$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/fbe85ee6-2ece-3892-8d7e-72ac921695cf.roa File: fbe85ee6-2ece-3892-8d7e-72ac921695cf.roa (raw, json) Hash identifier: vaTYIdAK1gpFTnGy1lsPFnHOSJ1qydUWO8ibZgyqqo8= Subject key identifier: C2:3F:DC:CF:9A:48:E5:A1:89:40:74:D2:D6:DE:46:3B:0D:7F:14:E8 Certificate issuer: /CN=687c869a-fd9c-4db9-8dab-54b737103513 Certificate serial: 010D0C9F4328584F1B6249821C57860F19D70D00 Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/fbe85ee6-2ece-3892-8d7e-72ac921695cf.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 36511 IP address blocks: 199.101.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:49:82:1c:57:86:0f:19:d7:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513 Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=5ce002b7-a0c3-4734-9f83-817065b144ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a2:a6:52:44:bd:21:a6:20:af:f4:d3:25:79: d6:c9:a6:5c:f1:63:d9:3b:ed:ac:fb:46:85:0d:f2: 56:16:8e:54:3f:81:c3:b8:24:82:8d:0c:8a:15:64: ef:7a:dc:f7:84:85:36:b3:57:ed:77:70:2a:b7:21: c9:d8:4a:36:f3:61:85:5b:39:60:30:7c:39:82:ce: 2f:bc:af:dd:f9:77:5c:bb:96:2c:f2:4c:e8:f9:23: 86:76:45:34:a0:ae:99:34:25:2b:00:ca:a9:08:d4: 8e:f0:ba:ec:76:37:7c:2a:c5:79:c2:37:46:57:2e: 20:1e:fb:b6:a2:9a:25:cd:ec:12:e3:fc:a6:45:97: 5a:13:67:c3:5d:31:ca:8e:77:cc:5c:5e:f4:63:14: 0a:8b:3f:51:fc:ce:f3:b8:68:5a:7d:d0:3a:db:ec: e4:a9:78:75:b5:a2:fc:ed:75:b7:ac:29:39:9b:e4: cb:9c:7a:88:bc:bc:28:f0:89:22:89:fa:83:4a:21: 90:b7:4e:c4:4b:ef:d2:85:ab:2d:0e:2d:38:84:aa: 86:52:8a:3c:8a:3d:6c:6c:57:47:fe:23:07:81:93: 75:c2:08:7e:dd:73:ea:5f:9c:38:df:c2:aa:22:33: d1:9c:2f:e6:1c:7f:f6:38:47:7b:d8:6c:75:a7:b2: c8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3F:DC:CF:9A:48:E5:A1:89:40:74:D2:D6:DE:46:3B:0D:7F:14:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/fbe85ee6-2ece-3892-8d7e-72ac921695cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl X509v3 Authority Key Identifier: keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer sbgp-ipAddrBlock: critical IPv4: 199.101.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:03:b4:0a:80:b5:58:be:1b:ed:87:52:de:5c:9e:1d:d0:29: e3:59:d6:ba:9c:1e:96:aa:1f:fa:2e:aa:39:41:d5:17:c7:29: e5:aa:26:dc:00:bf:85:75:40:c8:5a:fc:a7:9a:66:be:7f:f0: a9:5f:ed:46:75:6b:ee:fc:a2:33:06:98:a5:d9:bd:21:3a:28: 16:39:f5:9e:99:07:df:39:92:2e:31:9e:e5:e8:a0:5a:62:e0: 51:a5:15:94:c4:5d:b5:37:e8:37:d5:62:a8:52:ab:c5:50:60: 21:1d:67:9f:a3:d3:a5:2b:ac:4d:ed:09:e5:d0:ba:04:f2:5f: b0:7f:67:e7:86:46:27:4d:6e:50:ce:f3:85:4f:fc:5d:d6:1a: 7e:ff:52:33:0f:0d:30:77:0c:1e:03:56:36:97:0d:6c:22:51: 51:69:42:97:08:36:14:ea:7d:6e:71:a1:96:35:af:76:6f:57: 9a:1f:8e:ce:e6:eb:7d:bb:7a:bf:17:82:13:ac:9b:10:f6:33: 12:ff:1d:f5:27:b6:1d:4e:94:9a:11:75:70:9c:bd:1f:96:b6: f5:47:dd:25:f7:30:b4:2c:7f:fb:66:de:a8:1a:1d:ed:c9:08: 0a:a1:1d:8c:be:48:a1:99:b3:f7:7b:95:d6:f5:29:9f:42:d2: 9b:08:19:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYkmCHFeGDxnXDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg3Yzg2OWEtZmQ5Yy00ZGI5LThkYWItNTRiNzM3MTAz NTEzMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk NWNlMDAyYjctYTBjMy00NzM0LTlmODMtODE3MDY1YjE0NGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKKmUkS9IaYgr/TTJXnWyaZc8WPZO+2s+0aF DfJWFo5UP4HDuCSCjQyKFWTvetz3hIU2s1ftd3AqtyHJ2Eo282GFWzlgMHw5gs4v vK/d+Xdcu5Ys8kzo+SOGdkU0oK6ZNCUrAMqpCNSO8Lrsdjd8KsV5wjdGVy4gHvu2 opolzewS4/ymRZdaE2fDXTHKjnfMXF70YxQKiz9R/M7zuGhafdA62+zkqXh1taL8 7XW3rCk5m+TLnHqIvLwo8IkiifqDSiGQt07ES+/ShastDi04hKqGUoo8ij1sbFdH /iMHgZN1wgh+3XPqX5w438KqIjPRnC/mHH/2OEd72Gx1p7LIgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMI/3M+aSOWhiUB00tbeRjsNfxToMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ODdj ODY5YS1mZDljLTRkYjktOGRhYi01NGI3MzcxMDM1MTMvZmJlODVlZTYtMmVjZS0z ODkyLThkN2UtNzJhYzkyMTY5NWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjg3Yzg2OWEtZmQ5Yy00ZGI5LThk YWItNTRiNzM3MTAzNTEzLzY4N2M4NjlhLWZkOWMtNGRiOS04ZGFiLTU0YjczNzEw MzUxMy5jcmwwHwYDVR0jBBgwFoAU4uiNCUXNrgKVNNtusLIBOCL3Hl4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82ODdjODY5YS1mZDljLTRkYjktOGRhYi01NGI3 MzcxMDM1MTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2W/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQDtAqAtVi+G+2HUt5cnh3QKeNZ1rqcHpaqH/ouqjlB1RfHKeWqJtwA v4V1QMha/KeaZr5/8Klf7UZ1a+78ojMGmKXZvSE6KBY59Z6ZB985ki4xnuXooFpi 4FGlFZTEXbU36DfVYqhSq8VQYCEdZ5+j06UrrE3tCeXQugTyX7B/Z+eGRidNblDO 84VP/F3WGn7/UjMPDTB3DB4DVjaXDWwiUVFpQpcINhTqfW5xoZY1r3ZvV5ofjs7m 6327er8XghOsmxD2MxL/HfUnth1OlJoRdXCcvR+WtvVH3SX3MLQsf/tm3qgaHe3J CAqhHYy+SKGZs/d7ldb1KZ9C0psIGRU= -----END CERTIFICATE-----Generated at Sun Sep 27 12:26:40 2026 by rpki-client