$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/5861fc8a-2a76-347e-aeaa-e9f8d8fd8a81.roa File: 5861fc8a-2a76-347e-aeaa-e9f8d8fd8a81.roa (raw, json) Hash identifier: uRLTmKmqT1OK2kPtCuJzgD32WzG3NbKmTJLmJOMBfbI= Subject key identifier: DD:85:4B:E7:75:D8:5A:57:E6:B2:7B:B0:CF:34:F4:BD:51:D5:63:40 Certificate issuer: /CN=399fbcba-412a-4e4c-8856-d893d23bdd7b Certificate serial: 010D0C9F4328584F119CF9DCDE0DE644EA0A0400 Authority key identifier: 57:3E:0A:60:D6:16:F9:89:C9:A5:E8:93:58:1A:F9:02:3D:20:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/5861fc8a-2a76-347e-aeaa-e9f8d8fd8a81.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 399409 IP address blocks: 198.203.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:f9:dc:de:0d:e6:44:ea:0a:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399fbcba-412a-4e4c-8856-d893d23bdd7b Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=954e33d3-23fa-479c-9144-d29760ee528c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:79:66:8b:05:00:c5:96:a0:b4:e7:e0:39:18: 85:04:08:cb:7c:08:46:2a:44:e2:d4:c1:78:2d:8c: c4:b1:17:ee:3b:b1:14:27:a1:ac:e9:41:6b:3b:9c: 1b:89:bc:13:86:8f:30:28:fe:ed:cf:ba:6f:18:d7: 7e:d9:36:4a:48:3c:ce:6d:f3:2f:22:3f:47:dd:1b: ba:e4:dc:b2:f0:63:f1:88:73:39:1b:ca:5a:26:8b: c5:be:72:87:48:67:b7:11:a6:7e:b2:4a:f8:fc:cc: 08:69:41:10:60:38:08:b2:1b:82:4e:b5:f3:f6:d1: 0f:40:12:66:d7:c5:00:fb:a0:db:04:60:eb:c8:e0: 0f:db:46:56:9d:6a:ba:60:ae:a3:ef:f5:7b:32:e3: b8:0e:28:16:10:3e:fd:9b:c6:0e:19:57:30:73:3e: 70:f4:60:26:a8:b6:75:f5:09:f7:29:67:63:4a:8a: d1:09:e9:5e:59:cc:c6:58:9e:28:b4:14:79:3d:9d: 03:41:08:10:53:9a:34:9e:46:bf:29:d5:c8:77:3a: d6:45:10:d8:89:fb:b5:66:fa:0e:84:bf:a0:68:98: dc:63:e1:d0:fb:2c:16:00:2b:57:35:ee:0e:42:14: 46:17:98:ef:0a:8f:24:4e:d2:88:a4:95:69:bc:15: 14:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:85:4B:E7:75:D8:5A:57:E6:B2:7B:B0:CF:34:F4:BD:51:D5:63:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/5861fc8a-2a76-347e-aeaa-e9f8d8fd8a81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.crl X509v3 Authority Key Identifier: keyid:57:3E:0A:60:D6:16:F9:89:C9:A5:E8:93:58:1A:F9:02:3D:20:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer sbgp-ipAddrBlock: critical IPv4: 198.203.