$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/3bddc884-c944-33a8-a019-efeb3df4f624.roa File: 3bddc884-c944-33a8-a019-efeb3df4f624.roa (raw, json) Hash identifier: ntqpozsSjoN0FzzSBoumqlldgFvomZmWgEJoPA+kMcQ= Subject key identifier: 8D:2B:75:7D:CB:C6:A7:0E:19:75:13:99:49:7F:08:1E:02:93:E4:F5 Certificate issuer: /CN=9823d1f6-b1fd-48bd-89c4-da4e5d93f209 Certificate serial: 010D0C9F4328584EA795D800332C33C0F0F474E0 Authority key identifier: E1:FC:D9:80:9C:52:D6:91:C3:6B:04:29:AA:A4:06:9D:37:D5:3B:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/3bddc884-c944-33a8-a019-efeb3df4f624.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 399955 IP address blocks: 199.30.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:d8:00:33:2c:33:c0:f0:f4:74:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9823d1f6-b1fd-48bd-89c4-da4e5d93f209 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=06e91be7-1e98-4b82-9853-3766e514525d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:08:ee:e5:c0:bf:c7:4c:c7:8e:6c:3e:68:be: 23:7b:52:ca:da:fc:d2:e8:6e:c7:62:5c:d0:d4:c4: 28:91:41:56:2d:a8:ff:40:88:1d:2f:68:09:4a:9b: 23:e0:6d:71:88:97:71:6e:bd:56:84:76:fc:82:c3: 6c:0c:1e:1f:9d:6a:ad:90:9a:d2:82:14:74:91:0d: e2:64:9e:33:af:c8:b1:da:e7:5f:d9:22:4e:ec:dc: 0b:d2:b3:5f:de:1c:cd:c4:f8:55:af:11:5d:b4:89: 07:c0:b2:d7:ba:70:5c:d0:9b:7f:d6:e6:43:a6:72: 1f:69:a2:6d:2e:38:fe:74:ee:e9:86:9b:a3:be:ac: 40:24:cc:d3:50:29:da:eb:a6:2b:13:7f:39:5c:c9: af:99:3e:93:c8:76:45:6f:b5:03:f2:ce:16:00:c4: 21:8d:00:77:34:6f:64:9d:46:d0:35:c6:2b:91:0e: 89:95:5b:53:72:83:70:b2:1d:0a:fa:56:92:2e:a7: c5:27:1c:04:ba:f1:3a:6e:67:e9:a3:2c:e0:20:fd: 81:ef:83:38:e0:a1:12:e4:9a:c3:87:80:a1:8b:54: 8e:f6:96:e6:54:a5:74:d4:95:e0:bd:6e:b6:42:00: 06:74:93:f0:5e:b2:ce:31:aa:dc:a1:27:e2:ed:ae: 31:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:2B:75:7D:CB:C6:A7:0E:19:75:13:99:49:7F:08:1E:02:93:E4:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/3bddc884-c944-33a8-a019-efeb3df4f624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.crl X509v3 Authority Key Identifier: keyid:E1:FC:D9:80:9C:52:D6:91:C3:6B:04:29:AA:A4:06:9D:37:D5:3B:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.cer sbgp-ipAddrBlock: critical IPv4: 199.30.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:7d:f2:a5:1f:7f:ee:57:e2:00:a9:1a:78:d2:0a:0e:8d:62: cc:d7:b8:88:51:01:f7:ad:2d:1e:01:ff:27:cc:dc:95:5f:06: 5f:75:f9:58:b1:0e:1e:d1:9a:02:ed:18:06:ae:b4:d7:b5:83: 9f:93:ac:c6:ec:79:8a:15:0b:c9:62:52:ce:9a:44:8f:86:d0: 3a:6e:b7:48:84:32:7e:45:63:78:b8:65:b9:c8:23:c1:60:2b: c4:d0:1b:cd:fa:aa:73:1f:e6:4c:a2:fa:4a:ed:11:d6:1e:f9: 3f:d1:73:2b:46:14:aa:1b:b7:05:13:1d:54:a4:24:ea:dc:71: a6:dd:e2:c2:5e:50:30:7a:04:17:ab:a0:d1:8c:28:f0:81:3f: d0:da:a2:50:d4:20:f9:c5:69:c4:7d:1c:f1:64:2b:8d:a2:c3: 1a:22:3d:03:4e:8c:12:a4:70:20:21:34:a7:4f:d8:97:62:bc: dc:6a:0b:0c:b3:43:94:0d:17:69:68:d9:73:f1:93:24:82:c6: ab:17:0a:ce:02:ea:36:1b:4c:db:a6:4c:df:b3:14:be:a7:85: de:3b:99:88:9a:17:68:de:96:26:43:df:a2:28:bf:b3:a3:26: e8:85:df:37:c2:d2:5f:fb:c1:2e:2d:90:ad:99:22:db:dd:59: f1:f5:68:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nldgAMywzwPD0dOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgyM2QxZjYtYjFmZC00OGJkLTg5YzQtZGE0ZTVkOTNm MjA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDZlOTFiZTctMWU5OC00YjgyLTk4NTMtMzc2NmU1MTQ1MjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAju5cC/x0zHjmw+aL4je1LK2vzS6G7HYlzQ 1MQokUFWLaj/QIgdL2gJSpsj4G1xiJdxbr1WhHb8gsNsDB4fnWqtkJrSghR0kQ3i ZJ4zr8ix2udf2SJO7NwL0rNf3hzNxPhVrxFdtIkHwLLXunBc0Jt/1uZDpnIfaaJt Ljj+dO7phpujvqxAJMzTUCna66YrE385XMmvmT6TyHZFb7UD8s4WAMQhjQB3NG9k nUbQNcYrkQ6JlVtTcoNwsh0K+laSLqfFJxwEuvE6bmfpoyzgIP2B74M44KES5JrD h4Chi1SO9pbmVKV01JXgvW62QgAGdJPwXrLOMarcoSfi7a4xyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0rdX3LxqcOGXUTmUl/CB4Ck+T1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85ODIz ZDFmNi1iMWZkLTQ4YmQtODljNC1kYTRlNWQ5M2YyMDkvM2JkZGM4ODQtYzk0NC0z M2E4LWEwMTktZWZlYjNkZjRmNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTgyM2QxZjYtYjFmZC00OGJkLTg5 YzQtZGE0ZTVkOTNmMjA5Lzk4MjNkMWY2LWIxZmQtNDhiZC04OWM0LWRhNGU1ZDkz ZjIwOS5jcmwwHwYDVR0jBBgwFoAU4fzZgJxS1pHDawQpqqQGnTfVO/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85ODIzZDFmNi1iMWZkLTQ4YmQtODljNC1kYTRl NWQ5M2YyMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxx4IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIt98qUff+5X4gCpGnjSCg6NYszXuIhRAfetLR4B/yfM3JVfBl91+Vix Dh7RmgLtGAautNe1g5+TrMbseYoVC8liUs6aRI+G0Dput0iEMn5FY3i4ZbnII8Fg K8TQG836qnMf5kyi+krtEdYe+T/RcytGFKobtwUTHVSkJOrccabd4sJeUDB6BBer oNGMKPCBP9DaolDUIPnFacR9HPFkK42iwxoiPQNOjBKkcCAhNKdP2JdivNxqCwyz Q5QNF2lo2XPxkySCxqsXCs4C6jYbTNumTN+zFL6nhd47mYiaF2jeliZD36Iov7Oj JuiF3zfC0l/7wS4tkK2ZItvdWfH1aOk= -----END CERTIFICATE-----Generated at Tue Sep 22 05:37:26 2026 by rpki-client