$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/a903e824-1b66-364f-8ea4-9393ef2de488.roa File: a903e824-1b66-364f-8ea4-9393ef2de488.roa (raw, json) Hash identifier: uKuytaYtbDBJCDjJlU630KBJcVMsVi+AzZP0i/DIc1A= Subject key identifier: 7C:F9:D3:31:72:B2:14:25:3E:5C:22:19:4F:87:15:A0:DA:79:F6:69 Certificate issuer: /CN=cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2 Certificate serial: 010D0C9F4328584F268D052C9D8F7FB218676180 Authority key identifier: 0C:B0:BF:FC:CA:9D:3B:96:77:AB:14:6E:B1:80:5C:09:2F:9C:A7:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/a903e824-1b66-364f-8ea4-9393ef2de488.roa Signing time: Sat 12 Sep 2026 13:00:13 +0000 ROA not before: Sat 12 Sep 2026 13:00:13 +0000 ROA not after: Fri 11 Dec 2026 14:00:13 +0000 asID: 198949 IP address blocks: 192.245.221.0/24 maxlen: 24 192.245.222.0/23 maxlen: 24 192.245.224.0/24 maxlen: 24 199.33.130.0/23 maxlen: 24 199.33.132.0/23 maxlen: 24 199.33.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:26:8d:05:2c:9d:8f:7f:b2:18:67:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2 Validity Not Before: Sep 12 13:00:13 2026 GMT Not After : Dec 11 14:00:13 2026 GMT Subject: CN=3ba9078b-6600-4e65-a171-c6155ef0e8c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:39:22:27:1c:99:05:4f:f5:45:8d:ea:89:d1: 5c:28:f6:69:b2:42:60:e7:70:4f:d2:1d:d0:09:bb: 40:c4:96:8a:ec:64:6c:49:27:40:0d:ae:74:a7:9d: 5d:ef:19:45:83:0c:d3:3a:f4:41:9a:ae:91:76:2c: 18:e3:93:70:7e:82:a0:e1:06:63:45:b1:d1:6d:e9: 60:41:5c:92:66:95:55:60:75:1f:c9:23:9b:c2:b7: 26:69:be:47:28:3f:32:ab:a3:51:99:3b:36:e3:3c: 50:f7:33:3e:00:6c:89:d2:ac:6c:15:ad:bf:71:42: aa:9c:15:2e:64:08:5a:c3:b0:ab:de:a4:f6:64:90: c0:5a:12:d2:26:e6:6b:85:66:33:6f:37:ab:20:58: a1:19:a8:3f:13:85:93:6e:14:90:49:bc:1a:8b:ee: c7:d0:20:cc:2c:e0:6f:21:15:28:ce:39:6f:6a:d3: 60:28:08:ef:f8:5c:90:dc:24:c1:bd:5f:32:bd:c0: 16:cd:3a:a1:80:73:da:1f:10:6c:69:49:af:b3:c0: 63:f6:6b:b2:ec:9a:e6:4f:4d:98:64:c2:28:b4:df: 70:4d:19:e5:b8:eb:7c:95:3e:fb:f9:1f:0d:67:13: 6a:f6:92:3a:2e:00:c1:6d:20:57:3b:56:1d:fe:b0: cc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F9:D3:31:72:B2:14:25:3E:5C:22:19:4F:87:15:A0:DA:79:F6:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/a903e824-1b66-364f-8ea4-9393ef2de488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.crl X509v3 Authority Key Identifier: keyid:0C:B0:BF:FC:CA:9D:3B:96:77:AB:14:6E:B1:80:5C:09:2F:9C:A7:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer sbgp-ipAddrBlock: critical IPv4: 192.245.221.0-192.245.224.255 199.33.130.0-199.33.134.