$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee8a978a-c44e-4df0-a5b6-429d2ec68459/bb3c11fc-084c-34ef-bed2-50f9b332d380.roa File: bb3c11fc-084c-34ef-bed2-50f9b332d380.roa (raw, json) Hash identifier: FICCbS6aTI6lAPTT8EYawD36JW3Mi0XtkU1OX1QPuLM= Subject key identifier: AD:AB:81:C1:56:EE:93:C5:10:E0:BF:F6:22:E9:EF:D8:7F:53:A5:B4 Certificate issuer: /CN=ee8a978a-c44e-4df0-a5b6-429d2ec68459 Certificate serial: 010D0C9F4328584F17323F398F8D26699A489D48 Authority key identifier: 91:22:D3:EA:75:9B:7F:5B:04:6E:AC:65:24:BE:E8:08:3C:1B:82:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee8a978a-c44e-4df0-a5b6-429d2ec68459.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee8a978a-c44e-4df0-a5b6-429d2ec68459/bb3c11fc-084c-34ef-bed2-50f9b332d380.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 8075 IP address blocks: 199.245.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee8a978a-c44e-4df0-a5b6-429d2ec68459/ee8a978a-c44e-4df0-a5b6-429d2ec68459.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee8a978a-c44e-4df0-a5b6-429d2ec68459/ee8a978a-c44e-4df0-a5b6-429d2ec68459.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee8a978a-c44e-4df0-a5b6-429d2ec68459.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:3f:39:8f:8d:26:69:9a:48:9d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee8a978a-c44e-4df0-a5b6-429d2ec68459 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=e4c0eaea-7b57-48a0-b02a-3fe9462c9b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:97:fa:41:c4:d4:7e:0b:db:09:87:21:12:0b: f6:bc:af:d1:35:ef:7a:52:ce:13:a6:1c:d4:13:80: 69:aa:99:d7:97:f1:d0:e5:da:f7:35:e6:96:a5:49: 88:68:20:3c:07:98:93:30:6b:25:0b:97:b9:49:0d: 49:b1:09:39:6f:d5:f2:2a:eb:7f:ad:b1:99:b6:a7: 09:e8:ea:19:1f:15:dc:d4:06:a7:2d:6f:83:4e:63: 98:65:a7:6e:50:35:62:47:26:e1:74:c6:2b:d3:1a: e5:de:1e:80:74:42:39:7a:85:cd:4b:c6:f5:62:f2: 97:11:e1:5f:79:8d:3b:88:bd:f8:66:a9:66:2e:a4: d2:00:09:bb:a2:11:c7:8e:8f:f6:a0:99:51:eb:9e: 35:93:82:14:d7:12:2a:4c:9e:2f:a8:01:64:2b:13: af:0e:ad:1d:50:7c:16:f6:f9:5f:79:d3:f1:b2:3c: 81:73:7a:e9:83:7a:db:b0:fa:96:7b:d4:c2:b1:17: 8e:4b:3e:a1:71:16:94:62:e7:f1:6c:25:f5:2d:51: 35:36:f6:43:ad:12:d7:f3:67:24:46:48:75:59:dc: db:ea:d5:f3:4c:00:cc:ca:5f:96:b5:e4:d2:e0:d6: aa:0b:22:9e:a5:8c:b3:b3:38:1b:43:36:64:a1:a2: 92:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:AB:81:C1:56:EE:93:C5:10:E0:BF:F6:22:E9:EF:D8:7F:53:A5:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee8a978a-c44e-4df0-a5b6-429d2ec68459/bb3c11fc-084c-34ef-bed2-50f9b332d380.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee8a978a-c44e-4df0-a5b6-429d2ec68459/ee8a978a-c44e-4df0-a5b6-429d2ec68459.crl X509v3 Authority Key Identifier: keyid:91:22:D3:EA:75:9B:7F:5B:04:6E:AC:65:24:BE:E8:08:3C:1B:82:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee8a978a-c44e-4df0-a5b6-429d2ec68459.cer sbgp-ipAddrBlock: critical IPv4: 199.245.