$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2513cb93-255b-4158-8458-a4ddc4350987/8b72ed14-0b96-368a-9d8d-d94cb69d93e1.roa File: 8b72ed14-0b96-368a-9d8d-d94cb69d93e1.roa (raw, json) Hash identifier: /j2npNzaYBTUwHj/zfCW9If/r7ckyhzD2WZ/9VB8rGI= Subject key identifier: 22:CA:00:72:5E:B1:22:13:B1:97:DD:83:09:36:4E:A0:F9:A5:19:9C Certificate issuer: /CN=2513cb93-255b-4158-8458-a4ddc4350987 Certificate serial: 010D0C9F4328584F119CEF67F3994925C6E46B80 Authority key identifier: 61:0D:CA:96:C4:4A:BD:20:78:2B:E8:18:8E:C0:15:97:DA:A6:57:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2513cb93-255b-4158-8458-a4ddc4350987.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2513cb93-255b-4158-8458-a4ddc4350987/8b72ed14-0b96-368a-9d8d-d94cb69d93e1.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 17318 IP address blocks: 199.30.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2513cb93-255b-4158-8458-a4ddc4350987/2513cb93-255b-4158-8458-a4ddc4350987.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2513cb93-255b-4158-8458-a4ddc4350987/2513cb93-255b-4158-8458-a4ddc4350987.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2513cb93-255b-4158-8458-a4ddc4350987.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:ef:67:f3:99:49:25:c6:e4:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2513cb93-255b-4158-8458-a4ddc4350987 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=246caf7d-c727-4958-bc30-e9937c19f671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:71:d8:69:7c:b7:95:0d:84:5e:f1:9f:1d:cc: 66:76:90:03:a7:57:e7:ff:8d:35:c3:68:32:1a:e3: d2:37:5e:11:b0:0e:bd:0a:2e:8b:fc:19:c6:b1:bc: 6c:2c:f0:ee:da:16:2c:14:72:87:a5:48:02:06:ef: b5:f6:ee:90:ba:04:42:25:2f:11:b6:67:64:39:1f: 62:93:3b:02:e5:b0:ce:f0:26:06:5c:17:14:16:3e: 2a:f8:d2:e3:74:53:a2:4e:5a:15:20:0c:c9:f1:38: 68:67:86:21:e4:fb:78:0d:70:aa:d8:65:35:50:79: 4b:d4:34:b7:c6:ca:53:ee:0e:76:d9:ce:b0:b8:fd: d7:7c:02:c7:8e:41:a4:1e:c5:57:4c:f6:18:37:74: 5b:7c:3e:b4:35:bf:48:56:b8:c7:b7:b0:0a:02:e6: 49:fc:fa:4f:e0:88:fe:f2:a6:b4:cd:55:e5:5b:20: a3:6f:7a:e1:ff:fe:af:23:27:57:e8:27:2e:59:87: d5:f7:84:91:8a:1e:ff:df:ed:9d:fe:35:f0:48:b4: fb:69:4d:4c:bf:c7:7d:17:5e:51:5b:9d:79:41:37: 9a:42:be:9f:88:14:71:ae:c5:5b:26:8e:1e:dc:32: 5e:0e:a2:c7:37:cb:80:b6:b2:bc:c4:4a:98:bd:c2: 77:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:CA:00:72:5E:B1:22:13:B1:97:DD:83:09:36:4E:A0:F9:A5:19:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2513cb93-255b-4158-8458-a4ddc4350987/8b72ed14-0b96-368a-9d8d-d94cb69d93e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2513cb93-255b-4158-8458-a4ddc4350987/2513cb93-255b-4158-8458-a4ddc4350987.crl X509v3 Authority Key Identifier: keyid:61:0D:CA:96:C4:4A:BD:20:78:2B:E8:18:8E:C0:15:97:DA:A6:57:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2513cb93-255b-4158-8458-a4ddc4350987.cer sbgp-ipAddrBlock: critical IPv4: 199.30.