$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/d0f3bddd-2796-3b37-8c49-25179b54c420.roa File: d0f3bddd-2796-3b37-8c49-25179b54c420.roa (raw, json) Hash identifier: KUun347TziNvs4CR7wTD/4w9SFzIjMpg7QnYzZkdrWg= Subject key identifier: 8F:89:6C:EC:BA:F5:5F:AB:8F:32:1B:10:D0:C5:28:B3:00:96:FA:B7 Certificate issuer: /CN=f0b45f79-612d-4c7e-8c24-5f64ac75c113 Certificate serial: 010D0C9F4328584F0C0779835F1BA74282CB7E00 Authority key identifier: C2:00:C2:3A:7C:C9:49:2C:CE:F7:9C:29:EC:5E:9D:60:97:58:62:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/d0f3bddd-2796-3b37-8c49-25179b54c420.roa Signing time: Thu 03 Sep 2026 01:00:12 +0000 ROA not before: Thu 03 Sep 2026 01:00:12 +0000 ROA not after: Wed 02 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 199.255.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0c:07:79:83:5f:1b:a7:42:82:cb:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0b45f79-612d-4c7e-8c24-5f64ac75c113 Validity Not Before: Sep 3 01:00:12 2026 GMT Not After : Dec 2 02:00:12 2026 GMT Subject: CN=478c2c91-249d-4554-83ac-858cb23ad326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d7:77:35:f6:3d:f3:35:99:77:45:b9:14:c9: 16:9d:9d:59:9d:c1:86:ce:cd:fb:18:6f:4c:60:f2: 0e:98:b6:59:81:ab:07:78:14:95:e0:3f:74:df:de: b4:4f:ad:ac:b8:15:a8:92:45:f7:f0:66:49:35:18: e4:8b:e8:3e:e4:00:b5:3f:c3:6a:e0:f3:07:4d:0e: ab:96:46:c7:99:f6:4f:ed:0f:3a:fe:96:8f:87:2f: 0f:5d:1c:4d:18:e6:08:6e:d3:b1:82:80:7c:82:18: e5:27:a2:0e:42:29:26:a3:7a:6d:e0:36:c2:38:55: 97:fa:02:a6:77:42:cd:c4:32:9a:e0:ca:e4:62:41: f7:fa:ae:7d:d2:bc:6b:63:e8:15:6d:d2:41:50:40: 86:fd:38:59:d1:4e:bd:89:11:ae:22:41:a8:c4:07: de:06:27:18:49:d0:77:77:2f:4e:bd:cc:58:51:88: 0d:29:5e:72:e8:dd:da:9e:f1:0c:89:b4:fb:27:d4: 49:d0:d1:e3:04:fa:a6:5b:b4:7a:31:28:ec:33:2a: 67:ab:cb:51:e5:8d:d4:59:f7:77:94:95:27:5e:2b: d8:0a:62:c6:2f:9a:56:fc:1b:3c:07:9f:2c:d5:79: de:33:6c:66:e6:66:30:a4:ac:f8:51:b6:4f:23:c7: 17:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:89:6C:EC:BA:F5:5F:AB:8F:32:1B:10:D0:C5:28:B3:00:96:FA:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/d0f3bddd-2796-3b37-8c49-25179b54c420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.crl X509v3 Authority Key Identifier: keyid:C2:00:C2:3A:7C:C9:49:2C:CE:F7:9C:29:EC:5E:9D:60:97:58:62:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer sbgp-ipAddrBlock: critical IPv4: 199.255.