$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/004aa721-0c95-3726-9aca-e862d11c0d18.roa File: 004aa721-0c95-3726-9aca-e862d11c0d18.roa (raw, json) Hash identifier: F9mNR9p0ZvVPEcvxBhSgYaNCKRd0w26R+TWh73u+aGw= Subject key identifier: 1A:7A:D1:9D:DC:FD:84:85:D1:81:53:B8:4C:99:92:73:A7:AC:2D:8E Certificate issuer: /CN=d5f1d9e6-0be2-4baa-847c-d665c807eddd Certificate serial: 010D0C9F4328584F27F25D9E24616D035C16DA80 Authority key identifier: 6B:35:D1:0B:29:0C:A7:69:63:67:ED:A9:F5:88:43:46:15:A2:DE:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/004aa721-0c95-3726-9aca-e862d11c0d18.roa Signing time: Sun 13 Sep 2026 01:00:12 +0000 ROA not before: Sun 13 Sep 2026 01:00:12 +0000 ROA not after: Sat 12 Dec 2026 02:00:12 +0000 asID: 4922 IP address blocks: 199.187.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:27:f2:5d:9e:24:61:6d:03:5c:16:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f1d9e6-0be2-4baa-847c-d665c807eddd Validity Not Before: Sep 13 01:00:12 2026 GMT Not After : Dec 12 02:00:12 2026 GMT Subject: CN=2000c7c0-2f2d-4f50-acbb-aaf4591d0bde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:04:8e:9a:00:4b:80:8a:73:81:65:34:84:c5: 06:7e:cf:19:aa:be:16:fe:11:a7:57:bd:c4:c1:f3: b5:b5:c8:c8:cd:79:a7:4f:d2:84:ff:05:11:8a:71: 00:fa:e8:cf:72:9f:86:9b:e8:f6:30:fa:00:75:9f: 15:fe:91:d7:7f:14:d4:03:36:da:da:89:66:e1:93: 2d:c2:4c:38:66:d8:ee:83:15:77:44:db:d2:f4:b9: a6:98:52:84:ff:82:cf:5a:f2:f6:7b:0f:53:cd:36: 0f:fb:df:38:ab:db:b3:da:a9:ab:a5:c7:c8:5a:54: 5d:fe:cd:bc:8f:46:99:90:cc:c4:49:b5:cd:19:ba: 07:29:03:71:9a:18:4a:b6:77:ee:3c:e0:ad:23:82: ea:8c:bd:57:22:70:4b:35:aa:91:d2:e1:50:ba:fe: b0:27:48:e5:e6:00:ad:8b:ed:ca:ed:96:09:93:3d: d2:c2:ed:05:b5:bc:ed:95:59:05:8e:f7:47:c3:a2: 30:f1:15:b3:08:03:1b:66:db:28:a5:91:02:05:c7: 32:de:e4:7c:dd:a2:3e:15:7c:5d:a5:fe:f2:35:14: 55:bc:9b:93:aa:f4:70:e1:52:71:7d:77:05:54:4b: 2c:b7:2e:66:93:22:6c:28:da:ef:4a:7d:07:a9:51: 87:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:7A:D1:9D:DC:FD:84:85:D1:81:53:B8:4C:99:92:73:A7:AC:2D:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/004aa721-0c95-3726-9aca-e862d11c0d18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.crl X509v3 Authority Key Identifier: keyid:6B:35:D1:0B:29:0C:A7:69:63:67:ED:A9:F5:88:43:46:15:A2:DE:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer sbgp-ipAddrBlock: critical IPv4: 199.187.