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:7c:f9:1f:d3:95:e4:e0:a5:fd:65:c1:54:af:f0:66:4a:e0: 64:10:08:6c:0c:0b:d6:1f:f8:a1:d0:06:98:3b:69:ec:63:c1: e2:06:86:7e:0b:38:df:fd:9e:24:6d:be:2a:3a:f0:2d:fa:07: 13:ef:c4:7f:a6:af:df:67:e1:72:ce:ee:02:8a:96:d4:76:1d: 79:4b:7e:47:48:cc:a6:57:00:c6:12:11:13:50:84:4d:90:7a: 19:64:60:c2:13:e6:b3:7e:ad:c3:ac:ca:9f:22:3e:24:b4:eb: 50:7e:e5:a6:02:b1:57:b5:2f:60:5d:ad:20:4f:58:62:24:e0: 80:5d:4d:48:8b:fa:7f:1a:6c:09:29:a3:24:6b:67:29:fe:33: 4a:0b:37:34:93:89:ab:ed:6f:77:cb:73:a2:b5:4d:12:bd:13: 08:8b:71:7d:15:0b:ce:a3:1f:00:bf:36:e6:6b:72:c7:a5:6b: 67:51:10:18:77:19:08:f5:29:69:80:c0:1a:19:53:52:7f:1b: c2:57:ba:79:f3:c7:54:d4:e8:fc:18:09:7e:27:7b:3f:20:30: aa:8b:24:cb:45:88:a4:f5:ac:e9:de:8c:3b:1e:28:f4:72:02: 55:f9:6d:16:37:91:eb:11:6b:91:73:f3:8f:4e:fd:3f:82:47: 3f:a4:65:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnO9n85lJJcbka4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUxM2NiOTMtMjU1Yi00MTU4LTg0NTgtYTRkZGM0MzUw OTg3MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MjQ2Y2FmN2QtYzcyNy00OTU4LWJjMzAtZTk5MzdjMTlmNjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3HYaXy3lQ2EXvGfHcxmdpADp1fn/401w2gy GuPSN14RsA69Ci6L/BnGsbxsLPDu2hYsFHKHpUgCBu+19u6QugRCJS8RtmdkOR9i kzsC5bDO8CYGXBcUFj4q+NLjdFOiTloVIAzJ8ThoZ4Yh5Pt4DXCq2GU1UHlL1DS3 xspT7g522c6wuP3XfALHjkGkHsVXTPYYN3RbfD60Nb9IVrjHt7AKAuZJ/PpP4Ij+ 8qa0zVXlWyCjb3rh//6vIydX6CcuWYfV94SRih7/3+2d/jXwSLT7aU1Mv8d9F15R W515QTeaQr6fiBRxrsVbJo4e3DJeDqLHN8uAtrK8xEqYvcJ3aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLKAHJesSITsZfdgwk2TqD5pRmcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNTEz Y2I5My0yNTViLTQxNTgtODQ1OC1hNGRkYzQzNTA5ODcvOGI3MmVkMTQtMGI5Ni0z NjhhLTlkOGQtZDk0Y2I2OWQ5M2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjUxM2NiOTMtMjU1Yi00MTU4LTg0 NTgtYTRkZGM0MzUwOTg3LzI1MTNjYjkzLTI1NWItNDE1OC04NDU4LWE0ZGRjNDM1 MDk4Ny5jcmwwHwYDVR0jBBgwFoAUYQ3KlsRKvSB4K+gYjsAVl9qmV9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNTEzY2I5My0yNTViLTQxNTgtODQ1OC1hNGRk YzQzNTA5ODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxx7kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABp8+R/TleTgpf1lwVSv8GZK4GQQCGwMC9Yf+KHQBpg7aexjweIGhn4L ON/9niRtvio68C36BxPvxH+mr99n4XLO7gKKltR2HXlLfkdIzKZXAMYSERNQhE2Q ehlkYMIT5rN+rcOsyp8iPiS061B+5aYCsVe1L2BdrSBPWGIk4IBdTUiL+n8abAkp oyRrZyn+M0oLNzSTiavtb3fLc6K1TRK9EwiLcX0VC86jHwC/NuZrcsela2dREBh3 GQj1KWmAwBoZU1J/G8JXunnzx1TU6PwYCX4nez8gMKqLJMtFiKT1rOnejDseKPRy AlX5bRY3kesRa5Fz849O/T+CRz+kZQE= -----END CERTIFICATE-----Generated at Mon Oct 12 00:15:49 2026 by rpki-client