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:27:a3:e6:20:65:e9:cb:3f:84:17:d6:53:18:b9:b0:27:48: 40:a2:23:a0:ff:0a:0c:27:75:d4:84:d4:b1:c6:25:c7:23:74: 17:69:06:46:bd:f4:be:91:d3:a3:5a:0c:8c:f1:7c:25:ff:b3: 78:e5:fd:0e:75:b2:4c:55:ef:69:02:12:65:30:f9:d7:50:ac: 0e:86:2a:15:46:3f:df:0e:8a:81:ee:03:26:c6:d0:08:0d:9f: 54:e9:44:5c:fb:da:92:d7:14:3f:54:94:c2:3a:9e:b2:c3:a2: 73:3e:12:18:68:7b:26:b4:52:33:a1:93:9e:48:70:45:87:a6: 91:8b:ba:1b:81:64:40:9c:57:5b:b4:79:b4:66:7c:e2:0a:d7: eb:57:94:a3:5d:e0:a2:ab:36:0b:de:a8:c5:43:c7:dc:15:d3: 37:18:f3:f3:83:fb:ad:0f:be:a9:18:21:9a:fd:51:54:87:0e: 37:45:d6:35:62:a7:29:da:df:bb:5b:63:6b:4a:10:d4:ca:1d: ce:82:fe:aa:df:f8:8b:20:54:f4:b4:20:c3:35:82:77:92:61: fa:09:57:d5:d7:7d:af:e1:b3:10:65:03:f0:b0:42:bc:a6:8a: f6:74:2b:7e:53:8b:4c:b4:15:ed:08:7c:e9:3c:34:32:78:2c: e5:84:9f:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8MB3mDXxunQoLLfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBiNDVmNzktNjEyZC00YzdlLThjMjQtNWY2NGFjNzVj MTEzMB4XDTI2MDkwMzAxMDAxMloXDTI2MTIwMjAyMDAxMlowLzEtMCsGA1UEAxMk NDc4YzJjOTEtMjQ5ZC00NTU0LTgzYWMtODU4Y2IyM2FkMzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidd3NfY98zWZd0W5FMkWnZ1ZncGGzs37GG9M YPIOmLZZgasHeBSV4D903960T62suBWokkX38GZJNRjki+g+5AC1P8Nq4PMHTQ6r lkbHmfZP7Q86/paPhy8PXRxNGOYIbtOxgoB8ghjlJ6IOQikmo3pt4DbCOFWX+gKm d0LNxDKa4MrkYkH3+q590rxrY+gVbdJBUECG/ThZ0U69iRGuIkGoxAfeBicYSdB3 dy9OvcxYUYgNKV5y6N3anvEMibT7J9RJ0NHjBPqmW7R6MSjsMypnq8tR5Y3UWfd3 lJUnXivYCmLGL5pW/Bs8B58s1XneM2xm5mYwpKz4UbZPI8cXeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+JbOy69V+rjzIbENDFKLMAlvq3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mMGI0 NWY3OS02MTJkLTRjN2UtOGMyNC01ZjY0YWM3NWMxMTMvZDBmM2JkZGQtMjc5Ni0z YjM3LThjNDktMjUxNzliNTRjNDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjBiNDVmNzktNjEyZC00YzdlLThj MjQtNWY2NGFjNzVjMTEzL2YwYjQ1Zjc5LTYxMmQtNGM3ZS04YzI0LTVmNjRhYzc1 YzExMy5jcmwwHwYDVR0jBBgwFoAUwgDCOnzJSSzO95wp7F6dYJdYYncwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mMGI0NWY3OS02MTJkLTRjN2UtOGMyNC01ZjY0 YWM3NWMxMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx//+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYno+YgZenLP4QX1lMYubAnSECiI6D/CgwnddSE1LHGJccjdBdpBka9 9L6R06NaDIzxfCX/s3jl/Q51skxV72kCEmUw+ddQrA6GKhVGP98OioHuAybG0AgN n1TpRFz72pLXFD9UlMI6nrLDonM+Ehhoeya0UjOhk55IcEWHppGLuhuBZECcV1u0 ebRmfOIK1+tXlKNd4KKrNgveqMVDx9wV0zcY8/OD+60PvqkYIZr9UVSHDjdF1jVi pyna37tbY2tKENTKHc6C/qrf+IsgVPS0IMM1gneSYfoJV9XXfa/hsxBlA/CwQrym ivZ0K35Ti0y0Fe0IfOk8NDJ4LOWEn4w= -----END CERTIFICATE-----Generated at Sun Sep 20 23:36:58 2026 by rpki-client