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:17:bc:56:a5:f9:31:72:c8:9a:a9:4f:2e:05:b8:41:e3:00: 79:19:5c:b2:75:02:2b:0a:44:82:3f:7d:4f:50:39:88:18:10: 8e:55:14:85:29:70:cd:d8:a1:51:6b:09:43:7b:25:b5:2e:4a: 32:d0:99:01:17:36:a9:e0:a4:a1:d6:d7:67:bd:5a:a7:d6:8b: b8:2e:e3:ce:04:87:1b:fc:4a:78:a3:3f:ca:de:2c:8c:d2:4d: 75:de:29:b9:21:de:60:9f:94:95:8f:96:b5:d6:36:b2:75:51: ed:e1:67:32:ce:4c:37:22:3b:c8:f3:1a:1c:3b:e8:9a:95:57: 66:92:25:0c:52:2c:59:60:0c:2b:91:66:ba:8d:26:7f:52:e0: a7:10:14:92:35:9f:b6:f2:09:91:a9:be:af:ef:06:dd:c0:7d: 28:85:a3:f2:5c:47:27:67:87:26:83:6c:d0:d4:17:c7:c6:78: 39:2a:87:c3:da:d0:d5:e1:dc:17:b3:1a:be:12:99:02:35:d8: 97:51:23:93:94:79:26:ad:26:95:b8:cb:83:6f:bd:3c:58:d1: 7a:d1:98:84:0c:fa:29:78:42:74:30:36:63:d8:7f:2a:ef:f9: 05:f3:df:3c:f1:03:ca:40:e1:fe:e9:46:84:cd:0f:51:b2:22: a6:10:a9:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8n8l2eJGFtA1wW2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVmMWQ5ZTYtMGJlMi00YmFhLTg0N2MtZDY2NWM4MDdl ZGRkMB4XDTI2MDkxMzAxMDAxMloXDTI2MTIxMjAyMDAxMlowLzEtMCsGA1UEAxMk MjAwMGM3YzAtMmYyZC00ZjUwLWFjYmItYWFmNDU5MWQwYmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wSOmgBLgIpzgWU0hMUGfs8Zqr4W/hGnV73E wfO1tcjIzXmnT9KE/wURinEA+ujPcp+Gm+j2MPoAdZ8V/pHXfxTUAzba2olm4ZMt wkw4ZtjugxV3RNvS9LmmmFKE/4LPWvL2ew9TzTYP+984q9uz2qmrpcfIWlRd/s28 j0aZkMzESbXNGboHKQNxmhhKtnfuPOCtI4LqjL1XInBLNaqR0uFQuv6wJ0jl5gCt i+3K7ZYJkz3Swu0FtbztlVkFjvdHw6Iw8RWzCAMbZtsopZECBccy3uR83aI+FXxd pf7yNRRVvJuTqvRw4VJxfXcFVEssty5mkyJsKNrvSn0HqVGHHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBp60Z3c/YSF0YFTuEyZknOnrC2OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNWYx ZDllNi0wYmUyLTRiYWEtODQ3Yy1kNjY1YzgwN2VkZGQvMDA0YWE3MjEtMGM5NS0z NzI2LTlhY2EtZTg2MmQxMWMwZDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZDVmMWQ5ZTYtMGJlMi00YmFhLTg0 N2MtZDY2NWM4MDdlZGRkL2Q1ZjFkOWU2LTBiZTItNGJhYS04NDdjLWQ2NjVjODA3 ZWRkZC5jcmwwHwYDVR0jBBgwFoAUazXRCykMp2ljZ+2p9YhDRhWi3twwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNWYxZDllNi0wYmUyLTRiYWEtODQ3Yy1kNjY1 YzgwN2VkZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7vEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8XvFal+TFyyJqpTy4FuEHjAHkZXLJ1AisKRII/fU9QOYgYEI5VFIUp cM3YoVFrCUN7JbUuSjLQmQEXNqngpKHW12e9WqfWi7gu484Ehxv8SnijP8reLIzS TXXeKbkh3mCflJWPlrXWNrJ1Ue3hZzLOTDciO8jzGhw76JqVV2aSJQxSLFlgDCuR ZrqNJn9S4KcQFJI1n7byCZGpvq/vBt3AfSiFo/JcRydnhyaDbNDUF8fGeDkqh8Pa 0NXh3BezGr4SmQI12JdRI5OUeSatJpW4y4NvvTxY0XrRmIQM+il4QnQwNmPYfyrv +QXz3zzxA8pA4f7pRoTND1GyIqYQqZQ= -----END CERTIFICATE-----Generated at Sun Sep 20 18:23:19 2026 by rpki-client