$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/ba7b0b47-562e-3d6a-b52a-a9e895f8748d.roa File: ba7b0b47-562e-3d6a-b52a-a9e895f8748d.roa (raw, json) Hash identifier: aifTUnPqeMSDWx1eKZrI7T/7d7fjcasoqlkpehXa+O0= Subject key identifier: B9:C1:F5:B7:74:68:44:EC:62:DC:3A:99:35:3E:52:A5:4B:CC:F4:11 Certificate issuer: /CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460 Certificate serial: 010D0C9F4328584FB3A685E28A3BAC1DF54DE1D8 Authority key identifier: 10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/ba7b0b47-562e-3d6a-b52a-a9e895f8748d.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 7018 IP address blocks: 199.187.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a6:85:e2:8a:3b:ac:1d:f5:4d:e1:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460 Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=be955d88-9e21-468e-be8d-45c6ae737f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:dc:d4:68:a2:44:be:cf:e1:82:81:b7:4d:86: 87:79:24:31:21:e9:e3:7a:c9:e3:f0:97:63:82:5d: 6c:3b:cd:cf:73:51:49:02:a0:1a:e0:7c:b9:3b:ea: cf:c0:8d:ef:89:f8:4b:68:70:79:1b:2f:bc:64:eb: 55:81:00:14:77:62:96:6b:1f:c0:70:f6:7f:fa:16: fd:b9:63:a8:2b:81:54:1c:33:aa:55:4e:50:8a:b3: ff:c9:ed:6f:f1:70:3c:90:f9:13:f2:2c:a1:4d:51: 3b:40:24:5a:19:28:02:dc:5f:f0:e4:87:b6:25:71: c6:33:02:db:f6:24:0b:51:28:38:c2:88:03:1f:c7: e6:b8:6f:ac:30:dc:15:29:b2:7f:e1:b9:8b:a7:ef: db:1e:7a:11:54:81:e1:c4:ca:f3:24:70:bd:35:0b: f9:24:d1:7e:4a:a1:f1:d9:d8:47:aa:69:4f:1b:a4: a4:c9:8b:a1:44:4b:b8:40:f1:49:a7:c8:ff:4c:df: ae:fa:01:95:b3:e8:09:58:2f:d3:9f:55:fa:3b:64: 6d:86:4c:dd:f7:13:f0:7a:fd:a0:e4:5d:b2:fe:e7: f1:91:c3:a1:c2:cc:10:ae:21:61:ba:58:d0:2a:93: e7:04:96:8e:65:f3:87:6b:d0:45:21:6a:d7:59:e8: 49:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C1:F5:B7:74:68:44:EC:62:DC:3A:99:35:3E:52:A5:4B:CC:F4:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/ba7b0b47-562e-3d6a-b52a-a9e895f8748d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl X509v3 Authority Key Identifier: keyid:10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer sbgp-ipAddrBlock: critical IPv4: 199.187.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:bf:a8:d4:11:a2:f3:5f:e3:16:45:60:34:ed:7d:d9:a3:9e: 9d:9a:48:d0:92:e9:df:6c:c9:d9:2f:92:1c:7c:de:07:b9:1e: a9:e9:47:de:2b:88:ed:48:09:85:cc:4f:76:19:41:d6:48:2b: d3:ef:78:cc:f6:cd:c1:f5:00:0f:6a:7d:1e:50:29:53:5b:e7: f5:b0:6f:9e:02:53:32:35:65:8c:9c:21:d7:1e:83:f1:66:82: ce:7f:0c:bd:97:36:3c:55:9c:83:c7:5d:a9:1d:95:3d:d6:e4: 41:19:97:29:05:b3:a6:68:19:45:55:bb:5d:1e:8f:d3:d6:9c: 9a:df:70:87:ef:59:6a:f7:6c:d6:d8:28:0b:07:b1:54:dc:0c: 03:3e:07:b4:d7:70:32:81:05:aa:8a:30:28:07:bf:b2:6c:c5: b2:b8:06:cd:34:0b:88:bf:ed:5e:ea:21:01:6a:8a:be:0d:ac: 5f:e4:9f:0a:02:cd:d8:1d:ab:22:2a:5f:8d:12:06:66:f3:51: 37:5c:7f:da:d7:d6:49:f3:ea:6b:97:b7:d7:8a:91:95:93:4e: e4:16:0f:d6:09:31:fb:5a:fd:46:86:eb:38:25:e8:60:e6:4e: 7b:b1:17:bc:06:43:7a:b5:bd:fe:bb:35:6a:eb:0b:53:a5:71: 38:86:3d:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+zpoXiijusHfVN4dgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDNmYWMtYWI5OS00YjM3LWE0MmUtZGJmNjdhOTVj NDYwMB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk YmU5NTVkODgtOWUyMS00NjhlLWJlOGQtNDVjNmFlNzM3ZjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtzUaKJEvs/hgoG3TYaHeSQxIenjesnj8Jdj gl1sO83Pc1FJAqAa4Hy5O+rPwI3vifhLaHB5Gy+8ZOtVgQAUd2KWax/AcPZ/+hb9 uWOoK4FUHDOqVU5QirP/ye1v8XA8kPkT8iyhTVE7QCRaGSgC3F/w5Ie2JXHGMwLb 9iQLUSg4wogDH8fmuG+sMNwVKbJ/4bmLp+/bHnoRVIHhxMrzJHC9NQv5JNF+SqHx 2dhHqmlPG6SkyYuhREu4QPFJp8j/TN+u+gGVs+gJWC/Tn1X6O2Rthkzd9xPwev2g 5F2y/ufxkcOhwswQriFhuljQKpPnBJaOZfOHa9BFIWrXWehJBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnB9bd0aETsYtw6mTU+UqVLzPQRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk M2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2N2E5NWM0NjAvYmE3YjBiNDctNTYyZS0z ZDZhLWI1MmEtYTllODk1Zjg3NDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDNmYWMtYWI5OS00YjM3LWE0 MmUtZGJmNjdhOTVjNDYwL2Q0NGQzZmFjLWFiOTktNGIzNy1hNDJlLWRiZjY3YTk1 YzQ2MC5jcmwwHwYDVR0jBBgwFoAUEHfkdKYtZFtD8H4411+2zqs3WzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkM2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2 N2E5NWM0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7u8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGm/qNQRovNf4xZFYDTtfdmjnp2aSNCS6d9sydkvkhx83ge5HqnpR94r iO1ICYXMT3YZQdZIK9PveMz2zcH1AA9qfR5QKVNb5/Wwb54CUzI1ZYycIdceg/Fm gs5/DL2XNjxVnIPHXakdlT3W5EEZlykFs6ZoGUVVu10ej9PWnJrfcIfvWWr3bNbY KAsHsVTcDAM+B7TXcDKBBaqKMCgHv7JsxbK4Bs00C4i/7V7qIQFqir4NrF/knwoC zdgdqyIqX40SBmbzUTdcf9rX1knz6muXt9eKkZWTTuQWD9YJMfta/UaG6zgl6GDm TnuxF7wGQ3q1vf67NWrrC1OlcTiGPWA= -----END CERTIFICATE-----Generated at Thu Nov 5 14:04:45 2026 by rpki-client