$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa File: 3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa (raw, json) Hash identifier: IASIgONDaDc5rgv59pG5A9WnRF0R+TfIgfBM2coQv6s= Subject key identifier: D8:22:B3:DB:09:86:55:3B:26:44:A1:78:9F:15:96:B2:FA:5B:22:0D Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F4328584F497592DAC007A982513F2C00 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40342 IP address blocks: 199.47.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:92:da:c0:07:a9:82:51:3f:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e2d9073b-575a-4bb1-8a29-b02b6b488fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f6:78:08:5a:c9:46:69:26:fa:c9:59:15:b5: d1:62:78:71:01:71:e5:88:7f:32:f7:5f:0f:8e:a7: 49:8b:64:d8:af:9b:bb:6a:65:e2:ec:3a:b0:e1:ef: ad:60:39:d3:ae:e8:28:32:90:2e:f1:ea:e7:3f:76: 25:62:50:d5:db:61:b8:7c:2e:05:b0:8f:63:92:4a: d0:94:1b:e3:ab:d0:41:9d:75:49:f4:4f:97:ad:05: d9:aa:e1:f7:af:f0:e9:84:44:c9:50:10:9c:3a:f2: f8:44:03:1a:d3:66:2c:26:78:a1:21:70:dd:5f:82: e5:02:10:43:26:cd:b6:91:7f:7d:71:86:2f:65:72: ea:d4:17:88:af:cf:25:d1:9e:b9:b2:01:ca:be:21: f3:7f:e6:57:90:62:47:be:bc:94:04:7f:15:f9:a4: 97:17:31:1b:e0:26:db:13:2f:51:7a:f3:ea:c5:c2: c3:b4:cc:3a:33:eb:6d:05:db:b7:8e:29:88:90:d6: c1:87:04:74:b0:19:cc:97:85:ef:15:fd:ea:41:f8: 10:b2:30:29:ec:a4:31:6a:42:a9:0b:6f:d3:36:28: b5:79:89:ab:a1:2b:6c:ec:7e:89:7a:06:48:a7:17: e0:f1:01:7e:ad:0a:a0:c3:ac:b0:fd:75:78:d0:f1: 1a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:22:B3:DB:09:86:55:3B:26:44:A1:78:9F:15:96:B2:FA:5B:22:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 199.47.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:0b:57:f0:23:8d:08:49:28:8e:e8:4e:a1:8a:b9:d2:89:b4: 08:37:a4:74:18:15:4d:88:6b:39:74:d6:f8:ab:32:63:c9:e0: b9:8b:47:76:18:5c:d0:48:21:dc:bc:13:e8:f0:d9:b7:6e:05: c2:67:8f:b2:83:7a:57:29:39:1e:8f:92:a1:f5:d4:2c:07:24: 72:01:c6:77:89:9f:f6:ba:c2:20:37:31:b6:ab:17:44:8e:78: 9f:16:8a:a7:52:02:3b:60:38:41:2d:ec:e4:64:f3:74:9c:5c: 5a:46:d5:15:ea:d8:be:98:33:0d:e4:4a:cb:16:84:78:53:4a: 52:e6:3a:f8:fe:29:e0:70:fa:5f:5b:c7:fc:28:92:c7:ca:90: 5d:4a:d5:1e:6b:db:fb:f0:4e:36:c0:de:4a:fe:50:8c:9c:6c: 2b:a5:0c:20:7b:dc:a3:37:df:99:4a:b2:b4:28:36:b7:ce:6a: 14:f4:73:ca:d3:6e:ca:fe:bb:86:b9:d9:eb:04:a8:36:ad:d3: ba:c9:51:2a:04:b8:b0:33:4d:28:c1:67:e0:b1:93:4b:6c:62: 2a:6c:cb:a9:e8:30:88:61:54:2e:34:43:68:ff:0a:06:55:30: d7:05:bc:73:38:60:23:3c:4d:43:93:b5:fb:47:6e:c7:a2:b9: d0:0b:c0:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdZLawAepglE/LAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTJkOTA3M2ItNTc1YS00YmIxLThhMjktYjAyYjZiNDg4ZmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PZ4CFrJRmkm+slZFbXRYnhxAXHliH8y918P jqdJi2TYr5u7amXi7Dqw4e+tYDnTrugoMpAu8ernP3YlYlDV22G4fC4FsI9jkkrQ lBvjq9BBnXVJ9E+XrQXZquH3r/DphETJUBCcOvL4RAMa02YsJnihIXDdX4LlAhBD Js22kX99cYYvZXLq1BeIr88l0Z65sgHKviHzf+ZXkGJHvryUBH8V+aSXFzEb4Cbb Ey9RevPqxcLDtMw6M+ttBdu3jimIkNbBhwR0sBnMl4XvFf3qQfgQsjAp7KQxakKp C2/TNii1eYmroSts7H6JegZIpxfg8QF+rQqgw6yw/XV40PEapQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgis9sJhlU7JkSheJ8VlrL6WyINMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvM2MwMjBkZWMtM2I4MS0z Mzg0LThmODQtZmM4ZmI4ZWYwODY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy+JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACILV/AjjQhJKI7oTqGKudKJtAg3pHQYFU2Iazl01virMmPJ4LmLR3YY XNBIIdy8E+jw2bduBcJnj7KDelcpOR6PkqH11CwHJHIBxneJn/a6wiA3MbarF0SO eJ8WiqdSAjtgOEEt7ORk83ScXFpG1RXq2L6YMw3kSssWhHhTSlLmOvj+KeBw+l9b x/woksfKkF1K1R5r2/vwTjbA3kr+UIycbCulDCB73KM335lKsrQoNrfOahT0c8rT bsr+u4a52esEqDat07rJUSoEuLAzTSjBZ+Cxk0tsYipsy6noMIhhVC40Q2j/CgZV MNcFvHM4YCM8TUOTtftHbseiudALwOQ= -----END CERTIFICATE-----Generated at Sat Sep 26 07:47:36 2026 by rpki-client