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:30:f0:3d:2e:de:cb:b9:6b:d8:14:2a:74:9b:8c:43:a9:98: 17:0c:24:f3:cb:4f:11:67:2d:ba:f8:c8:9b:25:d6:40:85:b7: a1:98:90:8f:51:bb:c2:97:d8:de:a7:37:5b:4c:73:a0:c7:81: 1f:ec:84:92:ab:de:39:17:dc:08:c1:2a:83:98:d6:7b:41:69: 25:a3:72:99:d3:3d:36:14:3c:ef:7b:7c:a1:b7:74:de:8e:77: 37:68:0d:01:c4:e2:fb:30:37:27:1c:9f:e9:63:c3:9f:fd:17: 3c:42:9a:30:7b:48:b7:2b:5d:44:83:76:5b:6c:39:e4:79:e8: 7f:86:cb:0f:bd:1d:ff:53:81:c1:f7:c1:69:c4:fa:69:06:aa: c6:62:33:a6:78:7e:ca:58:87:91:93:b4:71:98:dd:99:b6:9b: cc:ef:22:b4:85:1b:8c:20:6d:bf:f3:61:29:2b:2d:ee:be:ca: ce:e5:b9:a2:73:28:93:50:2b:6e:a3:9a:a2:02:ba:3c:c7:61: e5:65:f6:5d:cf:76:c8:e5:b3:43:8f:e0:40:f9:6b:58:fc:96: b2:8a:31:dc:a9:a9:33:9c:a4:34:18:23:3f:b0:f5:86:43:e1: d3:e3:61:f3:0f:72:b4:65:1f:c2:1f:9d:72:8c:49:fd:dc:c2: 4d:31:a5:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnPnc3g3mROoKBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk5ZmJjYmEtNDEyYS00ZTRjLTg4NTYtZDg5M2QyM2Jk ZDdiMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk OTU0ZTMzZDMtMjNmYS00NzljLTkxNDQtZDI5NzYwZWU1MjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnlmiwUAxZagtOfgORiFBAjLfAhGKkTi1MF4 LYzEsRfuO7EUJ6Gs6UFrO5wbibwTho8wKP7tz7pvGNd+2TZKSDzObfMvIj9H3Ru6 5Nyy8GPxiHM5G8paJovFvnKHSGe3EaZ+skr4/MwIaUEQYDgIshuCTrXz9tEPQBJm 18UA+6DbBGDryOAP20ZWnWq6YK6j7/V7MuO4DigWED79m8YOGVcwcz5w9GAmqLZ1 9Qn3KWdjSorRCeleWczGWJ4otBR5PZ0DQQgQU5o0nka/KdXIdzrWRRDYifu1ZvoO hL+gaJjcY+HQ+ywWACtXNe4OQhRGF5jvCo8kTtKIpJVpvBUUTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2FS+d12FpX5rJ7sM809L1R1WNAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOTlm YmNiYS00MTJhLTRlNGMtODg1Ni1kODkzZDIzYmRkN2IvNTg2MWZjOGEtMmE3Ni0z NDdlLWFlYWEtZTlmOGQ4ZmQ4YTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzk5ZmJjYmEtNDEyYS00ZTRjLTg4 NTYtZDg5M2QyM2JkZDdiLzM5OWZiY2JhLTQxMmEtNGU0Yy04ODU2LWQ4OTNkMjNi ZGQ3Yi5jcmwwHwYDVR0jBBgwFoAUVz4KYNYW+YnJpeiTWBr5Aj0g5uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOTlmYmNiYS00MTJhLTRlNGMtODg1Ni1kODkz ZDIzYmRkN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxsvrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUw8D0u3su5a9gUKnSbjEOpmBcMJPPLTxFnLbr4yJsl1kCFt6GYkI9R u8KX2N6nN1tMc6DHgR/shJKr3jkX3AjBKoOY1ntBaSWjcpnTPTYUPO97fKG3dN6O dzdoDQHE4vswNyccn+ljw5/9FzxCmjB7SLcrXUSDdltsOeR56H+Gyw+9Hf9TgcH3 wWnE+mkGqsZiM6Z4fspYh5GTtHGY3Zm2m8zvIrSFG4wgbb/zYSkrLe6+ys7luaJz KJNQK26jmqICujzHYeVl9l3Pdsjls0OP4ED5a1j8lrKKMdypqTOcpDQYIz+w9YZD 4dPjYfMPcrRlH8IfnXKMSf3cwk0xpSQ= -----END CERTIFICATE-----Generated at Mon Sep 21 15:44:54 2026 by rpki-client