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:1e:fb:b8:d9:7c:ce:6e:c8:a2:79:d1:64:01:d0:13:20:62: 66:d3:25:b1:30:23:87:5a:cb:38:ca:b2:bc:b8:80:97:06:b6: a3:bb:27:01:27:77:35:a9:f8:96:de:54:90:05:62:5e:fe:d7: 75:46:d9:4c:5a:1a:b2:25:fd:0b:33:78:fa:50:48:05:63:6d: 3e:6a:5d:c0:88:8f:92:ea:54:53:b5:89:67:77:a9:1b:57:65: a6:90:fc:d2:46:74:76:bf:5b:d8:be:09:5b:f4:36:a1:72:00: 60:87:ab:36:28:d7:2c:c0:55:5d:a3:2b:d5:0b:ca:63:cc:ef: c6:bb:60:f4:53:72:bc:dd:bd:55:53:e3:05:5a:dc:d3:e5:f1: 80:17:27:85:b6:32:7a:a9:7f:62:23:85:ae:86:8c:bf:84:ec: 1d:83:af:16:6a:42:45:8c:09:ef:a6:6d:db:d1:7c:45:8e:d8: c3:02:c3:dd:1f:a9:c8:d2:c6:2b:86:1b:e2:d2:0f:65:77:d1: 2c:1d:1d:52:3c:3a:6a:55:2a:b2:4b:c5:ad:50:64:41:f3:c8: 67:fb:99:d6:b2:25:89:5f:c1:82:74:26:4e:98:74:61:f1:4e: aa:4e:1c:5d:38:64:7a:74:87:db:d4:42:0f:b6:ef:79:e5:a5: 8d:9f:3b:28 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE8mjQUsnY9/shhnYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q1NGU1YmItMzBjZC00NjBhLWEzYWUtNGFiODNjMmY2 MmEyMB4XDTI2MDkxMjEzMDAxM1oXDTI2MTIxMTE0MDAxM1owLzEtMCsGA1UEAxMk M2JhOTA3OGItNjYwMC00ZTY1LWExNzEtYzYxNTVlZjBlOGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/jkiJxyZBU/1RY3qidFcKPZpskJg53BP0h3Q CbtAxJaK7GRsSSdADa50p51d7xlFgwzTOvRBmq6RdiwY45NwfoKg4QZjRbHRbelg QVySZpVVYHUfySObwrcmab5HKD8yq6NRmTs24zxQ9zM+AGyJ0qxsFa2/cUKqnBUu ZAhaw7Cr3qT2ZJDAWhLSJuZrhWYzbzerIFihGag/E4WTbhSQSbwai+7H0CDMLOBv IRUozjlvatNgKAjv+FyQ3CTBvV8yvcAWzTqhgHPaHxBsaUmvs8Bj9muy7JrmT02Y ZMIotN9wTRnluOt8lT77+R8NZxNq9pI6LgDBbSBXO1Yd/rDMBwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFHz50zFyshQlPlwiGU+HFaDaefZpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jZDU0 ZTViYi0zMGNkLTQ2MGEtYTNhZS00YWI4M2MyZjYyYTIvYTkwM2U4MjQtMWI2Ni0z NjRmLThlYTQtOTM5M2VmMmRlNDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2Q1NGU1YmItMzBjZC00NjBhLWEz YWUtNGFiODNjMmY2MmEyL2NkNTRlNWJiLTMwY2QtNDYwYS1hM2FlLTRhYjgzYzJm NjJhMi5jcmwwHwYDVR0jBBgwFoAUDLC//MqdO5Z3qxRusYBcCS+cp0EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jZDU0ZTViYi0zMGNkLTQ2MGEtYTNhZS00YWI4 M2MyZjYyYTIuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBADA9d0D BADA9eAwDAMEAcchggMEAMchhjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA2Hvu42XzObsiiedFkAdATIGJm 0yWxMCOHWss4yrK8uICXBrajuycBJ3c1qfiW3lSQBWJe/td1RtlMWhqyJf0LM3j6 UEgFY20+al3AiI+S6lRTtYlnd6kbV2WmkPzSRnR2v1vYvglb9DahcgBgh6s2KNcs wFVdoyvVC8pjzO/Gu2D0U3K83b1VU+MFWtzT5fGAFyeFtjJ6qX9iI4Wuhoy/hOwd g68WakJFjAnvpm3b0XxFjtjDAsPdH6nI0sYrhhvi0g9ld9EsHR1SPDpqVSqyS8Wt UGRB88hn+5nWsiWJX8GCdCZOmHRh8U6qThxdOGR6dIfb1EIPtu955aWNnzso -----END CERTIFICATE-----Generated at Sun Sep 20 14:05:01 2026 by rpki-client