$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/c8731422-e498-334a-8c0a-cfc9b4d27e0f.roa File: c8731422-e498-334a-8c0a-cfc9b4d27e0f.roa (raw, json) Hash identifier: sb+URaKynDJtAWzZkjDboYGhmC/q9/PZhjBSd/hGN7s= Subject key identifier: 33:BA:8F:C4:B6:F9:22:F5:3E:5A:58:66:34:3A:11:B8:35:F3:96:34 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584F3052665DAD988C4D7D6739C0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/c8731422-e498-334a-8c0a-cfc9b4d27e0f.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 54858 IP address blocks: 199.189.96.0/21 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:66:5d:ad:98:8c:4d:7d:67:39:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=4353df7f-bbbf-4442-9023-706ecbb56145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:86:b2:1b:47:48:9e:0f:4c:3b:81:0d:8d:64: 06:5d:f7:7c:82:4c:5f:5b:f5:e0:58:06:cc:72:ec: 9f:4e:ee:9c:33:fc:ff:cd:09:70:dd:2a:d1:36:0e: 21:89:9a:27:47:19:86:40:db:69:c0:57:a2:93:05: 5a:e5:98:48:43:8e:84:ba:3c:b6:a9:ca:1c:4e:ed: d6:31:44:8a:78:e4:0d:04:55:37:50:ff:04:2a:5c: d8:87:5f:3f:74:ef:70:dc:cf:f2:ab:3f:76:e8:b1: 57:01:b5:dd:e9:78:65:77:9c:32:59:78:fd:eb:ba: bd:f8:50:5f:11:08:c2:8c:7c:bf:ef:6a:e0:94:b1: 11:4b:c0:da:44:aa:0b:e6:f8:6f:32:3b:cf:50:4b: ea:d3:c0:0d:08:48:39:99:ba:fc:11:4a:0d:45:73: be:1d:17:c2:c3:2d:4d:2a:cc:7e:13:b4:0e:a3:c1: a4:ae:30:42:de:54:dc:49:cc:d5:2c:72:09:68:28: 90:94:0c:9a:79:b6:fd:e3:40:41:06:75:79:b2:83: a3:45:0c:9e:dc:f3:7a:ba:b2:26:89:69:fb:c9:99: 79:20:5b:7a:83:91:b9:8c:6f:0f:6c:73:45:fe:73: c3:50:41:8b:70:05:44:4e:a0:84:11:a5:86:bd:1a: ee:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:BA:8F:C4:B6:F9:22:F5:3E:5A:58:66:34:3A:11:B8:35:F3:96:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/c8731422-e498-334a-8c0a-cfc9b4d27e0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 199.189.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:3a:0f:47:75:4f:31:c7:7d:e0:fe:56:93:31:6a:df:43:ec: fc:4b:11:4c:b0:91:4a:0a:93:41:28:ea:e1:8c:8c:65:1f:fc: 5d:ca:f9:05:d2:47:03:6f:1c:76:1b:5c:9a:e0:70:ca:73:fe: d0:e2:d9:7c:f8:f3:ef:ac:a3:af:d2:ee:f2:2d:9d:ca:28:ea: 79:f2:42:8f:8f:93:4f:08:34:5b:a4:33:d9:08:2c:cc:4f:89: 0f:6a:33:15:b9:5c:ed:47:a4:c8:86:50:13:4c:44:5a:ce:01: ce:90:40:5c:a1:db:8b:6d:d3:8e:ac:b3:84:56:27:c1:68:5d: 90:1a:47:b5:33:11:4c:29:b3:20:b1:47:69:71:5c:b2:af:61: ec:94:30:eb:26:6a:b2:03:15:49:07:df:62:7a:e6:2f:00:06: 1f:59:9a:12:40:af:ef:60:d2:3a:e7:3a:67:de:2e:c2:6f:66: 24:73:13:17:e5:04:2a:ce:0e:8d:17:5f:d8:62:0c:69:2c:1f: 4c:f5:15:1e:fa:6c:b3:e1:46:0e:83:c5:be:51:d3:18:34:36: f2:e5:9a:3e:a8:c2:b3:bf:f7:2b:d5:15:45:18:b3:87:0a:2c: 45:29:17:dc:79:15:7c:89:15:48:2f:d5:3e:ea:80:49:8c:fd: 5b:95:5c:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUmZdrZiMTX1nOcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk NDM1M2RmN2YtYmJiZi00NDQyLTkwMjMtNzA2ZWNiYjU2MTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4ayG0dIng9MO4ENjWQGXfd8gkxfW/XgWAbM cuyfTu6cM/z/zQlw3SrRNg4hiZonRxmGQNtpwFeikwVa5ZhIQ46Eujy2qcocTu3W MUSKeOQNBFU3UP8EKlzYh18/dO9w3M/yqz926LFXAbXd6Xhld5wyWXj967q9+FBf EQjCjHy/72rglLERS8DaRKoL5vhvMjvPUEvq08ANCEg5mbr8EUoNRXO+HRfCwy1N Ksx+E7QOo8GkrjBC3lTcSczVLHIJaCiQlAyaebb940BBBnV5soOjRQye3PN6urIm iWn7yZl5IFt6g5G5jG8PbHNF/nPDUEGLcAVETqCEEaWGvRruLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDO6j8S2+SL1PlpYZjQ6Ebg185Y0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvYzg3MzE0MjItZTQ5OC0z MzRhLThjMGEtY2ZjOWI0ZDI3ZTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx71gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA86D0d1TzHHfeD+VpMxat9D7PxLEUywkUoKk0Eo6uGMjGUf/F3K+QXS RwNvHHYbXJrgcMpz/tDi2Xz48++so6/S7vItncoo6nnyQo+Pk08INFukM9kILMxP iQ9qMxW5XO1HpMiGUBNMRFrOAc6QQFyh24tt046ss4RWJ8FoXZAaR7UzEUwpsyCx R2lxXLKvYeyUMOsmarIDFUkH32J65i8ABh9ZmhJAr+9g0jrnOmfeLsJvZiRzExfl BCrODo0XX9hiDGksH0z1FR76bLPhRg6Dxb5R0xg0NvLlmj6owrO/9yvVFUUYs4cK LEUpF9x5FXyJFUgv1T7qgEmM/VuVXIE= -----END CERTIFICATE-----Generated at Tue Sep 22 10:44:21 2026 by rpki-client