$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/77e34235-1b08-3e27-88a8-f7fc0bf41e89.roa File: 77e34235-1b08-3e27-88a8-f7fc0bf41e89.roa (raw, json) Hash identifier: ii5eEX/AZVQqrSWKgsZSlBCGIL8jMVTSx0ADWrXInu8= Subject key identifier: 81:F3:62:D8:02:C5:61:FC:23:6F:C7:DD:63:2C:78:33:03:07:2A:F0 Certificate issuer: /CN=4bf6b4aa-8fed-421b-bd5c-8385c0504c1d Certificate serial: 010D0C9F4328584F0C0780D19919137D585B79A0 Authority key identifier: 71:C9:0F:E3:08:1D:55:F8:36:88:E7:2D:B4:90:78:27:C0:F4:66:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/77e34235-1b08-3e27-88a8-f7fc0bf41e89.roa Signing time: Thu 03 Sep 2026 01:00:12 +0000 ROA not before: Thu 03 Sep 2026 01:00:12 +0000 ROA not after: Wed 02 Dec 2026 02:00:12 +0000 asID: 35967 IP address blocks: 199.67.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0c:07:80:d1:99:19:13:7d:58:5b:79:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bf6b4aa-8fed-421b-bd5c-8385c0504c1d Validity Not Before: Sep 3 01:00:12 2026 GMT Not After : Dec 2 02:00:12 2026 GMT Subject: CN=9c1674cd-861d-44b6-a4d7-3060b9b61b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ee:44:d0:68:b4:c6:f0:da:c8:47:11:1c:9f: 1c:31:84:b6:28:be:c7:79:51:70:6a:0d:6a:a6:db: a0:c3:d9:6f:a8:43:b7:a8:32:ec:34:b1:a9:79:bb: de:10:a3:02:41:fa:7c:da:5c:ba:0c:3a:b5:46:30: 2f:34:3f:7b:34:15:da:3c:72:c1:dc:e2:01:50:c2: 0b:8f:3e:76:44:4c:aa:35:04:cd:ae:98:86:84:6c: 75:32:ea:b0:9c:04:db:d8:33:79:f3:65:67:4b:74: 57:89:2c:ff:2c:83:7d:c2:e4:37:da:7a:90:ae:38: 38:bd:24:c2:31:78:d7:11:2f:ca:cb:ed:66:d5:6c: 7b:cb:45:4f:f2:71:da:3c:29:8a:89:41:d5:30:07: a4:cd:e5:e1:c0:2f:28:d9:09:b3:b9:cf:4b:56:e7: 7e:76:ad:eb:8f:d3:18:11:58:00:30:81:ff:08:5d: 8c:53:06:53:4a:72:75:61:e5:ba:9a:0e:3b:8e:2c: 19:4f:39:63:49:f6:38:59:ec:d4:fb:33:4f:7d:75: b5:6b:f2:25:b0:54:ca:e9:8b:9a:f1:bd:24:cf:49: 77:6f:61:dc:db:44:37:e0:1d:03:35:36:50:e1:74: 7b:45:c2:e7:bd:24:22:d6:7d:cc:9a:cc:68:9c:db: 3a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F3:62:D8:02:C5:61:FC:23:6F:C7:DD:63:2C:78:33:03:07:2A:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/77e34235-1b08-3e27-88a8-f7fc0bf41e89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.crl X509v3 Authority Key Identifier: keyid:71:C9:0F:E3:08:1D:55:F8:36:88:E7:2D:B4:90:78:27:C0:F4:66:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.cer sbgp-ipAddrBlock: critical IPv4: 199.67.