$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/e4b829a7-1824-38b5-9c7d-3155a26aaa4b.roa File: e4b829a7-1824-38b5-9c7d-3155a26aaa4b.roa (raw, json) Hash identifier: pPduwb1ejuimhfjQsUt6SJKR/RxkNwJPSoLDkaYqKu4= Subject key identifier: 66:F4:7B:7E:7F:01:B7:3E:22:A0:26:B8:99:10:B1:AB:41:AC:D9:7F Certificate issuer: /CN=4dfb879f-7966-496a-b35e-d766981846ee Certificate serial: 010D0C9F4328584F4975495955E9D66CA4A17780 Authority key identifier: 47:A0:89:91:6C:7F:47:53:FB:B8:28:FF:43:4D:96:C5:0F:02:A5:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/e4b829a7-1824-38b5-9c7d-3155a26aaa4b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 271 IP address blocks: 199.60.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/4dfb879f-7966-496a-b35e-d766981846ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/4dfb879f-7966-496a-b35e-d766981846ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:49:59:55:e9:d6:6c:a4:a1:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dfb879f-7966-496a-b35e-d766981846ee Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=dab30ac0-92b4-46ef-b2c5-a69d2e74bdf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3f:b0:b3:11:06:f6:f3:81:56:8c:d5:1f:c7: f9:20:47:a2:74:c2:6a:cd:8a:99:01:fd:81:8b:4c: 79:19:3b:2a:99:26:86:0c:3b:ee:42:52:6d:35:dd: 42:a4:31:9d:f1:10:1c:3e:90:ff:b1:14:8b:63:7b: 37:68:2c:3f:09:74:3a:81:73:8d:29:f1:76:04:0b: aa:c5:a7:29:95:cf:2f:16:83:48:e1:f3:44:9a:79: 14:cf:98:53:93:95:b1:cb:6a:97:82:bf:e1:ed:8b: 3f:d0:de:78:44:1c:6f:45:d3:38:76:7b:6c:0f:24: 95:6e:9b:fd:ad:e4:bb:62:aa:83:21:a0:45:dd:f3: c7:96:f5:5c:e4:f0:6a:96:44:16:e2:a9:ab:bd:d4: 05:c4:f1:26:33:2e:25:93:2c:30:8a:d0:b2:32:76: a3:94:0e:b0:9c:cf:0a:44:06:4b:ec:90:49:af:a5: 96:df:1d:f6:ad:3e:d9:f8:1e:83:3f:0d:d9:f3:1a: b1:d0:c7:31:a4:13:00:98:a2:79:ea:86:fb:5f:56: bd:52:e9:9e:a8:5b:8e:3c:f8:b3:78:7c:0b:31:a0: 36:be:51:48:a0:26:86:b0:fe:42:ca:41:8f:82:73: 68:b8:04:22:28:ae:f9:94:70:27:d4:f0:84:8d:58: 15:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F4:7B:7E:7F:01:B7:3E:22:A0:26:B8:99:10:B1:AB:41:AC:D9:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/e4b829a7-1824-38b5-9c7d-3155a26aaa4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/4dfb879f-7966-496a-b35e-d766981846ee.crl X509v3 Authority Key Identifier: keyid:47:A0:89:91:6C:7F:47:53:FB:B8:28:FF:43:4D:96:C5:0F:02:A5:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee.cer sbgp-ipAddrBlock: critical IPv4: 199.60.