$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/005de955-4c0d-38b7-93cf-e0a50e296e3a.roa File: 005de955-4c0d-38b7-93cf-e0a50e296e3a.roa (raw, json) Hash identifier: 3ltVK39YM+shE2Q24YSRxjGfwIIA+SNm/eLUDi6aJ6g= Subject key identifier: E3:E4:FB:74:5B:5F:E4:9C:1B:1E:80:C5:16:B3:AC:68:B6:60:53:7D Certificate issuer: /CN=d5f1d9e6-0be2-4baa-847c-d665c807eddd Certificate serial: 010D0C9F4328584F27F259CEE763C5F8D6787200 Authority key identifier: 6B:35:D1:0B:29:0C:A7:69:63:67:ED:A9:F5:88:43:46:15:A2:DE:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/005de955-4c0d-38b7-93cf-e0a50e296e3a.roa Signing time: Sun 13 Sep 2026 01:00:12 +0000 ROA not before: Sun 13 Sep 2026 01:00:12 +0000 ROA not after: Sat 12 Dec 2026 02:00:12 +0000 asID: 4922 IP address blocks: 199.38.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:27:f2:59:ce:e7:63:c5:f8:d6:78:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f1d9e6-0be2-4baa-847c-d665c807eddd Validity Not Before: Sep 13 01:00:12 2026 GMT Not After : Dec 12 02:00:12 2026 GMT Subject: CN=a681399e-2fe8-4e13-a612-55f87b503326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2d:c0:cf:07:14:8f:22:26:aa:d2:06:d5:e7: 0f:aa:91:10:55:29:76:a6:50:b0:05:4b:d1:21:16: 7c:da:b5:c6:e4:f7:2c:10:be:65:e2:16:f6:5a:27: 17:54:fb:68:90:a1:58:85:57:dd:ff:80:b4:a0:0c: 8b:fa:bc:9f:b1:bc:3e:73:94:14:bf:fd:29:cc:9f: d5:64:61:bf:f1:1c:bb:00:56:b0:c3:d7:4b:47:0a: 2b:da:d7:b4:93:4b:ae:0e:b4:f9:34:31:8b:7b:70: 50:09:5c:5a:e8:39:73:b8:c7:ef:03:27:24:6e:81: 27:fe:6d:5f:c2:67:23:2d:f6:5b:50:74:bc:56:d9: 9c:b4:32:a8:d2:26:51:40:7d:9e:11:b4:1b:54:3f: 77:06:98:07:58:df:a2:f7:dc:9e:28:f0:2c:8e:92: a0:55:a6:c5:66:ff:90:ed:48:fa:7b:f6:67:ed:02: 39:aa:69:16:5d:ae:82:c8:3c:de:e9:9e:79:21:7d: fb:df:95:19:40:6c:ad:82:61:e5:b8:2b:46:4d:0e: 39:c7:bd:34:e4:5b:0b:d6:3d:7f:a2:22:fa:f7:2b: 77:11:e1:0f:5f:3e:35:b6:da:1c:ff:d1:aa:09:77: f4:02:f8:17:4e:ca:5d:76:d2:ea:f5:56:e7:d4:e3: 17:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E4:FB:74:5B:5F:E4:9C:1B:1E:80:C5:16:B3:AC:68:B6:60:53:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/005de955-4c0d-38b7-93cf-e0a50e296e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.crl X509v3 Authority Key Identifier: keyid:6B:35:D1:0B:29:0C:A7:69:63:67:ED:A9:F5:88:43:46:15:A2:DE:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer sbgp-ipAddrBlock: critical IPv4: 199.38.