$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/69935949-26cb-3a1a-85e7-7b6948013483.roa File: 69935949-26cb-3a1a-85e7-7b6948013483.roa (raw, json) Hash identifier: nksbY7uiDh5TvopdpEMSQbBU4bZvDPCpEvhGJrekpFg= Subject key identifier: A4:FC:A7:E6:C9:F8:B9:6B:AC:E9:93:8C:43:41:D5:D6:36:36:0D:EC Certificate issuer: /CN=8c1e504b-f881-4524-a98f-2a623e4a476d Certificate serial: 010D0C9F4328584F6292DA30423AD1AF16229C40 Authority key identifier: B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/69935949-26cb-3a1a-85e7-7b6948013483.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396952 IP address blocks: 199.36.252.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:da:30:42:3a:d1:af:16:22:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1e504b-f881-4524-a98f-2a623e4a476d Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=bf6986c3-04d3-4be4-b41c-f9ee51718d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4e:5e:6c:2a:95:4d:33:32:e9:0f:d2:dc:4e: 4e:45:be:e8:3c:1c:87:af:2f:40:f5:34:29:72:e4: c7:e9:d4:97:91:8c:8c:1d:91:9f:0a:ff:3e:9f:55: 88:7d:29:fc:cd:da:a6:4a:00:b1:8a:5c:a0:6c:ee: c0:d9:b9:8f:3f:34:7c:e1:d0:34:0f:08:10:5d:05: 98:a8:08:45:f8:07:30:19:27:0e:93:a9:83:15:59: f1:93:e9:a4:a2:38:8d:48:bc:fc:21:1c:d9:8c:37: af:ee:65:f1:f6:78:7b:06:c1:70:29:6e:0a:1f:53: a1:57:02:a0:4c:d9:19:be:00:72:ba:f4:fa:7d:e1: 8f:b6:f6:3a:98:a4:e8:65:e9:22:cb:18:b2:1f:e1: 08:2a:35:c6:84:13:60:3d:ce:e8:07:e6:f7:a1:e5: f5:9d:3d:52:ec:a8:2a:8c:00:87:45:c3:05:90:54: 0e:c6:88:5d:da:94:e5:34:7a:04:cc:9e:d5:2f:b0: be:56:07:6b:2f:06:36:3c:53:cb:3d:7d:5c:85:a1: ac:18:84:dc:f4:dd:67:53:e9:bd:d8:cd:40:56:3a: cf:ec:8f:6c:29:38:86:ad:71:ad:82:1b:ac:5a:cb: ec:a3:2d:01:ca:a8:95:db:31:8d:15:23:de:b9:6a: 8a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FC:A7:E6:C9:F8:B9:6B:AC:E9:93:8C:43:41:D5:D6:36:36:0D:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/69935949-26cb-3a1a-85e7-7b6948013483.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl X509v3 Authority Key Identifier: keyid:B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer sbgp-ipAddrBlock: critical IPv4: 199.36.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:45:7a:72:ee:f5:24:34:2a:5e:9d:93:86:dd:ce:f4:a9:ff: 4d:ee:af:41:e0:de:74:a4:7a:da:07:94:55:f4:bb:0a:27:f3: ba:f9:f8:49:5f:cc:20:3b:fc:b7:8e:27:0a:41:a6:84:b3:4a: 44:e6:c6:9d:e7:93:bc:49:d3:92:bc:57:2f:57:3f:02:26:ee: b6:c4:26:66:35:8e:41:ed:58:92:af:89:e2:f2:4c:e6:69:d0: aa:17:d4:89:b7:f1:28:a4:e1:7c:48:40:fd:a2:ba:35:a0:8b: e6:45:be:d2:d1:e4:f9:16:4a:22:0c:1d:78:1b:5d:01:23:0c: 37:ba:86:6b:74:49:34:d5:d0:71:2d:e4:6a:3d:d5:e2:ed:e5: b7:32:d3:d9:06:bf:58:db:3d:4a:ca:2f:6c:ff:51:72:fb:09: 67:dc:d3:95:77:08:35:b8:0c:7e:75:ac:17:51:95:39:15:ac: 59:77:b9:e6:9e:f6:9e:60:fc:81:54:38:9b:12:a6:09:d4:fd: d6:ac:c7:91:25:f9:7c:25:76:22:ed:57:61:13:13:d7:b9:c5: 03:14:83:f6:83:93:07:2b:aa:08:1b:0a:04:71:9c:16:a6:18: f4:2c:fa:1e:35:14:d8:f8:4d:90:bb:aa:0e:2f:ff:aa:9d:48: 75:5d:4e:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iktowQjrRrxYinEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMxZTUwNGItZjg4MS00NTI0LWE5OGYtMmE2MjNlNGE0 NzZkMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk YmY2OTg2YzMtMDRkMy00YmU0LWI0MWMtZjllZTUxNzE4ZDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0E5ebCqVTTMy6Q/S3E5ORb7oPByHry9A9TQp cuTH6dSXkYyMHZGfCv8+n1WIfSn8zdqmSgCxilygbO7A2bmPPzR84dA0DwgQXQWY qAhF+AcwGScOk6mDFVnxk+mkojiNSLz8IRzZjDev7mXx9nh7BsFwKW4KH1OhVwKg TNkZvgByuvT6feGPtvY6mKToZekiyxiyH+EIKjXGhBNgPc7oB+b3oeX1nT1S7Kgq jACHRcMFkFQOxohd2pTlNHoEzJ7VL7C+VgdrLwY2PFPLPX1chaGsGITc9N1nU+m9 2M1AVjrP7I9sKTiGrXGtghusWsvsoy0ByqiV2zGNFSPeuWqKYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKT8p+bJ+LlrrOmTjENB1dY2Ng3sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YzFl NTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYyM2U0YTQ3NmQvNjk5MzU5NDktMjZjYi0z YTFhLTg1ZTctN2I2OTQ4MDEzNDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGMxZTUwNGItZjg4MS00NTI0LWE5 OGYtMmE2MjNlNGE0NzZkLzhjMWU1MDRiLWY4ODEtNDUyNC1hOThmLTJhNjIzZTRh NDc2ZC5jcmwwHwYDVR0jBBgwFoAUuQRCw8+VQmCHza4q1ILHTtwYGN0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YzFlNTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYy M2U0YTQ3NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxyT8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVFenLu9SQ0Kl6dk4bdzvSp/03ur0Hg3nSketoHlFX0uwon87r5+Elf zCA7/LeOJwpBpoSzSkTmxp3nk7xJ05K8Vy9XPwIm7rbEJmY1jkHtWJKvieLyTOZp 0KoX1Im38Sik4XxIQP2iujWgi+ZFvtLR5PkWSiIMHXgbXQEjDDe6hmt0STTV0HEt 5Go91eLt5bcy09kGv1jbPUrKL2z/UXL7CWfc05V3CDW4DH51rBdRlTkVrFl3ueae 9p5g/IFUOJsSpgnU/dasx5El+XwldiLtV2ETE9e5xQMUg/aDkwcrqggbCgRxnBam GPQs+h41FNj4TZC7qg4v/6qdSHVdTvY= -----END CERTIFICATE-----Generated at Sun Oct 11 20:25:12 2026 by rpki-client