$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/27c1ee2b-3bb3-4777-80c7-5a2dabb8be4b/36147a02-84c7-3332-b0eb-fe515121025f.roa File: 36147a02-84c7-3332-b0eb-fe515121025f.roa (raw, json) Hash identifier: qIbiNKpRjfLX5bhL+bSssinYO3FuW/8DuWa1tjqWCBA= Subject key identifier: 8D:7B:8B:EB:A0:EC:3D:58:56:AA:56:BF:41:EF:42:E0:6B:E6:BA:79 Certificate issuer: /CN=27c1ee2b-3bb3-4777-80c7-5a2dabb8be4b Certificate serial: 010D0C9F4328584F0ED244E9804E50381548F7A0 Authority key identifier: D6:A5:47:E1:5F:DC:DA:CF:F2:E5:9C:8B:50:62:CB:5B:70:61:DD:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/27c1ee2b-3bb3-4777-80c7-5a2dabb8be4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/27c1ee2b-3bb3-4777-80c7-5a2dabb8be4b/36147a02-84c7-3332-b0eb-fe515121025f.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 53836 IP address blocks: 199.188.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/27c1ee2b-3bb3-4777-80c7-5a2dabb8be4b/27c1ee2b-3bb3-4777-80c7-5a2dabb8be4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/27c1ee2b-3bb3-4777-80c7-5a2dabb8be4b/27c1ee2b-3bb3-4777-80c7-5a2dabb8be4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/27c1ee2b-3bb3-4777-80c7-5a2dabb8be4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:44:e9:80:4e:50:38:15:48:f7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27c1ee2b-3bb3-4777-80c7-5a2dabb8be4b Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=e93a2532-06be-4dd5-948f-58b76bfc0582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:92:64:af:b4:0a:93:24:54:a2:ee:86:6a:fa: 92:21:41:87:bd:3a:2f:09:dc:e2:06:c1:0b:ec:f9: 1a:db:94:8e:28:c5:46:11:b4:7d:a1:51:34:e2:cb: 6f:4b:76:c6:dc:0f:a1:d7:ee:c4:19:a0:1d:c5:fb: 05:86:06:88:ea:38:bc:4f:dc:2e:33:14:e8:24:fb: da:1e:33:13:e7:df:44:c8:63:7d:1d:2f:8e:25:5b: 5d:2a:dd:45:ca:58:3a:b1:35:0a:07:78:ae:28:77: 69:58:9b:e6:f0:cb:13:fc:fd:3f:90:38:32:84:93: 00:11:bb:f9:18:ac:b6:38:cc:0c:68:63:ad:88:6e: ac:02:f5:85:e8:75:ed:91:fc:9d:c0:a3:6d:75:26: 84:f7:01:a3:60:bf:33:25:84:2d:6a:1d:4b:29:35: 7c:21:d6:93:db:88:15:df:42:c2:e6:6e:a6:97:d9: bb:6d:4b:bc:87:d9:bc:1f:61:40:4c:62:a0:10:3f: c2:2f:cc:9a:6d:9a:54:97:16:6c:09:a0:61:18:17: fc:d3:77:38:09:be:ec:66:e1:d7:92:94:46:4c:ea: 6d:6a:2b:2a:31:3d:80:7b:b2:bc:40:7d:1a:ea:35: 8c:2c:5c:03:0d:fc:93:d6:d6:96:ed:24:4a:3b:e4: 82:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:7B:8B:EB:A0:EC:3D:58:56:AA:56:BF:41:EF:42:E0:6B:E6:BA:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/27c1ee2b-3bb3-4777-80c7-5a2dabb8be4b/36147a02-84c7-3332-b0eb-fe515121025f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/27c1ee2b-3bb3-4777-80c7-5a2dabb8be4b/27c1ee2b-3bb3-4777-80c7-5a2dabb8be4b.crl X509v3 Authority Key Identifier: keyid:D6:A5:47:E1:5F:DC:DA:CF:F2:E5:9C:8B:50:62:CB:5B:70:61:DD:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/27c1ee2b-3bb3-4777-80c7-5a2dabb8be4b.cer sbgp-ipAddrBlock: critical IPv4: 199.188.