$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/b47136ca-fd37-38fa-8727-ad3d908c9514.roa File: b47136ca-fd37-38fa-8727-ad3d908c9514.roa (raw, json) Hash identifier: xrzmpa6Oy086JyTw1EnKUMD/+j6VSzF1c4bGADEI0dI= Subject key identifier: 33:1F:E0:C6:E7:FB:EC:E4:68:26:5F:B2:4A:0E:D6:4F:45:6E:68:13 Certificate issuer: /CN=5ddde1fe-7525-49e3-9718-412c13cd42ca Certificate serial: 010D0C9F4328584F18979AE654BAEFE1B5466ED8 Authority key identifier: 3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/b47136ca-fd37-38fa-8727-ad3d908c9514.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 834 IP address blocks: 199.101.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:9a:e6:54:ba:ef:e1:b5:46:6e:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddde1fe-7525-49e3-9718-412c13cd42ca Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=468c2eda-815e-48ec-b05f-02d715babcb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3a:de:37:98:2d:d8:b9:7a:af:51:9a:5d:9e: 7a:0f:f2:78:30:e6:7a:14:eb:b5:f2:4d:91:b7:aa: bb:61:40:f5:a6:b5:a5:b2:2f:9b:d6:08:7c:c0:3c: f6:67:79:7a:6a:22:b7:92:11:0c:b6:68:90:68:86: 74:98:17:b6:e7:3d:d5:df:f6:53:40:59:84:a9:7e: 51:ea:d0:b7:89:f8:42:30:c9:87:d1:c1:38:f2:e0: 04:d0:7f:14:0b:e0:f8:58:0b:3f:04:3b:8d:33:1f: 67:db:48:2a:04:08:c6:a9:f1:93:a9:c1:a8:f8:84: 52:a4:24:94:97:44:c5:c9:39:d7:7c:49:d1:ab:91: ec:ab:6d:51:9f:c8:fc:58:b6:5e:7f:6d:4a:47:80: b8:6d:84:89:25:20:44:79:ce:bb:31:ef:6c:a0:19: 4b:8d:5b:99:d5:b7:47:74:f9:13:66:c3:32:48:82: 3e:c7:92:73:5b:d6:44:5e:93:7e:f1:ea:21:ef:df: c8:c3:3d:d4:3a:7d:25:2a:30:31:30:cc:89:a5:b7: 2b:f5:c5:38:5e:3c:13:f8:37:30:2a:ad:28:31:c7: 0e:43:ac:83:aa:77:01:0e:91:88:b3:28:39:f2:a9: fe:46:a7:93:36:58:e4:b4:fd:b3:7e:02:66:85:aa: 0c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:1F:E0:C6:E7:FB:EC:E4:68:26:5F:B2:4A:0E:D6:4F:45:6E:68:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/b47136ca-fd37-38fa-8727-ad3d908c9514.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl X509v3 Authority Key Identifier: keyid:3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer sbgp-ipAddrBlock: critical IPv4: 199.101.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:bf:d2:0a:a7:aa:10:83:ec:9f:87:17:0e:eb:e1:c1:dc:41: 9b:d6:0d:eb:ae:f9:51:39:21:74:6b:b7:d5:7d:8e:e3:46:bf: 5b:e5:ce:2a:27:00:83:f6:db:17:30:fa:9a:46:d9:86:01:07: 80:1c:ae:2b:2a:87:33:a6:31:3e:1b:2e:47:8b:c0:63:70:01: 4d:e0:01:47:9b:b9:09:85:68:98:c6:f9:e8:50:89:a7:57:14: da:75:f4:af:11:fa:27:c1:b1:4c:30:d0:eb:01:7c:f1:75:9a: 2f:2b:2b:3f:be:4c:b1:a2:a1:60:17:94:0e:fb:2f:a3:d6:27: f7:af:38:c1:a1:9c:2e:51:cf:3a:53:1a:7a:8e:77:1d:86:bc: bd:85:92:76:06:aa:e7:a1:ac:5a:d3:46:7a:42:9d:15:ea:62: f4:92:ac:77:16:a8:29:5a:55:23:fd:e4:52:88:be:f6:20:c5: 80:ea:18:9f:63:79:98:a3:41:57:f0:58:67:97:5c:61:51:39: ef:58:a2:1b:63:98:48:49:44:9a:2c:ec:b2:68:e1:c3:9a:4e: b6:0c:65:d5:50:62:b7:8a:d4:d9:e0:7c:52:c5:8e:0f:5a:cb: 99:22:d5:a0:0f:a4:a9:02:b1:ef:c2:9b:32:53:a3:57:ae:e3: 34:56:16:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl5rmVLrv4bVGbtgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkZGUxZmUtNzUyNS00OWUzLTk3MTgtNDEyYzEzY2Q0 MmNhMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk NDY4YzJlZGEtODE1ZS00OGVjLWIwNWYtMDJkNzE1YmFiY2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzreN5gt2Ll6r1GaXZ56D/J4MOZ6FOu18k2R t6q7YUD1prWlsi+b1gh8wDz2Z3l6aiK3khEMtmiQaIZ0mBe25z3V3/ZTQFmEqX5R 6tC3ifhCMMmH0cE48uAE0H8UC+D4WAs/BDuNMx9n20gqBAjGqfGTqcGo+IRSpCSU l0TFyTnXfEnRq5Hsq21Rn8j8WLZef21KR4C4bYSJJSBEec67Me9soBlLjVuZ1bdH dPkTZsMySII+x5JzW9ZEXpN+8eoh79/Iwz3UOn0lKjAxMMyJpbcr9cU4XjwT+Dcw Kq0oMccOQ6yDqncBDpGIsyg58qn+RqeTNljktP2zfgJmhaoM5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMf4Mbn++zkaCZfskoO1k9FbmgTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZGRk ZTFmZS03NTI1LTQ5ZTMtOTcxOC00MTJjMTNjZDQyY2EvYjQ3MTM2Y2EtZmQzNy0z OGZhLTg3MjctYWQzZDkwOGM5NTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWRkZGUxZmUtNzUyNS00OWUzLTk3 MTgtNDEyYzEzY2Q0MmNhLzVkZGRlMWZlLTc1MjUtNDllMy05NzE4LTQxMmMxM2Nk NDJjYS5jcmwwHwYDVR0jBBgwFoAUPyEX+C90LrvdwcZoG6YcjoqBYSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZGRkZTFmZS03NTI1LTQ5ZTMtOTcxOC00MTJj MTNjZDQyY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2XDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIO/0gqnqhCD7J+HFw7r4cHcQZvWDeuu+VE5IXRrt9V9juNGv1vlzion AIP22xcw+ppG2YYBB4AcrisqhzOmMT4bLkeLwGNwAU3gAUebuQmFaJjG+ehQiadX FNp19K8R+ifBsUww0OsBfPF1mi8rKz++TLGioWAXlA77L6PWJ/evOMGhnC5RzzpT GnqOdx2GvL2FknYGquehrFrTRnpCnRXqYvSSrHcWqClaVSP95FKIvvYgxYDqGJ9j eZijQVfwWGeXXGFROe9YohtjmEhJRJos7LJo4cOaTrYMZdVQYreK1NngfFLFjg9a y5ki1aAPpKkCse/CmzJTo1eu4zRWFqo= -----END CERTIFICATE-----Generated at Sun Sep 20 18:01:44 2026 by rpki-client