$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/72f5a23e-5550-4586-b50b-cc96519593be/0fe8694b-9a06-3961-82cd-f17b72bd05d1.roa File: 0fe8694b-9a06-3961-82cd-f17b72bd05d1.roa (raw, json) Hash identifier: ACzBvzyrQHOduiZ8EhgfjYgMgaSUf98eAhMc0+s6nBs= Subject key identifier: 3A:AC:08:74:5E:B8:D0:D2:F0:49:BE:79:79:65:CC:1E:E3:97:EB:D7 Certificate issuer: /CN=72f5a23e-5550-4586-b50b-cc96519593be Certificate serial: 010D0C9F4328584F4277D1425165D1747C46A800 Authority key identifier: 74:E2:A0:6A:58:FD:6E:A7:B0:95:57:CB:57:7A:8B:36:E9:FD:CC:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/72f5a23e-5550-4586-b50b-cc96519593be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/72f5a23e-5550-4586-b50b-cc96519593be/0fe8694b-9a06-3961-82cd-f17b72bd05d1.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 40467 IP address blocks: 199.233.202.0/24 maxlen: 24 199.233.203.0/24 maxlen: 24 204.62.216.0/24 maxlen: 24 204.62.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/72f5a23e-5550-4586-b50b-cc96519593be/72f5a23e-5550-4586-b50b-cc96519593be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/72f5a23e-5550-4586-b50b-cc96519593be/72f5a23e-5550-4586-b50b-cc96519593be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/72f5a23e-5550-4586-b50b-cc96519593be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:d1:42:51:65:d1:74:7c:46:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72f5a23e-5550-4586-b50b-cc96519593be Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=34b3cbff-6fd6-4bc7-96a8-b4d242d1037c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:34:70:85:31:71:0d:a9:d6:85:54:ca:fc:1c: c8:94:54:0c:8f:98:23:97:01:d1:d5:7e:1f:cf:2b: a4:1c:77:2c:6c:9d:02:80:0d:58:d2:8c:b0:6d:45: f9:bf:56:9a:94:ce:bf:b0:c5:ea:11:d6:5a:e1:ee: 98:87:3c:69:e6:0e:d7:cf:a0:a3:76:34:26:4c:08: be:15:44:28:7a:50:69:38:f0:f8:69:d9:2d:d2:83: a8:91:ab:44:12:05:c5:32:15:ff:a4:fb:32:40:cf: 8d:37:05:e8:1d:a8:bb:2e:4e:73:94:2e:bb:53:3d: 9c:2e:16:ae:90:44:95:36:b3:0a:83:d6:75:3c:62: 6f:b0:2a:f3:e7:42:04:52:15:2c:66:c7:a1:1c:7f: d9:00:ea:60:c8:43:29:45:cf:1b:f2:f9:e9:61:8f: 43:bb:a2:9e:5b:44:0b:ac:9e:98:db:9c:6c:e3:bb: 8d:35:88:87:08:b5:9c:3d:15:60:52:6b:bf:fe:48: 51:95:32:8a:74:16:1c:d9:6a:69:e8:62:64:10:38: 31:ec:67:f1:4e:a0:05:21:a9:e7:66:ec:27:a0:6f: c6:ed:56:80:c3:06:b3:4b:7a:43:b9:22:63:39:27: 9e:99:d4:0a:eb:a1:00:6a:07:b6:82:2e:a0:45:1f: 78:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:AC:08:74:5E:B8:D0:D2:F0:49:BE:79:79:65:CC:1E:E3:97:EB:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/72f5a23e-5550-4586-b50b-cc96519593be/0fe8694b-9a06-3961-82cd-f17b72bd05d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/72f5a23e-5550-4586-b50b-cc96519593be/72f5a23e-5550-4586-b50b-cc96519593be.crl X509v3 Authority Key Identifier: keyid:74:E2:A0:6A:58:FD:6E:A7:B0:95:57:CB:57:7A:8B:36:E9:FD:CC:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/72f5a23e-5550-4586-b50b-cc96519593be.cer sbgp-ipAddrBlock: critical IPv4: 199.233.202.0/23 204.62.