$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/1c43df8f-3abf-3a45-be1c-5004fc64b9ca.roa File: 1c43df8f-3abf-3a45-be1c-5004fc64b9ca.roa (raw, json) Hash identifier: 0efQhCsMLKdEapOtXqUCpcimG5u0ONXBGJwx3mcR0ss= Subject key identifier: 4B:C5:D4:35:07:1D:E6:BC:60:E8:EB:75:6D:8B:32:B9:1C:55:44:EF Certificate issuer: /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234 Certificate serial: 010D0C9F4328584F13024293A7143575282E6B00 Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/1c43df8f-3abf-3a45-be1c-5004fc64b9ca.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 15296 IP address blocks: 199.216.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:42:93:a7:14:35:75:28:2e:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234 Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=0c89aba9-580b-4612-b750-d49da017d735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:5b:b3:8e:6c:b7:ce:ef:31:59:83:45:3a:cd: 1b:8d:2d:04:6a:31:19:3f:41:cf:58:d0:da:a2:cf: bf:09:41:15:3b:03:04:97:7c:4f:4e:e8:fe:bd:ea: f3:e7:21:0e:80:ac:d7:e0:f1:7f:a1:9d:f7:ce:a2: ea:3e:c9:74:c6:be:40:ab:6c:97:5e:4a:b2:12:ce: fd:e0:78:a9:02:e1:11:67:42:3c:61:6d:e6:5c:06: 42:59:fb:6a:6c:bd:04:80:8e:50:e3:05:de:d3:1d: 62:9d:95:af:59:d2:b1:75:f7:61:41:3a:ac:f4:84: f5:c9:3f:77:a4:f3:ad:19:32:cd:a7:65:32:1b:9e: c9:1b:15:2d:0d:80:41:ec:00:12:1d:dd:30:85:8e: b6:d9:c8:34:1f:d0:83:fe:60:ee:fe:7a:68:35:6b: ed:cc:9f:86:3c:51:c9:9a:12:c6:30:77:56:07:32: 8f:4a:b8:1a:f2:98:4d:f7:4f:8f:a1:f7:63:14:f6: 15:5d:ed:24:2f:92:3a:e0:4f:a1:c3:56:21:b2:c3: 2c:ab:e9:0b:cb:2d:ae:b9:f8:14:37:20:3a:eb:9e: ba:bf:a8:34:0f:62:1b:e6:c0:7c:a4:f3:e6:59:94: 01:e7:df:70:5c:bf:5a:fb:fd:5c:d7:61:b0:18:a9: 80:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C5:D4:35:07:1D:E6:BC:60:E8:EB:75:6D:8B:32:B9:1C:55:44:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/1c43df8f-3abf-3a45-be1c-5004fc64b9ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl X509v3 Authority Key Identifier: keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer sbgp-ipAddrBlock: critical IPv4: 199.216.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:56:04:5f:2c:fd:1f:2b:79:1c:5f:61:b2:8d:c6:0f:dc:e9: ae:a4:d8:11:e7:0d:b1:bc:7f:f2:e6:f8:4b:30:9f:40:53:7b: de:4a:e4:c3:8e:7e:e5:55:52:8f:2e:d2:c8:b8:ea:9b:de:03: 99:a0:82:37:26:84:0e:56:f9:a0:1c:11:0b:8e:1a:31:c1:8e: 51:ef:a7:e6:be:90:12:74:9e:fd:88:03:3a:2a:d9:d7:49:34: ba:99:f5:5f:d7:81:25:32:c0:b5:94:42:a0:f0:f9:f3:e2:5a: 0f:e0:ea:d7:24:c8:d9:ed:83:9e:b6:a8:de:e0:a3:e1:1c:32: 9a:16:4e:e3:12:04:aa:dc:dc:ce:bb:39:3a:74:01:e5:d7:8b: 59:67:df:86:55:5c:10:4f:a9:9d:70:67:4a:79:f2:16:d3:ba: c1:4e:36:ac:bb:e5:d0:c3:8a:df:41:92:05:9c:29:fa:8a:73: 48:9e:3e:5f:28:24:d2:7e:7e:4a:34:b7:6f:47:15:12:ba:e9: 15:d6:0a:b9:8b:d4:fd:1a:30:c7:23:82:cf:98:02:44:d9:14: 73:3e:44:98:8a:4a:28:94:2f:26:d2:16:ec:60:36:09:2d:57: 5b:d5:b6:64:0f:93:6f:56:a5:e9:26:2e:24:48:bc:ba:2b:06: 1f:a7:cf:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAkKTpxQ1dSguawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFmM2M3YzQtYTc3MS00N2E5LWE0ZTgtMGFhZTdkZjdi MjM0MB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk MGM4OWFiYTktNTgwYi00NjEyLWI3NTAtZDQ5ZGEwMTdkNzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Vuzjmy3zu8xWYNFOs0bjS0EajEZP0HPWNDa os+/CUEVOwMEl3xPTuj+verz5yEOgKzX4PF/oZ33zqLqPsl0xr5Aq2yXXkqyEs79 4HipAuERZ0I8YW3mXAZCWftqbL0EgI5Q4wXe0x1inZWvWdKxdfdhQTqs9IT1yT93 pPOtGTLNp2UyG57JGxUtDYBB7AASHd0whY622cg0H9CD/mDu/npoNWvtzJ+GPFHJ mhLGMHdWBzKPSrga8phN90+PofdjFPYVXe0kL5I64E+hw1YhssMsq+kLyy2uufgU NyA66566v6g0D2Ib5sB8pPPmWZQB599wXL9a+/1c12GwGKmACQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvF1DUHHea8YOjrdW2LMrkcVUTvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYz YzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFlN2RmN2IyMzQvMWM0M2RmOGYtM2FiZi0z YTQ1LWJlMWMtNTAwNGZjNjRiOWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjFmM2M3YzQtYTc3MS00N2E5LWE0 ZTgtMGFhZTdkZjdiMjM0LzYxZjNjN2M0LWE3NzEtNDdhOS1hNGU4LTBhYWU3ZGY3 YjIzNC5jcmwwHwYDVR0jBBgwFoAUu4hNX94f3LZip94TiP38oD8P+I4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYzYzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFl N2RmN2IyMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9jTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApWBF8s/R8reRxfYbKNxg/c6a6k2BHnDbG8f/Lm+Eswn0BTe95K5MOO fuVVUo8u0si46pveA5mggjcmhA5W+aAcEQuOGjHBjlHvp+a+kBJ0nv2IAzoq2ddJ NLqZ9V/XgSUywLWUQqDw+fPiWg/g6tckyNntg562qN7go+EcMpoWTuMSBKrc3M67 OTp0AeXXi1ln34ZVXBBPqZ1wZ0p58hbTusFONqy75dDDit9BkgWcKfqKc0iePl8o JNJ+fko0t29HFRK66RXWCrmL1P0aMMcjgs+YAkTZFHM+RJiKSiiULybSFuxgNgkt V1vVtmQPk29WpekmLiRIvLorBh+nz2k= -----END CERTIFICATE-----Generated at Tue Sep 22 10:42:04 2026 by rpki-client