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:c0:0c:9e:f1:45:52:c1:68:49:af:25:c7:7f:4d:4b:c1:00: 9e:c9:86:5c:84:85:6d:10:8d:ff:3a:be:6b:aa:5d:28:9f:f4: c8:68:94:0d:99:8d:0c:1c:25:05:a6:49:6e:68:ad:84:73:af: ac:43:08:c1:c1:2e:33:5b:d7:51:fe:c7:59:4b:bf:da:db:0b: ca:11:47:2b:c5:8a:da:eb:4c:01:f8:4a:b6:37:76:83:60:18: 8d:01:a2:e0:03:ba:f7:4d:64:c7:9a:9b:91:23:a1:4c:b4:7e: 7b:13:9c:31:06:f7:bf:f7:69:be:70:0c:d4:f0:8f:67:f8:a6: eb:d5:e3:54:9c:37:24:92:f2:d5:41:7b:18:a5:58:16:17:d2: bd:34:b4:17:a8:e1:da:5a:fe:c8:e5:3e:ac:6e:85:fa:e8:dc: 6c:4b:5e:da:05:89:ea:93:19:51:82:98:ee:01:2a:6f:be:71: 6c:17:7c:87:b6:53:ae:8c:91:95:4d:99:ae:d6:e6:1f:91:00: ba:ff:c4:96:e9:dd:fa:48:3f:e8:3c:8a:97:a3:e5:3f:1d:14: 82:0d:77:80:3e:52:2e:29:4b:ed:9c:6b:62:9c:dd:48:7c:cb: ca:bc:7f:78:2f:e2:2f:23:13:72:22:8c:ff:e8:dc:bb:66:46: f3:58:b1:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMj85j40maZpInUgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU4YTk3OGEtYzQ0ZS00ZGYwLWE1YjYtNDI5ZDJlYzY4 NDU5MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk ZTRjMGVhZWEtN2I1Ny00OGEwLWIwMmEtM2ZlOTQ2MmM5YjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZf6QcTUfgvbCYchEgv2vK/RNe96Us4TphzU E4BpqpnXl/HQ5dr3NeaWpUmIaCA8B5iTMGslC5e5SQ1JsQk5b9XyKut/rbGZtqcJ 6OoZHxXc1AanLW+DTmOYZaduUDViRybhdMYr0xrl3h6AdEI5eoXNS8b1YvKXEeFf eY07iL34ZqlmLqTSAAm7ohHHjo/2oJlR6541k4IU1xIqTJ4vqAFkKxOvDq0dUHwW 9vlfedPxsjyBc3rpg3rbsPqWe9TCsReOSz6hcRaUYufxbCX1LVE1NvZDrRLX82ck Rkh1Wdzb6tXzTADMyl+WteTS4NaqCyKepYyzszgbQzZkoaKSRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2rgcFW7pPFEOC/9iLp79h/U6W0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9lZThh OTc4YS1jNDRlLTRkZjAtYTViNi00MjlkMmVjNjg0NTkvYmIzYzExZmMtMDg0Yy0z NGVmLWJlZDItNTBmOWIzMzJkMzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZWU4YTk3OGEtYzQ0ZS00ZGYwLWE1 YjYtNDI5ZDJlYzY4NDU5L2VlOGE5NzhhLWM0NGUtNGRmMC1hNWI2LTQyOWQyZWM2 ODQ1OS5jcmwwHwYDVR0jBBgwFoAUkSLT6nWbf1sEbqxlJL7oCDwbggUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9lZThhOTc4YS1jNDRlLTRkZjAtYTViNi00Mjlk MmVjNjg0NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/XsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzADJ7xRVLBaEmvJcd/TUvBAJ7JhlyEhW0Qjf86vmuqXSif9MholA2Z jQwcJQWmSW5orYRzr6xDCMHBLjNb11H+x1lLv9rbC8oRRyvFitrrTAH4SrY3doNg GI0BouADuvdNZMeam5EjoUy0fnsTnDEG97/3ab5wDNTwj2f4puvV41ScNySS8tVB exilWBYX0r00tBeo4dpa/sjlPqxuhfro3GxLXtoFieqTGVGCmO4BKm++cWwXfIe2 U66MkZVNma7W5h+RALr/xJbp3fpIP+g8ipej5T8dFIINd4A+Ui4pS+2ca2Kc3Uh8 y8q8f3gv4i8jE3IijP/o3LtmRvNYsSE= -----END CERTIFICATE-----Generated at Mon Sep 21 17:50:11 2026 by rpki-client