$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/5bb8ae99-9972-35bb-a6b2-11a633b775da.roa File: 5bb8ae99-9972-35bb-a6b2-11a633b775da.roa (raw, json) Hash identifier: 9FvbON4/g3br0NNXfj4vFBMpGBLcYLMbJ3DnG2+dTiE= Subject key identifier: 55:5E:E3:98:03:64:70:38:06:9A:AB:21:72:5F:1F:75:45:09:91:25 Certificate issuer: /CN=d5f1d9e6-0be2-4baa-847c-d665c807eddd Certificate serial: 010D0C9F4328584F1F9248A8472912251E9B4780 Authority key identifier: 6B:35:D1:0B:29:0C:A7:69:63:67:ED:A9:F5:88:43:46:15:A2:DE:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/5bb8ae99-9972-35bb-a6b2-11a633b775da.roa Signing time: Thu 10 Sep 2026 01:00:12 +0000 ROA not before: Thu 10 Sep 2026 01:00:12 +0000 ROA not after: Wed 09 Dec 2026 02:00:12 +0000 asID: 394708 IP address blocks: 199.187.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1f:92:48:a8:47:29:12:25:1e:9b:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f1d9e6-0be2-4baa-847c-d665c807eddd Validity Not Before: Sep 10 01:00:12 2026 GMT Not After : Dec 9 02:00:12 2026 GMT Subject: CN=639a0668-70c3-45f0-ad0d-b5de87d6a1cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:91:34:f9:19:c9:c2:ec:19:84:29:93:22:ba: d8:54:18:5f:c9:54:a8:45:fa:03:39:e3:fb:fe:0a: 3f:61:71:8b:dd:2f:67:98:f3:37:70:f4:79:9d:1d: 36:af:7c:3a:1b:cc:e7:78:2f:c4:8c:84:41:50:c2: 36:0f:1d:10:f6:de:54:4b:8a:53:d9:30:b4:dd:da: fc:14:61:3b:4d:17:1f:db:82:01:2e:71:06:41:f8: 1a:54:ee:d5:8d:01:0a:b3:b8:14:31:59:89:8b:b9: 6d:78:d0:97:34:bf:cf:dd:a2:ca:81:40:d3:33:0a: 24:91:9f:47:40:af:9a:87:f3:5b:3f:0f:4d:fd:ff: 34:f8:6e:5b:ec:4a:73:eb:58:22:17:ae:bb:8f:60: d0:72:a6:83:76:12:06:46:d2:b5:1b:fd:7e:30:9a: 96:ed:dc:dc:46:fd:39:9a:d0:6d:67:fe:c3:2a:59: d0:d8:dc:3e:91:9c:5f:fa:1c:ec:2b:02:15:b5:e0: 38:27:ec:fa:7f:a8:17:24:97:a1:64:48:8f:03:1a: f2:75:b4:30:6f:5d:2d:f7:05:3a:c1:4a:9b:a9:a1: 72:14:a3:e8:9f:e7:98:22:0f:f1:46:d4:c0:4e:3d: 0e:a6:bf:28:ef:d2:88:27:bd:92:3c:19:af:61:27: 41:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:5E:E3:98:03:64:70:38:06:9A:AB:21:72:5F:1F:75:45:09:91:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/5bb8ae99-9972-35bb-a6b2-11a633b775da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.crl X509v3 Authority Key Identifier: keyid:6B:35:D1:0B:29:0C:A7:69:63:67:ED:A9:F5:88:43:46:15:A2:DE:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer sbgp-ipAddrBlock: critical IPv4: 199.187.