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:12:d6:46:9c:99:f9:55:ae:7f:a7:92:79:bb:40:9f:6d:4e: c5:67:2d:4c:a1:2a:9d:76:cf:73:04:77:18:db:6b:97:9b:02: f1:db:3f:93:1f:c7:de:b8:e7:6b:d9:33:14:0a:52:90:89:f6: ba:28:23:f5:33:ea:bf:95:90:7c:ca:bc:67:7d:4c:8a:ae:a0: ca:4b:77:97:72:f3:88:3b:41:56:79:92:11:04:b0:64:da:8f: d6:1f:08:89:05:f1:83:0a:db:d5:d9:87:a5:2d:cd:c9:62:89: a4:78:83:83:f1:ce:5f:f4:b3:33:e5:93:54:74:08:21:e5:0c: 44:ee:03:e1:b5:99:41:5c:0f:7f:a3:b3:2c:4c:75:d1:66:9f: d3:9e:1a:1d:52:66:d3:08:e8:a1:ac:d3:7f:df:82:a9:7e:b6: 53:4e:e8:62:ca:04:3d:a6:4a:92:40:af:35:4f:f2:a0:be:0d: 1a:35:95:cf:66:0c:9f:d4:db:b5:df:dc:73:05:c8:65:25:0e: b3:a5:38:46:a2:bf:75:9c:dc:3b:4c:9c:b4:8e:a1:4a:30:bb: 8b:3d:0d:27:c2:6e:41:85:02:f3:af:e3:3b:5e:8c:7c:66:79: d2:04:24:96:89:2b:90:44:7a:98:a2:ec:a4:a0:27:a4:0a:c3: 95:31:81:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0kTpgE5QOBVI96AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjdjMWVlMmItM2JiMy00Nzc3LTgwYzctNWEyZGFiYjhi ZTRiMB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk ZTkzYTI1MzItMDZiZS00ZGQ1LTk0OGYtNThiNzZiZmMwNTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpJkr7QKkyRUou6GavqSIUGHvTovCdziBsEL 7Pka25SOKMVGEbR9oVE04stvS3bG3A+h1+7EGaAdxfsFhgaI6ji8T9wuMxToJPva HjMT599EyGN9HS+OJVtdKt1Fylg6sTUKB3iuKHdpWJvm8MsT/P0/kDgyhJMAEbv5 GKy2OMwMaGOtiG6sAvWF6HXtkfydwKNtdSaE9wGjYL8zJYQtah1LKTV8IdaT24gV 30LC5m6ml9m7bUu8h9m8H2FATGKgED/CL8yabZpUlxZsCaBhGBf803c4Cb7sZuHX kpRGTOptaisqMT2Ae7K8QH0a6jWMLFwDDfyT1taW7SRKO+SCwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI17i+ug7D1YVqpWv0HvQuBr5rp5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yN2Mx ZWUyYi0zYmIzLTQ3NzctODBjNy01YTJkYWJiOGJlNGIvMzYxNDdhMDItODRjNy0z MzMyLWIwZWItZmU1MTUxMjEwMjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjdjMWVlMmItM2JiMy00Nzc3LTgw YzctNWEyZGFiYjhiZTRiLzI3YzFlZTJiLTNiYjMtNDc3Ny04MGM3LTVhMmRhYmI4 YmU0Yi5jcmwwHwYDVR0jBBgwFoAU1qVH4V/c2s/y5ZyLUGLLW3Bh3a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yN2MxZWUyYi0zYmIzLTQ3NzctODBjNy01YTJk YWJiOGJlNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7yNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAS1kacmflVrn+nknm7QJ9tTsVnLUyhKp12z3MEdxjba5ebAvHbP5Mf x96452vZMxQKUpCJ9rooI/Uz6r+VkHzKvGd9TIquoMpLd5dy84g7QVZ5khEEsGTa j9YfCIkF8YMK29XZh6UtzcliiaR4g4Pxzl/0szPlk1R0CCHlDETuA+G1mUFcD3+j syxMddFmn9OeGh1SZtMI6KGs03/fgql+tlNO6GLKBD2mSpJArzVP8qC+DRo1lc9m DJ/U27Xf3HMFyGUlDrOlOEaiv3Wc3DtMnLSOoUowu4s9DSfCbkGFAvOv4ztejHxm edIEJJaJK5BEepii7KSgJ6QKw5Uxgak= -----END CERTIFICATE-----Generated at Tue Sep 22 13:37:48 2026 by rpki-client