$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/0bf8b83b-53a3-3a18-9359-38a07be7967b.roa File: 0bf8b83b-53a3-3a18-9359-38a07be7967b.roa (raw, json) Hash identifier: SOGTm3JTlYZnQ9BV6XTRoTFd33qu2m8mHDJKaKJP1pY= Subject key identifier: B1:09:EC:72:0C:F2:47:9B:97:21:B1:35:FF:5C:EE:5F:43:12:4E:32 Certificate issuer: /CN=d5f1d9e6-0be2-4baa-847c-d665c807eddd Certificate serial: 010D0C9F4328584F1F92462F121D0A118475FF80 Authority key identifier: 6B:35:D1:0B:29:0C:A7:69:63:67:ED:A9:F5:88:43:46:15:A2:DE:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/0bf8b83b-53a3-3a18-9359-38a07be7967b.roa Signing time: Thu 10 Sep 2026 01:00:12 +0000 ROA not before: Thu 10 Sep 2026 01:00:12 +0000 ROA not after: Wed 09 Dec 2026 02:00:12 +0000 asID: 394708 IP address blocks: 199.38.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1f:92:46:2f:12:1d:0a:11:84:75:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f1d9e6-0be2-4baa-847c-d665c807eddd Validity Not Before: Sep 10 01:00:12 2026 GMT Not After : Dec 9 02:00:12 2026 GMT Subject: CN=2cd593b8-f114-44ab-b872-8c459d2be6a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c9:38:a5:3b:6d:72:cb:f2:97:4c:78:17:8a: 93:ca:f9:7a:1c:c6:e4:7c:ba:49:97:41:2a:fd:02: 7d:66:87:1c:86:a9:30:09:f9:26:22:1c:51:0e:fb: 6b:19:6b:01:9d:83:8b:f4:2c:ee:fe:27:b6:66:72: 50:f6:42:e1:eb:8a:73:e4:f1:c9:10:01:70:74:4c: c7:a5:26:2d:7c:6e:41:82:d2:fb:f3:9a:12:08:08: e2:45:6a:ab:15:2a:f7:7d:88:48:23:da:2f:59:a7: 66:19:4f:3f:50:f8:66:8d:02:e0:aa:53:6b:61:f5: 6e:65:d0:f4:c1:5b:6d:bb:bd:2d:49:93:43:2c:53: 6d:9e:49:7c:48:8f:39:d3:2c:70:5f:0e:35:c4:f9: ec:df:ba:49:19:fa:c7:e1:14:ad:aa:aa:01:db:cd: 8e:4e:93:06:17:0f:58:d7:11:65:15:9d:fc:d2:f7: 6e:5d:9d:37:e5:83:7f:7b:74:9a:1e:ac:f0:ce:d4: 19:57:fa:94:0b:7c:f4:73:55:06:9d:49:c9:1c:d6: b0:85:8f:1e:af:6f:c5:37:d2:49:bd:3a:47:74:15: c5:be:2c:c3:ac:21:e4:34:25:f3:08:35:c1:a4:80: 51:e8:27:95:9f:6e:b1:c6:0e:f3:58:1a:00:f3:a9: 54:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:09:EC:72:0C:F2:47:9B:97:21:B1:35:FF:5C:EE:5F:43:12:4E:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/0bf8b83b-53a3-3a18-9359-38a07be7967b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.crl X509v3 Authority Key Identifier: keyid:6B:35:D1:0B:29:0C:A7:69:63:67:ED:A9:F5:88:43:46:15:A2:DE:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer sbgp-ipAddrBlock: critical IPv4: 199.38.