$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/28dd8de9-ccc5-3bf3-bf52-26369ef16956.roa File: 28dd8de9-ccc5-3bf3-bf52-26369ef16956.roa (raw, json) Hash identifier: KMcQF/5+e38r1y2vp6lERIM7HOUiQ75fxbuHGgIV4hQ= Subject key identifier: A9:34:3B:F4:A3:71:5D:B7:B6:02:67:0C:99:89:E7:4E:B7:6E:85:D8 Certificate issuer: /CN=7f9f70ac-2c51-4fbe-b73a-a81973e583e3 Certificate serial: 010D0C9F4328584F4972D44EF4DE263055AB6700 Authority key identifier: DC:8B:26:D0:11:03:66:6D:54:34:8D:33:2F:16:39:6E:4E:52:76:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/28dd8de9-ccc5-3bf3-bf52-26369ef16956.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16851 IP address blocks: 199.36.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:d4:4e:f4:de:26:30:55:ab:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f9f70ac-2c51-4fbe-b73a-a81973e583e3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=563da7ba-be80-4703-94db-ffca0aff332f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:18:30:d1:00:43:9c:ec:94:f6:84:a7:74:4d: ea:01:26:1b:c6:b3:66:d8:6d:2f:c7:e7:b9:99:d1: 35:32:f3:62:f8:75:92:1e:f1:63:22:cb:98:a0:bc: ef:5d:1f:ad:2f:e6:6d:78:1e:cf:fb:8b:6f:e7:7a: b6:01:55:73:d4:56:7d:c8:0c:b7:1e:7a:ca:9c:b0: 97:3e:05:cc:a3:fb:68:1d:a3:ff:01:eb:59:58:7c: d4:39:25:f5:bb:dc:6b:5f:63:12:a0:da:fa:b6:76: 12:70:91:fb:dc:f8:0b:75:2d:ca:20:dd:1f:fb:b8: 06:a3:21:1e:d9:61:4f:c4:0f:26:36:71:d4:9f:86: 12:35:00:76:84:3b:f1:2a:e7:73:4d:fd:8d:47:07: f7:9b:3b:9e:f0:6e:5c:33:1e:80:74:5a:97:c2:cf: 5e:61:06:9e:7e:3a:6d:d3:d4:7b:fa:e8:d2:4c:7a: 9b:a6:76:40:e4:94:3a:b1:2f:47:ba:a4:f5:1d:c6: 1f:f1:33:4f:bf:15:1f:26:ff:22:66:9a:e8:cb:c0: 36:e8:e8:12:06:ad:54:9d:b0:ee:3e:2f:6b:1e:19: 86:f0:fd:79:52:e8:dc:51:98:ff:84:f1:5e:cb:0b: 64:ea:53:9c:66:52:43:ef:48:51:d7:08:ed:10:de: 26:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:34:3B:F4:A3:71:5D:B7:B6:02:67:0C:99:89:E7:4E:B7:6E:85:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/28dd8de9-ccc5-3bf3-bf52-26369ef16956.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.crl X509v3 Authority Key Identifier: keyid:DC:8B:26:D0:11:03:66:6D:54:34:8D:33:2F:16:39:6E:4E:52:76:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.cer sbgp-ipAddrBlock: critical IPv4: 199.36.