$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/7d010d70-9e3e-3e5c-8465-11e63242f7c3.roa File: 7d010d70-9e3e-3e5c-8465-11e63242f7c3.roa (raw, json) Hash identifier: rX7+UUSb0XGeQi10ieYbeoQiKR37yNROTlIXQPq3L7E= Subject key identifier: A5:E0:9B:EF:6F:DB:0C:60:5E:8E:71:9D:82:83:45:65:1C:EF:A4:3D Certificate issuer: /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Certificate serial: 010D0C9F4328584FA85DF49F549BDEA2F437F2D8 Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/7d010d70-9e3e-3e5c-8465-11e63242f7c3.roa Signing time: Thu 29 Oct 2026 01:00:12 +0000 ROA not before: Thu 29 Oct 2026 01:00:12 +0000 ROA not after: Wed 27 Jan 2027 02:00:12 +0000 asID: 125 IP address blocks: 199.64.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a8:5d:f4:9f:54:9b:de:a2:f4:37:f2:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Validity Not Before: Oct 29 01:00:12 2026 GMT Not After : Jan 27 02:00:12 2027 GMT Subject: CN=8dcbe96c-0472-46dd-b8f6-3939d269d0e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:34:84:4f:91:fa:77:1b:ba:85:ab:48:41:da: 33:27:a8:0a:8b:90:c8:ea:fa:28:57:56:8d:65:82: 78:7a:fa:26:90:60:ed:1d:5b:0d:3e:81:ff:0e:e4: 1c:3f:e0:02:44:d7:0c:a9:18:6b:66:64:2b:c6:25: ae:57:08:16:93:4c:bf:6d:13:d3:65:9c:81:2a:7e: 98:2b:55:fd:3e:4e:37:37:2b:c2:17:6a:78:1c:f7: 52:18:63:7a:a9:2f:de:af:f1:27:85:0a:f1:0c:ac: 53:e4:f1:eb:b9:c5:8f:9d:f1:95:06:18:87:37:a7: 4c:67:28:6d:66:47:1d:60:c4:67:43:8a:fb:14:33: 69:2e:ab:56:fd:5a:88:26:61:5e:aa:30:d2:ad:99: 47:ff:12:02:ca:af:94:4c:5c:19:ba:36:62:77:d8: d8:ca:ea:60:cd:e8:87:a5:9a:10:4a:6a:f0:d7:cb: f3:ef:3e:d8:a4:48:86:23:58:6b:03:a4:c8:06:5c: 9e:2a:fb:68:74:8b:34:eb:37:34:b0:53:c2:cc:4d: a7:4d:67:8c:f7:3b:e9:25:9a:26:d4:15:59:03:e5: bd:cc:21:ec:19:4d:49:18:d9:c6:c5:29:76:c5:15: b2:7b:b7:b2:79:44:5a:13:51:78:0d:1d:c2:f7:aa: 48:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E0:9B:EF:6F:DB:0C:60:5E:8E:71:9D:82:83:45:65:1C:EF:A4:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/7d010d70-9e3e-3e5c-8465-11e63242f7c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl X509v3 Authority Key Identifier: keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer sbgp-ipAddrBlock: critical IPv4: 199.64.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:bd:8e:8d:d9:96:15:66:15:ad:f2:ea:7c:e8:92:4a:de:85: e7:9f:13:ae:cb:34:06:b6:f8:37:99:31:b1:67:4f:c9:cf:99: 3f:6a:46:ea:8c:0d:50:94:12:9f:45:57:1a:46:a1:42:f3:52: 10:2e:93:19:9b:55:49:7a:57:0a:bc:f1:ea:6e:e4:f4:9a:96: 03:d0:be:7c:76:55:7e:17:09:f9:86:bb:d4:b8:eb:b4:97:c5: e3:4b:18:c5:f1:94:fd:a5:3f:d9:5e:3d:0f:3e:a0:13:3c:1b: 41:a0:97:5b:61:7e:a2:ad:88:2f:69:c8:ba:dd:75:03:41:7d: 84:bf:86:76:28:fa:77:39:25:b7:0a:17:98:d0:60:68:20:d7: c1:d8:7f:38:60:19:e3:af:22:31:41:95:25:66:11:77:85:57: a7:45:b8:a8:e4:4a:27:c6:b8:8b:46:d6:eb:27:be:c1:f6:e4: 97:68:32:d7:f3:57:44:72:6d:0a:9c:9e:51:5b:2e:f4:1e:9c: 3e:57:16:6c:c2:a9:44:2d:df:a2:c4:bc:93:36:5a:73:f9:98: 86:9a:86:53:e7:90:71:ce:cc:5d:de:03:46:0b:e6:f8:62:22: dc:91:da:39:72:cd:72:68:ae:72:4d:cb:19:d9:e2:da:f7:90: e8:cf:93:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+oXfSfVJveovQ38tgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIzMTA3N2QtMDU1OS00ZTdhLTljZGYtZmUwMGE1MTJh YjVjMB4XDTI2MTAyOTAxMDAxMloXDTI3MDEyNzAyMDAxMlowLzEtMCsGA1UEAxMk OGRjYmU5NmMtMDQ3Mi00NmRkLWI4ZjYtMzkzOWQyNjlkMGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTSET5H6dxu6hatIQdozJ6gKi5DI6vooV1aN ZYJ4evomkGDtHVsNPoH/DuQcP+ACRNcMqRhrZmQrxiWuVwgWk0y/bRPTZZyBKn6Y K1X9Pk43NyvCF2p4HPdSGGN6qS/er/EnhQrxDKxT5PHrucWPnfGVBhiHN6dMZyht ZkcdYMRnQ4r7FDNpLqtW/VqIJmFeqjDSrZlH/xICyq+UTFwZujZid9jYyupgzeiH pZoQSmrw18vz7z7YpEiGI1hrA6TIBlyeKvtodIs06zc0sFPCzE2nTWeM9zvpJZom 1BVZA+W9zCHsGU1JGNnGxSl2xRWye7eyeURaE1F4DR3C96pIIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXgm+9v2wxgXo5xnYKDRWUc76Q9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjMx MDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAwYTUxMmFiNWMvN2QwMTBkNzAtOWUzZS0z ZTVjLTg0NjUtMTFlNjMyNDJmN2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIzMTA3N2QtMDU1OS00ZTdhLTlj ZGYtZmUwMGE1MTJhYjVjLzgyMzEwNzdkLTA1NTktNGU3YS05Y2RmLWZlMDBhNTEy YWI1Yy5jcmwwHwYDVR0jBBgwFoAUJ1dCrsqoI+3BIFyf8CNlXQVl+3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MjMxMDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAw YTUxMmFiNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0AJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGm9jo3ZlhVmFa3y6nzokkreheefE67LNAa2+DeZMbFnT8nPmT9qRuqM DVCUEp9FVxpGoULzUhAukxmbVUl6Vwq88epu5PSalgPQvnx2VX4XCfmGu9S467SX xeNLGMXxlP2lP9lePQ8+oBM8G0Ggl1thfqKtiC9pyLrddQNBfYS/hnYo+nc5JbcK F5jQYGgg18HYfzhgGeOvIjFBlSVmEXeFV6dFuKjkSifGuItG1usnvsH25JdoMtfz V0RybQqcnlFbLvQenD5XFmzCqUQt36LEvJM2WnP5mIaahlPnkHHOzF3eA0YL5vhi ItyR2jlyzXJornJNyxnZ4tr3kOjPk4w= -----END CERTIFICATE-----Generated at Sun Nov 15 21:14:40 2026 by rpki-client