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:b4:ec:67:e0:45:d3:65:74:f5:54:08:36:fd:e4:27:7d:77: 8d:11:3d:6c:ed:d3:ba:35:c4:8e:37:79:2a:68:df:66:89:fe: c9:dd:1c:1f:7a:ac:49:25:69:fb:ce:ee:21:39:51:12:b8:0c: df:c9:64:92:7a:b6:0b:51:dd:de:b7:2e:02:20:76:8d:b0:74: 0d:47:1c:cf:c8:37:f1:de:c1:53:ad:77:59:3d:03:cf:3c:95: 7e:b1:92:e7:f3:89:91:c1:b3:d7:bb:a1:83:51:fd:e7:d4:bf: 77:be:92:a1:f6:60:9c:20:d6:bb:bd:9e:ba:b4:1f:06:b6:29: fb:74:5a:69:00:37:5c:0c:7b:d5:3d:d8:bf:3b:dc:16:ee:ba: 80:51:72:f8:b0:74:69:a9:99:6a:a4:ea:53:93:86:58:82:91: 0a:b3:61:f0:e0:37:6f:34:38:55:13:78:62:32:1d:e9:44:78: cf:42:f5:cd:d9:b4:b8:c3:4c:47:df:30:1c:53:55:cb:e9:27: 2b:f1:58:ed:60:24:ac:cc:3f:2b:c4:31:35:b1:6a:b0:20:52: 30:20:b1:fa:4f:34:a4:80:ff:0f:54:01:3d:20:34:60:f3:48: 79:da:af:a8:47:b0:bd:5f:90:d2:b0:2b:44:44:d9:1c:42:6d: 14:99:b0:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8fkkioRykSJR6bR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVmMWQ5ZTYtMGJlMi00YmFhLTg0N2MtZDY2NWM4MDdl ZGRkMB4XDTI2MDkxMDAxMDAxMloXDTI2MTIwOTAyMDAxMlowLzEtMCsGA1UEAxMk NjM5YTA2NjgtNzBjMy00NWYwLWFkMGQtYjVkZTg3ZDZhMWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5E0+RnJwuwZhCmTIrrYVBhfyVSoRfoDOeP7 /go/YXGL3S9nmPM3cPR5nR02r3w6G8zneC/EjIRBUMI2Dx0Q9t5US4pT2TC03dr8 FGE7TRcf24IBLnEGQfgaVO7VjQEKs7gUMVmJi7lteNCXNL/P3aLKgUDTMwokkZ9H QK+ah/NbPw9N/f80+G5b7Epz61giF667j2DQcqaDdhIGRtK1G/1+MJqW7dzcRv05 mtBtZ/7DKlnQ2Nw+kZxf+hzsKwIVteA4J+z6f6gXJJehZEiPAxrydbQwb10t9wU6 wUqbqaFyFKPon+eYIg/xRtTATj0Opr8o79KIJ72SPBmvYSdBpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVe45gDZHA4BpqrIXJfH3VFCZElMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNWYx ZDllNi0wYmUyLTRiYWEtODQ3Yy1kNjY1YzgwN2VkZGQvNWJiOGFlOTktOTk3Mi0z NWJiLWE2YjItMTFhNjMzYjc3NWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZDVmMWQ5ZTYtMGJlMi00YmFhLTg0 N2MtZDY2NWM4MDdlZGRkL2Q1ZjFkOWU2LTBiZTItNGJhYS04NDdjLWQ2NjVjODA3 ZWRkZC5jcmwwHwYDVR0jBBgwFoAUazXRCykMp2ljZ+2p9YhDRhWi3twwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNWYxZDllNi0wYmUyLTRiYWEtODQ3Yy1kNjY1 YzgwN2VkZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7vEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHO07GfgRdNldPVUCDb95Cd9d40RPWzt07o1xI43eSpo32aJ/sndHB96 rEklafvO7iE5URK4DN/JZJJ6tgtR3d63LgIgdo2wdA1HHM/IN/HewVOtd1k9A888 lX6xkufziZHBs9e7oYNR/efUv3e+kqH2YJwg1ru9nrq0Hwa2Kft0WmkAN1wMe9U9 2L873BbuuoBRcviwdGmpmWqk6lOThliCkQqzYfDgN280OFUTeGIyHelEeM9C9c3Z tLjDTEffMBxTVcvpJyvxWO1gJKzMPyvEMTWxarAgUjAgsfpPNKSA/w9UAT0gNGDz SHnar6hHsL1fkNKwK0RE2RxCbRSZsMc= -----END CERTIFICATE-----Generated at Mon Sep 21 18:27:44 2026 by rpki-client