$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1/0acfb833-6d30-38c0-b3af-851490ddaef6.roa File: 0acfb833-6d30-38c0-b3af-851490ddaef6.roa (raw, json) Hash identifier: voyp6fqH4kq5tGeEbWnePE+zCHEnTh8ujzU0QOtF4Ww= Subject key identifier: 9D:E8:2C:29:8A:1E:F6:CD:9F:2E:A1:43:71:BE:03:BA:8D:A0:EE:32 Certificate issuer: /CN=f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1 Certificate serial: 010D0C9F4328584F3A17DBD22640CBB4C197C480 Authority key identifier: 59:F4:59:3D:AD:54:4C:09:01:C5:00:42:6B:40:F4:7C:CC:18:C7:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1/0acfb833-6d30-38c0-b3af-851490ddaef6.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 36365 IP address blocks: 199.36.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:db:d2:26:40:cb:b4:c1:97:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=a966864a-8fa6-4a34-9bb2-6bb7364499ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:49:82:54:09:c3:5c:9c:c1:73:95:fa:68:6f: 7a:62:c4:06:27:91:20:65:4a:f8:53:3b:65:8a:25: 25:b2:cf:42:05:2c:35:91:ff:95:8d:d0:76:9f:0b: 36:6c:fc:21:e9:db:4d:98:c7:cc:23:3f:f1:f9:0c: 3b:c9:b6:29:a4:48:1e:60:54:49:34:40:5a:87:fc: 6d:ea:66:b7:14:f9:17:8c:f3:e9:b5:8b:fa:fb:67: 86:56:8f:52:0c:c4:8a:b1:4f:4a:02:33:ff:44:9f: f3:d9:42:ab:cb:fd:7e:84:5b:e1:cf:cb:68:5b:df: 29:7d:73:a7:01:c9:3c:6b:4f:69:2d:02:75:04:09: 27:bf:05:67:cb:e5:12:90:91:76:bb:96:59:68:3e: bd:04:4a:6d:68:1f:f3:07:60:4d:1e:d5:86:9a:78: ab:d6:1d:0c:c7:e2:bf:2b:ff:da:36:29:f3:f6:28: d5:de:6e:79:25:b3:d3:d0:34:26:34:c9:af:b5:07: 6c:b1:28:c3:d6:1b:52:b8:b6:f0:8c:5a:f7:01:c0: c2:1a:0e:f9:56:13:b2:6a:b4:25:77:28:ab:1f:16: 14:10:6b:bf:8f:b1:95:df:14:ce:fa:d2:66:fd:50: d3:ec:8d:66:4a:55:88:83:82:16:ac:b0:72:ae:e1: 0d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E8:2C:29:8A:1E:F6:CD:9F:2E:A1:43:71:BE:03:BA:8D:A0:EE:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1/0acfb833-6d30-38c0-b3af-851490ddaef6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1.crl X509v3 Authority Key Identifier: keyid:59:F4:59:3D:AD:54:4C:09:01:C5:00:42:6B:40:F4:7C:CC:18:C7:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1.cer sbgp-ipAddrBlock: critical IPv4: 199.36.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:dc:f7:65:66:1c:78:15:6c:e9:cb:d6:d6:a9:51:f7:75:77: 65:9e:81:34:91:6b:e8:e6:ee:92:fd:94:81:8a:4d:82:ae:29: 3d:5d:e1:e9:49:75:d9:ae:4f:c0:1a:8a:3e:19:c6:43:bd:2d: fc:5e:0c:b7:0a:d9:f5:06:b7:75:db:b5:e0:17:97:b2:02:10: 4c:20:81:6c:87:1c:a1:18:20:80:bf:64:d7:42:b6:89:52:e0: f8:c3:49:58:47:33:3f:7f:cf:71:d6:70:8a:af:df:48:a7:ca: 04:f6:89:83:4d:ba:00:4f:38:b6:25:04:f7:91:e6:28:12:e5: 91:de:d4:48:98:3b:f8:bf:c5:53:72:41:22:39:68:66:84:34: 4f:91:bb:ab:d8:2c:92:87:7b:96:e3:14:cf:83:9f:f4:a2:f9: 08:c6:45:51:d1:e1:5b:95:8f:60:28:1a:55:67:b6:5a:52:b2: d8:43:8a:e1:25:0d:e3:8e:7f:41:1a:2e:f1:47:94:e6:38:36: 05:27:25:38:7d:e4:f6:19:ce:13:3a:11:c2:ec:db:d9:a7:a4: 96:39:d8:37:42:a4:33:9c:4a:5e:b4:e4:fa:8b:38:fa:be:a4: bf:93:6c:49:c6:ca:be:df:71:c9:64:61:9c:b7:16:90:17:de: 37:4d:5d:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F9vSJkDLtMGXxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhiNDgwOWItMWMxZS00OGFmLWI4ZjAtYTY2YTFlMDBk NWQxMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk YTk2Njg2NGEtOGZhNi00YTM0LTliYjItNmJiNzM2NDQ5OWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUmCVAnDXJzBc5X6aG96YsQGJ5EgZUr4Uztl iiUlss9CBSw1kf+VjdB2nws2bPwh6dtNmMfMIz/x+Qw7ybYppEgeYFRJNEBah/xt 6ma3FPkXjPPptYv6+2eGVo9SDMSKsU9KAjP/RJ/z2UKry/1+hFvhz8toW98pfXOn Ack8a09pLQJ1BAknvwVny+USkJF2u5ZZaD69BEptaB/zB2BNHtWGmnir1h0Mx+K/ K//aNinz9ijV3m55JbPT0DQmNMmvtQdssSjD1htSuLbwjFr3AcDCGg75VhOyarQl dyirHxYUEGu/j7GV3xTO+tJm/VDT7I1mSlWIg4IWrLByruENqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3oLCmKHvbNny6hQ3G+A7qNoO4yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOGI0 ODA5Yi0xYzFlLTQ4YWYtYjhmMC1hNjZhMWUwMGQ1ZDEvMGFjZmI4MzMtNmQzMC0z OGMwLWIzYWYtODUxNDkwZGRhZWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjhiNDgwOWItMWMxZS00OGFmLWI4 ZjAtYTY2YTFlMDBkNWQxL2Y4YjQ4MDliLTFjMWUtNDhhZi1iOGYwLWE2NmExZTAw ZDVkMS5jcmwwHwYDVR0jBBgwFoAUWfRZPa1UTAkBxQBCa0D0fMwYx9swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOGI0ODA5Yi0xYzFlLTQ4YWYtYjhmMC1hNjZh MWUwMGQ1ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyRHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHc92VmHHgVbOnL1tapUfd1d2WegTSRa+jm7pL9lIGKTYKuKT1d4elJ ddmuT8Aaij4ZxkO9LfxeDLcK2fUGt3XbteAXl7ICEEwggWyHHKEYIIC/ZNdCtolS 4PjDSVhHMz9/z3HWcIqv30inygT2iYNNugBPOLYlBPeR5igS5ZHe1EiYO/i/xVNy QSI5aGaENE+Ru6vYLJKHe5bjFM+Dn/Si+QjGRVHR4VuVj2AoGlVntlpSsthDiuEl DeOOf0EaLvFHlOY4NgUnJTh95PYZzhM6EcLs29mnpJY52DdCpDOcSl605PqLOPq+ pL+TbEnGyr7fcclkYZy3FpAX3jdNXds= -----END CERTIFICATE-----Generated at Tue Sep 22 13:34:11 2026 by rpki-client