4DMAmy68ZZL6V vTS4NKdF0l3OT/R1bbMOlyQHBP8lJBkMXToxG7n0YnrzdOc1rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgz9YpcaxkcukT8eY5Ju60pJkLeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNmRj Y2EzMi0wMzM2LTRhYzctOWMwMC03OWNjZDllNjFiYTAvZjJkNWIxZjMtOWJlNy0z YzM5LTliNzYtZmY0OTlkMzE3M2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDZkY2NhMzItMDMzNi00YWM3LTlj MDAtNzljY2Q5ZTYxYmEwLzA2ZGNjYTMyLTAzMzYtNGFjNy05YzAwLTc5Y2NkOWU2 MWJhMC5jcmwwHwYDVR0jBBgwFoAU7wsr6YOioXhlca7Yw/23vn+uqX0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNmRjY2EzMi0wMzM2LTRhYzctOWMwMC03OWNj ZDllNjFiYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/L1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKW1rpkoidn9F3Dh5oaoqvfAa07TPRGNJ+MuvcBePZdt25HVNBp/d0i 5dpg8w1hNX2iPAxkFMtaJ5GrBZSn9OJyLV5mkqGlAGCgeY1iVaM2pb6tf0Fk0vRW K1qYOEdqVkMrSkifLk57UdHjt86mJlQ/TLPpghhYAsIVM6c6/zVKtFFhJoJcZ2wv XxeZzh05Jt6DTXMoONzHAJeotaINNiRdemaKnuwMZ3WSaIM13gAaEOgyfhuCibvU 5efGC3O7yYKPxLb4AmxdLs5H3nBZ8N3mR1xua+sdyT0L6YH221NyBWksVzn/Mbix V9cIv3D3LTMKfO51NoUZg6FfVXUzJEI= -----END CERTIFICATE-----Generated at Tue Sep 22 01:50:51 2026 by rpki-client