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:b5:db:46:f5:e0:05:c0:8d:bc:7e:6e:97:62:d9:89:34:36: cd:ed:65:19:df:6b:d0:ec:61:63:1d:fd:be:fa:ae:df:3e:0e: 36:ed:2f:ec:86:35:14:de:88:83:76:ab:0b:29:fb:5c:05:34: 5e:89:42:53:02:e7:62:9e:a9:32:83:90:f8:69:ed:a4:d3:0f: 7d:78:37:5d:71:ef:b8:03:bf:5a:e4:36:bc:26:1d:43:f3:b7: 62:7b:43:e5:71:b9:89:9f:13:5d:cc:85:8c:a2:cf:38:f9:0c: 06:1a:77:c8:30:dc:b9:4a:59:6f:a7:eb:71:0e:32:39:02:89: 3e:dd:32:18:a5:ee:d4:d0:bb:10:5e:ef:84:a8:0f:05:e5:ef: 68:ac:d0:2b:6a:bc:3a:06:70:77:5a:67:66:68:b0:1c:3f:98: 71:9c:93:ac:4c:3f:b6:37:7d:93:2d:66:a8:01:65:68:17:5e: 74:ef:18:fb:9f:6c:16:69:c1:e5:6a:f3:48:39:87:67:05:53: ad:5d:26:ef:43:fb:68:ff:a5:30:9f:1b:df:9a:16:de:f3:f0: cb:bc:23:36:7c:1c:6d:92:32:64:1e:83:0f:89:9c:76:61:8a: e5:ee:8f:4c:4d:e6:81:f4:8a:65:d8:60:88:fe:cf:b7:33:32: 6a:c1:c5:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JctRO9N4mMFWrZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y5ZjcwYWMtMmM1MS00ZmJlLWI3M2EtYTgxOTczZTU4 M2UzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTYzZGE3YmEtYmU4MC00NzAzLTk0ZGItZmZjYTBhZmYzMzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBgw0QBDnOyU9oSndE3qASYbxrNm2G0vx+e5 mdE1MvNi+HWSHvFjIsuYoLzvXR+tL+ZteB7P+4tv53q2AVVz1FZ9yAy3HnrKnLCX PgXMo/toHaP/AetZWHzUOSX1u9xrX2MSoNr6tnYScJH73PgLdS3KIN0f+7gGoyEe 2WFPxA8mNnHUn4YSNQB2hDvxKudzTf2NRwf3mzue8G5cMx6AdFqXws9eYQaefjpt 09R7+ujSTHqbpnZA5JQ6sS9HuqT1HcYf8TNPvxUfJv8iZproy8A26OgSBq1UnbDu Pi9rHhmG8P15UujcUZj/hPFeywtk6lOcZlJD70hR1wjtEN4mzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKk0O/SjcV23tgJnDJmJ5063boXYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83Zjlm NzBhYy0yYzUxLTRmYmUtYjczYS1hODE5NzNlNTgzZTMvMjhkZDhkZTktY2NjNS0z YmYzLWJmNTItMjYzNjllZjE2OTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvN2Y5ZjcwYWMtMmM1MS00ZmJlLWI3 M2EtYTgxOTczZTU4M2UzLzdmOWY3MGFjLTJjNTEtNGZiZS1iNzNhLWE4MTk3M2U1 ODNlMy5jcmwwHwYDVR0jBBgwFoAU3Ism0BEDZm1UNI0zLxY5bk5SdgcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83ZjlmNzBhYy0yYzUxLTRmYmUtYjczYS1hODE5 NzNlNTgzZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxyR0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJG120b14AXAjbx+bpdi2Yk0Ns3tZRnfa9DsYWMd/b76rt8+DjbtL+yG NRTeiIN2qwsp+1wFNF6JQlMC52KeqTKDkPhp7aTTD314N11x77gDv1rkNrwmHUPz t2J7Q+VxuYmfE13MhYyizzj5DAYad8gw3LlKWW+n63EOMjkCiT7dMhil7tTQuxBe 74SoDwXl72is0CtqvDoGcHdaZ2ZosBw/mHGck6xMP7Y3fZMtZqgBZWgXXnTvGPuf bBZpweVq80g5h2cFU61dJu9D+2j/pTCfG9+aFt7z8Mu8IzZ8HG2SMmQegw+JnHZh iuXuj0xN5oH0imXYYIj+z7czMmrBxfA= -----END CERTIFICATE-----Generated at Fri Sep 25 21:09:59 2026 by rpki-client