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:76:2b:81:27:0c:f3:f1:11:bd:d1:69:30:a2:fe:d4:ce:7d: bf:14:3e:68:04:47:61:f3:3d:24:73:39:e7:cc:93:66:0d:98: 96:e7:d4:a1:1b:ed:73:87:bb:ca:b1:50:19:26:dc:00:0c:b0: 5d:ba:95:a0:0f:03:8c:05:ac:1a:50:ac:f0:da:c5:36:d8:bb: ef:d5:e1:bb:cb:36:ae:d5:02:e5:bb:56:db:66:96:8b:a1:11: 49:aa:c4:2c:6a:4e:28:0e:d0:93:37:b3:27:bf:3d:cd:a9:57: 42:f9:95:af:68:eb:d9:89:5c:ff:34:43:3b:40:5e:3d:a4:05: 57:be:4a:37:a9:03:de:d2:8d:34:7a:4f:f4:1d:fa:50:2a:5c: 79:ff:f4:62:db:0b:dc:0b:de:20:2a:be:97:e9:f2:61:f4:0b: f0:21:c7:b4:ed:64:29:fe:2a:1d:39:20:a6:be:d1:35:17:3b: 0a:35:f7:d1:76:a1:5f:4f:43:4d:5b:46:30:c9:a7:19:13:c9: ba:d1:b7:07:c9:d8:9c:1d:40:f0:08:df:62:0e:12:e8:cd:e5: 22:ad:fa:0d:22:1b:be:cc:a0:00:ad:34:67:a1:4c:02:e2:2b: a4:12:0a:a5:4f:d2:15:30:21:2e:19:b7:30:26:3c:70:6d:b5: f5:7d:70:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8n8lnO52PF+NZ4cgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVmMWQ5ZTYtMGJlMi00YmFhLTg0N2MtZDY2NWM4MDdl ZGRkMB4XDTI2MDkxMzAxMDAxMloXDTI2MTIxMjAyMDAxMlowLzEtMCsGA1UEAxMk YTY4MTM5OWUtMmZlOC00ZTEzLWE2MTItNTVmODdiNTAzMzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0i3AzwcUjyImqtIG1ecPqpEQVSl2plCwBUvR IRZ82rXG5PcsEL5l4hb2WicXVPtokKFYhVfd/4C0oAyL+ryfsbw+c5QUv/0pzJ/V ZGG/8Ry7AFaww9dLRwor2te0k0uuDrT5NDGLe3BQCVxa6DlzuMfvAyckboEn/m1f wmcjLfZbUHS8VtmctDKo0iZRQH2eEbQbVD93BpgHWN+i99yeKPAsjpKgVabFZv+Q 7Uj6e/Zn7QI5qmkWXa6CyDze6Z55IX3735UZQGytgmHluCtGTQ45x7005FsL1j1/ oiL69yt3EeEPXz41ttoc/9GqCXf0AvgXTspddtLq9Vbn1OMXgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPk+3RbX+ScGx6AxRazrGi2YFN9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNWYx ZDllNi0wYmUyLTRiYWEtODQ3Yy1kNjY1YzgwN2VkZGQvMDA1ZGU5NTUtNGMwZC0z OGI3LTkzY2YtZTBhNTBlMjk2ZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZDVmMWQ5ZTYtMGJlMi00YmFhLTg0 N2MtZDY2NWM4MDdlZGRkL2Q1ZjFkOWU2LTBiZTItNGJhYS04NDdjLWQ2NjVjODA3 ZWRkZC5jcmwwHwYDVR0jBBgwFoAUazXRCykMp2ljZ+2p9YhDRhWi3twwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNWYxZDllNi0wYmUyLTRiYWEtODQ3Yy1kNjY1 YzgwN2VkZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxyZIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZ2K4EnDPPxEb3RaTCi/tTOfb8UPmgER2HzPSRzOefMk2YNmJbn1KEb 7XOHu8qxUBkm3AAMsF26laAPA4wFrBpQrPDaxTbYu+/V4bvLNq7VAuW7Vttmlouh EUmqxCxqTigO0JM3sye/Pc2pV0L5la9o69mJXP80QztAXj2kBVe+SjepA97SjTR6 T/Qd+lAqXHn/9GLbC9wL3iAqvpfp8mH0C/Ahx7TtZCn+Kh05IKa+0TUXOwo199F2 oV9PQ01bRjDJpxkTybrRtwfJ2JwdQPAI32IOEujN5SKt+g0iG77MoACtNGehTALi K6QSCqVP0hUwIS4ZtzAmPHBttfV9cCA= -----END CERTIFICATE-----Generated at Sun Sep 20 19:22:27 2026 by rpki-client