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:cf:20:5d:fd:b2:2d:89:c5:14:5a:90:63:15:89:97:47:23: 64:43:0c:e6:24:92:d5:4f:81:b9:08:b4:41:dd:18:bc:a2:59: 66:20:48:4b:0f:1b:57:b7:85:77:07:a3:cd:fd:73:b4:b6:ab: 08:3c:4f:5c:9c:9e:51:82:07:2e:c5:a5:da:6e:c0:8a:1a:bb: 76:35:a2:d3:80:94:e5:cd:fe:27:c1:f5:28:ab:72:3a:06:dc: 08:0a:e5:98:a6:9c:33:31:88:94:a2:59:ed:d4:cd:57:5a:b4: e6:9f:ed:74:0f:5d:f7:f7:60:68:b1:51:03:fb:2d:21:6d:b0: f8:ad:85:c3:35:59:e4:aa:77:fa:c0:48:54:fa:7c:54:9b:a0: de:c0:28:17:bb:dd:1c:ad:5b:d1:23:88:f4:a5:6f:e7:a5:7d: 32:73:a9:23:48:8f:f1:b3:6f:3d:9a:ff:10:91:c9:51:32:32: ba:ab:d0:2f:a1:6e:89:8b:51:32:b4:b8:4f:11:58:ff:5e:66: 37:b1:3a:6c:c7:ee:e7:2c:47:57:66:7e:ff:60:e8:75:06:f9: 15:5f:48:0b:9d:81:1b:ac:a2:5e:92:51:bd:2c:18:2c:54:5e: 56:52:05:b6:f7:79:d1:31:50:bc:36:e7:92:90:09:46:c9:be: d1:0f:9a:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdUlZVenWbKShd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGRmYjg3OWYtNzk2Ni00OTZhLWIzNWUtZDc2Njk4MTg0 NmVlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGFiMzBhYzAtOTJiNC00NmVmLWIyYzUtYTY5ZDJlNzRiZGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD+wsxEG9vOBVozVH8f5IEeidMJqzYqZAf2B i0x5GTsqmSaGDDvuQlJtNd1CpDGd8RAcPpD/sRSLY3s3aCw/CXQ6gXONKfF2BAuq xacplc8vFoNI4fNEmnkUz5hTk5Wxy2qXgr/h7Ys/0N54RBxvRdM4dntsDySVbpv9 reS7YqqDIaBF3fPHlvVc5PBqlkQW4qmrvdQFxPEmMy4lkywwitCyMnajlA6wnM8K RAZL7JBJr6WW3x32rT7Z+B6DPw3Z8xqx0McxpBMAmKJ56ob7X1a9UumeqFuOPPiz eHwLMaA2vlFIoCaGsP5CykGPgnNouAQiKK75lHAn1PCEjVgVcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGb0e35/Abc+IqAmuJkQsatBrNl/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ZGZi ODc5Zi03OTY2LTQ5NmEtYjM1ZS1kNzY2OTgxODQ2ZWUvZTRiODI5YTctMTgyNC0z OGI1LTljN2QtMzE1NWEyNmFhYTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGRmYjg3OWYtNzk2Ni00OTZhLWIz NWUtZDc2Njk4MTg0NmVlLzRkZmI4NzlmLTc5NjYtNDk2YS1iMzVlLWQ3NjY5ODE4 NDZlZS5jcmwwHwYDVR0jBBgwFoAUR6CJkWx/R1P7uCj/Q02WxQ8CpR0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ZGZiODc5Zi03OTY2LTQ5NmEtYjM1ZS1kNzY2 OTgxODQ2ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxzziMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXPIF39si2JxRRakGMViZdHI2RDDOYkktVPgbkItEHdGLyiWWYgSEsP G1e3hXcHo839c7S2qwg8T1ycnlGCBy7FpdpuwIoau3Y1otOAlOXN/ifB9SircjoG 3AgK5ZimnDMxiJSiWe3UzVdatOaf7XQPXff3YGixUQP7LSFtsPithcM1WeSqd/rA SFT6fFSboN7AKBe73RytW9EjiPSlb+elfTJzqSNIj/Gzbz2a/xCRyVEyMrqr0C+h bomLUTK0uE8RWP9eZjexOmzH7ucsR1dmfv9g6HUG+RVfSAudgRusol6SUb0sGCxU XlZSBbb3edExULw255KQCUbJvtEPmo4= -----END CERTIFICATE-----Generated at Sat Sep 26 10:59:09 2026 by rpki-client