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:59:b4:ef:ef:34:32:dc:ee:ed:19:be:86:cf:d6:89:72:01: 4a:83:a9:52:67:f5:96:2d:d2:33:19:b1:bb:eb:2d:c2:4b:d5: c6:c8:03:6e:7d:bd:81:d9:8f:cf:05:51:3a:e1:6a:34:77:7d: 9a:c8:1a:d0:cb:4b:17:82:d4:c1:fe:63:cf:83:ba:c3:3c:c8: ac:0b:b6:41:70:c6:57:5c:7c:e7:73:74:c1:d7:c6:77:81:75: a1:6b:8d:d8:10:65:47:33:23:67:9f:fd:47:c7:33:74:80:e5: a8:51:fa:d0:cb:1a:d8:20:30:4c:f0:55:0e:3e:9c:17:fb:4d: 40:7f:23:7b:2f:15:78:44:57:47:2e:16:e9:e8:6d:a3:4f:6b: 63:4e:77:99:cd:65:51:dc:06:11:ff:b7:c8:e8:a3:c1:31:f3: e4:16:57:91:5f:ae:7f:9f:69:85:18:e2:ad:7f:84:78:3c:d4: 50:ef:fa:6c:e9:a7:02:49:3d:b1:21:9e:39:05:11:dc:6d:cf: 34:e9:e4:22:d9:8e:df:22:04:d3:9b:7f:0e:a6:cf:93:b0:98: 1c:51:c9:a1:6d:59:65:b5:ec:aa:2f:84:eb:8f:c7:d9:6a:8c: a4:b9:79:eb:86:67:16:cd:85:dc:a7:cd:3c:4a:a6:5e:27:74: ff:99:ef:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8fkkYvEh0KEYR1/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVmMWQ5ZTYtMGJlMi00YmFhLTg0N2MtZDY2NWM4MDdl ZGRkMB4XDTI2MDkxMDAxMDAxMloXDTI2MTIwOTAyMDAxMlowLzEtMCsGA1UEAxMk MmNkNTkzYjgtZjExNC00NGFiLWI4NzItOGM0NTlkMmJlNmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsk4pTttcsvyl0x4F4qTyvl6HMbkfLpJl0Eq /QJ9ZocchqkwCfkmIhxRDvtrGWsBnYOL9Czu/ie2ZnJQ9kLh64pz5PHJEAFwdEzH pSYtfG5BgtL785oSCAjiRWqrFSr3fYhII9ovWadmGU8/UPhmjQLgqlNrYfVuZdD0 wVttu70tSZNDLFNtnkl8SI850yxwXw41xPns37pJGfrH4RStqqoB282OTpMGFw9Y 1xFlFZ380vduXZ035YN/e3SaHqzwztQZV/qUC3z0c1UGnUnJHNawhY8er2/FN9JJ vTpHdBXFvizDrCHkNCXzCDXBpIBR6CeVn26xxg7zWBoA86lUnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEJ7HIM8keblyGxNf9c7l9DEk4yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNWYx ZDllNi0wYmUyLTRiYWEtODQ3Yy1kNjY1YzgwN2VkZGQvMGJmOGI4M2ItNTNhMy0z YTE4LTkzNTktMzhhMDdiZTc5NjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZDVmMWQ5ZTYtMGJlMi00YmFhLTg0 N2MtZDY2NWM4MDdlZGRkL2Q1ZjFkOWU2LTBiZTItNGJhYS04NDdjLWQ2NjVjODA3 ZWRkZC5jcmwwHwYDVR0jBBgwFoAUazXRCykMp2ljZ+2p9YhDRhWi3twwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNWYxZDllNi0wYmUyLTRiYWEtODQ3Yy1kNjY1 YzgwN2VkZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxyZIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhZtO/vNDLc7u0ZvobP1olyAUqDqVJn9ZYt0jMZsbvrLcJL1cbIA259 vYHZj88FUTrhajR3fZrIGtDLSxeC1MH+Y8+DusM8yKwLtkFwxldcfOdzdMHXxneB daFrjdgQZUczI2ef/UfHM3SA5ahR+tDLGtggMEzwVQ4+nBf7TUB/I3svFXhEV0cu FunobaNPa2NOd5nNZVHcBhH/t8joo8Ex8+QWV5Ffrn+faYUY4q1/hHg81FDv+mzp pwJJPbEhnjkFEdxtzzTp5CLZjt8iBNObfw6mz5OwmBxRyaFtWWW17KovhOuPx9lq jKS5eeuGZxbNhdynzTxKpl4ndP+Z76M= -----END CERTIFICATE-----Generated at Mon Sep 21 13:49:35 2026 by rpki-client