$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204/301ebb24-b7d4-3833-bc01-534ced8fe634.roa File: 301ebb24-b7d4-3833-bc01-534ced8fe634.roa (raw, json) Hash identifier: crrtm2Lgyk+/uceqIdbVmE0A/hE9E3B6/QozhWoZdxY= Subject key identifier: ED:D9:82:94:98:01:12:A6:B9:35:AA:47:DC:7E:97:B2:76:0B:DD:3C Certificate issuer: /CN=0dfa2fe0-57ba-46c4-9d00-41a85cc4e204 Certificate serial: 010D0C9F4328584F2EED1C549FEF38221A546B80 Authority key identifier: E8:FE:01:0C:48:FA:5F:78:A8:B5:1C:B3:E6:B7:C1:52:43:0A:24:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204/301ebb24-b7d4-3833-bc01-534ced8fe634.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 395704 IP address blocks: 199.212.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:1c:54:9f:ef:38:22:1a:54:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfa2fe0-57ba-46c4-9d00-41a85cc4e204 Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=0ad60940-593c-4dfc-8624-ecf80259d975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c2:62:cf:a8:b8:8d:4b:3c:8c:3c:58:03:0e: 4f:21:87:45:8e:41:7d:fb:2c:45:ab:12:e1:34:75: 75:82:4a:ba:b8:d4:68:58:6c:89:29:28:16:24:01: 5c:f7:08:81:82:09:e5:f4:bb:5a:62:c7:bc:47:4a: 60:c1:23:1f:47:36:7f:5c:9a:11:ab:24:55:2c:98: 0a:cc:b1:43:0c:01:45:c7:88:17:cf:a2:91:35:37: f0:26:bb:bb:c7:01:71:c6:d6:87:df:5e:e8:d0:96: c6:b7:8b:bf:74:03:c8:a7:8c:b4:84:23:d7:f0:25: a1:89:b1:65:ab:df:04:97:9a:fd:e5:9e:42:62:a9: 98:e3:ea:37:e4:98:e6:fe:2e:ed:9e:9f:b8:90:41: 2f:28:3a:d8:a4:61:35:be:fd:17:98:ef:6f:c0:c1: 71:7b:26:a6:a9:e0:73:09:70:78:44:4a:5e:4e:ed: b0:fe:e8:17:7f:bc:be:71:10:ae:9a:df:ca:98:a6: e1:ec:b7:0d:63:22:08:84:26:63:fa:8a:3d:00:bb: 6c:bf:ee:52:6d:35:d2:38:70:04:62:27:a8:4a:74: 78:97:d3:6f:26:ca:27:52:c7:ab:42:8d:b0:47:b7: f9:39:80:d6:ef:d8:9c:7e:42:a6:5e:78:cc:01:2b: 40:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D9:82:94:98:01:12:A6:B9:35:AA:47:DC:7E:97:B2:76:0B:DD:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204/301ebb24-b7d4-3833-bc01-534ced8fe634.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204.crl X509v3 Authority Key Identifier: keyid:E8:FE:01:0C:48:FA:5F:78:A8:B5:1C:B3:E6:B7:C1:52:43:0A:24:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204.cer sbgp-ipAddrBlock: critical IPv4: 199.212.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:ac:bd:95:1c:b4:e0:8b:cc:e3:a9:85:43:82:c0:44:bf:b9: 2e:7f:12:4a:80:df:30:e9:cf:54:4f:6e:91:b3:ce:5b:af:e2: f1:df:76:8b:2d:06:44:8e:15:ea:11:fc:f1:fe:68:11:6e:14: 29:5b:e1:27:3a:e6:71:34:bd:99:07:51:a2:0f:e9:ad:0b:fb: df:32:b2:9f:74:08:3f:9e:7c:ad:25:c8:e8:de:08:9c:c2:4c: 02:52:49:f5:1d:94:a1:7e:99:a5:5b:82:b8:6a:81:0a:3b:06: 35:7a:c3:68:f9:45:36:64:48:f1:6d:63:ab:6e:92:ff:12:17: d0:fd:db:89:68:02:1b:e5:00:1b:da:84:84:54:77:69:14:65: ae:d5:e8:49:a4:c4:2f:ca:0a:91:4e:50:3d:f7:57:53:04:b3: 7e:a0:e2:50:ab:33:88:ec:69:24:f2:6c:3c:cc:a5:25:16:65: ac:64:1d:a8:79:2e:b3:20:43:15:56:19:c9:13:a2:de:45:f2: 2e:d2:33:ff:58:8e:82:9f:6b:39:7f:49:1e:aa:cb:6d:74:7f: 24:cb:f5:4f:96:7f:13:21:c6:07:30:3b:ef:b9:96:6b:a3:a4: 2a:d9:0b:c7:c9:85:24:a6:bb:f4:9c:69:6f:06:27:d8:bd:b7: d3:e0:ee:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7RxUn+84IhpUa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmYTJmZTAtNTdiYS00NmM0LTlkMDAtNDFhODVjYzRl MjA0MB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk MGFkNjA5NDAtNTkzYy00ZGZjLTg2MjQtZWNmODAyNTlkOTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcJiz6i4jUs8jDxYAw5PIYdFjkF9+yxFqxLh NHV1gkq6uNRoWGyJKSgWJAFc9wiBggnl9LtaYse8R0pgwSMfRzZ/XJoRqyRVLJgK zLFDDAFFx4gXz6KRNTfwJru7xwFxxtaH317o0JbGt4u/dAPIp4y0hCPX8CWhibFl q98El5r95Z5CYqmY4+o35Jjm/i7tnp+4kEEvKDrYpGE1vv0XmO9vwMFxeyamqeBz CXB4REpeTu2w/ugXf7y+cRCumt/KmKbh7LcNYyIIhCZj+oo9ALtsv+5SbTXSOHAE YieoSnR4l9NvJsonUserQo2wR7f5OYDW79icfkKmXnjMAStAKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3ZgpSYARKmuTWqR9x+l7J2C908MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wZGZh MmZlMC01N2JhLTQ2YzQtOWQwMC00MWE4NWNjNGUyMDQvMzAxZWJiMjQtYjdkNC0z ODMzLWJjMDEtNTM0Y2VkOGZlNjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGRmYTJmZTAtNTdiYS00NmM0LTlk MDAtNDFhODVjYzRlMjA0LzBkZmEyZmUwLTU3YmEtNDZjNC05ZDAwLTQxYTg1Y2M0 ZTIwNC5jcmwwHwYDVR0jBBgwFoAU6P4BDEj6X3iotRyz5rfBUkMKJK0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wZGZhMmZlMC01N2JhLTQ2YzQtOWQwMC00MWE4 NWNjNGUyMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx9RYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGsvZUctOCLzOOphUOCwES/uS5/EkqA3zDpz1RPbpGzzluv4vHfdost BkSOFeoR/PH+aBFuFClb4Sc65nE0vZkHUaIP6a0L+98ysp90CD+efK0lyOjeCJzC TAJSSfUdlKF+maVbgrhqgQo7BjV6w2j5RTZkSPFtY6tukv8SF9D924loAhvlABva hIRUd2kUZa7V6EmkxC/KCpFOUD33V1MEs36g4lCrM4jsaSTybDzMpSUWZaxkHah5 LrMgQxVWGckTot5F8i7SM/9YjoKfazl/SR6qy210fyTL9U+WfxMhxgcwO++5lmuj pCrZC8fJhSSmu/ScaW8GJ9i9t9Pg7og= -----END CERTIFICATE-----Generated at Tue Sep 22 08:35:02 2026 by rpki-client