$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1/ef1e360e-eb36-33da-9ec8-f66d1a992bb4.roa File: ef1e360e-eb36-33da-9ec8-f66d1a992bb4.roa (raw, json) Hash identifier: 6CjilLxJagPrviKhiFcNH8bBpDf4vH41hgaQXTIlrbY= Subject key identifier: 6B:69:C9:B0:36:F7:A3:3F:F6:FF:7D:E5:E0:90:C7:FE:2A:6A:71:50 Certificate issuer: /CN=f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1 Certificate serial: 010D0C9F4328584F3A17CA6B2CF164C77AF8F300 Authority key identifier: 59:F4:59:3D:AD:54:4C:09:01:C5:00:42:6B:40:F4:7C:CC:18:C7:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1/ef1e360e-eb36-33da-9ec8-f66d1a992bb4.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 36365 IP address blocks: 199.36.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:ca:6b:2c:f1:64:c7:7a:f8:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=7921d27d-f88d-474b-9207-d7752a2b403e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:00:a4:1e:ac:73:d3:c4:bb:e5:85:73:41:4a: 2f:bb:62:fb:ad:00:54:f9:3d:75:06:68:76:4b:29: df:22:5e:40:dd:67:28:dc:34:0b:f4:0a:ee:b6:dd: 52:e0:3b:11:e9:e3:b5:9b:cd:85:ee:0a:ac:ef:50: 2f:21:33:0e:3e:0f:f8:1c:db:71:69:b3:33:bb:7b: f6:27:13:1b:99:43:4c:7a:66:a7:a0:10:99:e7:18: 07:9d:38:4a:12:d4:fc:c9:0a:80:8d:1f:23:25:28: 71:c3:89:22:15:ea:7d:05:06:15:0d:c2:d6:e4:5d: 86:2c:4e:dd:96:94:fd:08:f2:1e:53:7b:e2:dc:69: 02:c8:d0:0b:be:5f:b0:07:7c:fd:d4:c4:96:3d:5a: e6:22:80:2c:3d:cb:df:75:db:cb:84:18:1c:fb:d4: 50:9b:19:29:21:08:0c:28:07:a3:3b:b9:12:0c:92: c9:a1:06:c5:32:1c:01:c1:6b:bd:9d:37:d8:ee:63: 23:6c:ac:b7:d6:e8:99:b8:09:01:73:ab:b5:a8:8e: e6:c7:fe:f0:04:70:3d:f6:c1:e2:da:9f:3d:0d:66: c2:cc:0e:5b:5d:65:9b:ec:5f:6f:da:d1:ac:d2:4a: 8a:eb:92:0e:89:ac:07:ed:d1:36:6b:3a:80:de:be: 1b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:69:C9:B0:36:F7:A3:3F:F6:FF:7D:E5:E0:90:C7:FE:2A:6A:71:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1/ef1e360e-eb36-33da-9ec8-f66d1a992bb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1.crl X509v3 Authority Key Identifier: keyid:59:F4:59:3D:AD:54:4C:09:01:C5:00:42:6B:40:F4:7C:CC:18:C7:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1.cer sbgp-ipAddrBlock: critical IPv4: 199.36.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:c1:48:ff:da:7e:e0:c3:7b:14:2d:67:1d:a6:f8:56:17:06: f9:3d:fc:db:8d:b6:69:77:14:03:f4:98:eb:81:1b:9c:e7:1e: 5a:e6:76:a9:ec:f9:1c:69:67:a0:af:53:fb:e4:8e:44:a3:1e: 7a:69:b1:8d:20:ee:13:07:38:e1:c1:d9:99:88:85:ac:bc:1d: a0:b7:e9:03:23:09:02:0d:0f:b1:90:d8:27:e7:d9:f3:1d:2c: 8f:07:4e:27:6e:8b:69:3f:55:db:65:a1:52:2d:7c:0f:16:53: 2d:94:9e:12:d5:6f:49:d6:57:27:ce:03:e5:ec:14:83:02:01: 66:26:f5:f6:36:60:8e:3d:fe:31:47:64:dd:cd:2d:73:56:7a: 4f:7b:50:f5:d3:9c:59:00:fc:97:cb:4c:ef:ad:8a:74:70:42: 0c:61:47:41:46:c6:af:34:c4:ab:f2:ba:86:4c:99:e7:b2:8c: 9d:81:cb:f4:13:45:ab:bf:ab:26:bb:c4:e7:9e:fd:5f:53:1e: b7:db:79:59:dd:2d:e8:f3:19:c4:d4:cc:d5:d1:19:2e:66:ff: e6:9a:ee:03:95:f5:9a:84:6a:16:fd:de:fb:45:79:99:ad:e7: 8f:e7:7c:c8:7c:0e:a2:73:d1:b6:80:aa:3c:93:14:a7:e7:b8: e9:fa:eb:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F8prLPFkx3r48wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhiNDgwOWItMWMxZS00OGFmLWI4ZjAtYTY2YTFlMDBk NWQxMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk NzkyMWQyN2QtZjg4ZC00NzRiLTkyMDctZDc3NTJhMmI0MDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiACkHqxz08S75YVzQUovu2L7rQBU+T11Bmh2 SynfIl5A3Wco3DQL9Arutt1S4DsR6eO1m82F7gqs71AvITMOPg/4HNtxabMzu3v2 JxMbmUNMemanoBCZ5xgHnThKEtT8yQqAjR8jJShxw4kiFep9BQYVDcLW5F2GLE7d lpT9CPIeU3vi3GkCyNALvl+wB3z91MSWPVrmIoAsPcvfddvLhBgc+9RQmxkpIQgM KAejO7kSDJLJoQbFMhwBwWu9nTfY7mMjbKy31uiZuAkBc6u1qI7mx/7wBHA99sHi 2p89DWbCzA5bXWWb7F9v2tGs0kqK65IOiawH7dE2azqA3r4bLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtpybA296M/9v995eCQx/4qanFQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOGI0 ODA5Yi0xYzFlLTQ4YWYtYjhmMC1hNjZhMWUwMGQ1ZDEvZWYxZTM2MGUtZWIzNi0z M2RhLTllYzgtZjY2ZDFhOTkyYmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjhiNDgwOWItMWMxZS00OGFmLWI4 ZjAtYTY2YTFlMDBkNWQxL2Y4YjQ4MDliLTFjMWUtNDhhZi1iOGYwLWE2NmExZTAw ZDVkMS5jcmwwHwYDVR0jBBgwFoAUWfRZPa1UTAkBxQBCa0D0fMwYx9swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOGI0ODA5Yi0xYzFlLTQ4YWYtYjhmMC1hNjZh MWUwMGQ1ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyREMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjBSP/afuDDexQtZx2m+FYXBvk9/NuNtml3FAP0mOuBG5znHlrmdqns +RxpZ6CvU/vkjkSjHnppsY0g7hMHOOHB2ZmIhay8HaC36QMjCQIND7GQ2Cfn2fMd LI8HTidui2k/VdtloVItfA8WUy2UnhLVb0nWVyfOA+XsFIMCAWYm9fY2YI49/jFH ZN3NLXNWek97UPXTnFkA/JfLTO+tinRwQgxhR0FGxq80xKvyuoZMmeeyjJ2By/QT Rau/qya7xOee/V9THrfbeVndLejzGcTUzNXRGS5m/+aa7gOV9ZqEahb93vtFeZmt 54/nfMh8DqJz0baAqjyTFKfnuOn665o= -----END CERTIFICATE-----Generated at Tue Sep 22 20:18:00 2026 by rpki-client