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:22:7f:0c:59:c2:60:62:cb:c0:e7:63:e8:85:05:ae:0a:6e: c6:55:eb:c7:35:57:59:89:bb:6f:b8:35:58:ce:e5:d0:43:d5: d3:d1:67:fe:61:2c:75:1b:0f:86:71:14:9e:f0:ad:a6:2a:70: 37:17:bb:91:34:99:f2:60:56:3b:69:e8:ab:47:5f:7d:84:e2: d5:5b:41:74:41:7a:d8:66:a3:f1:9f:8b:6c:d8:e8:8d:3b:a8: ee:65:70:7e:f4:89:d1:b2:8c:21:5d:c2:c7:67:bb:8d:9a:f3: ef:5a:9b:d0:82:c3:4d:b4:a2:d1:4a:65:f8:93:0f:12:f3:e7: 48:7a:cf:71:86:ec:58:66:ae:4a:5b:c2:e0:d1:a6:9e:b8:83: 46:65:d7:6f:75:6a:49:9f:40:33:a3:ac:67:e5:38:3f:24:ec: 54:0a:94:9c:c5:8f:2f:d7:82:2b:54:88:01:2d:c2:79:75:61: be:30:40:ac:da:b5:56:17:9b:8c:06:97:71:1b:c2:a0:dd:6f: ab:dc:03:a6:cf:f8:75:c6:44:c1:75:a6:0e:70:f2:f4:95:3d: 76:de:4a:cb:84:e6:ab:df:59:92:bd:81:da:2d:2d:25:95:54: db:ca:3a:61:de:69:34:90:34:42:0b:29:79:29:8e:e4:63:a7: c1:db:cc:39 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9Cd9FCUWXRdHxGqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzJmNWEyM2UtNTU1MC00NTg2LWI1MGItY2M5NjUxOTU5 M2JlMB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk MzRiM2NiZmYtNmZkNi00YmM3LTk2YTgtYjRkMjQyZDEwMzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjRwhTFxDanWhVTK/BzIlFQMj5gjlwHR1X4f zyukHHcsbJ0CgA1Y0oywbUX5v1aalM6/sMXqEdZa4e6Yhzxp5g7Xz6CjdjQmTAi+ FUQoelBpOPD4adkt0oOokatEEgXFMhX/pPsyQM+NNwXoHai7Lk5zlC67Uz2cLhau kESVNrMKg9Z1PGJvsCrz50IEUhUsZsehHH/ZAOpgyEMpRc8b8vnpYY9Du6KeW0QL rJ6Y25xs47uNNYiHCLWcPRVgUmu//khRlTKKdBYc2Wpp6GJkEDgx7GfxTqAFIann ZuwnoG/G7VaAwwazS3pDuSJjOSeemdQK66EAage2gi6gRR94GQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDqsCHReuNDS8Em+eXllzB7jl+vXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi83MmY1 YTIzZS01NTUwLTQ1ODYtYjUwYi1jYzk2NTE5NTkzYmUvMGZlODY5NGItOWEwNi0z OTYxLTgyY2QtZjE3YjcyYmQwNWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNzJmNWEyM2UtNTU1MC00NTg2LWI1 MGItY2M5NjUxOTU5M2JlLzcyZjVhMjNlLTU1NTAtNDU4Ni1iNTBiLWNjOTY1MTk1 OTNiZS5jcmwwHwYDVR0jBBgwFoAUdOKgalj9bqewlVfLV3qLNun9zGowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi83MmY1YTIzZS01NTUwLTQ1ODYtYjUwYi1jYzk2 NTE5NTkzYmUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBx+nKAwQB zD7YMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABwifwxZwmBiy8DnY+iFBa4KbsZV68c1V1mJu2+4NVjO5dBD 1dPRZ/5hLHUbD4ZxFJ7wraYqcDcXu5E0mfJgVjtp6KtHX32E4tVbQXRBethmo/Gf i2zY6I07qO5lcH70idGyjCFdwsdnu42a8+9am9CCw020otFKZfiTDxLz50h6z3GG 7FhmrkpbwuDRpp64g0Zl1291akmfQDOjrGflOD8k7FQKlJzFjy/XgitUiAEtwnl1 Yb4wQKzatVYXm4wGl3EbwqDdb6vcA6bP+HXGRMF1pg5w8vSVPXbeSsuE5qvfWZK9 gdotLSWVVNvKOmHeaTSQNEILKXkpjuRjp8HbzDk= -----END CERTIFICATE-----Generated at Sun Oct 11 22:06:56 2026 by rpki-client