$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/9caf3157-ac47-39c5-9b2f-9710d5875ab5.roa File: 9caf3157-ac47-39c5-9b2f-9710d5875ab5.roa (raw, json) Hash identifier: CoOgznCfUlxPJTv9cNY0LS0LzJhDCDqKB9ZDWyV6L4Y= Subject key identifier: 32:81:3B:A2:2B:85:1D:E7:E9:AE:5E:B6:E2:F8:17:CF:CE:3C:8B:4E Certificate issuer: /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Certificate serial: 010D0C9F4328584F146795C80A6674C0D287B280 Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/9caf3157-ac47-39c5-9b2f-9710d5875ab5.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 34774 IP address blocks: 199.64.40.0/24 maxlen: 24 199.64.72.0/24 maxlen: 24 199.64.73.0/24 maxlen: 24 199.64.74.0/24 maxlen: 24 199.64.75.0/24 maxlen: 24 199.64.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:95:c8:0a:66:74:c0:d2:87:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=22f4d10b-9831-4748-acc4-3ad9c2ed26f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:00:0c:f4:ab:43:e3:8a:9b:98:6c:ae:4c:d0: 55:dd:96:01:a9:ab:00:f7:49:d4:12:f1:df:90:3c: 49:8c:88:a0:64:9f:91:8c:7a:92:2e:73:fb:d8:83: f5:e6:d6:8c:a7:3a:d9:46:3a:eb:98:1b:54:78:8a: b0:08:4c:65:95:82:5b:dd:7f:2d:c2:5c:89:df:eb: 2d:5c:bf:dd:6a:24:f9:3e:90:5e:59:6e:89:51:81: d8:84:68:23:d2:d0:b3:a3:af:e1:c3:69:f3:4b:ad: be:09:99:2e:f8:9f:54:93:e4:e3:74:35:2c:cc:ca: b4:eb:f1:8f:63:20:ad:3e:52:8e:09:e8:0a:d1:c4: 33:39:b4:ed:12:4d:dc:c2:c4:9d:75:10:0c:f9:d4: 9d:93:fa:4b:e0:f5:b0:90:68:67:a0:7e:87:3d:d4: ad:dd:00:5b:01:78:9d:45:88:f1:85:43:fd:6b:bc: e8:76:c4:e5:1a:3f:0d:20:8a:1f:1d:fc:0f:a7:74: 2b:ff:61:6a:18:48:84:26:52:92:8e:ec:5b:45:7d: be:ec:06:42:37:bf:27:0b:bb:c4:5f:4c:f6:11:d8: 12:0a:50:e9:64:ab:1b:f0:16:4a:94:6a:f5:d0:1a: c3:45:87:6b:f7:de:85:c0:15:94:d2:8e:06:82:e2: b3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:81:3B:A2:2B:85:1D:E7:E9:AE:5E:B6:E2:F8:17:CF:CE:3C:8B:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/9caf3157-ac47-39c5-9b2f-9710d5875ab5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl X509v3 Authority Key Identifier: keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer sbgp-ipAddrBlock: critical IPv4: 199.64.40.0/24 199.64.72.0/22 199.64.78.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:8c:da:11:c7:2e:de:e5:01:d9:ea:2c:79:a4:8f:26:17:22: f4:fe:9c:00:dd:ed:82:c4:01:25:04:7b:12:97:07:e9:d1:1b: a5:a8:54:6f:1f:a9:a6:94:e8:5e:c2:1d:fd:d3:00:a1:96:10: cd:be:fa:e1:99:c1:a4:ff:f3:7b:90:20:06:68:0a:92:75:5f: d3:4d:7e:45:5e:33:a7:1d:2d:15:d4:3b:14:24:bc:78:38:32: ce:ba:d9:83:e5:76:c2:a5:0d:88:8e:60:03:a3:93:e3:6f:ee: b4:02:57:a8:ea:6d:25:a5:68:75:9e:7f:47:f2:58:c4:47:f9: c5:e3:e1:5c:0a:cf:a7:bd:94:4b:85:de:8f:4c:7f:ac:24:83: c2:ed:d6:11:5c:53:ad:64:a3:15:f5:e2:6d:68:18:0d:e3:19: b5:11:6c:33:76:65:b4:0e:d5:27:eb:77:41:e8:1f:d0:a5:6b: 73:6a:1a:98:22:b3:35:7d:58:c0:21:10:14:ac:8d:19:05:f9: e2:47:26:b5:32:44:d0:f3:83:62:29:d9:57:bd:f5:4c:98:9d: ee:ab:db:7c:1e:02:e5:ff:b7:8a:5b:86:98:8d:da:e6:35:93: f8:2e:f2:64:76:d2:3c:e6:42:91:89:50:5d:2b:d3:c1:a0:b1: f9:86:81:72 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE8UZ5XICmZ0wNKHsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIzMTA3N2QtMDU1OS00ZTdhLTljZGYtZmUwMGE1MTJh YjVjMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk MjJmNGQxMGItOTgzMS00NzQ4LWFjYzQtM2FkOWMyZWQyNmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwAM9KtD44qbmGyuTNBV3ZYBqasA90nUEvHf kDxJjIigZJ+RjHqSLnP72IP15taMpzrZRjrrmBtUeIqwCExllYJb3X8twlyJ3+st XL/daiT5PpBeWW6JUYHYhGgj0tCzo6/hw2nzS62+CZku+J9Uk+TjdDUszMq06/GP YyCtPlKOCegK0cQzObTtEk3cwsSddRAM+dSdk/pL4PWwkGhnoH6HPdSt3QBbAXid RYjxhUP9a7zodsTlGj8NIIofHfwPp3Qr/2FqGEiEJlKSjuxbRX2+7AZCN78nC7vE X0z2EdgSClDpZKsb8BZKlGr10BrDRYdr996FwBWU0o4GguKzlQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFDKBO6IrhR3n6a5etuL4F8/OPItOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjMx MDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAwYTUxMmFiNWMvOWNhZjMxNTctYWM0Ny0z OWM1LTliMmYtOTcxMGQ1ODc1YWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIzMTA3N2QtMDU1OS00ZTdhLTlj ZGYtZmUwMGE1MTJhYjVjLzgyMzEwNzdkLTA1NTktNGU3YS05Y2RmLWZlMDBhNTEy YWI1Yy5jcmwwHwYDVR0jBBgwFoAUJ1dCrsqoI+3BIFyf8CNlXQVl+3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MjMxMDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAw YTUxMmFiNWMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAx0AoAwQC x0BIAwQBx0BOMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAJeM2hHHLt7lAdnqLHmkjyYXIvT+nADd7YLEASUE exKXB+nRG6WoVG8fqaaU6F7CHf3TAKGWEM2++uGZwaT/83uQIAZoCpJ1X9NNfkVe M6cdLRXUOxQkvHg4Ms662YPldsKlDYiOYAOjk+Nv7rQCV6jqbSWlaHWef0fyWMRH +cXj4VwKz6e9lEuF3o9Mf6wkg8Lt1hFcU61koxX14m1oGA3jGbURbDN2ZbQO1Sfr d0HoH9Cla3NqGpgiszV9WMAhEBSsjRkF+eJHJrUyRNDzg2Ip2Ve99UyYne6r23we AuX/t4pbhpiN2uY1k/gu8mR20jzmQpGJUF0r08GgsfmGgXI= -----END CERTIFICATE-----Generated at Mon Sep 21 13:49:53 2026 by rpki-client