$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/f12f44b5-1d80-3d4e-b7cc-190eb41fd0b7.roa File: f12f44b5-1d80-3d4e-b7cc-190eb41fd0b7.roa (raw, json) Hash identifier: bX9rzMyEZuDw71SqY/sOclbXFCliNgv0V3wkqgiBe1U= Subject key identifier: 74:3A:06:51:EA:09:76:A4:5C:69:60:89:DC:AC:8E:81:48:A1:0B:BA Certificate issuer: /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Certificate serial: 010D0C9F4328584EE0C20BA7EDA90FB580951580 Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/f12f44b5-1d80-3d4e-b7cc-190eb41fd0b7.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 34774 IP address blocks: 199.64.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:0b:a7:ed:a9:0f:b5:80:95:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=96b2f0d2-14dd-464b-b7b8-8fcf866501a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e4:5f:62:0a:b3:03:00:43:3d:53:94:9f:93: cb:1e:10:d0:bc:8a:d9:31:35:72:a1:7f:db:3e:63: c4:f6:32:98:b6:59:71:6b:70:0f:b5:2d:39:00:46: 1d:f3:c3:f6:9e:c4:61:47:6e:0b:99:a7:9d:18:b0: a0:c7:cf:9f:46:d7:68:7e:f7:8f:1d:1b:f2:06:59: bc:70:4e:7a:cd:52:64:06:ec:dc:87:ca:70:6f:00: b9:4b:dd:a1:12:c5:b7:d4:82:b5:5b:94:6d:44:74: 94:e6:77:cd:24:dc:36:cc:42:3b:6d:3c:a2:81:32: 10:f7:eb:6c:e8:00:08:f3:7c:6c:ef:f4:4d:10:57: cf:e8:83:9b:19:ba:68:3e:36:65:ea:c9:ca:77:88: e8:cf:cc:90:ae:8d:3a:f2:64:d3:a7:b9:73:01:69: c6:57:55:b3:f9:59:c2:0c:c9:aa:10:d2:e0:6a:21: a2:ad:9d:66:46:18:ea:1c:55:5b:b9:3b:af:bd:65: ac:08:56:00:81:14:52:72:88:d1:c6:fa:ef:4e:f2: de:88:5d:63:40:8b:46:67:b7:db:2b:61:04:49:99: 74:ba:08:5e:96:69:67:21:20:41:b4:98:22:00:20: 5e:5f:46:1b:d4:e0:fe:58:60:76:57:9b:1e:45:39: 23:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:3A:06:51:EA:09:76:A4:5C:69:60:89:DC:AC:8E:81:48:A1:0B:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/f12f44b5-1d80-3d4e-b7cc-190eb41fd0b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl X509v3 Authority Key Identifier: keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer sbgp-ipAddrBlock: critical IPv4: 199.64.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:d6:cd:49:23:f0:12:14:1b:8f:3d:11:f8:e5:4b:76:9a:34: e0:13:5f:0d:b9:7c:8b:20:27:2e:c5:8d:93:bd:69:8a:36:eb: 36:a1:57:7d:a0:8d:e5:c4:88:41:0a:d9:45:26:65:73:66:c9: 5b:fd:b6:40:66:61:97:62:79:4f:12:13:1c:86:4f:e7:8b:25: 88:f4:d4:3b:74:6f:03:98:76:40:68:ad:c7:50:0c:4c:88:4b: cb:47:dc:56:90:ec:b4:4e:72:b1:0e:a4:46:84:51:72:8d:31: d0:80:48:9d:3f:a3:1b:29:f2:5a:d5:08:74:83:56:bc:4d:0e: a0:a9:db:f0:6e:36:e1:00:fc:db:65:a1:11:33:66:da:25:cf: 8d:d7:63:2c:de:4b:f9:11:e4:ee:0e:85:c7:73:6b:4e:2e:bf: 99:bd:a5:33:37:ea:f1:1e:d0:e9:2e:f8:8a:e1:dd:da:c0:eb: 4c:8b:8d:16:cb:71:e6:fc:a5:d5:d7:db:c5:3b:ca:a3:83:11: 22:04:10:85:b6:64:38:6d:32:23:35:0b:bc:e8:d3:f5:a0:d0: 6a:fd:32:8b:42:e6:b1:64:24:41:fd:c5:76:5f:e6:fe:af:f6: 18:66:53:5c:99:ac:a4:b7:cb:b2:23:d4:90:15:42:1c:f5:1c: 85:d7:21:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwgun7akPtYCVFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIzMTA3N2QtMDU1OS00ZTdhLTljZGYtZmUwMGE1MTJh YjVjMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk OTZiMmYwZDItMTRkZC00NjRiLWI3YjgtOGZjZjg2NjUwMWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+RfYgqzAwBDPVOUn5PLHhDQvIrZMTVyoX/b PmPE9jKYtllxa3APtS05AEYd88P2nsRhR24LmaedGLCgx8+fRtdofvePHRvyBlm8 cE56zVJkBuzch8pwbwC5S92hEsW31IK1W5RtRHSU5nfNJNw2zEI7bTyigTIQ9+ts 6AAI83xs7/RNEFfP6IObGbpoPjZl6snKd4joz8yQro068mTTp7lzAWnGV1Wz+VnC DMmqENLgaiGirZ1mRhjqHFVbuTuvvWWsCFYAgRRScojRxvrvTvLeiF1jQItGZ7fb K2EESZl0ughelmlnISBBtJgiACBeX0Yb1OD+WGB2V5seRTkjHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQ6BlHqCXakXGlgidysjoFIoQu6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjMx MDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAwYTUxMmFiNWMvZjEyZjQ0YjUtMWQ4MC0z ZDRlLWI3Y2MtMTkwZWI0MWZkMGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIzMTA3N2QtMDU1OS00ZTdhLTlj ZGYtZmUwMGE1MTJhYjVjLzgyMzEwNzdkLTA1NTktNGU3YS05Y2RmLWZlMDBhNTEy YWI1Yy5jcmwwHwYDVR0jBBgwFoAUJ1dCrsqoI+3BIFyf8CNlXQVl+3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MjMxMDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAw YTUxMmFiNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx0BYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzWzUkj8BIUG489EfjlS3aaNOATXw25fIsgJy7FjZO9aYo26zahV32g jeXEiEEK2UUmZXNmyVv9tkBmYZdieU8SExyGT+eLJYj01Dt0bwOYdkBorcdQDEyI S8tH3FaQ7LROcrEOpEaEUXKNMdCASJ0/oxsp8lrVCHSDVrxNDqCp2/BuNuEA/Ntl oREzZtolz43XYyzeS/kR5O4Ohcdza04uv5m9pTM36vEe0Oku+Irh3drA60yLjRbL ceb8pdXX28U7yqODESIEEIW2ZDhtMiM1C7zo0/Wg0Gr9MotC5rFkJEH9xXZf5v6v 9hhmU1yZrKS3y7Ij1JAVQhz1HIXXIec= -----END CERTIFICATE-----Generated at Mon Sep 21 13:47:34 2026 by rpki-client