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:53:d5:2a:fe:2a:ef:90:06:67:3c:96:8c:01:8e:06:b1:51: f5:2e:a0:04:2e:1f:49:9f:ba:d6:06:39:24:66:05:64:64:7b: cd:1b:b7:e7:ac:79:2b:74:66:ce:45:6a:21:4e:24:01:63:09: 17:e3:d7:db:e0:eb:42:cd:5c:8c:c2:36:9b:be:e7:12:e1:e0: 70:6b:94:fa:e3:b8:73:19:18:77:39:19:fd:54:01:8c:fb:b1: 51:b7:b3:a3:74:f6:f8:59:aa:6c:cc:1b:12:0c:4e:de:18:f0: a6:6e:83:32:33:59:f1:82:0f:8b:55:4e:f6:1d:b4:9a:39:56: 28:f4:4e:45:ae:23:f5:39:ac:c7:42:75:79:ed:f1:3d:b4:fe: 3c:71:5c:b7:85:fe:f9:47:01:25:cf:c4:e4:f5:3f:c3:9b:c7: 62:14:2e:e9:c4:50:f6:71:60:2d:fd:4f:31:a3:03:c4:f3:55: 44:3e:c2:d5:91:8d:89:14:4f:90:2a:57:2e:75:34:06:37:b1: 71:45:b9:87:01:11:09:db:5f:c0:2b:0c:3b:bd:ce:32:60:8c: 01:50:b6:8e:2a:62:21:39:3c:b2:c8:0b:a1:d1:62:ab:9c:47: d9:a6:41:62:b1:ad:38:f4:35:5b:74:8a:97:de:b8:24:76:93: 2c:fc:96:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8MB4DRmRkTfVhbeaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJmNmI0YWEtOGZlZC00MjFiLWJkNWMtODM4NWMwNTA0 YzFkMB4XDTI2MDkwMzAxMDAxMloXDTI2MTIwMjAyMDAxMlowLzEtMCsGA1UEAxMk OWMxNjc0Y2QtODYxZC00NGI2LWE0ZDctMzA2MGI5YjYxYjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou5E0Gi0xvDayEcRHJ8cMYS2KL7HeVFwag1q ptugw9lvqEO3qDLsNLGpebveEKMCQfp82ly6DDq1RjAvND97NBXaPHLB3OIBUMIL jz52REyqNQTNrpiGhGx1MuqwnATb2DN582VnS3RXiSz/LIN9wuQ32nqQrjg4vSTC MXjXES/Ky+1m1Wx7y0VP8nHaPCmKiUHVMAekzeXhwC8o2Qmzuc9LVud+dq3rj9MY EVgAMIH/CF2MUwZTSnJ1YeW6mg47jiwZTzljSfY4WezU+zNPfXW1a/IlsFTK6Yua 8b0kz0l3b2Hc20Q34B0DNTZQ4XR7RcLnvSQi1n3MmsxonNs6uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHzYtgCxWH8I2/H3WMseDMDByrwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80YmY2 YjRhYS04ZmVkLTQyMWItYmQ1Yy04Mzg1YzA1MDRjMWQvNzdlMzQyMzUtMWIwOC0z ZTI3LTg4YTgtZjdmYzBiZjQxZTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNGJmNmI0YWEtOGZlZC00MjFiLWJk NWMtODM4NWMwNTA0YzFkLzRiZjZiNGFhLThmZWQtNDIxYi1iZDVjLTgzODVjMDUw NGMxZC5jcmwwHwYDVR0jBBgwFoAUcckP4wgdVfg2iOcttJB4J8D0Zh8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80YmY2YjRhYS04ZmVkLTQyMWItYmQ1Yy04Mzg1 YzA1MDRjMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0PlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBT1Sr+Ku+QBmc8lowBjgaxUfUuoAQuH0mfutYGOSRmBWRke80bt+es eSt0Zs5FaiFOJAFjCRfj19vg60LNXIzCNpu+5xLh4HBrlPrjuHMZGHc5Gf1UAYz7 sVG3s6N09vhZqmzMGxIMTt4Y8KZugzIzWfGCD4tVTvYdtJo5Vij0TkWuI/U5rMdC dXnt8T20/jxxXLeF/vlHASXPxOT1P8Obx2IULunEUPZxYC39TzGjA8TzVUQ+wtWR jYkUT5AqVy51NAY3sXFFuYcBEQnbX8ArDDu9zjJgjAFQto4qYiE5PLLIC6HRYquc R9mmQWKxrTj0NVt0ipfeuCR2kyz8lv8= -----END CERTIFICATE-----Generated at Thu Sep 24 10:00:03 2026 by rpki-client